NASA’s 10 rules for developing safety-critical code