The flying train

Was it IEC - 61508 Safety Certified?

First winter snow has stopped the eurostar high speed train running for 3 days. It couldn’t cope with the temperature difference between the warm tunnel and the frigid air. The high speed train between Paris and Amsterdam was stopped on its tracks  because the safety system overreacted. The fail-safe mechanism forced the driver to reboot the engine while passengers were kept waiting for three hours. A spokesperson said that even extensive testing had never found these issues. They also experienced problems with the new communication system.

Electronics and software are increasingly replacing and enhancing mechanical  solutions.  The issue is the state space explosion.

Contrary to mechanical counterparts, software knows no graceful degradation.  How can engineering tackle this challenge?

From Deep Space to Deep Sea