it was an add on and not a main role
This, and similar comments about operating intent and use, gets to the nub of the problem.
Very few of these "add ons" were reflected in the Build Standard, and hence Safety Case, and the longer it took to accept this the more difficult and expensive it became to regress. It is invariably cheaper in the long run just to do the job properly in the first place.