A Model for Optimal Resilient Planning Subject to Fallible Actuators