>- turns out that if you are writing code for multi-million-dollar, nuclear-first-strike-capable weapon platforms, "fail fast, ship updates often" doesn't quite cut it.

I would try not to write in C++. There are languages that are much safer.