There’s a reason why FMS systems are written in Ada.
When it has to be correct (or else), using C or C++ is like playing Russian roulette with a 1911.
Ain't no such animal. Not in C, not in C++, not in c#, or pascal or basic or ADA.
Anything that requires humans has flaws.
Own it. Live it. Revel in it.
But don't think you got something right because it had to be.
It just hasn't failed yet.
/johnny