Formal Spec
Having had a chance to study Formal Specification and "provably correct" software at university, all I can say is be glad someone else is doing it for you!
The Special Projects Bureau is raising a few pints of foaming real ale today in honour of Escher Technologies, which has kindly offered to probe the intimate inner workings of our Low Orbit Helium Assisted Navigator (LOHAN) project. Click here for a bigger version of the LOHAN graphic The Aldershot-based company "researches, …
...which is then compiled with gcc, icc, iar or some other compiler, linked against a set of libraries such as glibc, possibly installed on an OS like Linux or VxWorks (surely not WinCE or embedded XP?), and the whole lot run on a CPU.
All of which whose design correctness is an enourmous leap of faith. Provably correct source does not make a proven correct system. Have you ever looked at the source code glibc?!?!
Personally I don't think that you're taking good enough care of these poor brave Playmonauts. One can only speculate as to what sort of herbage you keep them dosed up on for them to run a risk as reckless as getting into an SPB vehicle. Surely even an individual with such little brain (and a Bakelite brain at that) would shy away from the lunatic folly of a flight in such a flimsy flying machine?????????????????????
In NASA they made jokes about riding a million pound bomb containing millions of parts all made by the cheapest contractor. Humanity is now clearly doomed given that mission critical jobs are being done by some bloke down the pub whose only contractual obligation is that he might buy you a pint of best if it doesn't work properly.
Of course, if you were going to write it all in ADA then I'd have every confidence in LOHAN. (smirk, snigger)