Translate an autonomy hazard into unsafe control actions and safety constraints.
The loading-dock gate opens automatically for recognized truck IDs, but the hazard statement is too vague to test. STPA pattern: loss -> hazard -> control action -> unsafe control action -> safety constraint. The common trap is adding more generic testing before naming the unsafe control action the test should exercise. Loss and hazard Loss: pedestrian injury or unauthorized vehicle entry. Hazard: gate movement exposes a person or admits an unapproved vehicle. Losses and hazards explain why the control action matters. Control action Gate controller issues open gate and keep gate open commands. Name the command the autonomous controller can…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in