We consider the pressing question of how to model, verify, and ensure that autonomous systems meet certain \textit{obligations} (like the obligation to respect traffic laws), and refrain from impermissible behavior (like recklessly changing lanes). Temporal logics are heavily used in autonomous system design; however, as we illustrate here, temporal (alethic) logics alone are inappropriate for reasoning about obligations of autonomous systems. This paper proposes the use of Dominance Act Utilitarianism (DAU), a deontic logic of agency, to encode and reason about obligations of autonomous systems. We use DAU to analyze Intel's Responsibility-Sensitive Safety (RSS) proposal as a real-world case study. We demonstrate that DAU can express well-posed RSS rules, formally derive undesirable consequences of these rules, illustrate how DAU could help design systems that have specific obligations, and how to model-check DAU obligations.

中文翻译：

---

自主系统安全的道义逻辑分析

我们考虑如何建模、验证和确保自主系统满足某些 \textit{obligations}（如遵守交通法规的义务），并避免不允许的行为（如鲁莽改变车道）的紧迫问题。时序逻辑在自主系统设计中大量使用；然而，正如我们在此说明的，单独的时间（alethic）逻辑不适用于推理自治系统的义务。本文建议使用支配行为功利主义 (DAU)，一种代理的道义逻辑，对自治系统的义务进行编码和推理。我们使用 DAU 将英特尔的责任敏感安全 (RSS) 提案作为真实案例研究进行分析。我们证明了 DAU 可以表达良定的 RSS 规则，正式推导出这些规则的不良后果，