Safety in Avionics: RoboLander Revisited