AA 276: Principles of Safety-Critical Autonomy — Stanford Root