(2) The accident-causing mechanism of ‘‘three layer of defense” is proposed based on root hazards and status hazards definition and classification, including control criteria, control measures, and rectification measures, which demonstrates that the uncontrolled status hazards and unidentified status hazards are the two main accident-causing sources.