> For > instance a nuke plant run off of one Window NT box that could > give a 'Blue > Screen of death' would be a REALY bad system design... > Thought that would > be an example of a system deciding to 'stop' and alert the user when > something went wrong.
In that case, it had better NOT abort, but go into a controlled shutdown and THEN stop. Positive feedback loops and nuclear materials are *not* a good combination...8-) -- db
