Safety-relevant mode confusions—modelling and reducing them · Study