Eva PenzeyMoog _ Design for Safety: Considering the Unhappy Path