Among other things, sensor signals are received using a vehicle comprising an autonomous driving capability. A risk associated with operating the vehicle is identified based on the sensor signals. The autonomous driving capability is modified in response to the risk. The operation of the vehicle is updated based on the modifying of the autonomous capability.