"The developers of the reactor plant considered this combination of events to be impossible and therefore did not allow for the creation of emergency protection systems capable of preventing the combination of events that led to the crisis, namely the intentional disabling of emergency protection equipment plus the violation of operating procedures. Thus the primary cause of the accident was the extremely improbable combination of rule infringement plus the operational routine allowed by the power station staff."