This pattern is intended to argue that a (sub)system has been developed to an integrity level appropriate to the hazards to which the system contributes.
This pattern is intended to argue that a (sub)system has been developed to an integrity level appropriate to the hazards to which the system contributes.