Complex machinery needs simple explanation
Formal socio-technical barrier modelling for safety-critical interactive systems design