> In the Therac case, at least part of the fault fell with the operators who should have known what to look for (if things had been well documented and they'd been trained).

This. Even a humble accountant usually reverses entry errors immediately, yet this critical input was harder to double check.