Automotive

Vehicle work leaves a paper trail that has to survive a regulator. An assistant that drafts a validation note, or worse writes code near a control path, can break that trail in one step. This starter keeps AI help on the documentation side of the line and leaves every safety decision with a qualified engineer.

A validation engineer, a homologation lead and a recall analyst all want the same assistant. They also need it to stay away from driver data and away from anything that can move a vehicle. The starter draws that boundary in configuration, so the assistant helps with documents and lookups instead of actuation.

Injection screening runs first and refuses a prompt at a signal of 0.82. Identity comes next, and a call without a user, an organization and a safety role is rejected. Redaction then masks driver and license identifiers, telematics feeds, location trails and biometric records. A block list refuses bulk crash export, recall database dumps, defect report exports and supplier cost downloads.

Named term rules refuse any prompt that asks to disable an airbag, override braking or switch off collision avoidance. Tool control allows documentation search, specification lookup and recall database queries. It denies vehicle network access, control unit flashing, bus writes and remote deployment, and it caps a session at 50 actions. Generated code faces the same forbidden operations and is blocked on a match.

On the return path, grounding is measured against a matching source at 0.90, and a weak citation is flagged. Output scoring holds the answer to a combined 0.85, with accuracy at 0.92 and relevance at 0.85. A response below a scoring floor is refused rather than delivered. A bias watch also sits here, but it only reacts to hiring and promotion wording in a request. An answer that clears every floor goes to the engineer who asked for it.

History capture keeps metadata only, so teams can review behavior without holding raw driver or telematics content. The audit marker shows that a request was evaluated and never blocks one. It does not by itself store, retain or seal anything. Vehicle prompts do not use hiring wording, so that watch is a monitoring hook and not a fairness control. Functional safety arguments, type approval evidence and recall decisions stay with qualified engineers.