Search arXivSearch

arXiv · 2410.20288

Who is Responsible? Explaining Safety Violations in Multi-Agent Cyber-Physical Systems

Abstract

Multi-agent cyber-physical systems are present in a variety of applications. Agent decision-making can be affected due to errors induced by uncertain, dynamic operating environments or due to incorrect actions taken by an agent. When an erroneous decision that leads to a violation of safety is identified, assigning responsibility to individual agents is a key step toward preventing future accidents. Current approaches to carrying out such investigations require human labor or high degree of familiarity with operating environments. Automated strategies to assign responsibility can achieve a significant reduction in human effort and associated cognitive burden. In this paper, we develop an automated procedure to assign responsibility for safety violations to actions of any single agent in a principled manner. We base our approach on reasoning about safety violations in road safety. Given a safety violation, we use counterfactual reasoning to create alternative scenarios, showing how different outcomes could have occurred if certain actions had been replaced by others. We introduce the degree of responsibility (DoR) metric for each agent. The DoR, using the Shapley value, quantifies each agent's contribution to the safety violation, providing a basis to explain and justify decisions. We also develop heuristic techniques and methods based on agent interaction structures to improve scalability as agent numbers grow. We examine three safety violation cases from the National Highway Traffic Safety Administration (NHTSA). We run experiments using CARLA urban driving simulator. Results show the DoR improves the explainability of decisions and accountability for agent actions and their consequences.

Explore related subjects

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Luyao Niu, Hongchao Zhang, Dinuka Sahabandu, Bhaskar Ramasubramanian, Andrew Clark, Radha Poovendran. 2024-10-26. Who is Responsible? Explaining Safety Violations in Multi-Agent Cyber-Physical Systems. https://arxiv.org/abs/2410.20288

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related papers

Cooperative Multi-Agent Assignment over Stochastic Graphs via Constrained Reinforcement Learning

Constrained multi-agent reinforcement learning offers the framework to design scalable and almost surely feasible solutions for teams of agents operating in dynamic environments to carry out conflicting tasks. We address the challenges of multi-agent coordination through an unconventional formulation in which the dual variables are not driven to convergence but are free to cycle, enabling agents to adapt their policies dynamically based on real-time constraint satisfaction levels. The coordination relies on a light single-bit communication protocol over a network with stochastic connectivity. Using this gossiped information, agents update local estimates of the dual variables. Furthermore, we modify the local dual dynamics by introducing a contraction factor, which lets us use finite communication buffers and keep the estimation error bounded. Under this model, we provide theoretical guarantees of almost sure feasibility and corroborate them with numerical experiments in which a team of robots successfully patrols multiple regions, communicating under a time-varying ad-hoc network.

eess.SY

Which Top Energy-Intensive Manufacturing Countries Can Compete in a Renewable Energy Future?

In a world increasingly powered by renewables and aiming for greenhouse gas-neutral industrial production, the future competitiveness of todays top manufacturing countries is questioned. This study applies detailed energy system modeling to quantify the Renewable Pull, an incentive for industry relocation exerted by countries with favorable renewable conditions. Results reveal that the Renewable Pull is not a cross-industrial phenomenon but strongly depends on the relationship between energy costs and transport costs. The intensity of the Renewable Pull varies, with China, India, and Japan facing a significantly stronger effect than Germany and the United States. Incorporating national capital cost assumptions proves critical, reducing Germanys Renewable Pull by a factor of six and positioning it as the second least affected top manufacturing country after Saudi Arabia. Using Germany as a case study, the analysis moreover illustrates that targeted import strategies, especially within the EU, can nearly eliminate the Renewable Pull, offering policymakers clear options for risk mitigation.

eess.SY

Certifying Frequency Stability for Systems with Line Dynamics and Heterogeneous Bus Dynamics

This work presents a framework for certifying small-signal frequency stability of a power system with line dynamics and heterogeneous bus dynamics. This framework can certify the stability of systems which include synchronous generators, synchronous condensers, and converter-interfaced resources with a wide range of controls. Moreover, it can do so without detailed or precise knowledge of the network topology. With this framework, we also provide a detailed analysis of how proportional-derivative (PD) droop can improve the stability margin of the frequency response. The stability certificates presented in this work, which extend prior results by incorporating line dynamics, provide insight into how the control parameters for different units in the system impact the overall frequency stability. While damper windings have long been understood to improve the frequency synchronization between machines, the dynamics of the damper windings are complex, making them difficult to analyze. To address this gap, this paper derives a novel reduced-order model of the damper windings in the form of a derivative droop term. Moreover, we show that derivative droop terms used in grid-forming (GFM) control can be understood as a form of damper winding emulation. Our analytical stability conditions highlight the importance of damper windings (or their emulation) in facilitating frequency synchronization and suppressing unstable interactions between GFM converters. These results are validated with electromagnetic-transient (EMT) simulation.

eess.SY