> Nobody is going to write a requirement that says "this avionics subsystem will function without error forever". These time limits could at least be pegged to

> Nobody is going to write a requirement that says "this avionics subsystem will function without error forever". These time limits could at least be pegged to real-life intervals to when the system is going to be shut down anyway. If the system continues to be operated past that point, skipped maintenance intervals could be underlined as the cause.