> I just can't understand why people ship things that fail into in potentially dangerous states on some known non-trivial fraction of inputs Because that kind

> I just can't understand why people ship things that fail into in potentially dangerous states on some known non-trivial fraction of inputs Because that kind of safety-conscious culture needs to be deliberately enforced, from the top all the way down, by a system that takes a long view. If we're making an analogy to the defense industry, then building self-driving cars as a tech startup is closer to the Anarchist's Cookbook than Northrop Grumman.