Uncertain safety: allocating responsibilities for safety