Diagnostics are a good example of something that can be separated from the actual safety-critical stuff. Have a dumb output from the safety-critical processor t

Diagnostics are a good example of something that can be separated from the actual safety-critical stuff. Have a dumb output from the safety-critical processor that the radio interface can read. If you're changing batteries or medicine, you're going to be accessing the device physically anyways, and so can change settings / dosages then. Et cetera.