  We propose to validate experimentally a theory of software certification that
proceeds from assessment of confidence in fault-freeness (due to standards) to
conservative prediction of failure-free operation.
