Hacker News new | ask | show | jobs
by addaon 243 days ago
Yes, this drives a requirement for latent fault detection of LV battery faults. In general when a safety function is decomposed to provide statistical safety, there is a requirement to time-bound a single failure, since without that the decomposition doesn’t buy you anything. Latent fault detection is the standard option for time bounding for automotive — for aviation, you have a second escape hatch that issues that are reliably found during annual / 100 hour inspection and can be safely missed for that long can be caught by inspection instead.