In an embodiment, an automation controller periodically generates stop trajectories and controls actuators to follow the stop trajectories. As long as new stop trajectories continue to be generated, the automation controller may follow a destination trajectory that is formed from the first portion of each stop trajectory. If stop trajectories are not generated for a period of time (e.g., due to failure in one or more computers generating the stop trajectories), the automation controller may continue to follow the most recent stop trajectory and bring the mobile machine to a stop.