[ArkyBeagle]

It'll take a lot of resources to develop institutions to do this. It'll take a long time to debug these institutions.

We're still arguing over "goto considered harmful", "the billion dollar mistake" and how toolchains influence code-safety-behavior.

And there exists a class of CASE tools from the '90s that, while being somewhat clunky, addressed some of the transparency issues. But those are hardly even relevant any more.

And to make it worse - the final configuration of the system matters just as much as whether the code bases for the individual nodes have passed an audit. This is especially true of CAN networks.