u The selected design can be derived from requirements.
u The design implements safety, security, and other critical requirements
correctly as shown by suitably rigorous methods.
Which reviews will be conducted and their definition is decided with