How can trust systems with multiple players to safely perform cooperative functions?
SOA: Keep humans away and hope for the best…
Entities participating in the coordinated function may not be part of individual V&V testing:
Linked Interface Control Documents?
Entities with different manufacturers?
System Configuration Management?
Answer may reside in a specification for contingency management, based on system degradation