Yes, the system is assumed to work correctly, that's sensible. But does it? What happens when some component start to work in unintended way? If the participant

Yes, the system is assumed to work correctly, that's sensible. But does it? What happens when some component start to work in unintended way? If the participants don't have experience with failures, how they will behave? I mean when administrator denies interruption. Rotation of administrators and signatures is nice, but there's still one person that makes the most authoritative administrator. The bug to address here is conformity, see https://en.wikipedia.org/wiki/Asch_conformity_experiments https://en.wikipedia.org/wiki/Asch_conformity_experiments