Automation improvements are needed to reduce the dependency on human reflexes and unreliable data links. Modern autopilots are capable of detecting loss-of-GPS and loss-of-communications. There is no mechanism for the aircraft to autonomously return to a safe landing zone under these conditions. Furthermore, experience has shown that existing controllers are not good at detecting bad position data caused by intermittent GPS. These conditions are known to cause flyaways. The only existing protection is the operator. There is currently no automation that can protect an SUAS when the flight controller is unable to recognize that the GPS and comm links are unreliable. A unique feature of the invention is a dual onboard flight controller. One is a failsafe controller, and the other is experimental. The failsafe controller allows access to control outputs by the experimental controller. Meanwhile, it detects conditions such as lack of GPS reliability, imminent airspace violations, flight profile violations, imminent loss-of-control, and loss-of-stability by experimental software. If the failsafe controller detects one or more of these conditions, then it autonomously seizes control authority from the experimental flight controller and navigates the aircraft to a pre-determined recovery spot, using visual navigation if necessary. No comm link is required.