Abstract
A system and method for stopping and safely restarting an AI system through a reset mechanism that is independent of the system's runtime governor. A reset controller on a separate safety plane, with its own power and its own communication channel, acts on its own set of triggers: readings from safety-grade sensors, an operator's emergency stop, an escalation request from the governor, and the loss, fault or tampering of the governor itself. Two heartbeats are kept separate: a safety heartbeat, local, out-of-band and with a hard deadline, whose loss engages fail-safe behavior; and an audit heartbeat to a ledger over the network, whose loss raises the governor level but never applies the brakes. A network outage therefore cannot stop a fleet, and an audit backlog cannot hide a safety fault. After a reset, the system restarts only from a verified restore point held in a custody domain independent of the system, and only on release by an authorized person.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Wang, Edward D. H., "SI Reset™: Out-of-Band Reset of AI Systems with Triggers Independent of the Runtime Governor and Separate Safety and Audit Heartbeats", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/12134