Bletchleyite
Veteran Member
Potentially much easier said than done. You're not that far from describing AF449. There was a sensor issue, the 3 automated computers disagreed, and tried to fail safe by handing back control to a flight crew in a situation they weren't properly trained to deal with, who then lost control of the plane with catastrophic consequences. The wrong response at this point is to say "well, trains don't fly over water". The point that needs to be taken away is that complex systems fail in complex, unpredictable ways through chains of events. So designing a system to fail safely without failing all the time because of false positives could prove very hard to do.
The key difference between a train and a plane is that "stop, as quickly as possible, now" is just about always a safe solution to something going wrong on a train. There may be odd edge cases like a fire in a tunnel or on a viaduct, but with a trained guard on board on the DLR model they could then drive it forward out of the tunnel/off the viaduct manually at low speed. I would not anticipate or advocate totally staffless trains except in very controlled circumstances that basically equate to the present staffless airport shuttles. I'm even a *bit* dubious about the Glasgow Subway - I think it will cause big personal safety issues and while I don't object at all to automating it, a "guard" would make sense.