this feature alone should have precluded the reactor from ever entering operation.

• At 01:23 and earlier the reactor was in a bomb-like state. An explosion might have been triggered by a trip signal actuating the emergency protection system or (as was eventually the case) by manual pushing of the scram button. And in the meantime the monitoring system issued not a single alarm signal and the operating staff did not realize the danger they were in. But not because they were blind. It might well be asked to what criteria had the monitoring systems been designed.

• The inaccurate information tolerated by the staff in performing their functions on 26 April could