Human oversight by design
Enable understanding of capabilities and limitations.
Support detection of automation bias and anomalous operation.
Test whether a reviewer can see relevant evidence and act in time. An override button that cannot change the workflow is insufficient.
Provide appropriate override, reversal or stop mechanisms.