Just a PID speed controller, maybe. Then, some boundary condition where when the controllers inputs mismatched from predicted outputs, then throw an error. But,

Just a PID speed controller, maybe. Then, some boundary condition where when the controllers inputs mismatched from predicted outputs, then throw an error. But, if you're trying to drive 45, and you achieve 46 with a tail wind it doesn't seem necessary or safer to stop the train.