How would you safely transition a system to a safe state after detecting an anomaly in Benchmark Space Systems spacecraft software?
