Abstract :
One of the chief requirements of a computerised control system is that it should operate safely and reliably without needing constant attention. Complex systems are often `frozen¿ in a particular configuration. Unfortunately, this can make upgrades and improvements almost impossible. Nuclear power plants are a case in point