50 Investigations Later, Nobody’s Asking Why FSD Stepped Aside at 70 mph

Martha Avila was sitting in her living room on a Thursday afternoon in Katy, Texas, when a 2025 Tesla Model 3 doing more than 70 mph on a 30 mph residential street left the road and drove through her wall.^[1] She died at the hospital. The driver, Michael Butler, 44, had engaged Full Self-Driving. NTSB’s preliminary report, released yesterday, confirmed what Tesla’s VP of AI software had already posted on X three weeks earlier: Butler manually overrode FSD by pressing the accelerator pedal to 100 percent.

Case closed, apparently. NTSB says the driver did it. Barron’s ran “Tesla Cleared.” The stock wobbled a percent and a half and moved on. Butler was arrested on July 1 and charged with manslaughter, bail set at $150,000, court date in August. A clean narrative: criminal misuses tool, tool works exactly as designed.

That last sentence is the problem.

FSD is an SAE Level 2 system, which means, by definition, the driver retains authority and must supervise at all times. When Butler floored the accelerator, FSD did precisely what Level 2 demands: it stepped aside, completely, without triggering a speed governor at double the posted limit, without issuing an audible warning as the vehicle blew past 50, then 60, then 70 on a two-lane residential road lined with driveways and front porches, and without applying any geofenced resistance calibrated to the 30 mph zone the car’s own GPS and mapping data knew it was traveling through. Its override protocol has exactly one mode: full authority transfer, instant and total, the moment the driver touches the gas hard enough.^[2]

In aviation, when a pilot overrides autopilot, the aircraft doesn’t simply hand over the keys and leave the room, because flight envelope protection systems limit bank angle, prevent stalls, and trigger ground proximity warnings regardless of pilot input, while a stick shaker physically vibrates to signal danger. These aren’t limitations on pilot authority; they’re architectural acknowledgments that the moment of override is precisely when the human is most likely to need guardrails, because something has already gone wrong enough for the pilot to grab the controls. Tesla’s architecture takes the opposite view: override means the system owes the driver nothing. Not a warning, not a speed ceiling, not even a recorded note in the vehicle’s event log that the driver just doubled the speed limit while the car was mapping a residential zone at 30.

Since 2016, NHTSA has opened nearly 50 special investigations into Tesla crashes where advanced driver-assistance systems were active or recently active. About two dozen people died in those incidents.^[3] The agency has identified at least 273 crashes involving Tesla’s driver-assist features. In March, NHTSA escalated its FSD probe to an Engineering Analysis covering 3.2 million vehicles across every Tesla model including the Cybertruck, the last procedural step before a mandated recall.^[4] That probe found FSD’s degradation detection system failed to flag common conditions like sun glare and airborne dust until moments before impact. Three concurrent federal investigations are now open into various FSD and Autopilot behaviors. Tesla has already recalled 363,000 FSD-equipped vehicles for traffic violations including running red lights and entering intersections during yellow signals without due caution.

And here is the paradox worth sitting with. FARS data from 2014–2023 shows the Tesla Model Y carries a fatality rate of 0.03 deaths per 100 million vehicle miles traveled, among the lowest of any vehicle in the national dataset. The Model 3 sits at 0.05, and both figures are a fraction of the fleet-wide average.^[5] By the bluntest measure of safety, Teslas are extraordinarily good at not killing their occupants. Yet no other manufacturer in history has accumulated 50 special federal investigations into its driver-assistance system, 273 flagged crashes, three simultaneous probes, and an engineering analysis covering every vehicle it sells. The safest fleet by fatality rate is the most investigated fleet for the feature its CEO calls the company’s future.

The standard defense is that Butler was committing a crime (reckless driving, criminal speeding, ultimately manslaughter) and no technology can stop a criminal. True enough. But that framing treats the override architecture as a fixed constant of physics rather than what it is: a design decision made by engineers in Palo Alto who chose binary authority transfer over graduated response. A speed-limited override mode, a geofenced speed ceiling tied to map data, an escalating audible warning when override speed exceeds the posted limit by 20, 30, 40 mph. Those are engineering choices other companies could make, and that Tesla specifically chose not to. Whether that choice constitutes a “defect” under federal safety law is a question that, 50 investigations and 273 crashes later, neither NHTSA nor NTSB has formally asked.

Martha Avila was 76. She was inside her own home on a clear afternoon on a dry road in a quiet subdivision. The system worked exactly as designed. That should bother everyone more than it does.

What you can do: If you drive a Tesla with FSD or any Level 2 system, understand the override architecture: the moment you press the accelerator hard, the system disengages completely. There are no speed governors, no audible warnings tied to posted speed limits, and no geofenced override limits. The system trusts you absolutely. Whether you deserve that trust is between you and your speedometer. Check your VIN at nhtsa.gov/recalls for any open recalls affecting your vehicle’s FSD or Autopilot software.