> Safety critical software systems are designed to always fail safely. This means that in the event they cannot proceed in a demonstrably safe manner, they will move into a state that requires manual intervention.

unrelated - this instantly caused me to think about tesla autopilot crashes that have been reported with emergency vehicles