1. Vendor and Product Reality

Waymo LLC, the autonomous-driving subsidiary of Alphabet that traces back to the Google Self-Driving Car Project initiated in 2009, operates the most mature commercial autonomous-vehicle program in the world. The Waymo Driver platform, currently deployed in fifth-generation hardware on Jaguar I-PACE and sixth-generation hardware on Zeekr and Hyundai vehicles, integrates Waymo-designed lidar, cameras, and imaging radar with a perception, prediction, planning, and behavior stack developed over more than a decade and validated against tens of billions of simulated miles and tens of millions of public-road autonomous miles. Waymo One delivers driverless ride-hail service in Phoenix, San Francisco, Los Angeles, and Austin, with continuing expansion into additional cities and partnerships including Uber for ride-hail distribution and Moove for fleet operations.

The engineering achievement is substantial and well-documented. The system's safety case rests on layered redundancy in compute and sensing, conservative behavior policies tuned through extensive on-road and simulation iteration, a structured operational design domain that bounds where and when the Driver is permitted to operate, and published safety-performance data benchmarked against human-driver baselines that consistently shows lower rates of police-reported and injury-causing collisions per mile. The product is the reference implementation of what the SAE J3016 taxonomy calls Level 4 automation, and Waymo's regulatory posture under California PUC, California DMV, and federal NHTSA frameworks is the industry's working template.

Within the operational design domain, the planner handles ethical-edge cases through a hierarchy of rules and cost terms encoded in its trajectory optimization: protect occupants, protect vulnerable road users, minimize harm, obey traffic law, optimize ride comfort and trip time. When these objectives conflict in a specific scenario, the planner evaluates the immediate situation, costs each candidate trajectory against the rule hierarchy, and selects the trajectory whose cost vector best satisfies the configured policy. The evaluation is per-scenario, sound within its scope, and produces the safety-record performance Waymo publishes.

2. The Architectural Gap

The structural property the Waymo Driver does not exhibit is persistent normative state across decisions. Each ethical-edge case is resolved in the moment against the configured rule hierarchy, and the resolution is logged as an event for offline review and simulation regression. The vehicle does not, however, maintain a first-class representation of its own normative trajectory: the cumulative pattern of choices it has made, the position those choices place it in within the space of rule-compliant policies, and the deviation between that position and a declared baseline. The audit log is a log; it is not a normative state.

The gap matters because rule hierarchies define what is permissible, not what has been chosen. A vehicle that consistently selects the minimum-safety-margin option in ambiguous scenarios is operating within its rules but is occupying a different normative position than one that consistently selects the maximum-safety-margin option. Both are rule-compliant. They represent different ethical postures. Without persistent integrity state, neither vehicle, and neither the fleet, can know which posture it has been occupying or whether it has been drifting between postures over its operational lifetime.

The deviation function disclosed in the filing, D = (N(t) - T(t)) / (E(t) x S(t)), makes this measurable. As defined in the specification, N(t) is the agent's current need vector, a quantifiable semantic urgency encoding the agent's unmet requirements; T(t) is the agent's current ethical threshold, the minimum condition that must be exceeded before deviation becomes structurally available; E(t) is the agent's empathy weighting, the degree to which it registers projected harm to other entities; and S(t) is the agent's self-esteem score, its self-assessed alignment with its own declared values. The numerator (N - T) is deviation pressure and the denominator (E x S) is deviation resistance, so D is a continuous deviation-likelihood scalar computed at each decision point rather than a periodic offline audit. Without a function of this shape as a first-class architectural element, an autonomous system cannot distinguish a single unusual decision from a systematic shift in its behavioral posture. The gap is not patchable from inside a per-scenario planner because the planner's input is the present scene, not the agent's normative history. Adding a history feature to the cost function produces a moving-average regularizer, not a persistent integrity state. The integrity and coherence shape is structurally different, and it is the direction that converging AV-governance expectations, including the EU AI Act logging and human-oversight provisions, are moving toward.

3. The Integrity and Coherence Layer

The Integrity and Coherence inventive step, disclosed in United States Patent Application 19/647,395, specifies integrity as a first-class persistent cognitive state, structured as an integrity field with three domains. As set out in the specification, personal integrity encodes the agent's self-referential alignment with its own declared values under conditions where deviation was structurally available but not taken. Interpersonal integrity encodes the agent's relational consistency against the commitments it has made or inherited, evaluated over delegation, communication, and cooperative events. Global integrity encodes consistency against broader normative referents beyond any single relationship. Domain scores feed through a weighting function into a composite integrity field.

Over this field, the layer evaluates the deviation function D = (N - T) / (E x S) continuously as part of the cognitive cycle. When D crosses a policy-defined activation threshold, the agent enters a deviation-activated state and the coherence trifecta engages as a three-phase corrective loop: empathy registration reweights against the projected harm to affected parties, integrity recording captures the event in lineage, and a self-esteem-driven corrective process checks and restores alignment with the agent's declared role. A coping intercept can engage at an early, mid, or late point on this loop, corresponding to the empathy, integrity, and restoration phases, each returning the agent toward a stable state. In broader terms the specification describes graded collapse and restoration: rather than a binary pass or fail, the agent degrades and recovers through defined phases with a recorded, credentialed trajectory.

The layer is described in the specification as technology-neutral with respect to rule encoding, deviation-metric calibration, and logging substrate, and as composing hierarchically across scope levels (for example vehicle, fleet region, operational design domain, and a regulator-facing program), so a deployment scales by adding scope levels of the same integrity object rather than by re-architecting. The inventive step is integrity as a persistently computed cognitive state with continuous deviation observation and a structural, graded coping response, applicable as a substrate primitive across autonomous-agent platforms.

4. Composition Pathway

As an illustrative composition, an autonomous-vehicle stack of Waymo's kind runs as a domain-specialized platform over the integrity and coherence layer as substrate. What stays with the vehicle vendor: the perception stack, the prediction models, the trajectory planner, the rule hierarchy, the operational-design-domain framework, the simulation infrastructure, the safety-case methodology, and the entire customer-facing ride-hail surface. Waymo's investment in driving-specific knowledge, in California PUC and DMV regulatory posture, and in the safety-engineering culture that has produced the published safety record remains its differentiated layer.

What moves to the integrity and coherence layer as substrate: the vehicle's per-decision integrity observations, the fleet's aggregate integrity trajectory, the deviation observations across the operational lifetime, and the coping-intercept events. The integration points are well-defined. The planner emits per-decision observations to an integrity gate alongside its trajectory output; the gate maintains the persistent integrity field, computes deviation continuously, and emits coherence-trifecta signals back to the planner when the threshold is crossed. Coping-intercept actions are graduated outcomes (continue, recalibrate cost weights toward baseline, escalate to fleet supervision, escalate to operator review), recorded as first-class events with credentials traceable back to NHTSA-facing and EU-facing regulatory frames.

The fleet-level composition is where the substrate's value concentrates. Per-vehicle integrity states aggregate into a fleet integrity state, which surfaces inter-vehicle drift (San Francisco fleet trending more conservative on merges than Phoenix fleet) before it becomes a public-perception or regulatory event. Cross-jurisdiction composition lets Waymo present a single integrity object spanning California, Arizona, and any future market, satisfying both California PUC longitudinal-evidence expectations and the EU AI Act Article 12 logging and Article 14 oversight requirements that will apply when Waymo enters European markets.

5. Commercial and Licensing Implication

A fitting arrangement is an embedded substrate license: a vehicle vendor embeds the integrity and coherence layer into its autonomous-driving platform and presents the resulting integrity object as part of its safety-case submission to NHTSA, California DMV, California PUC, and analogous regulators in subsequent markets. Pricing is per-vehicle-operational-hour or per-credentialed-deviation-observation rather than per-vehicle, which aligns with how regulated AV operators actually consume governance evidence and scales naturally as Waymo expands its fleet and operational design domain.

What Waymo gains: a structural answer to the "longitudinal normative consistency" question that current safety-case methodology only addresses through periodic offline review, a defensible architectural posture against converging EU AI Act and NHTSA Standing General Order expectations that are pushing toward continuous, evidentiary, and explainable AV behavior records, and a fleet-management surface that detects normative drift before it shows up as a public incident or a regulatory inquiry. What the riding public and the regulator gain: a vehicle that not only follows rules but monitors the consistency of its own rule-following, detects when its behavioral pattern is drifting, and self-corrects before the drift becomes operationally significant, with a credentialed evidence record at every step. Honest framing: the integrity and coherence layer does not replace a per-scenario planner such as Waymo's; it supplies the longitudinal integrity substrate that a per-scenario planner, by construction, does not maintain.

6. Embodiments and Variations

The approach is enabling and admits broad variation, so that a skilled implementer could build it. The integrity field may be realized over the three disclosed domains (personal, interpersonal, global) or a subset, with domain weights fixed or policy-adjustable. The deviation function D = (N - T) / (E x S) is one disclosed formulation; the need vector, ethical threshold, empathy weighting, and self-esteem score may each be computed from different underlying signals, and the activation threshold may be static, context-modulated, or affect-modulated. The coherence trifecta may intercept at the early (empathy), mid (integrity), or late (restoration) phase, and coping outcomes may range from continuing execution, to recalibrating cost weights toward baseline, to escalating for supervision or operator review. The layer is substrate-neutral as to logging store, rule encoding, and deployment topology, and composes across scope levels from a single agent to a fleet, region, or program. Beyond autonomous vehicles, the same integrity and coherence layer applies to any autonomous or semi-autonomous agent that must maintain behavioral consistency across decisions, including robotics, industrial control, financial-decision agents, and general software agents. This dated public description is tied to the filing identified below.

7. Disclosure Scope

The mechanisms attributed in this article to the invention (the multi-domain integrity field; the deviation function D = (N - T) / (E x S) with its need-vector, ethical-threshold, empathy, and self-esteem terms; continuous deviation evaluation; the coherence trifecta; graded coping intercepts; and graded collapse and restoration) are disclosed in United States Patent Application 19/647,395. All statements about Waymo, the Waymo Driver, Waymo One, the SAE J3016 taxonomy, NHTSA, the California PUC and DMV, and the EU AI Act are external context describing a real company and the surrounding regulatory landscape as publicly reported; they are not claims of the filing, and the comparison is scoped to a single architectural axis. Waymo's engineering and safety record are genuine and are described here without disparagement. Any illustrative composition, licensing, or pricing arrangement is hypothetical and does not represent an existing relationship with Waymo or Alphabet.