I'd realy like to se a post mortem about how that happened. I'd expect that all commands would be validated in a simulator with checks that mission parameters are not violated.