What happens when the results of the first effort have strayed from the design, or the first effort was zapped into oblivion. Also a security refactoring mantra where I work.