[cratermoon]

The space shuttle SRBs were designed with two o-rings, a primary and a secondary. When the primary kept showing signs of burn through, instead of treating that as a problem, it was said that because the secondary o-ring was not burned through, the safety factor was sufficient. But the primary was not designed to burn through. The safety factor did not account for burn through in normal operation, but risk assessments obscured that fact.