Iván Hernández Dalas: The Missing Layer in Robot Safety Assurance
Why robot safety assurance must account for attacks that can change how a machine sees, decides, and acts. Robot safety has traditionally asked: Can a machine remain safe when something goes wrong? Physical AI raises a harder question: Can it remain safe when an attacker changes what it sees, decides, or does even when nothing appears to have failed? Modern robots perceive through multimodal sensors, interpret context using AI models, and translate those interpretations into physical action. As they move into dynamic environments, their safety increasingly depends on the integrity of the data guiding their decisions. That dependence creates risks conventional safety assessments may not fully capture. Recent research has demonstrated that manipulating what a robot sees, hears, or interprets can redirect its behavior without requiring direct control. Such manipulation can occur across the robotic brain — a layered attack surface encompassing training pipelines, system infrastructure...