Since life-testing of ultrareliable software is infeasible (i.e., … software have been developed from which ultrareliable-system estimates … [used for hardware failures] is that the electrically isolated processors fail independently. … This assumption is not reasonable for software or … the multiple versions can not be justified experimentally. …
Google-1
Google-2
Copyright clearance needed for quotation.