More importantly, there are a bunch of scenarios where the wing needs to swing that don't involve the pre-conditions you've specified. No one knows what they ar

More importantly, there are a bunch of scenarios where the wing needs to swing that don't involve the pre-conditions you've specified. No one knows what they are, but we know they exist--because they always do--and the last thing needed is for the computer to tell the pilot, "I'm sorry I can't do that Dave" when the pilot tries to do something it has been programmed to not allow. At that point a software developer's imagination is flying the aircraft, which is never a good thing. That we can't imagine those scenarios right now is irrelevant to this point: we can't imagine the correct physics beyond the standard model, either. That doesn't mean we won't discover it as we gather more data. But in the aircraft industry "more data" often involves dead people. We generally find it easy to reason like, "In context X do (or don't do) Y until condition Z." The hard part is figuring out what consquences that will have in context P, Q or R... each of which is likely to have a very low probability, but one of which is almost certain to happen eventually.