Safety systems that don't know they are broken

How oil and gas facilities lost track of their own defences — and what a 20-year veteran of the field is building to fix it