Originally Posted by lomapaseo
well now that you have introduced the term fail-stop scenario and fail-live scenario could you tell us the difference relative to what gets displayed on the screen to the pilot?
No, I can't. There is no oracle which is telling you in reality how the system failed. There are only failure behaviors. The issues are way too complex for a short message on a general-interest bulletin board.
Besides the issues of correctness of code, there are others. Here is a fundamental paper describing some of them:
Driscoll et al on Byzantine Failures. Kevin and Ken Hoyme (who no longer works in the industry) are the designers of the Boeing 777 AIMS.
Notice that the authors say that a major commercial aircraft was within days of losing its airworthiness certificate. Indeed, when one knows which aircraft this was, this would have been very serious indeed.
PBL