When safety is critical, control systems are traditionally designed to act in isolated, clearly specified environments, or to be conservative against the unknown. The goal of our research is to make high performance control available for safety-​critical systems that act in varying, uncertain environments, and which are potentially large-​scale, composed of numerous interconnected subsystems, and, most importantly, involve human interaction.