Ferraro's Safety Case Study: Lessons from a Not-quite Incident