Mobileye SuperVision and Chauffeur Lack Stage-Gated Architecture

Mobileye Reality

Mobileye operates as the dominant commercial ADAS-and-emerging-autonomous platform across vehicle OEMs, with deployments at BMW, Volkswagen Group, Polestar, Geely, Nio, and a widening tier-1 supplier base. Following the 2022 Intel spinout, Mobileye returned to public-market discipline as an independent silicon-and-stack vendor whose product map is unusually clean for the autonomy sector: SuperVision is the consumer-grade hands-off-eyes-on tier shipped today; Chauffeur layers eyes-off operation on top with redundant sensing including imaging radar and lidar; Drive targets L4 robotaxi operation. EyeQ6H and the forthcoming EyeQ7 anchor the compute; REM crowdsources high-definition map updates from the deployed fleet; RSS supplies a published mathematical model of safe driving against which behavior is meant to be checked.

Each tier has been engineered to share components — the perception stack, the REM map layer, the RSS envelope — while differing in sensor count, redundancy class, and the operational design domain (ODD) inside which actuation is permitted. That commonality is Mobileye's commercial advantage: an OEM can adopt SuperVision at one program and graduate to Chauffeur at the next without replacing the architectural substrate. The progression is real, structural, and visible in the product literature. What it lacks is a substrate-level account of how a vehicle moves between tiers in operation, how authority is enlarged, and how the evidence that licensed the enlargement is preserved for downstream review.

Tier-Transition Gap

The gap is not in any single tier — each tier ships with documented capability bounds, ODD specifications, and RSS parameterization. The gap appears at the transitions. When a SuperVision vehicle enters a stretch of mapped highway and the system's confidence rises to the point that hands-off operation becomes appropriate, the act of enlargement is a transition between actuation modes. When a Chauffeur vehicle in eyes-off operation encounters an environmental degradation — weather, sensor obscuration, an unmapped construction zone — the act of contraction back to a supervised mode is the inverse transition. Today these transitions are implemented as integration choices, negotiated bilaterally with each OEM, audited bilaterally, and re-litigated whenever a regulator in a new jurisdiction asks for evidence.

Mobileye publishes RSS, but RSS is a model of the envelope, not a record of the transitions through it. REM publishes map confidence, but REM is a map layer, not a ledger of which actuation authority was held at which moment. The OEM holds vehicle-bus telemetry, but the OEM telemetry is not structured around the question a regulator or a litigator will eventually ask: at the moment of the event, in which actuation mode was the vehicle, on what declared admissibility was that mode entered, and what evidence supports the transition? Without an architectural answer, the answer is reconstructed forensically, after the fact, from heterogeneous logs at heterogeneous OEMs — exactly the cross-jurisdiction load that scales worst.

Governed Actuation Fit

Governed actuation as an architectural primitive is built around graduated actuation modes whose boundaries are declared in advance and whose transitions admit through composite admissibility checks. Each mode admits an enumerated class of actions; entering the mode admits through a declared admissibility predicate; leaving the mode contracts authority through the inverse predicate; and the transition itself is recorded as a lineage event so that the moment of enlargement and the evidence that licensed it are preserved. The substrate is mode-agnostic — it does not care whether the actuated process is a vehicle, a financial trade, or a clinical decision — but it is engineered to make the transitions, not the modes, the load-bearing element.

The fit to Mobileye's product map is unusually direct. SuperVision becomes a declared actuation mode whose admissibility is hands-on supervision plus mapped-ODD presence plus RSS envelope satisfaction. Chauffeur becomes a higher-authority mode whose admissibility is sensor-redundancy attestation plus environmental class plus REM map currency plus the SuperVision predicates as preconditions. Drive becomes the L4 mode whose admissibility additionally requires geofenced ODD and remote-supervision availability. The transitions become composite admissibility events, recorded once in the substrate and consumed by every OEM, every regulator, and every downstream auditor who needs to answer the same question. RSS supplies the mathematical content of the envelope; REM supplies the map-currency input; the substrate supplies the declared, recorded transition.

Mobileye Position

For Mobileye, the substrate converts a per-OEM integration burden into an architectural-compliance posture. Today, every OEM integration includes a bespoke negotiation about how SuperVision-to-Chauffeur transitions are exposed in the vehicle's diagnostic and event-recording layer; every regulator inquiry into a tier transition is answered with OEM-specific evidence; every jurisdictional approval is fought one OEM at a time. With governed actuation as an architectural element of the Mobileye stack, the transition events are emitted at the platform layer, in a declared and uniform format, and the OEM integration reduces to consuming and forwarding those events.

The commercial consequence is that OEM-agnostic compliance becomes structural rather than implementation-dependent. Mobileye's tier ladder already has the right shape; what the substrate adds is the load-bearing element at the transitions. That element is what regulators in Europe under the General Safety Regulation, in California under autonomous-vehicle reporting rules, and in emerging Asian jurisdictions under nascent autonomy frameworks will increasingly demand — not as a marketing posture, but as the operational record that the tier was held licensed at the moment the action occurred.

Mobileye Trajectory

The trajectory is incremental rather than disruptive. SuperVision deployments continue under their existing OEM contracts; Chauffeur ramps as imaging radar and EyeQ6H volume normalize; Drive continues its robotaxi trajectory in selected geographies. The substrate adds an event layer that runs alongside the existing perception, mapping, and RSS layers, and it is most valuable precisely when the tier ladder is operating as designed — converting the routine, frequent, undramatic transitions between SuperVision and Chauffeur into a uniform, declared, auditable record. The architectural commitment Mobileye already made when it organized its product line as a tier progression is the commitment governed actuation formalizes; the substrate finishes the architecture rather than replacing it.