Is your device running only formally verified software and has it been tested against every possible bit-flip or race or deadlock? Has anyone tested running the

Is your device running only formally verified software and has it been tested against every possible bit-flip or race or deadlock? Has anyone tested running the device for 51 days with a statistically sufficient sampling of configurations? Is it repeated after every update? Fail safe and mitigate harm as much as possible. A power cycle is cheap and easy way to mitigate leaks and overflows.