And how do want to deal with fatal errors? Overflows and divide by zero are easily avoidable and should be fatal. Even the Apollo lander program aborted and e

And how do want to deal with fatal errors? Overflows and divide by zero are easily avoidable and should be fatal. Even the Apollo lander program aborted and even caused a reboot. Such that the reboot loop caused an uncontrollable lander, just by overloading the IO. The scheduler could have killed the radar process, but this was Aldrin's job, and he failed, not the scheduler.