Well... I remember some press and discussion about "InterBase" (now FireBase) - and it's storage/self-healing recovery model being critical for some scenarios "back in the day", some quotes:
"AFATDS includes 935,000 lines of Ada code, running on an HP RISC
Workstation and the Army's Light Weight Computer Units," according to
John Williams, spokesman for Magnavox Electronic Systems Company, the
prime contractor on the project. "We needed to work with a single
database that could scale and operate across Unix and PC platforms. The
product also had to install quickly and provide high availability
without monopolizing our systems resources."
"Decision support of this nature requires a modular and flexible
architecture that would support both distributed processing and
distributed databases. That's why we chose InterBase. It out performed
the competition and convinced us that it would be reliable in life and
death situations."
The exact nature of the discussion was that in some situations, the firing of the main weapon in certain tanks would generate an internal EMP event, so systems would reboot - they had to have extremely fast reboots and recovery-times... so they could fire again...
"AFATDS includes 935,000 lines of Ada code, running on an HP RISC Workstation and the Army's Light Weight Computer Units," according to John Williams, spokesman for Magnavox Electronic Systems Company, the prime contractor on the project. "We needed to work with a single database that could scale and operate across Unix and PC platforms. The product also had to install quickly and provide high availability without monopolizing our systems resources."
"Decision support of this nature requires a modular and flexible architecture that would support both distributed processing and distributed databases. That's why we chose InterBase. It out performed the competition and convinced us that it would be reliable in life and death situations."
The exact nature of the discussion was that in some situations, the firing of the main weapon in certain tanks would generate an internal EMP event, so systems would reboot - they had to have extremely fast reboots and recovery-times... so they could fire again...