Originally Posted by
EEngr
It all comes down to certification costs. While redesigning the backup system to provide additional channel separation would seem to be a more sound solution, there is a strong motive to 'fix it in software'. So I'm betting on a patch to ELMS.
Surely it comes down to safety.
If the design is faulty it needs to be fixed, "putting a patch on it" but leaving the root cause to rear its ugly head some time in the future, isn't an option.
Luckily this time no lives were lost, that might not be the case if it happened again.