Here’s the thing, every car system will fail at some point and potentially cause a death. There is no such thing as perfect safety. It’s really important to quantify things like fatalities per million miles driven. At some point, you push your system into production because, even though at some point the system will fail and kill someone, it will in the mean time save dozens or hundreds of people from dying in preventable accidents. What is critically important is being confident that your system is safer than the alternatives that your customers would use if your product doesn’t ship.