Around 5 years ago I hired a car which had an optional announced speed limit which was clearly GPS driven and it immediately showed up a major flaw as I drove along the A500, dual carriageway (National Speed Limit) and I passed under a bridge carrying a local road with a 30mph speed limit, and the unit 'told' me that I should be doing 30mph. If that was directly capping my speed, and included braking I dread to think of what could have happened.
North Lanarkshire (I'm advised) has school buses and refuse trucks fitted with Autokontrol systems managing the vehicle capped speed through the Euro X engine management software, but not applying the brakes. When buses enter school grounds they will have passed a beacon which switches on the speed cap. Likewise trucks on the refuse processing site pass through a cordon line which limits the top speed on site.
The system can also be linked to reverse gear, so that the reversing speed can be limited to say 5 mph, which then ensures that a detection system (typically set to 1 metre detection range to avoid nuisance tripping) can apply the brakes and stop the truck before it hits the obstruction.
It might ultimately be a requirement, initially for HGV and buses operating in city centres, with high levels of pedestrian traffic, and a disportionate level of fatal/serious injuries relative the the % of those vehicles in the traffic mix, to require a speed capping system triggered by roadside beacons (more reliable than GPS) when they enter speed controlled areas. Initially, until 100% speed limiter compliance, there would be a period where a CCTV record, and a requirement for a vanguard to travel with the driver, to be licensed to operate within the city.
Andy (or others currently crunching crash data) might be able to provide a figure for the annual avoidable toll in deaths and serious injuries from truck drivers reversing without an attendant on foot in charge - Glasgow was fined £20,000 for killing a pensioner in 2014 with a reversing refuse truck, and learning no lessons from this, Stirling Council repeated the same mismanagement and killed another pensioner in 2016. My guess from a rough trawl of news reports is 10-20 avoidable deaths per year, bit it would be good to get a robust figure.
Nathan, from Cycling Scotland also highlighted another issue with the Volvo 'convoy mode' cruise setting. It latches on the detection of the car in front, and 'walls/vehicles' in the zones to the side and front. If the vehicle in front turns left or right and rapidly 'disappears' from the detection the system as a right side failure response and slams on the brakes, if the driver fails to respond and take back control in time. The same result apparently if the crash avoidance system is active when going through a narrow gateway, or approaching a sharp bend on a walled lane.
Finally we've now had the second Tesla beheading crash, where the car's system has failed to detect a white semi-trailer moving across the car's direction of travel, and driven underneath carrying on on auto-pilot for half a kilometre (sans roof) before crashing - this is currently being investigated by the US NTSB.
I've some interesting material on what can go wrong with drive by wire vehicles (where an on board LAN - the CAN - sends control signals via a 2-wire bus circuit to the braking and power controls, with control systems that lack the parity checking, or triplex proving used for aircraft, and a robust right side default (eg cut the power (with a manual override of the auto system fails), apply the brakes (with a direct operated non-electronic manual system - the foundation brake), and stop the vehicle)