Primary design goals
Routine operation
Under stress
Under hazard
Latent hazard