This paper describes a highly distributed fault-tolerant control system capable of compensating for deficiencies in system-level performance even when the cause of a fault cannot be explicitly identified. Developed for an autonomous underwater vehicle that must remain operational for several weeks without human intervention, this system must be capable of dealing with events that cannot be anticipated at design time. A unique aspect of this system is that it handles such events by attempting to do whatever works if it is unable to diagnose and correct specific faults. The software architecture used in this approach is applicable to a wide range of complex autonomous control applications.