2 ms·
> in those cases, the unit test might not catch anything because the spec is wrong! That's why you have three different, independent parties design everything
by wizzwizz4 2y ago
> in those cases, the unit test might not catch anything because the spec is wrong!
That's why you have three different, independent parties design everything important thrice, and compare the results. I'm serious. If you're not convinced this is necessary, just take a look at https://ghostwriteattack.com/riscvuzz.pdf https://ghostwriteattack.com/riscvuzz.pdf.
(Your other suggestions are also necessary, and I don't think that would be sufficient.)
- eropple 2y agoI think that's a great idea, and when I've been in a leadership role I've at least tried to have important things done at least twice. ;) And you're right, I was pretty much just outlining what might be called "a good start".