safe loop

The refactoring routine: start green, make one small change, run the tests, then keep the change if green or undo it if red.