System design

2026

• 0032026.07.25

  A check that cannot run has not passed

  A safety gate that silently narrows when its configuration is missing is worse than one that is absent, because it still reports a verdict.

  Hardening a safety-critical system·5 min·System design·Safety critical

• 0022026.07.25

  Seven predicates for one question

  Four screens showed an aircraft's status and three of them were wrong. The fix was not to pick the best of the seven definitions.

  Hardening a safety-critical system·5 min·System design·Backend

• 0012026.07.25

  The defect owns the finding

  A pilot who found a fault mid-inspection could abandon the checklist or lie. Fixing that meant resisting the obvious second blocker.

  Hardening a safety-critical system·4 min·System design·Backend