Safety critical systems demand formal verification. This wasn't bad luck, this was poor craft.