A step toward safe and reliable autopilots for flying