From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-0.8 required=5.0 tests=BAYES_00,INVALID_DATE
	autolearn=no autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f569d,7d68662d79c59f1c
X-Google-Attributes: gidf569d,public
X-Google-Thread: 103376,7d68662d79c59f1c
X-Google-Attributes: gid103376,public
X-Google-Thread: 102b75,7d68662d79c59f1c
X-Google-Attributes: gid102b75,public
X-Google-Thread: 1108a1,9292211c2d4756a8
X-Google-Attributes: gid1108a1,public
X-Google-Thread: 109fba,46882e3fad98420e
X-Google-Attributes: gid109fba,public
X-Google-ArrivalTime: 1995-01-03 22:22:02 PST
Path: 
 nntp.gmd.de!newsserver.jvnc.net!yale.edu!spool.mu.edu!bloom-beacon.mit.edu!world!blanket.mitre.org!linus.mitre.org!spectre!eachus
From: eachus@spectre.mitre.org (Robert I. Eachus)
Newsgroups: comp.lang.c++,comp.object,comp.arch,comp.multimedia,comp.lang.ada
Subject: Re: What's Real-Time? (was Re: Widespread C++ Competency Gap?)
Date: 03 Jan 1995 23:20:41 GMT
Organization: The Mitre Corp., Bedford, MA.
Message-ID: <EACHUS.95Jan3182041@spectre.mitre.org>
References: <787227087snz@wslint.demon.co.uk>
 <3e26mc$n9u@Starbase.NeoSoft.COM>
	<hbaker-3012941712040001@192.0.2.1>
	<PRZEMEK.94Dec31120819@rrdjazz.nist.gov> <3e5t1e$2ad@oghma.synapse.net>
NNTP-Posting-Host: spectre.mitre.org
In-reply-to: rjc@oghma.synapse.net's message of 1 Jan 1995 04:35:42 -0500
Xref: nntp.gmd.de comp.lang.c++:84997 comp.object:19147 comp.arch:27427
 comp.multimedia:25813 comp.lang.ada:17744
Date: 1995-01-03T23:20:41+00:00
List-Id: <comp.lang.ada>

In article <3e5t1e$2ad@oghma.synapse.net> rjc@oghma.synapse.net (Robert J Carter) writes:

 > That's fine as far as it goes, but having done some work myself with 
 > reactor systems (I saw your sig), what is an acceptably low failure rate
 > for the emergency shutdown system of a reactor?

   Very different for type I and type II failures!

   This is in fact an analysis that many projects never do, and often
the specifications for a project fail to say which type of failure is
worse.  (Other names for the concept include FAIL SAFE systems, which
only fail to operate, and criticality 1 failures for something which
causes the system as a whole to fail/crash.)





--

					Robert I. Eachus

with Standard_Disclaimer;
use  Standard_Disclaimer;
function Message (Text: in Clever_Ideas) return Better_Ideas is...