Published on Sep 30, 2025
Autonomy System Risk Evaluation
Evaluating localization, SLAM, and perception systems under real-world constraints. This article outlines structural failure modes, observability limits, and certification implications in modern autonomy stacks.
Architecture
Observability
Certification

Felix Schaller

Description
The check walks through seven probes along the chain of an ML-based perception stack: measurement basis without ground truth, triggering conditions, monitor quality, cross-modal consistency, persistence as a validation signal, traceability, and the organizational seam between the perception and safety teams. Each answer carries an evidence weight; the chain turns red wherever the proof is missing. The result names your largest open point and the next defensible step. The check does not judge the safety or conformity of a system and does not replace a safety case — it surfaces open evidence points. Tool, library, and compiler qualification per ISO 26262-8 is deliberately out of scope and flagged as a separate evidence strand. Inputs are abstract multiple-choice only; no free-text field invites confidential function details.
Published on Sep 30, 2025
Autonomy System Risk Evaluation
Evaluating localization, SLAM, and perception systems under real-world constraints. This article outlines structural failure modes, observability limits, and certification implications in modern autonomy stacks.
Architecture
Observability
Certification

Felix Schaller


Description
The check walks through seven probes along the chain of an ML-based perception stack: measurement basis without ground truth, triggering conditions, monitor quality, cross-modal consistency, persistence as a validation signal, traceability, and the organizational seam between the perception and safety teams. Each answer carries an evidence weight; the chain turns red wherever the proof is missing. The result names your largest open point and the next defensible step. The check does not judge the safety or conformity of a system and does not replace a safety case — it surfaces open evidence points. Tool, library, and compiler qualification per ISO 26262-8 is deliberately out of scope and flagged as a separate evidence strand. Inputs are abstract multiple-choice only; no free-text field invites confidential function details.