Catastrophe prevention that hasn’t worked
n
Trusted computing base for security
n
Electric power grid
n
Air traffic control
o
The spec said 3 seconds down/year/workstation