The Institute for the Learning Sciences TOWARD A QUALITATIVE THEORY OF SAFETY CONTROL - WHEN AND HOW TO PANIC INTELLIGENTLY