Child nodes:
The only claim made on the (intelligent) control system is that it will not fail at a rate exceeding 1 pdfy. i.e. it will not challenge the safety guard more than 1 /y.
A single operation will last < 24hrs therefore this equates to 366 operations without failure.