Philip Greenspun makes it sound simple, after the damage has been done. The trick is to figure this out before there is an accident.