A critical application contains tightly coupled legacy code with minimal documentation. Explain how you would safely refactor the system while minimizing production risk.