Capability-based telemetry with SOTIF-compatible performance budgets

Develop and evaluate capability-based telemetry policies that coarsen quality-management views while preserving ASIL governor fidelity, and quantify the latency and thermal-margin costs of DVFS-domain isolation and delayed or coarsened sysfs views under ISO/PAS 21448 envelopes.

Background

Thermal governors and thermal-event interrupts must remain operational for package protection and safety, yet their outputs can expose workload information to lower-trust co-tenants. The paper proposes restricting the telemetry view available to quality-management partitions without degrading the high-fidelity state available to ASIL governors. No open reference implementation currently demonstrates that this separation can meet both confidentiality and SOTIF-related latency and thermal-margin requirements.

References

Capability policies that coarsen QM views while preserving ASIL governor fidelity lack open reference implementations.

— Can Autonomous Vehicles Keep Their Cool? A Survey of Thermal Side-Channel and Perception Attacks  (2610.21034 - Aaryan et al., 15 Oct 2026) in Section 6, subsection “Open Problems,” item “Capability-based telemetry and SOTIF budgets”