Plus one for the unhappy club. As a postholder I am not looking forward to being responsible for implementing something that I know to contain a substantial source of confusion/error and that I consider to be an accident waiting to happen. How the hell can I justify that within a meaningful safety management system?
Slow clap for whoever came up with the safety case for it. In fact, I'd like to *see* the safety case...