S. FOLKARD. (2000). Improving safety by the use of limitations