Summary
Rigorous methods for stressing systems are wise
Rigorous software assessment methods cannot succeed without definitions for what are and what are not unacceptable software output events
Results of fault-injection are limited guarantees; so is every other validation & verification method