[boringuser2]

This is a solved engineering problem domain: use redundancy. There's a reason air travel is safe despite using many intricate safety technologies.

[HPsquared]

Redundancy doesn't work for design errors. You would need two diverse systems that have to agree before applying the brakes. This would also increase the "false negative" rate. It's a balance.

[boringuser2]

Why do you think these are design errors?