What engineer builds an autopilot system which cannot be easily override when manually making course adjustments though (or at least respond with a clear warning that the new input was not expected in its current state)