I remember reading the Control Log in about 2001, where a train slid past a signal at danger due to 'low adhesion/leaves on the line'. The black box confirmed the driver's report that he'd approached very slowly... - the train had gone over the AWS magnet on approach at 5mph, and with the brake still in, and with an emergency application, had still SPADded.
I think the terminology/classification system has been changed now, but a there are categories for:
• Driver's fault (I.e. a misjudgement of braking)
• Driver behaved as expected, but train didn't (I.e. a slide in very low adhesion - that's adhesion that is lower than expected at that location in the weather conditions on the day, or a fault with the train)
• Signal is replaced to danger in front of driver, so can't stop in time. This can be a Signaller's error, a purposeful act by the Signaller to prevent an incident, or a failure of equipment. I've had several of these over the years, including flooding and a lightning strike reverting signals to danger by the signals 'failing safe' to danger when affected by short circuits.
• Runaway vehicles passing a signal at danger.
These used to be Categories A - D, with B being the slide example, but I can't remember what they are called now.
The old category A was the driver's fault and went against them on their record. A category D could also, if a parking brake on a loco or unit hadn't been set by a driver. B and C weren't.
A black box will show train speed, what braking inputs were made and when, whether the sander was activated, and examination of the line will show if sand was actually deposited. Modern trains will show a fault on the computer system if the sand boxes are low on sand.
Generally, management of railhead treatment is much better these days than twenty years ago in the story I mentioned above, although occasionally an incident will still occur, such as the Salisbury one.