Responsibility

Safety You Can Inspect

Our systems work where mistakes hurt people, equipment, and money. These are our commitments.

Commitments

Each One Is Enforced By The Architecture

These are mechanisms in the code, not promises.

The commitment	How it is enforced
A person makes the final call	The system only recommends; a person can always overrule it.
Your rules are enforced in code	Forbidden options are removed before ranking starts.
It is built to say when it does not know	Outside its recorded examples, it stops and says so.
It only changes through approved releases	The running system stays exactly as tested until a person approves the next version.