Not all is right with ISO 26262
An argument in eight movements about what the standard actually guarantees: the paradox of a simulation that does not simulate, the factor of two, safety goals that were already the requirement, and metrics that depend on the thing they are meant to measure.