Can the MOD just take the manufacturers word for it? Are they allowed to?
Surely what is required is for LM to demonstrate that they have satisfactorily verified the integrity of the code by showing the verification methods used to the customer, if the customer is not happy with those verification processes then they need to point out what they consider is wrong with those methods and ask for it to be re-examined.
Do Airbus or Boeing release their source codes?