I stuck with the safety session for the afternoon  which led off with a good (very good) keynote by John McDermid on probative blindness  which he followed up nicely by posing the question of why is it we seem to achieve good safety when our safety analysis methods are recognised as being so problematic? The more general version of that question is something I’ve been mulling over as well