Engineering ethics

¶ On a railway every fault must turn the signal red. Should our moral rules be designed to fail safe?

For forty years I designed signalling systems around one principle: when anything fails, the system must fall into its most restrictive state. A broken wire, a dead relay, a lost power supply: each must show red, never green. The old semaphore arms…