4 ms·Not just testing. Any modern system this safety critical should be proven with formal methods.by dreamcompiler 2y agoNot just testing. Any modern system this safety critical should be proven with formal methods.