The Power of 10: Rules for Developing Safety-Critical Code