NASA managers demanded that teams prove “it was *not* safe to launch rather than prove conditions *were* safe.”