Catastrophe prevention that hasn’t worked
nTrusted computing base for security
nElectric power grid
nAir traffic control
oThe spec said 3 seconds down/year/workstation