> The difference with the 737 Max crashes is that there was only one sensor feeding data to the system, not two. That's fair. I was likely remembering that the

> The difference with the 737 Max crashes is that there was only one sensor feeding data to the system, not two. That's fair. I was likely remembering that there were two sensors, since there's one for the pilot and one for the copilot, but not remembering that only one of them was in use. The other lessons worth noting are that 1) you need to give the human some indicator that something's wrong, and 2) you need to give the human some way of overriding the system. > And unlike planes, you can safely stop a car in almost all scenarios. Agreed, mostly. We do have to be careful about how the vehicle disengages and comes to a safe stop, or else we risk repeating the incident where Cruise hit a pedestrian, then pulled to the side of the road while dragging the pedestrian under the vehicle.