“Yet, performance pressures on the overall system (greater efficiency or throughput)
tend to push practitioners back to the edge of the performance envelope rather than
taking the benefits of the changes in increased safety margin or lower workload. As a
result, surprises occur in the form of accidents (fundamentally surprising new paths
to failure) and in the form of negative side effects of the change unanticipated by
designers—‘automation surprises’”