Carterton balloon tragedy caused by errors