rcmnd

Philip Koopman

Carnegie Mellon professor working on self-driving-car safety; writes the Safe Autonomy blog.

15 things

Engineering a Safer WorldBook Nancy Leveson

recommended

Leveson (Paper Index) Software Safety: why, what and how 1986 (ACM) (longer version: 1995 Safeware Book) High-Pressure Steam Engines and Computer Software Engineering a Safer World (includes link for free PDF download)

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

SafewareBook Nancy Leveson

recommended

Software Safety: why, what and how 1986 (ACM) (longer version: 1995 Safeware Book)

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

Safety of WorkPodcast Drew Rae and David Provan

recommended

Safety of Work podcast (Rae & Provan) (Podcast)

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

Cautionary TalesPodcast Tim Harford

recommended

Cautionary Tales podcast (Harford) (Podcast)

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

Security EngineeringBook Ross Anderson

recommended

Fundamentals of Dependable Computing (John Knight) Security Engineering (Ross Anderson)

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

To Engineer is HumanBook Henry Petroski

recommended

To Engineer is Human, Petroski, 1992.

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

The Design of Everyday ThingsBook Donald A. Norman

recommended

Design of Everyday Things, Norman, 2013, Chapter 5: "Human Error? No, Bad Design"

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

Normal AccidentsBook Charles Perrow

recommended

To Engineer is Human, Petroski, 1992. Design of Everyday Things, Norman, 2013, Chapter 5: "Human Error? No, Bad Design" Normal Accidents, Perrow, 1984

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

The UL 4600 GuidebookBook Philip Koopman

recommendedtheir own

Koopman, How Safe Is Safe Enough, 2022 Koopman, UL 4600 Guidebook, 2022

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

Embodied AI SafetyBook Philip Koopman

recommendedtheir own

Koopman, UL 4600 Guidebook, 2022 Koopman, Embodied AI Safety, 2025

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

18-642 Embedded Software EngineeringCourse Philip Koopman

recommendedtheir own

Recommended Supplemental Materials Carnegie Mellon University course 18-642 on embedded software code quality, safety, security (Koopman)

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

Ironies of AutomationOther Lisanne Bainbridge

recommended

Bainbridge, "Ironies of Automation," 1983.

His permanent Computer-Based System Safety Essential Reading List page on Safe Autonomy (page says last update 1 July 2026).

2026-07-01·safeautonomy.blogspot.com ↗

Every entry is a verbatim quote and a link to the public post it came from. Nothing is paraphrased. If it is not on record somewhere public, it is not here.

The verdict is what they actually said: loved and liked are explicit; recommended means they told others to get it; uses means they only say they use it; read is a book on their public shelf with no verdict; mixed and disliked are kept too.

A dashed affiliate link, sponsored or their own label means the post disclosed a relationship. It is shown, never hidden.

The shading behind a date shows how dated a recommendation is for its kind of thing.

The shading behind a date shows how dated a recommendation is, for its kind of thing. Fully green is recent. It drains a quarter at a time as the post gets older, and is empty once it reads as dated.

What counts as old depends on the thing. A laptop praised four years ago has been replaced twice; a book loved twenty years ago is probably still loved. The shading is gone after about:

Stripes mean the post carries no date and the date shown is an estimate. No date at all, no shading.