secrets, … Software safety (or “life safety” or similar) making software free from unacceptable risk of causing unintended harm to humans, property, or the environment examples: hospital equipment, simplification in Cpp2, because they let programmers declare their intent Because it carried the highest risk: Would the committee & community accept that huge a leap forward in compile-time programming? Would the language feature, not a divergent special-purpose extension” such as a different kind of loop Risk of bottom-up design is that we may end up with overlapping pieces that don’t fill in the whole picture

rich tool; and Made it far easier to continue modernizing the Code Generator. We did it without risk! And we did it with the consensus and participation of dozens of teams. Prologue© 2018 Bloomberg 18 Working under the hood to improving the Code Generator, her changes are invisible to users, risk free, and happen automatically. CB began silently saving massive amounts of space© 2018 Bloomberg remove existing support because a client somewhere could suffer a runtime failure. There is much less risk for new libraries, which can create the rules before they have clients. Sherry begins pushing teams

you to warehouse risk - Avoid big lossesMarket Making – A Losers’ game 9 • Be in the market at all times - Make small profits from the premium investors pay for you to warehouse risk - Avoid big losses involved in any operations - Multi processes requires it – which is good for minimizing operational risk74 Shared Memory • Why shared memory - If you don’t need sockets, no need to pay for their complexity involved in any operations - Multi processes requires it – which is good for minimizing operational risk • What works well in shared memory - Contiguous blocks of data: arrays! - One writer, one or multiple

Orthogonality In Design cppcon 2021 Reducing Risk Risk (edge case discovery) Relationship Symmetry None Weak Strong Inter-Component Relationship Risk (orthogonal) (weak symmetry) (strong symmetry) • At-Scale • Under-Load Leverage Symmetry and Orthogonality to improve system safety (and reduce risk as presented through surprising interactions)Charley Bay - charleyb123 at gmail dot com The Roles

then? 24 Explore Tooling Processes Architecture CultureArchitecture 25Control and reduce risk Risk Driven Architecture 26 SW System/Item (Class C) SW Item X (Class C) SW Item Y (Class B) Physical/Logical Segregation? Reduce Coupling & Enhance CohesionSafety Critical Path vs Non-Real Time Domain Risk Driven Architecture 27 SW System/Item (Class C) SW Item X (Class C) SW Item Y (Class B)

transitive dependencies; building them all manually is a pain • Licensing issues; need to minimize legal risk (covered later in this talk) • Fears of potential security vulnerabilities (covered later in this cachingProblem 6: Security vulnerabilities in open-source code •Introduction of security vulnerabilities is a risk of consuming open-source • OpenSSL Heartbleed (2014) • OpenSSL email address buffer overflow (2022)

A-B / DAL A-D / Class A-C ▪ Require Functional Safety – Absence of unreasonable risk caused by malfunction => Risk has been analyzed, mitigated to a reasonable level, provenACHIEVING FUNCTIONAL SAFETY

Users WHERE name = " + str); }Software Safety "Ability of software to be free from unacceptable risk. ... It is the ability of software to resist failure and malfunctions that can lead to death or Production Detecting errors early in the development pipeline reduces costs, saves time, minimizes risk, and improves efficiency.Error Reporting - Goals Error messages should be clear, informative, and

inherently complex. A single mistake can be devastating. Solutions should be simple to reduce the risk of mistakes.Max Hoffmann Security Beyond Memory Safety CppCon 2024 24 Right Wrong Make the right

[What is Continuous Integration? - Azure DevOps | Microsoft Docs] What are the benefits? • Reduces risk – detect and locate errors more quickly • Ensures quality – shipped product is always tested • Efficient