Interesting point about MISRA and malicious rules hidden in the code. Something like the test stand discovery heuristic would be a state in a high level state m

Interesting point about MISRA and malicious rules hidden in the code. Something like the test stand discovery heuristic would be a state in a high level state machine somewhere if done properly (hopefully, this is an explicit state machine...). If it were, it would become obvious when trying to trace that state to requirements. However, modern engine control units have such complex requirements that complete verification against all of them is very unlikely in practice, especially in a third party audit.