SERIES

Hardening a safety-critical system

3 parts, in order.

2026.07.25
A check that cannot run has not passed
A safety gate that silently narrows when its configuration is missing is worse than one that is absent, because it still reports a verdict.
5 minSystem designSafety critical
2026.07.25
Seven predicates for one question
Four screens showed an aircraft's status and three of them were wrong. The fix was not to pick the best of the seven definitions.
5 minSystem designBackend
2026.07.25
The defect owns the finding
A pilot who found a fault mid-inspection could abandon the checklist or lie. Fixing that meant resisting the obvious second blocker.
4 minSystem designBackend