A safety standard opens with a number that looks innocent: a dangerous-failure rate on the order of 10⁻⁸ — one in a hundred million hours of operation. It is the bar a high-integrity automotive ...