Erik Hollnagel Dependability of Joint Human-Computer Systems. 4-9 2002 conf/safecomp/2002 SAFECOMP http://link.springer.de/link/service/series/0558/bibs/2434/24340004.htm db/conf/safecomp/safecomp2002.html#Hollnagel02