At the bare minimum there should be a local independent system that safely shuts down the robot if it doesn’t get heartbeats from their control network