Iec 61508-7 May 2026

I raised the blue binder.

She made 61508-7 required reading for every systems engineer. Not for certification. For humility. iec 61508-7

She looked at the page. Then at the shredded conveyor belt photo. Then back at me. I raised the blue binder

And there it was. Clause C.4.3: “Analysis of potentially dangerous sequences of states and events.” iec 61508-7

I retreated to my office, a tomb of stacked binders and coffee cups. On my screen was the post-mortem: a single, latent software fault. A counter variable in the obstacle-avoidance logic would overflow after 32,767 wheel rotations. Not on day one. Not on day ten. But on day forty-seven—today. The truck thought it had traveled negative distance. It “forgot” the rock pile.