On: Misra C++:2023

[GuB-42]

"just crash the whole program" is much more sane than to attempt to handle unrecoverable errors.

Almost all systems to which MISRA apply have watchdogs, and crashing to let the watchdog restart the program is a common pattern.

[AlotOfReading → GuB-42]

There are cases in MISRA's problem domain where the software watchdog is part of the same program, and fully crashing that program is a different, more severe error than alternatives.