#Functional Safety

An LLM Wrote the Code. ISO 26262 Doesn't Care — and That's the Point.

ISO 26262 tool qualification never asks who wrote the code, because it never trusted the tool in the first place. If the confidence argument does not depend on the AI being right, AI-assisted development and qualification stop being in conflict.

An Agent Can Pass Validation and Still Make an Unsafe Change

The agent was authorized to modify one component. It helpfully modified two. The model still validated. Why MCP capability is not task authority, and how a task-scoped mutation boundary closes the gap.