Phase 1 of 6
Scoping & Sub-10ms Latency Constraints
Pin down the V2X application surface, the safety timing envelope, the spectrum plane, and the functional-safety classification before the roadside unit architecture is frozen.
0/10
Phase Progress
Required Recommended Optional Open-Source Proprietary Trinidy
V2X Application Surface & Safety Class
Identify V2X applications in scope for the roadside unit
Why This Matters
Different V2X applications have materially different timing envelopes — SAE J2945/1 sets the BSM broadcast cadence at 10 Hz with sub-100ms end-to-end, but collision-avoidance inference at the RSU must run inside a much tighter window so the downstream vehicle control loop still has headroom. Bundling VRU protection and work-zone alerts under a single latency budget almost always misprices the critical path. The application mix also drives which message sets (J2735 BSM, PSM, SPaT, MAP, TIM) must be decoded at line rate.
Note prompts — click to add
+ Which of these applications are actually on the DOT pilot scope versus aspirational?+ Have we written an end-to-end latency budget per application, or only a single RSU SLA?+ Which J2735 message sets do we actually consume at inference time today?Confirm which V2X applications the tower-mounted RSU must infer on in real time.
Select all that apply
Define end-to-end inference latency SLA at the RSU
Why This Matters
SAE J2945/1 fixes the BSM cadence at 10 Hz, which sets a 100ms application budget — but safety-critical collision avoidance needs the RSU inference to complete well inside that window so the vehicle has useful time to brake. 3GPP TS 22.185 and Release 16 NR-V2X define sidelink latency targets in the 3–10ms range for advanced applications. Infrastructure choices made after the SLA is set have an order of magnitude less leverage than choices that set the SLA correctly the first time — and cloud routing is simply not an option.
Note prompts — click to add
+ What is our current measured p99 at the RSU, not just average latency?+ Where in the pipeline — radio, decode, fusion, inference, egress — is the dominant latency contributor today?+ Have we stress-tested at peak vehicle density (200+ concurrent vehicles per intersection)?Select the p99 RSU inference latency budget your model must hold under peak arrival rate.
Single choice
Trinidy — Any cloud or regional-MEC routing introduces 20–80ms of backhaul that is physically incompatible with the collision-avoidance timing envelope. Trinidy runs the perception-fusion and risk-scoring models on the roadside node itself — deterministic sub-millisecond inference with no backhaul in the safety loop.
Classify ISO 26262 ASIL for each V2X function
Why This Matters
ISO 26262 is the automotive functional-safety standard and ASIL determines the engineering rigor required — verification depth, redundancy, and failure-rate targets scale sharply from QM through ASIL D. Roadside infrastructure has historically been treated as advisory (QM or ASIL A), but as V2X moves from driver-warning to vehicle-control input under SAE J3016 Level 3+ automation, the ASIL assignment is being reconsidered. Getting this wrong locks you into a design that either over-engineers advisory functions or under-engineers the safety-critical ones.
Note prompts — click to add
+ Has a Hazard Analysis and Risk Assessment (HARA) been done for each RSU-hosted function?+ Are we treating the RSU as advisory (QM) while downstream vehicles treat our output as ASIL B+ input?+ Who signs off on the ASIL decomposition between RSU and on-vehicle logic?Assign an Automotive Safety Integrity Level (ASIL) to each RSU-hosted function.
Single choice
Apply ISO 21448 SOTIF analysis to the perception pipeline
Why This Matters
ISO 21448 (SOTIF) specifically covers the failure class that ISO 26262 does not — perception models that are functioning correctly but produce unsafe outputs because the scenario is outside their training distribution. For V2X this is the dominant risk mode: a VRU detector that works perfectly on the validation set but misses a pedestrian in heavy rain at dusk. SOTIF requires an explicit argument that unknown-unsafe scenarios have been systematically reduced, not just that the model is accurate on the known set.
Note prompts — click to add
+ Do we have a documented SOTIF argument, or only model accuracy metrics?+ What weather, lighting, and occlusion edge cases have been enumerated but not yet validated?+ How do we detect when a live scene is outside our training distribution in real time?ISO 21448 governs safety of the intended functionality — hazards that arise from performance limitations rather than faults.
✓ savedConfirm SAE J3016 automation level of consuming vehicles
Why This Matters
The automation level of the consuming vehicles changes the engineering rigor required of RSU output, because an L2 driver still has supervision responsibility while an L3+ vehicle may act directly on an RSU alert. Mixed-fleet deployment is the common real-world case and it forces you to design to the highest automation level — you cannot selectively degrade output quality for older vehicles on the same corridor.
Note prompts — click to add
+ Are we designing for the highest automation level that will consume our output, or the lowest?+ Has the OEM contractually defined its ODD assumptions about RSU availability and accuracy?+ What is our fallback behavior if the RSU degrades — does the vehicle still treat us as authoritative?Select the highest SAE J3016 automation level the RSU output will feed.
Single choice
Confirm UNECE WP.29 R155/R156 cybersecurity and software-update applicability
Why This Matters
UNECE R155 and R156 took effect for new vehicle type approvals in UN-1958 markets in July 2022 and for all vehicles in July 2024, and while they nominally apply to the vehicle, the RSU is increasingly treated as a functional extension when its output is consumed inside the ODD. The practical effect is that OEM customers will require a CSMS and SUMS attestation from the RSU operator as a condition of fleet integration — retrofitting this after a pilot is significantly more expensive than designing to it from the start.
Note prompts — click to add
+ Do our OEM contracts require CSMS/SUMS evidence, or only refer to generic cybersecurity?+ Have we mapped R155 threat categories to the RSU attack surface specifically?+ What is our signed-artifact, rollback, and audit story for over-the-air model updates?Map UNECE cybersecurity (R155) and software-update (R156) regulations to RSU software lifecycle.
Select all that apply
Confirm spectrum plan and air-interface technology
Why This Matters
The FCC 5.9 GHz R&O of November 2020 reallocated 45 MHz of the band to unlicensed Wi-Fi and retained 30 MHz (5.895–5.925 GHz) for C-V2X, effectively ending DSRC in the US and making C-V2X the operative US standard. Europe has kept ETSI ITS-G5 for near-term deployments while C-V2X and IEEE 802.11bd coexist as forward options. The spectrum choice determines which message set decoders must be on the hot path and which coexistence constraints (adjacent-channel, Wi-Fi 6E) apply.
Note prompts — click to add
+ Have we verified our FCC Part 90 (or equivalent) licensing for each deployment site?+ Which air interfaces are contractually required by our OEM or DOT customers today?+ What is our migration story from any remaining DSRC pilots to C-V2X or 802.11bd?Select the radio access technologies the RSU must support for V2X traffic.
Select all that apply
Define data residency and sovereignty constraints
Map V2X data flows to jurisdictional and sovereignty constraints before architecture is finalized.
Select all that apply
Trinidy — V2X message payloads often contain vehicle trajectory and occupant-adjacent data that is treated as personal data under GDPR once linked. Trinidy keeps BSM processing, perception inference, and audit logging on the roadside node itself — no cross-border data flow for any safety-path decision.
Specify deployment topology for the inference plane
Select the physical deployment target for the RSU inference stack.
Single choice
Trinidy — For sub-10ms deterministic inference at the roadside, cloud and even regional MEC are physically incompatible. Trinidy is the tower-mounted inference substrate — outdoor-rated, deterministic-scheduled, and co-sited with the PC5 radio.
Define availability and MTTR targets for the safety path
Specify availability, MTBF, and MTTR for the RSU inference chain under a DOT SLA.
Single choice