The technology relies on programmers anticipating all possible future circumstances and hopefully the subsequent tests pick up any errors before it is put onto customers cars. However it seems to me that there is still effectively a second driver with partial control; unfortunately they are not in the car to share the consequences.
