DO-178C
The standard that software in civil aircraft is certified against, with rigour scaled to how many people die if the code fails.
RTCA and Europe's EUROCAE published it in 2011 as the successor to 1992's DO-178B; in Europe the same document is ED-12C. Software is assigned a level from A to E. Level A covers failures that could bring the aircraft down, level E anything with no safety effect at all. The higher the level, the more objectives must be met, and the more of them with independent review.
Best known is the MC/DC coverage requirement at level A: every condition in every decision must be shown to affect the outcome on its own. The standard mandates no language or tool, only that everything be traceable from requirement to code to test. That is why the paperwork routinely costs more than the programming, and why Ada, MISRA C and WCET analysis feel at home here.