Yeah, in that case the controls are moved from the development process to the downstream verification. Sorry if I wasn't clear, I originally had some wording about how known unknowns are handled in my post, but it was getting unnecessarily long and felt like a diversion from the hypothetical I was responding to. I was focused more on documentation are repeatability of process than the quality of the tool themselves.

>> I find it concerning that one person was able to push malicious code to 'production'.

>Production line software is almost certainly handled separately [...] This sounds more like someone messed with their factory automation setup.

For a production line, I would still expect a level of control over exactly what software was running and how it was configured, even if it was SOUP.

edit: SOUP not SOAP. I need to stop posting in the morning.