“The rule of three provides a mechanism that converts the risk continuum into a dichotomy for the purposes of decision-making. It does not, however, ignore the expertise of operators … Put another way, the rule of three structures expert decision-making; it does not replace it”