[amelius]

> tweaking the code when a bug appears and hope that was the last one

Tesla should also be prohibited from pushing updates. When the software is updated, the code should be tested for at least X thousand miles and X months before a new version may be pushed. Letting an authority do the pushing avoids the temptation of manufacturers to push updates prematurely. It also solves the problem of unexpected changes for the user at random times.

If safety issues are detected, the automobile (or at least the autopilot) should be disabled until the code has been fixed and fully tested.