V1.0 — L4 Safety Island Software Design (version 20261023)

L4 Safety Island for Autoware — Software Design, Part 1 (node allocation)
Release V1.0 = design version 20261023

The Reference Design WG discussion of the design has closed, and version 20261023 is released as V1.0. The release changes no content: the design is version 20261023 exactly, now stamped "Release V1.0".

What the design covers

• Six declared behaviours:
  • B1: ODD switch negotiation
  • B2: lane hold after HPC loss
  • B3: pull-over
  • B4: emergency stop when blind
  • B5: tele-operation
  • B6: manual joystick
• Ranked island sensors (D8): the camera is mandatory; radar, ultrasonic and IMU/GNSS rank next, and the 2D lidar is optional.
• Node allocation: 18 migrated Autoware nodes and the new island and HPC nodes, plus the interface contract, execution partitions and the nano-ros middleware realisation.
• Two design branches (D10, §9.5):
  • Least-Cost on NXP S32Z2-class MCUs
  • Maximum-Safety on Renesas R-Car X5H

Files

File	What it is
docs/L4SafetyIsland_SoftwareDesign_GitHub.md	The design document, the source of truth
L4SafetyIsland-DesignForReading.pdf	Reading edition
L4SafetyIsland-DesignForReview.pdf	Review edition (numbered lines, comment log)
L4SafetyIsland-SoftwareDesign.pdf	Slide deck
docs/layers, docs/nodediagram, docs/messageflow	Diagrams

The discussion document served the WG sessions and is not part of the release.

Please file comments and change proposals as issues against this release.