Fail-safe & certifiable drone autopilot