Walk the Control Loop Before You Trust the Controller
Use an STPA-style control-loop walk to identify unsafe autonomous control actions.
near miss The courier robot's parts pass inspection, but its controller acts on stale doorway feedback after a network handoff. STPA looks for unsafe control actions caused by timing, feedback, and interaction, not only failed components. STPA control loop Controller -> action -> process -> feedback -> controller The safety question is whether the controller has enough current feedback to issue a safe action in this context. component pass Sensor works, motor works, network works. A safety constraint that controls action under uncertainty. Do not only ask what failed. Ask what unsafe action the controller can issue with incomplete or…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in