| [14CFR23] | Part 23—Airworthiness standards: normal category airplanes.
In Title 14, Code of Federal Regulations. United States Government, December 2023. https://www.ecfr.gov/current/title-14/chapter-I/subchapter-C/part-23, accessed 14 February 2024. |
| [ACWG21] | The Assurance Case Working Group.
Assurance case guidance: Challenges, common issues, and good practice. The SCSC Assurance Case Working Group, Report SCSC-159, Version 1, August 2021. https://scsc.uk/r159:1. |
| [ARP4754] | Guidelines for Development of Civil Aircraft and Systems.
SAE International, Standard 4754 rev. A, December 2010. |
| [Agile] | Wikipedia contributors.
Agile software development. In Wikipedia, the Free Encyclopedia. https://en.wikipedia.org/w/index.php?title=Agile_software_development, accessed 14 February 2024. |
| [Alexander02] | Christopher Alexander.
The Nature of Order. The Center for Environmental Structure, Berkeley, California, 2002. |
| [Alexander15] | Christopher Alexander.
A City is not a Tree. Sustasis Press, Portland, Oregon, 2015. |
| [Alexander77] | Christopher Alexander, Sara Ishikawa, and Murray Silverstein.
A Pattern Language. Oxford University Press, New York, 1977. |
| [Bain99] | David Haward Bain.
Empire Express: Building the First Transcontinental Railroad. Viking, New York, 1999. |
| [Berger24] | Eric Berger.
The surprise is not that Boeing lost commercial crew but that it finished at all. Ars Technica, 6 May 2024. https://arstechnica.com/space/2024/05/the-surprise-is-not-that-boeing-lost-commercial-crew-but-that-it-finished-at-all/, accessed 28 May 2024. |
| [Bezos16] | Jeffrey P. Bezos.
2015 Letter to Shareholders. Amazon.com, Inc., 2016. https://s2.q4cdn.com/299287126/files/doc_financials/annual/2015-Letter-to-Shareholders.PDF, accessed 22 February 2024. |
| [Brand94] | Stewart Brand.
How Buildings Learn: What Happens After They’re Built. Penguin Books, New York, 1994. |
| [CMMI] | ISACA.
What is CMMI? https://cmmiinstitute.com/cmmi/intro, accessed 24 March 2024. |
| [Collins74] | Michael Collins.
Carrying the Fire: An Astronaut’s Journeys. Farrar, Straus and Giroux, New York, 1974. |
| [Conway68] | Melvin E. Conway.
How do committees invent? Datamation, vol. 14, no. 4, April 1968, pp. 28–31. http://www.melconway.com/Home/pdf/committees.pdf. |
| [DOD10] | DoD Deputy Chief Information Officer.
DoD Architecture Framework Version 2.02. Department of Defense, United States Government, August 2010. https://dodcio.defense.gov/Library/DoD-Architecture-Framework/. |
| [Drucker93] | Peter F. Drucker.
Management: Tasks, Responsibilities, Practices. Harper Business, New York, NY, 1993. |
| [Durkheim33] | Emile Durkheim.
The Division of Labor in Society. George Simpson, translator. The Free Press, Glencoe, Illinois, 1933. |
| [FAA23] | Air Traffic Control.
Federal Aviation Adminitration, Department of Commerce, United States Government, Order JO 7110.65AA, April 2023. https://www.faa.gov/regulations_policies/orders_notices/index.cfm/go/document.information/documentid/1029467. |
| [Fowler05] | Martin Fowler.
Code as Documentation. https://martinfowler.com/bliki/CodeAsDocumentation.html, accessed 15 March 2024. |
| [Garmin13] | G3X Installation Manual.
Garmin, 190-01115-01, Revision K, July 2013. |
| [Hardin20] | Russel Hardin, and Garrett Cullity.
The Free Rider Problem. In The Stanford Encyclopedia of Philosophy. Edward N. Zalta, editor. Metaphysics Research Lab, Stanford University, Winter 2020 ed., 2020. https://plato.stanford.edu/archives/win2020/entries/free-rider/, accessed 28 March 2024. |
| [Heilmeier24] | George H. Heilmeier.
The Heilmeier Catechism. In DARPA. https://www.darpa.mil/work-with-us/heilmeier-catechism, accessed 13 July 2024. |
| [Horney17] | David Craig Horney.
Systems-theoretic process analysis and safety-guided design of military systems. M.S. thesis, Massachusetts Institute of Technology, June 2017. https://dspace.mit.edu/handle/1721.1/112424. |
| [ISO26262] | Road vehicles — Functional safety.
International Organization for Standardization, Geneva, Switzerland, Standard ISO 26262:2018, Second ed., 2018. |
| [ISO42010] | Systems and software engineering—Architecture description.
International Organization for Standardization, Geneva, Switzerland, Standard ISO/IEC/IEEE 42010, December 2011. http://www.iso-architecture.org/42010/index.html. |
| [JPL00] | JPL Special Review Board.
Report on the Loss of the Mars Polar Lander and Deep Space 2 Missions. Jet Propulsion Laboratory, Report JPL D-18709, March 2000. https://smd-cms.nasa.gov/wp-content/uploads/2023/07/3338_mpl_report_1.pdf. |
| [Jacobson88] | Van Jacobson.
Congestion Avoidance and Control. Proc. SIGCOMM, vol. 18, no. 4, August 1988. |
| [Johnson22] | Clair Hughes Johnson.
Scaling People: Tactics for Management and Company Building. Stripe Press, South San Francisco, California, 2022. |
| [Kalra16] | Nidhi Kalra, and Susan M. Paddock.
Driving to safety: How many miles of driving would it take to demonstrate autonomous vehicle reliability? RAND Corporation, Santa Monica, CA, Report RR-1478-RC, 2016. https://www.rand.org/pubs/research_reports/RR1478.html. |
| [Klein14] | Gerwin Klein, June Andronick, Kevin Elphinstone, Toby Murray, Thomas Sewell, Rafal Kolanski, and Gernot Heiser.
Comprehensive formal verification of an OS microkernel. ACM Transactions on Computer Systems, vol. 32, no. 1, February 2014. https://trustworthy.systems/publications/nicta_full_text/7371.pdf. |
| [Kruger00] | Justin Kruger, and David Dunning.
Unskilled and unaware of it: how difficulties in recognizing one’s own incompetence lead to inflated self-assessments. Journal of Personality and Social Psychology, vol. 77, no. 6, January 2000, pp. 1121–1134. |
| [Leveson00] | Nancy G. Leveson.
Intent specifications: an approach to building human-centered specifications. IEEE Transactions on Software Engineering, vol. 26, no. 1, January 2000. http://sunnyday.mit.edu/papers/intent-tse.pdf. |
| [Leveson11] | Nancy G. Leveson.
Engineering a safer world: systems thinking applied to safety. Engineering Systems. MIT Press, Cambridge, Massachusetts, 2011. |
| [Lynch89] | Nancy A. Lynch, and Mark R. Tuttle.
An introduction to input/output automata. Massachusetts Institute of Technology, Cambridge, Massachusetts, Technical memo MIT/LCS/TM-373, 1989. https://www.markrtuttle.com/data/papers/lt89-cwi.pdf. |
| [McConnell09] | Steve McConnell.
Software Estimation: Demystifying the Black Art. Microsoft Press, Redmond, Washington, 2009. |
| [Mill59] | John Stuart Mill.
On Liberty. John W. Parker and Son, London, 1859. |
| [NASA16] | NASA Systems Engineering Handbook.
National Aeronautics and Astronautics Administration (NASA), Report NASA SP-2016-6105 Rev2, 2016. |
| [NASA19] | Debris Assessment Software User’s Guide, Version 3.0.
National Aeronautics and Astronautics Administration (NASA), Report NASA TP-2019-220300, 2019. |
| [NPR7120] | NASA Space Flight Program and Project Management Requirements.
National Aeronautics and Astronautics Administration (NASA), NASA Procedural Requirement NPR 7120.5F, 2021. |
| [NPR7123] | NASA Systems Engineering Processes and Requirements.
National Aeronautics and Astronautics Administration (NASA), NASA Procedural Requirement NPR 7123.1D, 2023. |
| [OMG17] | Unified Modeling Language.
Object Management Group, Standard version 2.5.1, December 2017. https://www.omg.org/spec/UML/2.5.1/PDF. |
| [Olson65] | Mancur Olson.
The Logic of Collective Action: Public Goods and the Theory of Groups. Harvard Economic Studies. Harvard University Press, Cambridge, Massachusetts, 1965. |
| [O’Connor21] | Timothy O’Connor.
Emergent Properties. In The Stanford Encyclopedia of Philosophy. Edward N. Zalta, editor. Metaphysics Research Lab, Stanford University, Winter 2021 ed., 2021. https://plato.stanford.edu/archives/win2021/entries/properties-emergent/, accessed 13 February 2024. |
| [Parnas72] | D. L. Parnas.
On the criteria to be used in decomposing systems into modules. Communications of the ACM, vol. 15, no. 12, December 1972, pp. 1053–1058. |
| [SAE21] | On-Highway Equipment Control and Communication Network.
SAE International, Standard J1939/1_202109, September 2021. |
| [Smith22] | Adam Smith.
An Inquiry into the Nature and Causes of the Wealth of Nations. Edwin Cannan, editor. Methuen and Co., London, Third ed., 1922. |
| [Spiral] | Wikipedia contributors.
Spiral model. In Wikipedia, the Free Encyclopedia. https://en.wikipedia.org/w/index.php?title=Spiral_model, accessed 14 February 2024. |
| [Suss24] | Richard A. Suss.
First Do No Harm Is Proverbial, Not Hippocratic. OSF Preprints, 22 November 2024. https://osf.io/preprints/osf/c23jq. |
| [TTSB21] | Major Transportation Occurrence—Final Report, China Airlines Flight CI202.
Taiwan Transportation Safety Board, Report TTSB-AOR-21-09-001, September 2021. https://www.ttsb.gov.tw/media/4936/ci-202-final-report_english.pdf. |
| [Thompson99] | Adrian Thompson, and Paul Layzell.
Analysis of unconventional evolved electronics. Communications of the ACM, vol. 42, no. 4, April 1999, pp. 71–79. |
| [Tolstoy23] | Leo Tolstoy.
Anna Karenina. Constance Garnett, translator. Project Gutenberg, 2023. https://www.gutenberg.org/ebooks/1399. |
| [Tuckman65] | Bruce W. Tuckman.
Developmental sequence in small groups. Psychological Bulletin, vol. 63, no. 6, 1965, pp. 384–399. |
| [Tuckman77] | Bruce W. Tuckman, and Mary Ann C. Jensen.
Stages of small-group development revisited. Group and Organization Studies, vol. 2, no. 4, 1977, pp. 419–427. |
| [Wilson05] | Simon P. Wilson, and Mark John Costello.
Predicting future discoveries of European marine species by using a non-homogeneous renewal process. Journal of the Royal Statistical Society Series C: Applied Statistics, vol. 54, no. 5, November 2005, pp. 897–918. https://academic.oup.com/jrsssc/article/54/5/897/7113002. |
| [Zhang90] | Lixia Zhang, and David D. Clark.
Oscillating behavior of network traffic: a case study simulation. Internetworking: Research and Experience, vol. 1, 1990, pp. 101–112. |