a failure of a critical system may result form a failure to meet a functional requirement but,more often,it results form a failure of the system to satisfy some non-function constraint on its operation. The principal non-function constraint which are relevant to critical system are