How sites stay safe — method statements, exclusion zones, and what the incident numbers actually tell you when you read them properly.