let us assume that train drivers were assigned the responsibility of executing the acceleration commands generated by the software controller consider the risk of drivers failing to do so, for example because they fall asleep or are unduly distracted by some other activity.