the solution, Singh said, is simple contingency planning: “If things fail, the vehicle has to do something reasonable.”