Published on Sep 30, 2025

Autonomy System Risk Evaluation

Evaluating localization, SLAM, and perception systems under real-world constraints. This article outlines structural failure modes, observability limits, and certification implications in modern autonomy stacks.

Architecture

Observability

Certification

Felix Schaller

Description

The check walks through seven probes along the chain of an ML-based perception stack: measurement basis without ground truth, triggering conditions, monitor quality, cross-modal consistency, persistence as a validation signal, traceability, and the organizational seam between the perception and safety teams. Each answer carries an evidence weight; the chain turns red wherever the proof is missing. The result names your largest open point and the next defensible step. The check does not judge the safety or conformity of a system and does not replace a safety case — it surfaces open evidence points. Tool, library, and compiler qualification per ISO 26262-8 is deliberately out of scope and flagged as a separate evidence strand. Inputs are abstract multiple-choice only; no free-text field invites confidential function details.

click here for fullscreen: FULLSCHREEN


Published on Sep 30, 2025

Autonomy System Risk Evaluation

Evaluating localization, SLAM, and perception systems under real-world constraints. This article outlines structural failure modes, observability limits, and certification implications in modern autonomy stacks.

Architecture

Observability

Certification

Felix Schaller

Description

The check walks through seven probes along the chain of an ML-based perception stack: measurement basis without ground truth, triggering conditions, monitor quality, cross-modal consistency, persistence as a validation signal, traceability, and the organizational seam between the perception and safety teams. Each answer carries an evidence weight; the chain turns red wherever the proof is missing. The result names your largest open point and the next defensible step. The check does not judge the safety or conformity of a system and does not replace a safety case — it surfaces open evidence points. Tool, library, and compiler qualification per ISO 26262-8 is deliberately out of scope and flagged as a separate evidence strand. Inputs are abstract multiple-choice only; no free-text field invites confidential function details.

click here for fullscreen: FULLSCHREEN


Create a free website with Framer, the website builder loved by startups, designers and agencies.