I'd assume it would have failsafe upon failsafe. E.g. in your example it would pull over at the earliest safe location while waking up the driver because the remote backup was unavailable.