Visible boundaries around an unpredictable output: acceptable outcome range, evaluation, and an intervention path. Distinct from a guardrail on a fixed track. The system must operate within the boundary; a learning system may also use the recorded failures to improve.