Each SOTIF work product is reviewed for completeness, correctness and consistency, and a case for having achieved SOTIF is assembled from meeting the objectives set out in the earlier clauses (5 to 11) together with the field monitoring arrangements of clause 13. The evaluation checks whether hazards, insufficiencies and triggering conditions were analysed and modifications evaluated against acceptance criteria in all use cases; whether a minimal risk condition is reached when needed, given driver intervention, misuse, warnings, degradation and fallback; whether V&V covers all known hazardous scenarios and shows unknown-scenario risk meets the criteria with confidence; whether sufficient V&V is complete, including driving policy robustness; and whether the means for operation-phase activities exist. The examination may be combined with the functional safety assessment under part 2 of the ISO 26262 series.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.