An Architecture For Safe Driving Automation