The product must not perform any safety functions without a higher-level safety system unless explicitly allowed by the documentation.