Fail-stopped is not fail-safe: autonomous systems and trolley problems
medium.com