Safety-Critical Systems Symposium (8th 2000 Southampton, England)