| [14CFR5] | Part 5—Safety management systems.
In Title 14, Code of Federal Regulations. United States Government, August 2026. https://www.ecfr.gov/current/title-14/part-5, accessed 27 August 2026. |
| [49CFR800] | Part 800—Administrative rules.
In Title 49, Code of Federal Regulations. United States Government, June 1984. https://www.ecfr.gov/current/title-49/subtitle-B/chapter-VIII/part-800, accessed 26 August 2026. |
| [ARP4754] | Guidelines for Development of Civil Aircraft and Systems.
SAE International, Standard 4754 rev. A, December 2010. |
| [Alexander15] | Christopher Alexander.
A City is not a Tree. Sustasis Press, Portland, Oregon, 2015. |
| [Asimov50] | Isaac Asimov.
I, Robot. Gnome Press, New York, 1950. |
| [BCP14] | Scott Bradner.
Key words for use in RFCs to indicate requirement levels. Internet Engineering Task Force (IETF), Best Community Practice BCP 14, March 1997. https://www.ietf.org/rfc/bcp/bcp14.html. |
| [Cubesat22] | CubeSat Design Specification.
The CubeSat Program, Cal Poly SLO, San Luis Obispo, CA, Standard Rev. 14.1, February 2022. https://www.cubesat.org/s/CDS-REV14_1-2022-02-09.pdf. |
| [DOD10] | DoD Deputy Chief Information Officer.
DoD Architecture Framework Version 2.02. Department of Defense, United States Government, August 2010. https://dodcio.defense.gov/Library/DoD-Architecture-Framework/. |
| [DOD22] | Work Breakdown Structures for Defense Materiel Items.
Department of Defense, United States Government, Standard Practice MIL-STD-881F, May 2022. https://cade.osd.mil/Content/cade/files/coplan/MIL-STD-881F_Final.pdf. |
| [ESA96] | ARIANE 5 Flight 501 Failure—Report by the inquiry board.
European Space Agency, July 1996. https://www.esa.int/Newsroom/Press_Releases/Ariane_501_-_Presentation_of_Inquiry_Board_report. |
| [FAA11] | System safety analysis and assessment for Part 23 Airplanes.
US Department of Transportation, Federal Aviation Administration, Advisory Circular 13.1309-1E, November 2011. |
| [FIPS199] | Standards for Security Categorization of Federal Information and Information Systems.
National Institute of Standards and Technology, Computer Security Resource Center, Publication FIPS 199, 2004. https://csrc.nist.gov/pubs/fips/199/final. |
| [GSN] | Goal Structuring Notation Community Standard.
SCSC, Standard SCSC-141C, 3 ed., May 2021. http://scsc.uk/SCSC-141C. |
| [Goodin24] | Dan Goodin.
What we know about the xz Utils backdoor that almost infected the world. Ars Technica, 31 March 2024. https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/, accessed 4 August 2024. |
| [Howard06] | Michael Howard, and Steve Lipner.
The Security Development Lifecycle. Microsoft Press, 2006. |
| [ICAO20] | Annex 13 to the Convention on International Civil Aviation: Aircraft Accident and Incident Investigation.
International Civil Aviation Organization, Annex 13, 12th ed., November 2020. https://elibrary.icao.int/product/229733. |
| [ISO26262] | Road vehicles — Functional safety.
International Organization for Standardization, Geneva, Switzerland, Standard ISO 26262:2018, Second ed., 2018. |
| [Klages93] | Ellen Klages.
Call Building 1906: Burned but standing. The Argonaut, vol. 4, no. 1, Summer 1993. |
| [Klein14] | Gerwin Klein, June Andronick, Kevin Elphinstone, Toby Murray, Thomas Sewell, Rafal Kolanski, and Gernot Heiser.
Comprehensive formal verification of an OS microkernel. ACM Transactions on Computer Systems, vol. 32, no. 1, February 2014. https://trustworthy.systems/publications/nicta_full_text/7371.pdf. |
| [Knight86] | John C. Knight, and Nancy G. Leveson.
An experimental evaluation of the assumption of independence in multiversion programming. IEEE Transactions on Software Engineering, vol. SE-12, no. 1, January 1986, pp. 96–109. |
| [Kochenderfer11] | Mykel J. Kochenderfer, James P. Chryssanthacopoulos, and Roland E. Weibel.
A new approach for designing safer collision avoidance systems. Proc. 9th USA/Europe Air Traffic Management Research and Development Seminar, 2011. https://drive.google.com/file/d/1pFze-cdoHmoz2_T8zf3wxBrwwIPTv4hS/view. |
| [Leveson11] | Nancy G. Leveson.
Engineering a safer world: systems thinking applied to safety. Engineering Systems. MIT Press, Cambridge, Massachusetts, 2011. |
| [Lutz14] | Bob Lutz.
How bad cars happen: the Pontiac Aztek debacle. Road & Track, 10 October 2014. https://www.roadandtrack.com/car-culture/a6357/bob-lutz-tells-the-inside-story-of-the-pontiac-aztek-debacle. |
| [McConnell09] | Steve McConnell.
Software Estimation: Demystifying the Black Art. Microsoft Press, Redmond, Washington, 2009. |
| [McNamara22] | Paul McNamara, and Frederick Van De Putte.
Deontic Logic. In The Stanford Encyclopedia of Philosophy. Edward N. Zalta, and Uri Nodelman, editors. Metaphysics Research Lab, Stanford University, Fall 2022 ed., 2022. https://plato.stanford.edu/archives/fall2022/entries/logic-deontic, accessed 3 February 2025. |
| [NASA16] | NASA Systems Engineering Handbook.
National Aeronautics and Astronautics Administration (NASA), Report NASA SP-2016-6105 Rev2, 2016. |
| [NASA18] | NASA Work Breakdown Structure (WBS) Handbook.
National Aeronautics and Astronautics Administration (NASA), Handbook SP-2016-3404/REV1, 2018. https://essp.larc.nasa.gov/EVM-3/pdf_files/NASA_WBS_Handbook_20180000844.pdf. |
| [NPR7120] | NASA Space Flight Program and Project Management Requirements.
National Aeronautics and Astronautics Administration (NASA), NASA Procedural Requirement NPR 7120.5F, 2021. |
| [Orekit25] | Orekit.
https://www.orekit.org, accessed 22 December 2025. |
| [Polya57] | George Polya.
How To Solve It. Doubleday & Company, Second ed., 1957. |
| [Rao06] | KK Rao, James Hafner, and Richard Golding.
Reliability for networked storage nodes. IEEE Trans. on Dependable and Secure Computing, vol. 8, no. 3, February 2006, pp. 237–248. https://www.chrysaetos.org/papers/dsn06-reliability.pdf. |
| [Schiffer17] | Alex Schiffer.
How a fish tank helped hack a casino. The Washington Post, 21 July 2017. https://www.washingtonpost.com/news/innovations/wp/2017/07/21/how-a-fish-tank-helped-hack-a-casino/, accessed 4 October 2026. |
| [Stoneking19] | Eric Stoneking.
42: A general-purpose spacecraft simulation. NASA Software Designation GSC-16720-1, 2019. https://github.com/ericstoneking/42, accessed 22 December 2025. |
| [Thompson87] | R. G. Thompson.
Dash 80: The story of the prototype 707. Smithsonian Magazine, 30 April 1987. https://www.smithsonianmag.com/air-space-magazine/dash-80-81791575/. |
| [Wilkes96] | John Wilkes, Richard Golding, Carl Staelin, and Tim Sullivan.
The HP AutoRAID hierarchical storage system. ACM Trans. on Computer Systems, vol. 14, no. 1, February 1996. |
| [Zetter23] | Kim Zetter.
The untold story of the boldest supply-chain hack ever. Wired, 2 May 2023. https://www.wired.com/story/the-untold-story-of-solarwinds-the-boldest-supply-chain-hack-ever/. |