High assurance, my personal experience and view point

It is argued that in order to maximize the function of a large-scale system to provide overall confidence, it is not sufficient to simply assemble each reliability of individual components, or to just rely on the fail-safe functional concept. In addition, the system as a whole has to work smoothly and flexibly, and it has to be internally equipped with the function that can minimize any possible disturbance or crises.