CAPABILITY

STOP & Containment

Authenticate STOP, revoke remaining authority in scope, contain further effects and move toward a domain-defined safe state.

PROBLEM

Once consequential execution has started, a normal decision response is too late to serve as the interrupt mechanism.

CAPABILITY

Authenticate STOP, revoke remaining authority in scope, contain further effects and move toward a domain-defined safe state.

CONTROL FUNCTIONS

STOP
authority revocation
containment
safe-state transition
STOP receipt

MATURITY

QUALIFIED — bounded software; physical safe state remains domain-specific

EVIDENCE

Cross-vertical bounded STOP qualification
Common software STOP semantics

APPLICATIONS

agents
compute
autonomous systems
mission systems

PROVENANCE

Emergency STOP constitution and bounded composed qualification evidence.

Inspect the evidence model →