The set of runtime guarantees that bound what an autonomous AI system can do without a human in the loop.