If the documentation does not expressly permit it, the product must not perform any safety sub-function without higher-level safety systems.
