Trust Without Boundaries: An Architectural Analysis of Satellite Flight Software