Chapter Seventeen. What Safety Actually Requires.
From Testing to Genuine Understanding
Saying a system is safe because it passed its tests is like saying a
bridge is safe because it hasn't fallen yet. Real safety requires
understanding why it works, not just that it does.
In the early nineteen sixties, a young engineer named Ralph Wilfrid Moss joined the
team at NASA working on the Apollo program. His job was to think about
what could go wrong.
Not to design the rockets. Not to calculate th