"l can only do that in a fail-safe environment."