They should at least talk to the engineers who design airplane autopilots, who know how to deal with that stuff.
They should at least talk to the engineers who design airplane autopilots, who know how to deal with that stuff.
What leads you to think they don't?
Just like a frontend dev learns HTML/CSS/JSframeworks and a backend dev learns JSframeworks/Node/(no)SQL, embedded developers learn about creating real-time, fault tolerant, highly recoverable systems.
Tell an embedded engineer that he should consult with Boeing and he'll give you the same strained smile that you would give a family member who suggested consulting with Amazon/Ebay/YouTube because "they are good at making websites."
From what I read about the Deepwater Horizon design, and the Fukushima design, neither followed basic failsafe design principles.
From what I read about the Toyota "surging" issue, the throttle/braking system did not follow basic failsafe design principles.
Failsafe design principles are not taught in any engineering degree program I'm familiar with.
When I talk to other engineers about failsafe design principles, they are not aware of them.