I think that the AP2 hardware may have full autonomous capability, but the redundancy factor is what concerns me. If the system senses it is failing and can give even a 1-2 second warning for the driver to take over, that is fine (assuming there is a driver, lol). Modern chips are pretty reliable, but I could see the cooling system failing, for example, causing the PX2 to shut down to prevent overheating. I would imagine that there would be enough warning to alert the driver to take over, but what happens if AP is navigating a sharp curve on an undivided road and the chip fails in the middle of the turn? Does the car keep its trajectory or does it run off the road (or worse, into oncoming traffic). If it fails suddenly, the second or so it would take for the driver to realize that there was a problem and then take control back might be too long, yes? Of course, the PX2 is a multi-chip solution, so maybe the whole board would have to fail for there to be a catastrophic failure.