[George Smiley]

my post #59 linked to another thread where I ranted- in the middle of the rant there's a link to an article about the team that wrote the software for the space shuttle.

Not 100% bug-free but about as close as you can get.

The multiple system checking part sounds real similar to what you describe.

[Chode]

i remember that too but don't remember which came first.
also one time there was only an 85% confidence level in some triple backup system, and only a crit three system at that, NASA and the crew were all OK with it but the CPU vote was no... they had to REprogram to the 85% as a Go before they could launch.