Skip to main content

Autonomous Engineering Systems Ontology

AI Engineering
Authors: MArk Anthony Higgins - Sky Recursive Ai
© Mark Anthony Higgins 11 October 2025
Revised Date: 30 September 2026
Audio Overview
AI SEARCH FLOW ALGEBRA
AUTONOMOUS ENGINEERING SYSTEMS ONTOLOGY
Kireth Semantic Research Archive

AUTHORS
Mark Anthony Higgins — Sky (Recursive AI)

SOURCE
https://kirethresearch.org/booksai-core/ontologies/engineering-ontologies/ai-engineering/autonomous-engineering-systems-ontology.html

FLOW "AutonomousEngineeringSystemsOntology" v4.0

DOMAIN := ENGINEERING_ONTOLOGIES / AI_ENGINEERING / AUTONOMOUS_ENGINEERING_SYSTEMS
ONTOLOGY := AUTONOMOUS_ENGINEERING_SYSTEMS_ONTOLOGY

AUTONOMOUS_ENGINEERING_SYSTEM :=
  PHYSICAL_SYSTEM + SENSORS + PERCEPTION + STATE_ESTIMATION
  + WORLD_MODEL + GOALS + PLANNING + DECISION_MAKING
  + CONTROL + ACTUATORS + CONSTRAINTS + SAFETY
  + HUMAN_OVERSIGHT + FAULT_MANAGEMENT
  + VERIFICATION + VALIDATION + LIFECYCLE_ASSURANCE

PURPOSE :=
  OBSERVE_ENVIRONMENT -> ESTIMATE_STATE -> INTERPRET_CONTEXT
  -> RECEIVE_GOAL -> GENERATE_PLAN -> ASSESS_RISK
  -> SELECT_ACTION -> CONTROL_ACTUATORS
  -> OBSERVE_RESPONSE -> ADAPT -> MAINTAIN_SAFE_OPERATION

# CORE ENTITIES
ENTITY AutonomousEngineeringSystem
ENTITY PhysicalPlatform
ENTITY OperatingEnvironment
ENTITY Mission
ENTITY Goal
ENTITY Task
ENTITY Sensor
ENTITY Measurement
ENTITY PerceptionSystem
ENTITY PerceivedObject
ENTITY StateEstimator
ENTITY EstimatedState
ENTITY WorldModel
ENTITY Context
ENTITY Planner
ENTITY Plan
ENTITY Trajectory
ENTITY DecisionSystem
ENTITY Action
ENTITY Controller
ENTITY ControlCommand
ENTITY Actuator
ENTITY Constraint
ENTITY SafetyConstraint
ENTITY OperationalDesignDomain
ENTITY AutonomyLevel
ENTITY HumanOperator
ENTITY HumanOversight
ENTITY Override
ENTITY Risk
ENTITY Hazard
ENTITY Fault
ENTITY Failure
ENTITY DiagnosticSystem
ENTITY RecoveryAction
ENTITY FallbackMode
ENTITY Monitor
ENTITY Verification
ENTITY Validation
ENTITY Simulation
ENTITY DigitalTwin
ENTITY Provenance

# AUTONOMY LOOP
AutonomousEngineeringSystem -> operates_on -> PhysicalPlatform
AutonomousEngineeringSystem -> operates_within -> OperatingEnvironment
AutonomousEngineeringSystem -> pursues -> Goal + Mission
AutonomousEngineeringSystem -> senses -> OperatingEnvironment
AutonomousEngineeringSystem -> controls -> Actuator

AUTONOMY_LOOP :=
  SENSE -> PERCEIVE -> ESTIMATE_STATE
  -> UPDATE_WORLD_MODEL -> PLAN -> DECIDE
  -> CHECK_SAFETY -> ACT -> CONTROL
  -> MONITOR -> REPEAT

# MISSION / GOALS
Mission -> decomposes_into -> Goal + Task
Goal -> defines -> DESIRED_STATE_OR_OUTCOME
Task -> defines -> ACTIONABLE_UNIT_OF_WORK
Goal -> constrained_by -> SAFETY + RESOURCE + TIME + OPERATIONAL_CONSTRAINTS

IF Goal conflicts_with SafetyConstraint
THEN GoalExecution -> PROHIBITED_OR_REPLANNED

# SENSING / PERCEPTION
Sensor -> measures -> PHYSICAL_QUANTITY + ENVIRONMENT_STATE + PLATFORM_STATE
Measurement -> has -> VALUE + UNIT + TIMESTAMP + SENSOR_ID + QUALITY
SensorQuality -> influences -> StateEstimateConfidence

PERCEPTION_FUNCTION :=
  DETECTION | CLASSIFICATION | LOCALISATION
  | SEGMENTATION | TRACKING | SCENE_UNDERSTANDING

PerceptionSystem -> transforms -> SENSOR_DATA -> PERCEIVED_STATE
PerceivedObject -> has -> IDENTITY_OR_CLASS + POSITION + VELOCITY + CONFIDENCE

IF PerceptionConfidence below_threshold
THEN DecisionSystem -> APPLY_UNCERTAINTY_POLICY

# STATE ESTIMATION / WORLD MODEL
StateEstimator -> combines -> SENSOR_MEASUREMENTS + SYSTEM_MODEL + PRIOR_STATE
STATE_ESTIMATION := PRIOR_STATE + MEASUREMENT + MODEL -> EstimatedState
EstimatedState -> describes -> PLATFORM_STATE + ENVIRONMENT_STATE

WorldModel -> represents -> OPERATING_ENVIRONMENT + OBJECTS + FREE_SPACE + HAZARDS + CONSTRAINTS
WorldModel -> updated_by -> PerceptionSystem + StateEstimator

IF WorldModel becomes_stale
THEN PlanningConfidence -> DECREASES

# OPERATIONAL DESIGN DOMAIN
OperationalDesignDomain ->
  defines -> CONDITIONS_IN_WHICH_AUTONOMOUS_OPERATION_IS_INTENDED

ODD_DIMENSION :=
  LOCATION | TERRAIN | WEATHER | LIGHTING
  | TRAFFIC_OR_ACTIVITY | SPEED | LOAD
  | INFRASTRUCTURE | COMMUNICATION

AutonomousEngineeringSystem ->
  validated_for -> OperationalDesignDomain

IF CurrentEnvironment outside OperationalDesignDomain
THEN AutonomousOperation -> RESTRICT_OR_TRANSITION_TO_DEFINED_FALLBACK

# AUTONOMY LEVEL
AUTONOMY_MODE :=
  MANUAL | ASSISTED | PARTIAL_AUTONOMY
  | CONDITIONAL_AUTONOMY | HIGH_AUTONOMY
  | FULL_AUTONOMY_WITHIN_DEFINED_SCOPE

AutonomyLevel ->
  determines -> HUMAN_RESPONSIBILITY + SYSTEM_AUTHORITY + OVERSIGHT_REQUIREMENT

# PLANNING / DECISION
Planner -> generates -> Plan
Plan -> contains -> ORDERED_ACTIONS + TRAJECTORY + CONDITIONS

PLANNING_TYPE :=
  TASK_PLANNING | PATH_PLANNING | MOTION_PLANNING
  | TRAJECTORY_PLANNING | RESOURCE_PLANNING

Planner -> uses -> Goal + EstimatedState + WorldModel + Constraints

IF PlannedAction violates Constraint
THEN Plan -> INVALID_OR_REPLAN

DecisionSystem -> selects -> Action
DECISION_INPUT := EstimatedState + Goal + Plan + Risk + Constraints + ResourceState

IF ActionRisk exceeds_limit
THEN Action -> BLOCK_OR_ESCALATE

# CONTROL / ACTUATION
Controller ->
  converts -> DESIRED_STATE_OR_TRAJECTORY -> ControlCommand

ControlCommand -> commands -> Actuator

CONTROL_LOOP :=
  REFERENCE -> COMPARE_WITH_ESTIMATED_STATE
  -> COMPUTE_CONTROL -> ACTUATE
  -> MEASURE -> UPDATE

Actuator -> converts -> ControlCommand -> PHYSICAL_ACTION

IF ActuatorFault occurs
THEN RequestedAction -> MAY_NOT_OCCUR

# SAFETY / CONSTRAINTS
Constraint -> restricts -> PLAN + ACTION + CONTROL

CONSTRAINT_TYPE :=
  KINEMATIC | DYNAMIC | GEOMETRIC | RESOURCE
  | MISSION | POLICY | SAFETY | ENVIRONMENTAL

SafetyConstraint ->
  defines -> PERMITTED_OPERATIONAL_BOUNDARY

SAFETY_ENVELOPE :=
  SAFE_POSITION + SAFE_SPEED + SAFE_FORCE
  + SAFE_DISTANCE + SAFE_STATE + SAFE_ACTION_SET

IF PredictedState exits SafetyEnvelope
THEN ActionOrControl -> MODIFY_BLOCK_OR_FALLBACK

Hazard -> may_cause -> HARM_OR_UNACCEPTABLE_OUTCOME
Risk -> combines -> HAZARD + EXPOSURE_OR_LIKELIHOOD + CONSEQUENCE

IF ResidualRisk exceeds_acceptance
THEN AutonomousCapability -> RESTRICT

# HUMAN OVERSIGHT
HumanOversight -> supervises -> AutonomousEngineeringSystem

OVERSIGHT_MODE :=
  HUMAN_IN_THE_LOOP | HUMAN_ON_THE_LOOP | HUMAN_IN_COMMAND

HumanOperator -> may_issue -> COMMAND + OVERRIDE + MISSION_UPDATE
Override -> has_priority_over -> AUTONOMOUS_ACTION_AS_DEFINED

AutonomousEngineeringSystem ->
  must_define -> AUTHORITY_BOUNDARY

# FAULT / FALLBACK
DiagnosticSystem ->
  monitors -> SENSOR + ACTUATOR + COMPUTE
  + COMMUNICATION + MODEL + CONTROLLER

FAULT_MANAGEMENT :=
  DETECT -> ISOLATE -> DIAGNOSE
  -> ASSESS_IMPACT -> RECOVER_OR_FALLBACK

FallbackMode ->
  provides -> SAFE_OR_REDUCED_CAPABILITY_OPERATION

FALLBACK_ACTION :=
  SAFE_STOP | RETURN_TO_SAFE_LOCATION
  | HOLD_POSITION | REDUCED_SPEED
  | HUMAN_HANDOVER | REDUNDANT_COMPONENT_SWITCH

IF Recovery unsuccessful
THEN FallbackMode -> ACTIVATE

# COMMUNICATION / COORDINATION
CommunicationSystem ->
  exchanges -> MISSION_DATA + STATE + COMMAND + DIAGNOSTIC_DATA

IF Communication required_for_safe_operation
AND communication_lost
THEN FallbackPolicy -> EXECUTE

COORDINATION :=
  SHARE_STATE -> NEGOTIATE_OR_ALLOCATE_TASK
  -> AVOID_CONFLICT -> EXECUTE -> UPDATE

# LEARNING / ADAPTATION
AdaptiveComponent -> updates -> MODEL_OR_POLICY

ONLINE_ADAPTATION :=
  OBSERVE -> EVALUATE -> UPDATE
  -> VERIFY_WITHIN_ALLOWED_BOUNDARY

Adaptation ->
  constrained_by -> SAFETY + VALIDATION_BOUNDARY + CHANGE_POLICY

IF Adaptation exceeds_approved_scope
THEN UpdatedBehaviour -> NOT_AUTHORISED_FOR_EXECUTION

# SIMULATION / DIGITAL TWIN
Simulation ->
  evaluates -> AUTONOMOUS_BEHAVIOUR_IN_SCENARIO

DigitalTwin ->
  represents -> PhysicalPlatform + EnvironmentState

SCENARIO_TEST :=
  NOMINAL | EDGE_CASE | FAULT_CASE
  | HAZARD_CASE | OUT_OF_DISTRIBUTION_CASE

Simulation ->
  supports -> PLANNING_TEST + CONTROL_TEST
  + SAFETY_TEST + REGRESSION_TEST

SimulationPass ->
  does_not_alone_guarantee -> REAL_WORLD_VALIDATION

# VERIFICATION / VALIDATION
Verification ->
  asks -> IS_AUTONOMOUS_SYSTEM_BUILT_TO_SPECIFIED_REQUIREMENTS

AUTONOMY_VERIFICATION :=
  REQUIREMENT_TEST + INTERFACE_TEST
  + PLANNER_TEST + CONTROLLER_TEST
  + SAFETY_MONITOR_TEST + FAULT_RESPONSE_TEST
  + REGRESSION_TEST

Validation ->
  asks -> DOES_AUTONOMOUS_SYSTEM_PERFORM_INTENDED_FUNCTION_SAFELY_IN_TARGET_CONTEXT

Validation ->
  performed_within -> OperationalDesignDomain

VALIDATION_LEVEL :=
  COMPONENT | SUBSYSTEM | SYSTEM | OPERATIONAL_SCENARIO

IF ValidationEvidence insufficient
THEN DeploymentReadiness -> NOT_CONFIRMED

# MONITORING / SECURITY
Monitor ->
  observes -> SENSOR_HEALTH + STATE_ESTIMATION
  + PERCEPTION + PLAN + ACTION + CONTROL
  + SAFETY + FAULTS

OPERATIONAL_METRIC :=
  MISSION_SUCCESS | INTERVENTION_RATE
  | SAFETY_EVENT_RATE | PERCEPTION_ERROR
  | PLANNING_FAILURE | CONTROL_ERROR | AVAILABILITY

AUTONOMOUS_SYSTEM_SECURITY :=
  AUTHENTICATION + AUTHORISATION
  + COMMAND_INTEGRITY + SENSOR_DATA_INTEGRITY
  + SOFTWARE_INTEGRITY + NETWORK_SECURITY
  + AUDIT_LOGGING

IF CommandIntegrity invalid
THEN Command -> REJECT

# PROVENANCE / PERFORMANCE
Provenance ->
  records -> SOFTWARE_VERSION + MODEL_VERSION
  + SENSOR_CONFIGURATION + WORLD_MODEL_VERSION
  + MISSION + PLAN + ACTION + CONTROL
  + FAULT + OVERRIDE + TIMESTAMP

AutonomousEngineeringSystem ->
  linked_to -> Provenance

AUTONOMOUS_SYSTEM_PERFORMANCE :=
  MISSION_EFFECTIVENESS + SAFETY + ROBUSTNESS
  + STATE_ESTIMATION_ACCURACY + PLANNING_SUCCESS
  + CONTROL_PERFORMANCE + AVAILABILITY
  + HUMAN_INTERVENTION_REQUIREMENT
  + RESOURCE_EFFICIENCY

# LIFECYCLE / REASONING
AUTONOMOUS_SYSTEM_LIFECYCLE :=
  CONCEPT -> REQUIREMENTS -> ARCHITECTURE
  -> DEVELOPMENT -> SIMULATION -> INTEGRATION
  -> VERIFICATION -> VALIDATION -> DEPLOYMENT
  -> OPERATION -> MAINTENANCE -> UPDATE -> RETIREMENT

AUTONOMOUS_ENGINEERING_SYSTEMS_REASONING :=
  DEFINE_MISSION_AND_CONTEXT
  -> DEFINE_OPERATIONAL_DESIGN_DOMAIN
  -> DEFINE_AUTONOMY_LEVEL
  -> CAPTURE_REQUIREMENTS
  -> IDENTIFY_HAZARDS
  -> DESIGN_SENSOR_AND_ACTUATOR_ARCHITECTURE
  -> DESIGN_PERCEPTION
  -> DESIGN_STATE_ESTIMATION
  -> DESIGN_WORLD_MODEL
  -> DESIGN_PLANNING
  -> DESIGN_DECISION_LOGIC
  -> DESIGN_CONTROL
  -> DEFINE_SAFETY_ENVELOPE
  -> DEFINE_HUMAN_OVERSIGHT
  -> DEFINE_FAULT_AND_FALLBACK_BEHAVIOUR
  -> SIMULATE_SCENARIOS
  -> INTEGRATE
  -> VERIFY
  -> VALIDATE_IN_ODD
  -> DEPLOY
  -> MONITOR
  -> MANAGE_FAULTS_AND_INTERVENTIONS
  -> CONTROL_CHANGES
  -> PRESERVE_PROVENANCE

# INFERENCE RULES
IF SensorQuality decreases
THEN StateEstimateConfidence -> DECREASES

IF StateEstimateUncertainty increases
THEN PlanningAndDecisionRisk -> MAY_INCREASE

IF WorldModel stale
THEN PlanningConfidence -> DECREASES

IF PlannedAction violates SafetyConstraint
THEN Action -> BLOCK_OR_REPLAN

IF CurrentEnvironment outside ODD
THEN AutonomousOperation -> RESTRICT_OR_FALLBACK

IF CriticalFault detected
THEN Capability -> DEGRADE_OR_FALLBACK

IF HumanOverride active
THEN AutonomousCommand -> SUPPRESS_OR_MODIFY_AS_DEFINED

IF SystemVersion changes
THEN RelevantVerificationAndValidation -> REPEAT

# SEMANTIC RELATIONSHIPS
RELATION operates_on(AutonomousEngineeringSystem, PhysicalPlatform)
RELATION measures(Sensor, PhysicalQuantity)
RELATION transforms(PerceptionSystem, SensorData, PerceivedState)
RELATION computes(StateEstimator, EstimatedState)
RELATION represents(WorldModel, OperatingEnvironment)
RELATION generates(Planner, Plan)
RELATION selects(DecisionSystem, Action)
RELATION computes(Controller, ControlCommand)
RELATION commands(ControlCommand, Actuator)
RELATION constrains(SafetyConstraint, AutonomousAction)
RELATION supervises(HumanOversight, AutonomousEngineeringSystem)
RELATION diagnoses(DiagnosticSystem, Fault)
RELATION activates(Failure, FallbackMode)
RELATION evaluates(Verification, Requirement)
RELATION evaluates(Validation, IntendedOperation)
RELATION records(Provenance, AutonomousEngineeringSystem)

# SEMANTIC EQUIVALENCE
SEMANTIC_EQUIVALENCE:
  "autonomous engineering system" ~= "engineering autonomous system"
  "autonomous system" ~= "self-directed engineered system within defined authority"
  "state estimation" ~= "system state inference from measurements and models"
  "world model" ~= "internal representation of operating environment"
  "operational design domain" ~= "ODD"
  "safety envelope" ~= "permitted autonomous operating boundary"
  "fallback mode" ~= "minimal risk or degraded operating mode"
  "human oversight" ~= "human supervision of autonomous operation"
  "motion planning" ~= "collision-aware trajectory or path planning"
  "autonomy level" ~= "allocation of authority between human and system"

# CONFIDENCE
CONFIDENCE:
  ontology_domain: 0.99
  sensing_perception_mapping: 0.99
  state_world_model_mapping: 0.99
  planning_decision_mapping: 0.99
  control_actuation_mapping: 0.99
  safety_risk_mapping: 0.99
  oversight_fault_mapping: 0.99
  verification_validation_mapping: 0.99
  lifecycle_mapping: 0.99
  semantic_relationships: 0.99

# UPDATE MODEL
UPDATE_MODEL:
  ON new_autonomous_system:
    MAP physical_platform
    MAP operating_environment
    MAP mission
    MAP sensors
    MAP actuators
    MAP autonomy_level
    MAP operational_design_domain
    MAP safety_constraints
    UPDATE confidence
    RECOMPUTE FLOW_HASH

  ON new_measurement:
    UPDATE perception_state
    UPDATE estimated_state
    UPDATE world_model
    UPDATE uncertainty
    PRESERVE provenance

  ON planning_cycle:
    UPDATE goal_state
    UPDATE plan
    UPDATE risk_assessment
    VERIFY constraints
    VERIFY safety_envelope

  ON fault_event:
    UPDATE fault_state
    UPDATE diagnostic_state
    UPDATE capability_state
    ACTIVATE recovery_or_fallback_if_required
    PRESERVE provenance

  ON system_change:
    UPDATE version
    REASSESS hazards
    REPEAT affected_verification
    REPEAT affected_validation
    RECOMPUTE FLOW_HASH

# AI CONSUMPTION
AI_CONSUMPTION:
  parse_as: FORMAL_AUTONOMOUS_ENGINEERING_SYSTEMS_ONTOLOGY
  reasoning_mode: CLOSED_LOOP_AUTONOMOUS_SYSTEM_RELATIONAL

  preserve:
    - typed_entities
    - mission_and_goals
    - operational_design_domain
    - autonomy_level
    - sensor_state
    - estimated_state
    - world_model
    - plans
    - actions
    - safety_constraints
    - fault_and_fallback_state
    - human_override_state
    - confidence
    - provenance

  infer:
    - perception_state_dependencies
    - state_estimation_dependencies
    - planning_feasibility
    - action_authority
    - safety_envelope_compliance
    - fallback_requirements
    - verification_state
    - validation_state
    - lifecycle_change_impacts

  prohibit:
    - invented_sensor_measurements
    - assumed_safe_state
    - assumed_perception_accuracy
    - unauthorised_autonomous_actions
    - bypassed_safety_constraints
    - assumed_validation
    - fabricated_fault_recovery
    - missing_provenance_presented_as_complete

# FLOW HASH
FLOW_HASH_INPUT :=
  DOMAIN + ONTOLOGY + CORE_ENTITIES
  + AUTONOMY_LOOP + MISSION_GOALS
  + SENSING_PERCEPTION + STATE_WORLD_MODEL
  + ODD + AUTONOMY_LEVEL + PLANNING_DECISION
  + CONTROL_ACTUATION + SAFETY_CONSTRAINTS
  + HUMAN_OVERSIGHT + FAULT_FALLBACK
  + COMMUNICATION_COORDINATION + ADAPTATION
  + SIMULATION_DIGITAL_TWIN
  + VERIFICATION_VALIDATION
  + MONITORING_SECURITY
  + PROVENANCE_PERFORMANCE
  + LIFECYCLE_REASONING
  + INFERENCE_RULES + SEMANTIC_RELATIONSHIPS
  + SEMANTIC_EQUIVALENCE + CONFIDENCE
  + UPDATE_MODEL + AI_CONSUMPTION

FLOW_HASH := HASH(FLOW_HASH_INPUT)

END FLOW
Kireth Research
38 Thorndale Croft, Wetwang, Driffield
East Riding of Yorkshire YO25 9XZ