V1.0 — L4 Safety Island Software Design (version 20261023)

L4 Safety Island for Autoware — Software Design, Part 1 (node allocation)
Release V1.0 = design version 20261023

The Reference Design WG discussion of the design has closed, and version 20261023 is released as V1.0. The release changes no content: the design is version 20261023 exactly, now stamped "Release V1.0".

What the design covers

• Six declared behaviours:
  • B1: ODD switch negotiation
  • B2: lane hold after HPC loss
  • B3: pull-over
  • B4: emergency stop when blind
  • B5: tele-operation
  • B6: manual joystick
• Ranked island sensors (D8): the camera is mandatory; radar, ultrasonic and IMU/GNSS rank next, and the 2D lidar is optional.
• Node allocation: 18 migrated Autoware nodes and the new island and HPC nodes, plus the interface contract, execution partitions and the nano-ros middleware realisation.
• Two design branches (D10, §9.5):
  • Least-Cost on NXP S32Z2-class MCUs
  • Maximum-Safety on Renesas R-Car X5H

Files

File	What it is
docs/L4SafetyIsland_SoftwareDesign_GitHub.md	The design document, the source of truth
L4SafetyIsland-DesignForReading.pdf	Reading edition
L4SafetyIsland-DesignForReview.pdf	Review edition (numbered lines, comment log)
L4SafetyIsland-SoftwareDesign.pdf	Slide deck
docs/layers, docs/nodediagram, docs/messageflow	Diagrams

The discussion document served the WG sessions and is not part of the release.

Please file comments and change proposals as issues against this release.

Version 20260912

This release collects all the discussions started in August 2026.