@array Their view would be that its a lot scarier running code that Oracle says is good but hasn’t been running for a decade.
The testing processes are insane though: aside from everything else you’ll spend about a month (even for relatively innocuous subsystem) stepping through every possible state the machine could be in and manually checking that it does what the spec says in front of lawyers and engineers from higher up subcontractors and ESA: any deviation gets the lawyers involved. Its brutal.
@array It’s more that you don’t want to delay a launch or kill an astronaut. Things like the Mars missions have their launches scheduled decades in advance when the planets literally align. If you miss the launch the (contractual) costs are high.
And astronauts are just too valuable to risk. They are idolised.