Yeah, that's what I meant was a failure in the system. Ideally, manual operation or drive-by-sight should be the default mode. Only the appropriate signal state should be allowed to override this and clear the train for higher speed, otherwise the system must enforce manual operation (hardware enforced speed limits etc). There should simply be no procedure for a human to be able to just override this.