> The consequences of an airplane not having a flight plan is not “10s or 100s of people dying” The consequence of not being able to route a flight through rea

> The consequences of an airplane not having a flight plan is not “10s or 100s of people dying” The consequence of not being able to route a flight through reasonably congested airspace safely may well be "10s or 100s of people dying". > when they arrive without a flight plan in the system They had a flight plan but the system could not verify that it had correct data. i.e. the system believe it had internal corruption and should shut down. > What would you think of a server where a single weird edge case request would stop the whole service for hours? What would you think of a service where internal checks suggested corruption and it kept on serving potential corrupt data to customers and writing it to databases? I would consider that a failure in extremis.