Mobileye Reality

Mobileye operates as the dominant commercial ADAS-and-emerging-autonomous platform across vehicle OEMs, with deployments at BMW, Volkswagen Group, Polestar, Geely, Nio, and a widening tier-1 supplier base. Following its 2022 return to the public markets as a separately traded Intel subsidiary, Mobileye operates as a silicon-and-stack vendor whose product map is unusually clean for the autonomy sector: SuperVision is the consumer-grade hands-off-eyes-on tier shipped today; Chauffeur layers eyes-off operation on top with redundant sensing including imaging radar and lidar; Drive targets L4 robotaxi operation. EyeQ6H and the forthcoming EyeQ7 anchor the compute; REM crowdsources high-definition map updates from the deployed fleet; RSS supplies a published mathematical model of safe driving against which behavior is meant to be checked.

Each tier has been engineered to share components, the perception stack, the REM map layer, the RSS envelope, while differing in sensor count, redundancy class, and the operational design domain (ODD) inside which actuation is permitted. That commonality is Mobileye's commercial advantage: an OEM can adopt SuperVision at one program and graduate to Chauffeur at the next without replacing the architectural substrate. The progression is real, structural, and visible in the product literature. What it lacks is a substrate-level account of how a vehicle moves between tiers in operation, how authority is enlarged, and how the evidence that licensed the enlargement is preserved for downstream review.

Tier-Transition Gap

The gap is not in any single tier: each tier ships with documented capability bounds, ODD specifications, and RSS parameterization. The gap appears at the transitions. When a SuperVision vehicle enters a stretch of mapped highway and the system's confidence rises to the point that hands-off operation becomes appropriate, the act of enlargement is a transition between actuation modes. When a Chauffeur vehicle in eyes-off operation encounters an environmental degradation, weather, sensor obscuration, an unmapped construction zone, the act of contraction back to a supervised mode is the inverse transition. Today these transitions are implemented as integration choices, negotiated bilaterally with each OEM, audited bilaterally, and re-litigated whenever a regulator in a new jurisdiction asks for evidence.

Mobileye publishes RSS, but RSS is a model of the envelope, not a record of the transitions through it. REM publishes map confidence, but REM is a map layer, not a ledger of which actuation authority was held at which moment. The OEM holds vehicle-bus telemetry, but the OEM telemetry is not structured around the question a regulator or a litigator will eventually ask: at the moment of the event, in which actuation mode was the vehicle, on what declared admissibility was that mode entered, and what evidence supports the transition? Without an architectural answer, the answer is reconstructed forensically, after the fact, from heterogeneous logs at heterogeneous OEMs, exactly the cross-jurisdiction load that scales worst.

Governed Actuation Fit

Governed actuation as an architectural primitive is built around graduated actuation modes whose boundaries are declared in advance and whose transitions admit through composite admissibility checks. Each mode admits an enumerated class of actions; entering the mode admits through a declared admissibility predicate; leaving the mode contracts authority through the inverse predicate; and the transition itself is recorded as a lineage event so that the moment of enlargement and the evidence that licensed it are preserved. The substrate is mode-agnostic, it does not care whether the actuated process is a vehicle, a financial trade, or a clinical decision, but it is engineered to make the transitions, not the modes, the load-bearing element.

The fit to Mobileye's product map is unusually direct. SuperVision becomes a declared actuation mode whose admissibility is hands-on supervision plus mapped-ODD presence plus RSS envelope satisfaction. Chauffeur becomes a higher-authority mode whose admissibility is sensor-redundancy attestation plus environmental class plus REM map currency plus the SuperVision predicates as preconditions. Drive becomes the L4 mode whose admissibility additionally requires geofenced ODD and remote-supervision availability. The transitions become composite admissibility events, recorded once in the substrate and consumed by every OEM, every regulator, and every downstream auditor who needs to answer the same question. RSS supplies the mathematical content of the envelope; REM supplies the map-currency input; the substrate supplies the declared, recorded transition.

Building the Governed Actuation Layer

A skilled implementer can construct the governed actuation layer disclosed in the filing without proprietary Mobileye internals, because it sits above the perception and planning stack rather than inside it. The core is a composite admissibility evaluator: a function that, before any enlargement of actuation authority, ingests credentialed observations (perception outputs carrying an attestation of their source and integrity), an authority taxonomy (the enumerated modes and the action classes each admits), a freshness measure (how recent the licensing evidence is, for example REM map currency or a sensor-health heartbeat), and a policy input, and returns one of a graduated set of dispositions: admit, gate, defer, solicit, reject, or escalate. Admit enters the higher mode; gate enters it under an added constraint; defer holds at the current mode pending better evidence; solicit requests a missing input such as driver reconfirmation; reject blocks the enlargement; escalate routes the decision to a higher authority such as a remote supervisor or a safety driver.

The disclosure is deliberately broad on realization. The evaluator can be implemented as a rule engine, a scored predicate stack, a learned classifier bounded by hard admissibility gates, or a hybrid. The authority taxonomy can be two modes or many; it need not mirror the SuperVision, Chauffeur, and Drive naming and can carry finer-grained sub-modes such as per-ODD or per-maneuver authority. Reversibility-aware commitment-point evaluation lets the layer treat an irreversible or hard-to-reverse action (a lane change into occupied space, a highway merge) differently from a reversible one (holding lane, decelerating), demanding stricter admissibility or an escalation at the commitment point. A pre-emption budget bounds how often and how abruptly authority may be enlarged within a window, so that a noisy confidence signal cannot ratchet the vehicle into a higher mode. Lineage-recorded actuation provenance writes each disposition, its inputs, and the evidence that licensed it to an append-only record keyed to the moment of actuation. Graceful degradation defines the contraction path when an input goes stale or an attestation fails, so authority narrows to the last admissible mode rather than failing open. Each of these primitives is an independent embodiment and can be adopted incrementally; a first integration might implement only admit, gate, and reject over two modes with lineage recording, and add solicit, escalate, pre-emption budgets, and reversibility-aware commitment points as the deployment matures.

Mobileye Position

For Mobileye, the substrate converts a per-OEM integration burden into an architectural-compliance posture. Today, every OEM integration includes a bespoke negotiation about how SuperVision-to-Chauffeur transitions are exposed in the vehicle's diagnostic and event-recording layer; every regulator inquiry into a tier transition is answered with OEM-specific evidence; every jurisdictional approval is fought one OEM at a time. With governed actuation as an architectural element of the Mobileye stack, the transition events are emitted at the platform layer, in a declared and uniform format, and the OEM integration reduces to consuming and forwarding those events.

The commercial consequence is that OEM-agnostic compliance becomes structural rather than implementation-dependent. Mobileye's tier ladder already has the right shape; what the substrate adds is the load-bearing element at the transitions. That element is what regulators in Europe under the General Safety Regulation, in California under autonomous-vehicle reporting rules, and in emerging Asian jurisdictions under nascent autonomy frameworks will increasingly demand, not as a marketing posture, but as the operational record that the tier was held licensed at the moment the action occurred.

Mobileye Trajectory

The trajectory is incremental rather than disruptive. SuperVision deployments continue under their existing OEM contracts; Chauffeur ramps as imaging radar and EyeQ6H volume normalize; Drive continues its robotaxi trajectory in selected geographies. The substrate adds an event layer that runs alongside the existing perception, mapping, and RSS layers, and it is most valuable precisely when the tier ladder is operating as designed, converting the routine, frequent, undramatic transitions between SuperVision and Chauffeur into a uniform, declared, auditable record. The architectural commitment Mobileye already made when it organized its product line as a tier progression is the commitment governed actuation formalizes; the substrate finishes the architecture rather than replacing it.

Disclosure Scope

The governed actuation mechanisms described here, the composite admissibility evaluator over credentialed observations, authority taxonomy, freshness, and policy; the graduated admit, gate, defer, solicit, reject, and escalate dispositions; reversibility-aware commitment-point evaluation; pre-emption budgets; lineage-recorded actuation provenance; and graceful degradation, are disclosed in U.S. Provisional Application No. 64/049,409. This article, published April 25, 2026, is a public disclosure of that subject matter tied to that filing.

References to Mobileye, its SuperVision, Chauffeur, and Drive products, EyeQ silicon, Road Experience Management, Responsibility-Sensitive Safety, SAE levels, OEM relationships, and regulatory frameworks are provided as external market and technical context to situate the invention. They describe publicly reported facts about a third party's products, are not claims of the filing, and do not assert any affiliation with, endorsement by, or capability of Mobileye or its partners beyond what is publicly known. Nothing here should be read as attributing to Mobileye any deficiency; the comparison is scoped to the specific architectural axis, governed, revocable, auditable actuation gated at authority transitions, that the invention addresses.