Comment on NHTSA Zoox FMVSS Exemption Petition

Box Commons is a Wyoming nonprofit corporation in formation as a Section 501(c)(6) standards body for credentialing and conformance assessment of autonomous and AI-enabled systems. We submit this comment in response to NHTSA's notice seeking public comment on Zoox, Inc.'s petition for a temporary exemption from portions of eight Federal Motor Vehicle Safety Standards.

Box Commons does not oppose Zoox's petition, and takes no position on the engineering merits of Zoox's specific compensating measures. We write to suggest that NHTSA's authority under 49 U.S.C. § 30113 to grant a temporary exemption "on terms [NHTSA] considers appropriate" presents an opportunity to formalize a third-party conformance attestation pattern complementary to NHTSA's existing FMVSS framework.

In a conventional vehicle, the FMVSS framework presumes a human driver who serves as the locus of attribution for operational safety: a brake pedal exists because a person presses it, mirrors exist because a person looks through them, an airbag warning label exists because a person reads it. When the human driver is removed by design, both the prescriptive standard and its underlying attribution model fall away together.

The question NHTSA confronts is not whether the petitioner's compensating measures are theoretically sound. The further question is whether those compensating measures, once accepted, can be independently verified, monitored, and re-verified throughout the vehicle's operational life by parties other than the petitioner itself. Traditional self-certification rests on the deterministic, physically testable nature of conventional vehicle hardware. Compensating measures for ADS-equipped vehicles are largely behavioral and software-defined: their safety properties are emergent rather than fixed at certification time.

We propose a four-element conformance pattern that NHTSA could condition any temporary exemption upon:

(a) Published technical criteria. Compensating measures should be assessable against published, version-controlled technical criteria — for example, ISO 21448:2022 (SOTIF), which addresses hazards arising from the intended functionality of road vehicles in the absence of system fault.

(b) Independent assessment by an accredited body. Compliance should be assessed by a body operating under ISO/IEC 17065:2012, governed by accreditation under ISO/IEC 17011:2017 — the same architecture underlying FedRAMP, FIPS 140-3, and Common Criteria evaluations.

(c) Machine-readable attestation. The result should be expressed as a cryptographically verifiable record that can travel with vehicles across jurisdictions and be revoked when compensating measures are updated.

(d) Continuous reporting under published terms. The conformance pattern should include continuous reporting of operational data (disengagement counts, near-miss telemetry, OTA update events) against published criteria.

Box Commons is being formed expressly to operate as a neutral, multi-tenant standards body in this domain. Our governance structure satisfies ANSI accreditation independence and impartiality requirements. We hold no commercial stake in any specific ADS architecture, and our incorporating documents commit us to technology-agnostic operation.

We respectfully offer to participate, at no cost to NHTSA, in any pilot to evaluate third-party conformance attestation for ADS exemption petitions — including draft published criteria, an example machine-readable attestation schema, and a sample continuous-reporting protocol.