The design fault could have been eradicated at an early stage if the design changes had been subjected to a rigorous review process. In any event, clear guidance, including instructions about the safety criticality of the padlock, should have been passed on to installers and users.
22 TAV was aware that its switches were used in high-hazard installations and therefore were likely to be safety critical.