you are having too much of good faith in always-perfect assumptions when it comes to life-critical systems. I hope you are not involved in developing or designing such systems.