What the F-35 can Teach us about Writing Safer Embedded C++

Performance can be optimized later. Reliability must be designed in from the start.