You can operate an unreliable system (randomly reacting late 0.1% of the time because of a hiccup in C++'s standard library memory allocator, say, or encountering an unhandled scenario 0.1% of the time) as long as there's a guy to take over immediately.
But you can't ship that in the real world.