Regulation should focus on reducing the likelihood of runs, not just preventing failures.
Don't be defined by what you didn't know or didn't do.