safety-critical functions