Story

Sad story, and a neat project. I can only assume the engineers are frantically trying to figure how they can remotely do a Ctl-Alt-Delete.

I pity them, but I also fault them. Easy to armchair code, but it seems to me if you're building this kind of system, your operating policy must be that any error leads to a reboot under known good software conditions. I know, easier said than done, but ...