Mistake-Proofing for Operators