Functional Safety: how do L4 requirements differ from ADAS requirements? Fault tolerant architectures: how can we architect a system that properly detects and reacts to sensor failures? How can we validate such architecture? SOTIF and scenario-based validation: how do we ensure that the sensors have adequate performance even in circumstances not yet encountered during road testing?