> Among other things, we included lots of sanity checks > internally so that > any inconsistency found, no matter how small, would lock the > instrument > up and display an error code with a message to call me and tell me > exactly what this said, that I could trace this to a specific line of > code. Those mostly served to show us the mistakes before we > ever shipped > the first instrument. But they also allowed me to precisely diagnose > and correct an error found by a customer thousands of miles away. Good practice indeed, but how do you apply that to a space shuttle in descent? For one thing, AFAIK a cell phone does not work at the critical moments :( Wouter van Ooijen -- ------------------------------------------- Van Ooijen Technische Informatica: www.voti.nl consultancy, development, PICmicro products docent Hogeschool van Utrecht: www.voti.nl/hvu -- http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist