In a railway system, safety rarely depends on a single highly visible piece of equipment. More often, it relies on a series of simple functions that must all behave exactly as expected, sometimes after years of operation, millions of vibrations, and thousands of mechanical cycles. Emergency braking and passenger alarm systems are a good example. […]