From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,
	REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103376,f039470e8f537101
X-Google-Attributes: gid103376,public
X-Google-ArrivalTime: 2003-07-21 21:57:06 PST
Path: 
 archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!sjc70.webusenet.com!news.webusenet.com!elnk-nf2-pas!newsfeed.earthlink.net!stamper.news.pas.earthlink.net!stamper.news.atl.earthlink.net!harp.news.atl.earthlink.net!not-for-mail
From: Richard Riehle <richard@adaworks.com>
Newsgroups: comp.lang.ada
Subject: Re: Ariane5 FAQ
Date: Mon, 21 Jul 2003 21:57:40 -0700
Organization: AdaWorks Software Engineering
Message-ID: <3F1CC443.FD2BA89D@adaworks.com>
References: <mailman.26.1058753354.24167.comp.lang.ada@ada.eu.org>
 <1058799152.775376@master.nyc.kbcfp.com>
 <bfh2gb$eeiv4$1@ID-175126.news.uni-berlin.de>
 <1058810510.375902@master.nyc.kbcfp.com>
 <bfhaed$e786b$1@ID-175126.news.uni-berlin.de>
 <1058813341.841940@master.nyc.kbcfp.com>
 <bfhe55$eqglr$1@ID-175126.news.uni-berlin.de>
 <1058816605.566685@master.nyc.kbcfp.com>
 <bfhjjr$eftm1$1@ID-175126.news.uni-berlin.de>
Reply-To: richard@adaworks.com
NNTP-Posting-Host: 41.b2.61.52
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Server-Date: 22 Jul 2003 04:57:05 GMT
X-Mailer: Mozilla 4.7 [en] (Win98; I)
X-Accept-Language: en
Xref: archiver1.google.com comp.lang.ada:40603
Date: 2003-07-22T04:57:05+00:00
List-Id: <comp.lang.ada>

Vinzent Hoefler wrote:

> Hyman Rosen wrote:
>
>
>
> >We have to assume that the Ariane 5 folks were not
> >complete blithering idiots,

Bertrand Meyer published a controversial article suggesting
that, had they used design by contract ( a la Eiffel) this could
not have happened.  While I don't agree that Eiffel would have
been better for the job, a contract model such as that found in
SPARK might have been successful in detecting the design
error early on.

It is not the blithering idiots who make the kind of mistake
that  triggered the Ariane V event.   Rather, it is usually a
series of decisions, not well-managed or coordinated, by
competent engineers.   I am probably not the only person
who has seen perfectly good software turn to fecal matter
due to poor configuration management.

In the end, the Ariane V event was a failure of engineering
management, not of  individual engineers.  No amount of
DbC, more careful design, better languages,  whatever, can
compensate for incompetent engineering management.

Richard Riehle