To make a system safer, you don’t need to eliminate mistakes, just their potentially harmful consequences.

Kathryn Schulz