my dumb car "works" for self driving assuming a straight enough road without obstacles. A safety critical system needs to have a very robust definition of "work

my dumb car "works" for self driving assuming a straight enough road without obstacles. A safety critical system needs to have a very robust definition of "works" that is far beyond "it happened to not crash on this particular road at this particular time with this particular set of obstacles".