The task ahead is not to give machines a conscience. It is to design systems where failures are predictable, constrained, and ...