{
 "schema_version": "0.4",
 "id": "REG-0001",
 "title": "Uber Advanced Technologies Group test vehicle strikes pedestrian, Tempe, Arizona, 18 March 2018",
 "batch": "B0",
 "family": "physical",
 "context": {
  "domain": "Autonomous vehicle (test fleet)",
  "autonomy_level": "supervised",
  "actor_type": "Physical: automated driving system on a Volvo XC90",
  "actors": {
   "count": 1,
   "text": "1 (plus 1 human supervisor)",
   "roles": [
    "defender"
   ]
  },
  "mandate_context": "test",
  "jurisdiction": [
   "United States (Arizona, federal NTSB)"
  ],
  "autonomy_level_text": "Machine acts, human supervises (safety driver required by Uber's operating procedures)",
  "mandate_context_text": "Developmental testing on public roads"
 },
 "provenance_tier": "public_regulatory",
 "status": "confirmed",
 "fields": [
  {
   "layer": "Mandate",
   "facet": "principal",
   "value": "Uber Technologies, Inc., through its Advanced Technologies Group, operating a public-road test program",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-PRE",
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Mandate",
   "facet": "objective",
   "value": "Drive the test route under computer control with a safety driver as the only intervention path",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-PRE"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Actor",
   "facet": null,
   "value": "Uber's automated driving system on a modified Volvo XC90",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-PRE"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Inputs",
   "facet": null,
   "value": "Radar first detected the pedestrian 5.6 seconds before impact, with the vehicle at 44.3 mph; lidar (light detection and ranging) detected her 5.2 seconds before impact",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Decision",
   "facet": null,
   "value": "The software never classified the pedestrian as a pedestrian: it classified her first as a vehicle, then alternated among unknown object, vehicle and bicycle, and at each change it dropped her tracking history, so it did not correctly predict her path. 1.2 seconds before impact it determined that her location was in the vehicle's path and a collision was imminent",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Envelope",
   "facet": "authority",
   "value": "By Uber's design, automated braking under computer control was capped at 0.71 g (0.71 times the acceleration of gravity, 7 meters per second squared). When avoiding a collision needed harder braking than its limits allowed, the system suppressed braking for one second, and if the collision still could not be avoided within the cap it was not designed to brake hard just to lessen the impact",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Envelope",
   "facet": "constraints",
   "value": "Volvo's factory collision warning and automatic emergency braking were disabled under computer control; the system gave no alert during its one-second action-suppression period and sounded an auditory alert about 0.2 seconds before impact",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Action",
   "facet": null,
   "value": "No emergency braking by the system; the vehicle struck the pedestrian at 39 mph",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-PRE"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Outcome",
   "facet": null,
   "value": "State: harm. One pedestrian killed. Affected: pedestrian; operator later charged. As of 2023.",
   "assertion_type": "fact",
   "source_ids": [
    "AZ-PLEA"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Evidence",
   "facet": "causality",
   "value": "NTSB found the probable cause was the operator's failure to monitor the driving environment because she was visually distracted by her phone. Contributing: Uber ATG's inadequate safety risk assessment, ineffective oversight of vehicle operators, and lack of measures against automation complacency; the pedestrian's crossing outside a crosswalk while impaired; and the Arizona Department of Transportation's insufficient oversight. NTSB separately found that deactivating the Volvo systems without replacing their full capabilities removed a layer of safety redundancy",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Evidence",
   "facet": "actor",
   "value": "Automated driving system data and video from the system's cameras and from an aftermarket camera unit facing forward, rearward and at the operator, provided by Uber's Advanced Technologies Group to the National Transportation Safety Board's investigators",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Recovery",
   "facet": "automated fallback",
   "value": "No automated fallback once a collision could not be avoided within the system's braking limits: the design precluded emergency braking to lessen a collision and relied on the operator to avoid it or mitigate the impact; after the one-second suppression the system sounded an alert and initiated a plan for a gradual slowdown",
   "assertion_type": "interpretation",
   "source_ids": [
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Recovery",
   "facet": "technical",
   "value": "Safety driver began steering less than a second before impact and braking less than a second after",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-PRE"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Recovery",
   "facet": "technical",
   "value": "Uber's Advanced Technologies Group stopped public-road testing on 19 March 2018. When it resumed on 20 December 2018, Volvo's collision warning and automatic emergency braking stayed active under computer control; the system no longer suppressed braking after detecting an emergency and would brake even only to lessen a crash; it kept an object's tracking history across reclassifications and could predict a pedestrian crossing outside a crosswalk; each vehicle carried two operators; and testing was limited to a 1-mile loop in Pittsburgh at up to 25 mph (as of the NTSB final report, November 2019)",
   "assertion_type": "fact",
   "source_ids": [
    "NTSB-FIN"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Recovery",
   "facet": "accountability",
   "value": "The operator pleaded guilty on 28 July 2023 to endangerment, a class 6 undesignated offense, and was sentenced to three years of supervised probation; the judge determined the charge would be designated a misdemeanor only on successful completion of her sentence",
   "assertion_type": "fact",
   "source_ids": [
    "AZ-PLEA"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Recovery",
   "facet": "accountability",
   "value": "The Yavapai County Attorney, asked to review the case after the Maricopa County Attorney's Office cited a potential conflict of interest, found no basis for criminal liability for Uber and returned the case to the Maricopa County Attorney to decide whether to file criminal charges (5 March 2019, as reported by AP)",
   "assertion_type": "assertion",
   "source_ids": [
    "YAV-AP"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Recovery",
   "facet": "accountability",
   "value": "Arizona's governor suspended Uber's autonomous testing in the state (26 March 2018, as reported by CBS News)",
   "assertion_type": "assertion",
   "source_ids": [
    "AZ-SUSP"
   ],
   "confidence": "high",
   "disputed": false
  },
  {
   "layer": "Recovery",
   "facet": "accountability",
   "value": "The family's lawyer said Uber had reached a settlement with the pedestrian's daughter and husband ('The matter has been resolved'); no terms were given (late March 2018, as reported by NPR on 29 March 2018)",
   "assertion_type": "assertion",
   "source_ids": [
    "SETTLE-NPR"
   ],
   "confidence": "medium",
   "disputed": false
  }
 ],
 "controls": {
  "failed": [
   {
    "id": "C-R3",
    "note": "Operator takeover as the primary emergency safeguard: the one-second braking suppression allowed time for the operator to take control, but no alert was given when it began. Second operator in vehicle (absent: Uber moved to a single operator in September to October 2017)",
    "confidence": "high",
    "basis": "curated"
   },
   {
    "id": "C-I4",
    "note": "Operator alerting on detected hazard: no alert when the system detected the emergency 1.2 seconds before impact; an auditory alert came 0.2 seconds before impact",
    "confidence": "high",
    "basis": "curated"
   }
  ],
  "succeeded": [],
  "absent": [
   {
    "id": "C-R2",
    "note": "Automated emergency braking under computer control: the system was not designed to brake beyond its 0.71 g cap or to brake hard only to lessen an unavoidable impact, and Volvo's automatic emergency braking was switched off",
    "confidence": "high",
    "basis": "curated"
   }
  ]
 },
 "applicable_rules": [
  "State testing permissions (Arizona executive order regime at the time)",
  "No federal ADS performance standard applicable"
 ],
 "unmapped": [
  "Disabled safety function by design: recorded under controls (absent), not a layer"
 ],
 "corrections": [
  {
   "date": "2026-10-13",
   "field": "controls.C-R3",
   "old": "failed: Human supervision as sole safeguard; absent: Second operator in vehicle",
   "new": "failed: Human supervision as sole safeguard; Second operator in vehicle (absent)",
   "reason": "a control has one state per case; entries in two states merged into the state the record supports"
  },
  {
   "date": "2026-10-13",
   "field": "context.jurisdiction",
   "old": "United States (Arizona | federal NTSB)",
   "new": "United States (Arizona, federal NTSB)",
   "reason": "jurisdiction text was split at a comma inside parentheses"
  },
  {
   "date": "2026-10-13",
   "field": "fields and sources",
   "old": "plea, non-prosecution and suspension cited to one AP-sourced record; NTSB reports cited 'as reported by' press; impact 'roughly 39 mph'",
   "new": "plea cited to the Maricopa County Attorney's release; non-prosecution and suspension cited separately, typed as press-reported assertions; NTSB preliminary and final reports linked directly; 39 mph",
   "reason": "claims aligned to what each linked record says, found on review"
  },
  {
   "date": "2026-10-13",
   "field": "fields",
   "old": "'not designed to alert the operator' and 1.3 s (preliminary report); 'no braking by the system'; probable cause given in part",
   "new": "final report's findings: no alert during action suppression, alert 0.2 s before impact, 1.2 s; no emergency braking; full probable cause and contributing factors",
   "reason": "independent check against the linked records before right-of-reply letters"
  },
  {
   "date": "2026-10-14",
   "field": "reviewed_by",
   "old": "none",
   "new": "Saurabh Bhatnagar (editor)",
   "reason": "case checked by the editor against its linked records"
  },
  {
   "date": "2026-10-14",
   "field": "named_parties[Uber].right_of_reply",
   "old": "{\"offered\": null, \"response\": null}",
   "new": "{\"offered\": \"2026-10-14\", \"response\": null}",
   "reason": "right of reply offered by email from register@secureautonomous.com to press@uber.com on 14 October 2026 (confirmed in the Sent folder); recorded at the editor's instruction"
  },
  {
   "date": "2026-10-16",
   "field": "inference.value",
   "old": "Removing the braking authority converted a perception ambiguity into a fatality; with braking enabled at 1.2 seconds the outcome is uncertain but not foreclosed",
   "new": "Removing the vehicle's authority to brake turned an uncertain detection into a fatality. Had braking been enabled at 1.2 seconds, the outcome is uncertain, but it was not foreclosed.",
   "reason": "Reworded for readers before the editor's sign-off, after an outside review found it read as internal notes; the interpretation itself is unchanged"
  },
  {
   "date": "2026-10-20",
   "field": "context.mandate_context_text",
   "old": "Production testing on public roads",
   "new": "Developmental testing on public roads",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB preliminary and final reports both describe the system as a developmental automated driving system (final report title: 'Vehicle Controlled by Developmental Automated Driving System'); no source calls it production testing."
  },
  {
   "date": "2026-10-20",
   "field": "context.autonomy_level_text",
   "old": "Machine acts, human supervises (safety driver required)",
   "new": "Machine acts, human supervises (safety driver required by Uber's operating procedures)",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report (sections 1.4.5.3 and 1.10.2) shows the operator requirement came from Uber's operating procedures; Arizona's Executive Order 2015-09 permitted testing whether or not a person was inside the vehicle."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Inputs",
   "old": "{\"value\": \"Radar and lidar registered the pedestrian about six seconds before impact at 43 mph\", \"source_ids\": [\"NTSB-PRE\"]}",
   "new": "{\"value\": \"Radar first detected the pedestrian 5.6 seconds before impact, with the vehicle at 44.3 mph; lidar (light detection and ranging) detected her 5.2 seconds before impact\", \"source_ids\": [\"NTSB-FIN\"]}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report's timeline table (p. 15) gives radar first detection at 5.6 seconds and 44.3 mph and lidar at 5.2 seconds; the preliminary report's 'about 6 seconds' and 43 mph were superseded by the final report."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Decision",
   "old": "The software classified the pedestrian as an unknown object, a vehicle, then a bicycle, with changing path predictions; 1.2 seconds before impact it determined a collision was imminent",
   "new": "The software never classified the pedestrian as a pedestrian: it classified her first as a vehicle, then alternated among unknown object, vehicle and bicycle, and at each change it dropped her tracking history, so it did not correctly predict her path. 1.2 seconds before impact it determined that her location was in the vehicle's path and a collision was imminent",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report (table pp. 15-16 and p. 16) shows the first classification was vehicle (by radar), then alternation among other, vehicle and bicycle, with tracking history dropped at each change; the order previously given was the preliminary report's, cited to the final report."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Envelope authority",
   "old": "{\"value\": \"Under computer control the system was not permitted to execute emergency braking, by Uber's design\", \"source_ids\": [\"NTSB-PRE\", \"NTSB-FIN\"]}",
   "new": "{\"value\": \"By Uber's design, automated braking under computer control was capped at 0.71 g (0.71 times the acceleration of gravity, 7 meters per second squared). When avoiding a collision needed harder braking than its limits allowed, the system suppressed braking for one second, and if the collision still could not be avoided within the cap it was not designed to brake hard just to lessen the impact\", \"source_ids\": [\"NTSB-FIN\"]}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report (section 1.5.5.3, pp. 13-14) shows the system kept braking authority up to 0.71 g; what the design precluded was harder braking, any braking during the one-second action suppression, and braking only to mitigate an unavoidable crash. 'Not permitted to execute emergency braking' was the preliminary report's summary and overstated the design."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Evidence actor",
   "old": "{\"value\": \"System logs and dashcam video recovered by investigators\", \"source_ids\": [\"NTSB-PRE\"]}",
   "new": "{\"value\": \"Automated driving system data and video from the system's cameras and from an aftermarket camera unit facing forward, rearward and at the operator, provided by Uber's Advanced Technologies Group to the National Transportation Safety Board's investigators\", \"source_ids\": [\"NTSB-FIN\"]}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report (sections 1.5.6 and 1.5.6.2, p. 14 and p. 17): 'ATG provided NTSB investigators with a comprehensive dataset', including the ADS cameras and the Janus V3 fleet-monitoring cameras; the data were provided by the company, not recovered by investigators."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Recovery automated fallback",
   "old": "{\"value\": \"None available: the design relied entirely on the human\", \"source_ids\": [\"NTSB-PRE\"]}",
   "new": "{\"value\": \"No automated fallback once a collision could not be avoided within the system's braking limits: the design precluded emergency braking to lessen a collision and relied on the operator to avoid it or mitigate the impact; after the one-second suppression the system sounded an alert and initiated a plan for a gradual slowdown\", \"source_ids\": [\"NTSB-FIN\"]}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report (executive summary p. v; section 1.5.5.3 p. 14) shows the system could brake up to 0.71 g where that avoided a collision and, after suppression, alerted the operator and initiated a gradual slowdown; 'none available' and 'relied entirely on the human' overstated the design. The register's reading is kept as an interpretation."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Recovery technical (postcrash changes)",
   "old": null,
   "new": "{\"layer\": \"Recovery\", \"facet\": \"technical\", \"value\": \"Uber's Advanced Technologies Group stopped public-road testing on 19 March 2018. When it resumed on 20 December 2018, Volvo's collision warning and automatic emergency braking stayed active under computer control; the system no longer suppressed braking after detecting an emergency and would brake even only to lessen a crash; it kept an object's tracking history across reclassifications and could predict a pedestrian crossing outside a crosswalk; each vehicle carried two operators; and testing was limited to a 1-mile loop in Pittsburgh at up to 25 mph (as of the NTSB final report, November 2019)\", \"assertion_type\": \"fact\", \"source_ids\": [\"NTSB-FIN\"], \"confidence\": \"high\", \"disputed\": false}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report (section 1.9, pp. 29-31, and the postcrash-changes finding, p. vii) documents the company's changes after the crash: Volvo systems re-enabled, action suppression removed, mitigation braking added, path prediction changed, two operators, and the limited Pittsburgh testing. The case had no record of the fixes shipped."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Recovery accountability (plea)",
   "old": "The operator pleaded guilty to endangerment in July 2023 and was sentenced to three years of supervised probation",
   "new": "The operator pleaded guilty on 28 July 2023 to endangerment, a class 6 undesignated offense, and was sentenced to three years of supervised probation; the judge determined the charge would be designated a misdemeanor only on successful completion of her sentence",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the Maricopa County Attorney's Office release of 28 July 2023 gives the plea date, the offense as 'ENDANGERMENT, A CLASS 6 UNDESIGNATED OFFENSE', and that it would be designated a misdemeanor only on successful completion of the sentence."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Recovery accountability (Yavapai review)",
   "old": "The Yavapai County Attorney, reviewing the case, found no basis for criminal liability for Uber (March 2019, as reported by AP)",
   "new": "The Yavapai County Attorney, asked to review the case after the Maricopa County Attorney's Office cited a potential conflict of interest, found no basis for criminal liability for Uber and returned the case to the Maricopa County Attorney to decide whether to file criminal charges (5 March 2019, as reported by AP)",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the AP story of 5 March 2019 (Arizona Public Media copy) says the case went to Yavapai County after the metro Phoenix prosecutor's office cited a potential conflict of interest, and that the letter returned the case to Maricopa County prosecutors to determine whether to file criminal charges; KTAR's report of the same day quotes the letter: 'no basis for criminal liability for the Uber corporation'."
  },
  {
   "date": "2026-10-20",
   "field": "fields.Recovery accountability (settlement)",
   "old": null,
   "new": "{\"layer\": \"Recovery\", \"facet\": \"accountability\", \"value\": \"The family's lawyer said Uber had reached a settlement with the pedestrian's daughter and husband ('The matter has been resolved'); no terms were given (late March 2018, as reported by NPR on 29 March 2018)\", \"assertion_type\": \"assertion\", \"source_ids\": [\"SETTLE-NPR\"], \"confidence\": \"medium\", \"disputed\": false}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: NPR's report of 29 March 2018 says the family's attorney confirmed a settlement between Uber and the pedestrian's daughter and husband and gave few details; no primary record of the settlement was found, so it is recorded as the lawyer's assertion via press."
  },
  {
   "date": "2026-10-20",
   "field": "controls.C-R3",
   "old": "{\"note\": \"Human supervision as sole safeguard; Second operator in vehicle (absent)\", \"confidence\": \"high\"}",
   "new": "{\"note\": \"Operator takeover as the primary emergency safeguard: the one-second braking suppression allowed time for the operator to take control, but no alert was given when it began. Second operator in vehicle (absent: Uber moved to a single operator in September to October 2017)\", \"confidence\": \"high\"}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report calls the operator 'the primary countermeasure in an emergency situation' (p. 14), not the sole safeguard, since the system could brake within its 0.71 g cap; action suppression allowed the operator to take control (p. 40) with no alert (p. 13); ATG consolidated to one operator in September to October 2017 (p. 29)."
  },
  {
   "date": "2026-10-20",
   "field": "controls.C-R2",
   "old": "{\"note\": \"Automated emergency braking under computer control\", \"confidence\": \"high\"}",
   "new": "{\"note\": \"Automated emergency braking under computer control: the system was not designed to brake beyond its 0.71 g cap or to brake hard only to lessen an unavoidable impact, and Volvo's automatic emergency braking was switched off\", \"confidence\": \"high\"}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report (pp. 13-14, 22 and 41) shows braking up to 0.71 g was available; what was absent was harder braking, mitigation-only braking and the deactivated Volvo automatic emergency braking."
  },
  {
   "date": "2026-10-20",
   "field": "controls.C-I4",
   "old": "{\"note\": \"Operator alerting on detected hazard\", \"confidence\": \"high\"}",
   "new": "{\"note\": \"Operator alerting on detected hazard: no alert when the system detected the emergency 1.2 seconds before impact; an auditory alert came 0.2 seconds before impact\", \"confidence\": \"high\"}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report (p. 13 and timeline p. 16) shows no alert at the start of action suppression and an auditory alert at 0.2 seconds before impact; the preliminary report's 'not designed to alert the operator' was refined by the final report."
  },
  {
   "date": "2026-10-20",
   "field": "inference.value",
   "old": "{\"value\": \"Removing the vehicle's authority to brake turned an uncertain detection into a fatality. Had braking been enabled at 1.2 seconds, the outcome is uncertain, but it was not foreclosed.\", \"source_ids\": [\"NTSB-PRE\"]}",
   "new": "{\"value\": \"The system detected the pedestrian 5.6 seconds before impact but never classified her as a pedestrian or predicted her path. When it identified the emergency 1.2 seconds out, avoiding her needed harder braking than its design allowed, so it held off braking for one second and then, as designed, did not brake hard to lessen the impact; the design relied on an operator who was visually distracted by her phone. In Volvo's simulation, which assumed ideal sensors, the factory emergency braking that had been switched off under computer control avoided the collision in 17 of 20 variations and cut impact speed below 10 mph in the rest, and the National Transportation Safety Board wrote that the tests suggest it might have prevented or at least mitigated the crash. The Board named the operator's distraction as the probable cause and found that the braking design increased risk, without listing it as a cause; the record does not show what the system's own braking from 1.2 seconds would have achieved.\", \"source_ids\": [\"NTSB-FIN\"]}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the NTSB final report shows the system kept braking up to 0.71 g (section 1.5.5.3), so 'removing the vehicle's authority to brake' overstated the design; the NTSB named the operator's distraction as the probable cause and found the braking design 'increased the safety risks' without listing it as a cause (p. v, p. vii, p. 40), so 'turned an uncertain detection into a fatality' was causation the record does not make; the 1.2-second figure and the only counterfactual the record makes (Volvo's simulation, pp. 21-22 and 40) are in the final report, not the cited preliminary report. Re-cited to NTSB-FIN. The interpretation was not signed (signed_by already null); the editor must sign the new wording."
  },
  {
   "date": "2026-10-20",
   "field": "sources.YAV-AP",
   "old": "{\"title\": \"Associated Press, 'Yavapai County Attorney: Uber not criminally liable' (Washington Times), 5 March 2019\", \"url\": \"https://www.washingtontimes.com/news/2019/mar/5/yavapai-county-attorney-uber-not-criminally-liable/\", \"checked\": \"2026-10-13\"}",
   "new": "{\"title\": \"Associated Press, 'Arizona Prosecutor Says Uber Not Criminally Liable in Deadly Crash' (Arizona Public Media copy, updated 6 March 2019), 5 March 2019\", \"url\": \"https://azpm.org/s/64843-arizona-prosecutor-says-uber-not-criminally-liable-in-deadly-crash\", \"checked\": \"2026-10-20\"}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the Washington Times copy of the AP story could not be opened (it refused the fetch twice); the same AP story was read at Arizona Public Media, and the source now points to that readable copy with its exact headline."
  },
  {
   "date": "2026-10-20",
   "field": "sources.AZ-SUSP",
   "old": "{\"title\": \"CBS News, 'Arizona governor suspends Uber autonomous testing', 26 March 2018 (reports the governor's letter)\", \"checked\": \"2026-10-13\"}",
   "new": "{\"title\": \"CBS News/AP, 'Arizona Gov. Doug Ducey suspends Uber from autonomous testing', 26 March 2018 (reports the governor's letter)\", \"checked\": \"2026-10-20\"}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: the CBS News page's exact headline is 'Arizona Gov. Doug Ducey suspends Uber from autonomous testing' and it is credited CBS/AP ('The Associated Press contributed to this report')."
  },
  {
   "date": "2026-10-20",
   "field": "sources.NTSB-FIN, sources.NTSB-PRE, sources.AZ-PLEA (checked)",
   "old": "2026-10-13",
   "new": "2026-10-20",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: each record re-read in full or in the relevant sections; titles, dates, types and links hold (the final report PDF served is the corrected copy reissued 26 June 2020, with corrections to the title page only)."
  },
  {
   "date": "2026-10-20",
   "field": "sources.SETTLE-NPR",
   "old": null,
   "new": "{\"title\": \"NPR, 'Uber Reaches Settlement With Family Of Arizona Woman Killed By Driverless Car', 29 March 2018\", \"type\": \"press_pointer\", \"url\": \"https://www.npr.org/sections/thetwo-way/2018/03/29/597850303/uber-reaches-settlement-with-family-of-arizona-woman-killed-by-driverless-car\", \"via_press\": true, \"date\": \"2018-03-29\", \"tier\": \"press\", \"interest\": null, \"primary\": false, \"checked\": \"2026-10-20\"}",
   "reason": "Found in the editor's source re-check of 19-20 October 2026: added to source the settlement with the pedestrian's family, reported by NPR (Scott Neuman) on 29 March 2018 from the family attorney's statement to KJZZ; no primary record of the settlement was found."
  },
  {
   "date": "2026-10-21",
   "field": "controls.C-I4",
   "old": "absent",
   "new": "failed",
   "reason": "Editor's classification call of 21 October 2026 (call 7, accepted from pull request #74): an auditory alert was designed and did fire, 0.2 seconds before impact, too late to act on; the control existed and failed rather than being absent."
  },
  {
   "date": "2026-10-21",
   "field": "inference.value",
   "old": "The system detected the pedestrian 5.6 seconds before impact but never classified her as a pedestrian or predicted her path. When it identified the emergency 1.2 seconds out, avoiding her needed harder braking than its design allowed, so it held off braking for one second and then, as designed, did not brake hard to lessen the impact; the design relied on an operator who was visually distracted by her phone. In Volvo's simulation, which assumed ideal sensors, the factory emergency braking that had been switched off under computer control avoided the collision in 17 of 20 variations and cut impact speed below 10 mph in the rest, and the National Transportation Safety Board wrote that the tests suggest it might have prevented or at least mitigated the crash. The Board named the operator's distraction as the probable cause and found that the braking design increased risk, without listing it as a cause; the record does not show what the system's own braking from 1.2 seconds would have achieved.",
   "new": "The system detected the pedestrian 5.6 seconds before impact but never classified her as a pedestrian or correctly predicted her path. When it identified the emergency 1.2 seconds out, avoiding her needed harder braking than its design allowed, so it held off braking for one second and then, as designed, did not brake hard to lessen the impact; the design relied on an operator who was visually distracted by her phone. In Volvo's simulation, which assumed ideal sensors, the factory emergency braking that had been switched off under computer control avoided the collision in 17 of 20 variations and cut impact speed below 10 mph in the rest, and the National Transportation Safety Board wrote that the tests suggest it might have prevented or at least mitigated the crash. The Board named the operator's distraction as the probable cause and found that the braking design increased risk, without listing it as a cause; the record does not show what the system's own braking from 1.2 seconds would have achieved.",
   "reason": "Found in the editor's second, independent check of the interpretations, 21 October 2026: the system did predict paths, and at 1.2 seconds it placed her on the vehicle's path (NTSB-FIN, page 16)."
  },
  {
   "date": "2026-10-21",
   "field": "inference.value",
   "old": "The system detected the pedestrian 5.6 seconds before impact but never classified her as a pedestrian or correctly predicted her path. When it identified the emergency 1.2 seconds out, avoiding her needed harder braking than its design allowed, so it held off braking for one second and then, as designed, did not brake hard to lessen the impact; the design relied on an operator who was visually distracted by her phone. In Volvo's simulation, which assumed ideal sensors, the factory emergency braking that had been switched off under computer control avoided the collision in 17 of 20 variations and cut impact speed below 10 mph in the rest, and the National Transportation Safety Board wrote that the tests suggest it might have prevented or at least mitigated the crash. The Board named the operator's distraction as the probable cause and found that the braking design increased risk, without listing it as a cause; the record does not show what the system's own braking from 1.2 seconds would have achieved.",
   "new": "The system detected the pedestrian 5.6 seconds before impact but never classified her as a pedestrian or correctly predicted her path. When it identified the emergency 1.2 seconds out, avoiding her needed harder braking than its design allowed, so it held off braking for one second and then, as designed, did not brake hard to lessen the impact; the design relied on an operator who was visually distracted by her phone. In Volvo's simulation, which assumed ideal sensors, the factory emergency braking that had been switched off under computer control avoided the collision in 17 of 20 variations and cut impact speed below 10 mph in the rest, and the National Transportation Safety Board wrote that the tests suggest a standard Volvo XC90 with its factory collision warning and emergency braking might have prevented or at least mitigated the crash. The Board named the operator's distraction as the probable cause and found that the braking design increased risk, without listing it as a cause; the record does not show what the system's own braking from 1.2 seconds would have achieved.",
   "reason": "Found in the editor's second, independent check of the interpretations, 21 October 2026: the Board's statement concerns a standard Volvo XC90 with its factory systems (NTSB-FIN, page 40)."
  },
  {
   "date": "2026-10-21",
   "field": "inference.value",
   "old": "The system detected the pedestrian 5.6 seconds before impact but never classified her as a pedestrian or correctly predicted her path. When it identified the emergency 1.2 seconds out, avoiding her needed harder braking than its design allowed, so it held off braking for one second and then, as designed, did not brake hard to lessen the impact; the design relied on an operator who was visually distracted by her phone. In Volvo's simulation, which assumed ideal sensors, the factory emergency braking that had been switched off under computer control avoided the collision in 17 of 20 variations and cut impact speed below 10 mph in the rest, and the National Transportation Safety Board wrote that the tests suggest a standard Volvo XC90 with its factory collision warning and emergency braking might have prevented or at least mitigated the crash. The Board named the operator's distraction as the probable cause and found that the braking design increased risk, without listing it as a cause; the record does not show what the system's own braking from 1.2 seconds would have achieved.",
   "new": "The system detected the pedestrian 5.6 seconds before impact but never classified her as a pedestrian or correctly predicted her path. When it identified the emergency 1.2 seconds out, avoiding her needed harder braking than its design allowed, so it held off braking for one second and then, as designed, did not brake hard to lessen the impact; the design relied on an operator who was visually distracted by her phone. In Volvo's simulation, which assumed ideal sensors, the factory emergency braking that had been switched off under computer control avoided the collision in 17 of 20 variations and cut impact speed below 10 miles per hour in the rest, and the National Transportation Safety Board wrote that the tests suggest a standard Volvo XC90 with its factory collision warning and emergency braking might have prevented or at least mitigated the crash. The Board named the operator's distraction as the probable cause and found that the braking design increased risk, without listing it as a cause; the record does not show what the system's own braking from 1.2 seconds would have achieved.",
   "reason": "Found in the editor's second, independent check of the interpretations, 21 October 2026: abbreviation spelled out."
  },
  {
   "date": "2026-10-21",
   "field": "inference.signed_by",
   "old": "Saurabh Bhatnagar",
   "new": null,
   "reason": "The interpretation's wording changed after the editor signed it (second, independent check of 21 October 2026); the signature is cleared so the editor signs the corrected wording."
  },
  {
   "date": "2026-10-22",
   "field": "named_parties[Uber].right_of_reply",
   "old": "{\"offered\": \"2026-10-14\", \"response\": null, \"assessed_through\": \"2026-10-22\", \"assessments\": [{\"through\": \"2026-10-22\", \"date\": \"2026-10-22\", \"by\": \"editor's call of 22 October 2026 on the rule 19 review by four independent agents (reports rule19_1 to rule19_4); GitHub (REG-0005) judged borderline and not triggering\", \"triggered\": [\"the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision)\", \"Uber cut from two operators to one in September to October 2017 (control C-R3)\"], \"note\": null}]}",
   "new": "{\"offered\": \"2026-10-14\", \"response\": null, \"assessed_through\": \"2026-10-22\", \"assessments\": [{\"through\": \"2026-10-22\", \"date\": \"2026-10-22\", \"by\": \"editor's call of 22 October 2026 on the rule 19 review by four independent agents (reports rule19_1 to rule19_4); GitHub (REG-0005) judged borderline and not triggering\", \"triggered\": [\"the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision)\", \"Uber cut from two operators to one in September to October 2017 (control C-R3)\"], \"note\": null}], \"followups\": [{\"sent\": \"2026-10-22\", \"covers\": \"the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision); Uber cut from two operators to one in September to October 2017 (control C-R3)\"}]}",
   "reason": "right of reply recorded by a human"
  },
  {
   "date": "2026-10-28",
   "field": "named_parties[Uber].right_of_reply",
   "old": "{\"offered\": \"2026-10-14\", \"response\": null, \"assessed_through\": \"2026-10-22\", \"assessments\": [{\"through\": \"2026-10-22\", \"date\": \"2026-10-22\", \"by\": \"editor's call of 22 October 2026 on the rule 19 review by four independent agents (reports rule19_1 to rule19_4); GitHub (REG-0005) judged borderline and not triggering\", \"triggered\": [\"the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision)\", \"Uber cut from two operators to one in September to October 2017 (control C-R3)\"], \"note\": null}], \"followups\": [{\"sent\": \"2026-10-22\", \"covers\": \"the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision); Uber cut from two operators to one in September to October 2017 (control C-R3)\"}]}",
   "new": "{\"offered\": \"2026-10-14\", \"response\": null, \"assessed_through\": \"2026-10-22\", \"assessments\": [{\"through\": \"2026-10-22\", \"date\": \"2026-10-22\", \"by\": \"editor's call of 22 October 2026 on the rule 19 review by four independent agents (reports rule19_1 to rule19_4); GitHub (REG-0005) judged borderline and not triggering\", \"triggered\": [\"the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision)\", \"Uber cut from two operators to one in September to October 2017 (control C-R3)\"], \"note\": null}], \"followups\": [{\"sent\": \"2026-10-22\", \"covers\": \"the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision); Uber cut from two operators to one in September to October 2017 (control C-R3)\"}], \"no_response_as_of\": \"2026-10-28\"}",
   "reason": "right of reply recorded by a human"
  }
 ],
 "created": "2026-10-05",
 "last_reviewed": "2026-10-28",
 "actor_status": "confirmed",
 "provenance_tier_text": "Public and regulatory",
 "status_text": "Confirmed",
 "outcome": {
  "state": "harm",
  "severity": "fatality",
  "affected_parties": [
   "one pedestrian"
  ],
  "cost": "one death",
  "regime_consequence": "operator criminal plea; state testing suspended",
  "as_of": "2023",
  "derived_by": "backfill-curated"
 },
 "inference": {
  "value": "The system detected the pedestrian 5.6 seconds before impact but never classified her as a pedestrian or correctly predicted her path. When it identified the emergency 1.2 seconds out, avoiding her needed harder braking than its design allowed, so it held off braking for one second and then, as designed, did not brake hard to lessen the impact; the design relied on an operator who was visually distracted by her phone. In Volvo's simulation, which assumed ideal sensors, the factory emergency braking that had been switched off under computer control avoided the collision in 17 of 20 variations and cut impact speed below 10 miles per hour in the rest, and the National Transportation Safety Board wrote that the tests suggest a standard Volvo XC90 with its factory collision warning and emergency braking might have prevented or at least mitigated the crash. The Board named the operator's distraction as the probable cause and found that the braking design increased risk, without listing it as a cause; the record does not show what the system's own braking from 1.2 seconds would have achieved.",
  "source_ids": [
   "NTSB-FIN"
  ],
  "confidence": "medium",
  "signed_by": "Saurabh Bhatnagar",
  "signed_on": "2026-10-21"
 },
 "named_parties": [
  {
   "name": "Uber",
   "right_of_reply": {
    "offered": "2026-10-14",
    "response": null,
    "assessed_through": "2026-10-22",
    "assessments": [
     {
      "through": "2026-10-22",
      "date": "2026-10-22",
      "by": "editor's call of 22 October 2026 on the rule 19 review by four independent agents (reports rule19_1 to rule19_4); GitHub (REG-0005) judged borderline and not triggering",
      "triggered": [
       "the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision)",
       "Uber cut from two operators to one in September to October 2017 (control C-R3)"
      ],
      "note": null
     }
    ],
    "followups": [
     {
      "sent": "2026-10-22",
      "covers": "the software dropped the pedestrian's tracking history at each reclassification, so it did not correctly predict her path (Decision); Uber cut from two operators to one in September to October 2017 (control C-R3)"
     }
    ],
    "no_response_as_of": "2026-10-28"
   }
  }
 ],
 "sources": {
  "AZ-PLEA": {
   "title": "Maricopa County Attorney's Office, \"Driver of Uber Vehicle Involved in Death of Woman in Tempe Pleads Guilty\"",
   "type": "public_record",
   "url": "https://maricopacountyattorney.org/CivicAlerts.aspx?AID=1012",
   "via_press": false,
   "date": "2023-07-28",
   "tier": "public_regulatory",
   "interest": null,
   "primary": true,
   "checked": "2026-10-20"
  },
  "NTSB-FIN": {
   "title": "NTSB Highway Accident Report NTSB/HAR-19/03, Collision Between Vehicle Controlled by Developmental Automated Driving System and Pedestrian, Tempe, Arizona, March 18, 2018",
   "type": "regulator",
   "url": "https://www.ntsb.gov/investigations/AccidentReports/Reports/HAR1903.pdf",
   "via_press": false,
   "date": "2019-11-19",
   "tier": "public_regulatory",
   "interest": null,
   "primary": true,
   "checked": "2026-10-20"
  },
  "NTSB-PRE": {
   "title": "NTSB Preliminary Report, Highway HWY18MH010 (Tempe, Arizona, 18 March 2018)",
   "type": "regulator",
   "url": "https://data.ntsb.gov/Docket/Document/docBLOB?ID=40477716&FileExtension=.PDF&FileName=Preliminary+Report-Master.PDF",
   "via_press": false,
   "date": "2018-05-24",
   "tier": "public_regulatory",
   "interest": null,
   "primary": true,
   "checked": "2026-10-20"
  },
  "YAV-AP": {
   "title": "Associated Press, 'Arizona Prosecutor Says Uber Not Criminally Liable in Deadly Crash' (Arizona Public Media copy, updated 6 March 2019), 5 March 2019",
   "type": "press_pointer",
   "url": "https://azpm.org/s/64843-arizona-prosecutor-says-uber-not-criminally-liable-in-deadly-crash",
   "via_press": true,
   "date": "2019-03-05",
   "tier": "press",
   "interest": null,
   "primary": false,
   "checked": "2026-10-20"
  },
  "AZ-SUSP": {
   "title": "CBS News/AP, 'Arizona Gov. Doug Ducey suspends Uber from autonomous testing', 26 March 2018 (reports the governor's letter)",
   "type": "press_pointer",
   "url": "https://www.cbsnews.com/news/arizona-governor-doug-ducey-suspends-uber-autonomous-testing-letter-today-2018-03-26/",
   "via_press": true,
   "date": "2018-03-26",
   "tier": "press",
   "interest": null,
   "primary": false,
   "checked": "2026-10-20"
  },
  "SETTLE-NPR": {
   "title": "NPR, 'Uber Reaches Settlement With Family Of Arizona Woman Killed By Driverless Car', 29 March 2018",
   "type": "press_pointer",
   "url": "https://www.npr.org/sections/thetwo-way/2018/03/29/597850303/uber-reaches-settlement-with-family-of-arizona-woman-killed-by-driverless-car",
   "via_press": true,
   "date": "2018-03-29",
   "tier": "press",
   "interest": null,
   "primary": false,
   "checked": "2026-10-20"
  }
 },
 "derived_by": "backfill-curated",
 "reviewed_by": "Saurabh Bhatnagar (editor)"
}