You are correct. I will edit and add some supporting references.
I don't know where Elon gets his numbers from, but according to EN 50126 practioners, human error is in the range of 2E-4 / 1E-3 whereas safety functions are classified at least SIL2 and that means 1E-6. In other word, the system must be x1000 better than a human.
I don't know where Elon gets his numbers from, but according to EN 50126 practioners, human error is in the range of 2E-4 / 1E-3 whereas safety functions are classified at least SIL2 and that means 1E-6. In other word, the system must be x1000 better than a human.
Here is a good reference: http://en50126.blogspot.it/2009/10/safety-integrity-levels-s...