16.3.1 Craft fitted with an automatic control
system should be provided with an automatic safety control. Probable
malfunctions should have only minor effects on automatic control system
operation and should be capable of being readily counteracted by the
operating crew.
16.3.2 The parameters and levels at which any
automatic control system gives the command to decrease speed and put
the craft safely into the displacement or other safe mode should take
account of the safety levels as given in section 2.4 of annex 3 and of the safe values of motions appropriate
to the particular craft and service.