3 ms·

Or insufficient testing?

• nradov 16d ago
  Testing isn't an effective way to catch most race conditions. Code reviews, static analysis, and rigorous enforcement of concurrent coding standards is usually a better approach.
  • jiehong 16d ago
    Perhaps something like what TigerBeetle does: deterministic simulation testing.
• dtf 16d ago
  Or maybe even just reviewing logic that is subject to pre-emption. Maybe I'm being too harsh.. on the plus side the system has at least failed hard every time there's been a fault. Nobody has died. But it's been 3 times now in the past couple of years, and two of those times resulted in over 2000 flights cancelled and days of backlog, and misery for hundreds of thousands. It's really not acceptable.
  • chrisjj 16d ago
    > the system has at least failed hard every time there's been a fault You don't know that.