[boudin]

I wouldn't called this unjustified. The issue with the plane isn't just the software but the processes around its inception and certification.

"hey we released a new version of the software" is clearly not enough to gain back my trust. The only way this plane can be consider safe is for the whole plane to go through an external and independent audit to address all the other potential design flaws. The FTA certification processes should go through an external audit as well, any of the flaws should be addressed and retrospectively applied to this plane (and any other plane concerned).