[airbreather]

Yeah, I work as a Functional Safety Engineer in the process and machinery sector and 90%+ of effort is in planning, considering all the possibilities outside of intended operation and traceability.

I have worked on projects where in retrospect the LOC generated per day, if spread out across the whole project, were between 1 and 3.

But typically, writing of the code does not even commence in the first year, sometimes two.

Then there is the test cases and test coverage etc etc.

This is the difference between engineering code and just producing it - all the effort that goes into understanding all the unwanted code behaviour that may occur and how to detect, manage and/or avoid it.

Implicit state is the enemy, therefore the best code has all states explicitly defined.