Umm... it may not catch all but it may catch most and
that may be good enough or as good as it gets.
The Saturn V was triple redundant. Pogo effects weren't
well understood. Lightning was. In both cases, catastrophes
were avoided. In the first case, the system survived the
pogo effect well-enough to be studied and handled. In the
second case, the systems could be reset in real time.
len
From: Uche Ogbuji [mailto:]
Good point, especially re: my surprise that redundancy didn't save
Ariane, but again I'd say such catastrophic failures are beyond the
reach of most techniques, including static type checking.
