There is a write up about the development of the STS-software[1]. If memory serves, the key is specifying everything extremely rigorously. It seems to me though

There is a write up about the development of the STS-software[1]. If memory serves, the key is specifying everything extremely rigorously. It seems to me though, that writing such specification (if sensor A detects such-and-such value and sensor B...) would share most of the problems writing actual software does. Another look at how to get "NASA like" confidence is provided by Richard Feynman[2] and Diane Vaughan[3]. [1] http://www.fastcompany.com/28121/they-write-right-stuff http://www.fastcompany.com/28121/they-write-right-stuff [2] http://science.ksc.nasa.gov/shuttle/missions/51-l/docs/rogers-commission/Appendix-F.txt http://science.ksc.nasa.gov/shuttle/missions/51-l/docs/roger... [3] http://www.amazon.com/The-Challenger-Launch-Decision-Technology/dp/0226851761 http://www.amazon.com/The-Challenger-Launch-Decision-Technol...