STEAM & MoSAFE: SOTIF Error-and-Failure Model & Analysis for AI-Enabled Driving Automation

Overview

STEAM refines SOTIF cause-and-effect modeling with temporal error patterns. MoSAFE uses system design and weakest-precondition reasoning to derive hazardous module-level sequences from vehicle behavior, illustrated by automated speed control.