This article presents a formal model and formal safety proofs for the ABZ’25 case study in differential dynamic logic ( \(\textsf{dL}\) ). The case study considers an autonomous car driving on a highway with a neural network controller avoiding collisions with neighbouring cars. Using KeYmaera X ’s \(\textsf{dL}\,\) implementation we prove collision-freedom on an infinite time horizon which ensures that safety is preserved independently of trip length. The safety guarantees hold for time-varying reaction time and brake force. Our \(\textsf{dL}\,\) model considers the single lane scenario with cars ahead or behind. We demonstrate \(\textsf{dL}\,\) and its tools are a rigorous foundation for runtime monitoring, shielding, and neural network verification. Doing so sheds light on inconsistencies between the provided specification and simulation environment highway-env of the ABZ’25 study. We attempt to fix these inconsistencies and uncover numerous counterexamples indicative of issues in the provided reinforcement learning environment.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Verification of Autonomous Neural Car Control with KeYmaera X

  • Enguerrand Prebet,
  • Samuel Teuber,
  • André Platzer

摘要

This article presents a formal model and formal safety proofs for the ABZ’25 case study in differential dynamic logic ( \(\textsf{dL}\) ). The case study considers an autonomous car driving on a highway with a neural network controller avoiding collisions with neighbouring cars. Using KeYmaera X ’s \(\textsf{dL}\,\) implementation we prove collision-freedom on an infinite time horizon which ensures that safety is preserved independently of trip length. The safety guarantees hold for time-varying reaction time and brake force. Our \(\textsf{dL}\,\) model considers the single lane scenario with cars ahead or behind. We demonstrate \(\textsf{dL}\,\) and its tools are a rigorous foundation for runtime monitoring, shielding, and neural network verification. Doing so sheds light on inconsistencies between the provided specification and simulation environment highway-env of the ABZ’25 study. We attempt to fix these inconsistencies and uncover numerous counterexamples indicative of issues in the provided reinforcement learning environment.