3 ms·
I think part of what is argued is that people need to look at their software and determine what failure modes are not acceptable. It is impossible to design a s
by sbradford26 8y ago
I think part of what is argued is that people need to look at their software and determine what failure modes are not acceptable. It is impossible to design a system that won't fail so the focus should be on designing parts that detect and handle failures. For those parts you may want to pull in techniques from aerospace such as command monitor setups, assertions, fail-safe modes, and force restarts.
Clearly not all software is flight critical but a lot of software could be improved by treating some parts of it as such.