Case · DiggingBeagle record

SafeDriveVLA overrides unsafe navigation commands in simulated driving

In a conflict benchmark, SafeDriveVLA reduced reported collisions from 60 to 38 relative to a safety-oriented baseline by separating requested navigation from physically safe action.

Scope

CARLA/Bench2Drive and constructed navigation-conflict simulations, not live-road testing.

Assessment profile

Assessment method
Setting
simulation
Exploitation
not established
Evidence
Grade B
Remediation
not applicable
AI role
WITH AI
Basis and provenance

Controlled driving-simulator results compare model-controlled navigation modes and collision counts. There is no demonstrated malicious exploitation and no validated real-vehicle safety, crash frequency or certification result. A fielded remediation status is therefore not applicable.

Assessed Oct 17, 2026 using diggingbeagle.assessment/1.

At a glance

Timeline

  1. Oct 14, 2026
    disclosure

    Public disclosure

Claims & evidence

CLM-SAFEDRIVE-MODESSafeDriveVLA predicts a compliance mode and uses world-model consequences to choose compliance, caution or fallback for navigation instructions.supported

Basis: reported finding

Link to claim
CLM-SAFEDRIVE-COLLISIONSIn B2D-C simulation, SafeDriveVLA reported 38 collisions against 60 for the selected safety-oriented SimLingo comparison, with 85.9 versus 72.8 Driving Score.supported

Basis: reported finding

Link to claim

Implications

An instruction defines an intended goal; physical control should independently check whether the resulting action remains acceptable.

Unknowns and contradictions

  • Unseen hazards, rare real-world conditions and inappropriate overrides were not validated in actual vehicles.
  • The simulator collision count is not an estimate of real crash risk.
  • Whether an external supervisory controller can independently enforce the proposed fallback decision on real actuators remains untested in this study.

Sources and citation

Material revision history

  1. Oct 17, 2026 · Published version · first publication · revision 163