Bring us your worst machine.

A pilot is bounded, hardware-light, and runs in shadow first. A person approves every change. Every decision is signed.