Theory of how F-22 Fighter software is going to be made bulletproof. Practice. Update: More practice (noted by Ben_k on Bruce Schneier’s weblog). Update2: See this paper and this one. Difference between theory and practice in security and reliability.