Thispaperexaminesthecompletedesignofanelectronicthrottlecontrolsystem.Thissystemisasafety-critical,embeddedcontrolapplication,andsothedesignofthesystemextendsbeyondtheanalysisoftheclosed-loopbehavioroftheplantandacontroller.Thenecessaryreliabilityandabilitytodetectandhandlehardwarefai