Frangible roof joint

A tank's roof-to-shell joint deliberately designed to fail before the shell does, so an overpressure lifts the roof rather than splitting the tank and releasing the entire inventory. The failure is directed to the less damaging place.