Who actually believes that punishing an individual engineer can permanently prevent a complex, multi-tiered system outage from occurring again? Furthermore, a culture of blamelessness shifts the focus from finding who made a mistake to uncovering the systemic vulnerabilities that allowed the failure to happen. How do you cultivate this level of psychological safety while still maintaining engineering accountability?