This doesn't change anything GP said — the Denso/Toyota code running in the ECU is literally impossible to test or review. Safety mechanisms and watchdogs are faulty and not operational.
This is not the kind of code that should ever have full authority over a 250 kW drive system, even less so with humans in and around that system.
This is not the kind of code that should ever have full authority over a 250 kW drive system, even less so with humans in and around that system.