State changes need explicit confirmation

What it is

A change of automation level—person giving the car to the system, or the system giving it back—needs a moment both sides can point to, not a tacit agreement after speed, gear, or “it looks centered.” Confirmation can be a stalk reaching a detented position, a second press, or a receipt the system cannot let the person miss after a specified action. Silent engagement and silent dropout both leave people driving, for several seconds, on an allocation that is not the real one. This entry is whether the switch itself must be confirmed. It is not whether the status lamp stays on afterward, and not how many seconds a takeover request should lead.

Why it happens

Authority is social and kinetic. The wheel lightens and the car recenters; people read those forces as “I already gave it to the car,” even while the system is still waiting on an unmet condition. The other way: the system drops out at the ODD edge and only the lateral damping creeps back, while the person still holds an empty slot as if it were driving. Implicit switches fold intent and effect into one continuous change, with no citable moment for either side to reconcile. Explicit confirmation pins that moment: before it, the old mode still counts; after it, the new one does. Without the pin, even a persistent indicator can only show an unclaimed in-between.

Studying it

On a simulator or closed road, compare stalk/button confirmation before automation engages with automatic engagement once centering, speed, and hands are satisfied. Do the same on exit: confirm-to-drop versus dropout when conditions vanish.

Independent variables: whether engagement needs an explicit act, whether exit needs confirmation, whether the system holds the old mode or a half-in state before confirm, whether the confirm act competes with the driving task. Dependent variables: accuracy of “are we automated now,” unexpected engagements or dropouts, path disturbance from the confirm act itself.

Log both asymmetries: the person thinks they confirmed and the system did not take it, and the system took it while the person thinks it has not. Lab participants told to “follow the engagement procedure” overstate how discoverable the act is; real-road false triggers and missed confirms are more informative.

Where it stops holding

An emergency minimal-risk manoeuvre cannot wait for a nod; that is a safety degradation, not an agreed mode switch. Shared control blends force continuously, with no clean on/off edge; a hard confirm fights the hands and should be worded as “weight changed,” not “mode switched.” Rapid engage/disengage in congestion grinds confirmation into blind nodding; cut the number of switches rather than enlarging the confirm. Explicit transfer between teleoperation and autonomy is the same class of problem, but in the cabin the confirm act itself must not take eyes and hands off the road for long.

Applying it

• Engage automation with a detented physical act (stalk, long press) and, in the same frame it takes effect, give a receipt that cannot be confused with the unengaged look. Do not sit in a half-lit “looks on” state while conditions are unmet.
• If a system-side exit can wait, request then exit; if it cannot, still switch encoding to manual in the frame the forces change—do not withdraw torque without changing appearance.
• Hold the previous mode until confirmation; do not change steering torque during the confirm, or people will read the force change as the switch.
• Verify on a stretch with repeated entries and exits by counting mismatches between “the mode the person reports” and “the mode in the log.” Each mismatch is an unpinned transition.

Related

• Within the group: K6.09.1 The current automation level must stay continuously visible · K6.09.3 Mode confusion is the highest-risk failure in this domain
• Adjacent: K6.08 Automated Driving Takeover Requests · X4.01 Levels of Autonomy · X4.06 Explicit Transfer of Control Authority
• Search terms: mode transition · engagement confirmation · explicit handoff · automation engagement