"4 eyes" principle