Therac-25: What went wrong?

• Lack of experience and overconfidence in software controls

• No user involvement in design or testing

• Insufficient testing

• Poor error messages

• Lack of visibility of hardware settings

• Lack of constraints

• Affordance of overrides

• Poor documentation