How do we prove that railway signalling is fundamentally safe? Come to this lecture to find out.