The STRATA design principle of separating frontline operational models from management and oversight models.