The easiest way to be sure a code path will run properly is to avoid writing it in the first place.  This kind of application should be designed to run in a highly linear, predictable fashion on robust, fault-tolerant hardware.<p>Why is nobody questioning the propriety of using an off-the-shelf Windows PC in safety-of-life applications?