How do you ensure system safety and fault tolerance when your code controls large autonomous vehicles?