automotive-e2e-safety-analysis

Analyzes safety of end-to-end autonomous driving systems against ISO 26262 and SOTIF requirements.

7|2|Updated May 19, 2026
One-click install
npx skills add https://github.com/pangzhenying2025/hermes-automotive-skills --skill automotive-e2e-safety-analysis-pangzhenying2025
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: automotive-e2e-safety-analysis
Source: https://github.com/pangzhenying2025/hermes-automotive-skills/tree/main/skills/automotive-e2e-safety-analysis
Command: npx skills add https://github.com/pangzhenying2025/hermes-automotive-skills --skill automotive-e2e-safety-analysis-pangzhenying2025

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? End-to-end autonomous driving systems that use neural networks for the full perception-to-control pipeline cannot be verified with traditional modular safety methods, making ISO 26262 compliance, SOTIF analysis, and failure mode attribution extremely difficult. ## Core Features & Use Cases - Safety Architecture Patterns: Provides safety cage and dual-path (1oo2D) architecture designs that wrap E2E neural networks with ASIL-rated rule-based monitors and fallback behaviors. - SOTIF Analysis for DNNs: Identifies DNN-specific triggering conditions such as out-of-distribution inputs, adversarial perturbations, distribution shift, and model uncertainty, with corresponding validation approaches. - ISO 26262 Compliance Strategy: Defines ASIL decomposition at the system level, safety mechanism specifications (collision monitor, kinematics check, ODD monitor, model health), and safe state definitions. - Use Case: A safety engineer designing an E2E ADS can use this Skill to produce a safety architecture review, an ASIL decomposition strategy, and a scenario-based V&V plan exceeding 10M km of equivalent simulation. ## Quick Start Ask the agent to design a safety cage architecture with ASIL decomposition and SOTIF triggering condition analysis for an end-to-end autonomous driving system.

Frequently Asked Questions about automotive-e2e-safety-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform safety analysis on end-to-end autonomous driving systems?▼

End-to-end safety analysis combines interpretability techniques, DNN-specific SOTIF triggering condition identification, and system-level ASIL decomposition. The E2E model is treated as QM or low ASIL while rule-based safety monitors carry the ASIL rating.

What is a safety cage architecture for neural network driving policies?▼

A safety cage wraps the E2E neural network with an ASIL-rated safety monitor that checks proposed trajectories for collision risk, kinematic feasibility, ODD compliance, and traffic rules. Unsafe proposals trigger a rule-based fallback such as lane keeping with braking.

Can end-to-end neural networks comply with ISO 26262?▼

E2E models cannot be developed per the ASIL process directly, but the system achieves compliance through ASIL decomposition at the architecture level. The E2E path runs as QM while deterministic safety mechanisms like collision monitors are rated ASIL C or D.

What SOTIF triggering conditions are unique to deep learning driving systems?▼

DNN-specific triggers include out-of-distribution inputs, adversarial perturbations, distribution shift from sensor aging or seasonal changes, and epistemic uncertainty from training data gaps. Mitigations include OOD detection, uncertainty quantification, and adversarial robustness testing.

How do you validate an end-to-end autonomous driving model?▼

Validation combines scenario-based simulation exceeding 10M km equivalent, targeted adversarial testing, calibrated OOD detection monitoring, version-to-version regression comparison, and shadow mode deployment in real-world fleets.