> I think the more likely near-term result of a really smart car is that they do a single-core RMA for the mission critical systems and include a failsafe for

> I think the more likely near-term result of a really smart car is that they do a single-core RMA for the mission critical systems and include a failsafe for when the non-hard-real-time AI system fails. I agree with this. The question is what happens when you want to have features that require real-time AI. If we have cars driving themselves, they are (potentially) going to have to be able to make very smart decisions in a provably bounded amount of time. > FAA mission critical certification (as an example) consumes a lot of engineer-months, and I expect automotive to start to move a few steps closer to that model in the wake of the Toyota issue. In the long run, we may get a certified RTOS that supports dynamic priorities. At that point, dynamic prioties may not be an obstacle to assurance/certification.