The Power of Ten: Rules for Developing Safety Critical Code [pdf]