naive question, but shouldn't AV command and control algorithms be built on some kind of formally verified system/language, considering lives are at play here ?
I am aware of MISRA C for automotive but is something like that sufficient to guarantee against unintended behavior ?
If not, can someone comment on why this isn't the case today ?
I am aware of MISRA C for automotive but is something like that sufficient to guarantee against unintended behavior ?
If not, can someone comment on why this isn't the case today ?