Or sometimes there are just multiple failures. That’s what I learned from reading Admiral Cloudberg about air disasters: even if you have n safety measures, there’s still the chance that there’ll be n+1 failures.