If you're working on safety-citical software, I think using formally verified C code (as discussed in the article) would be the best approch. If a bug could ki

If you're working on safety-citical software, I think using formally verified C code (as discussed in the article) would be the best approch. If a bug could kill someone, you should (to the greatest extent possible) have a proof that such bugs are impossible.