Safe because of how it's built, not how it's configured.
The principle
AI models are good at planning and judging. They are slow and occasionally wrong. So they never touch anything that moves in real time. Braking, balance and obstacle avoidance run in proven controllers on the robot, and every command is checked before the robot moves.
Three outcomes
The robot can always stop
The safety layer runs on the robot, with no AI and no internet in the loop. If commands stop arriving from a crashed process or a dead link, the robot stops within about a second. An operator can still drive it. Fail safe, not fail moving.
A human always outranks the AI
The emergency stop, then the operator, then the mission, then the AI. Each outranks the one below, and the emergency stop cuts power regardless of software.
It cannot do anything it hasn't been allowed to do
The AI can only use the robot functions it has been granted. Asked to "open the roller door and chase the intruder", it refused before the robot moved. "Never pursue" isn't a policy document. It's a function the AI doesn't have.
Human in the loop, always
Any operator can take over any robot at any time, in plain language with every safety check still in place, or by joystick on a path that bypasses the AI entirely.
Autonomy is earned, camera by camera. When a camera alert can send the robot, the rule starts alert-only. "Send the robot" is switched on for that camera once your operator has watched it behave, and can be switched off again in a sentence.
When the link drops
If the robot stops hearing from its operator, it holds. If the link stays down, it returns home on its own, and when the link comes back it reports what it did while it was out of contact. Proven on the real robot, in the dark, on battery.
For people on site
Robots alert and hold. They never pursue, and the protect-the-guard rule puts your people's safety above any detection.
The three outcomes and the lost-link behaviour are proven in simulation and on the real robot; the hardware emergency stop is validated on the first physical robot; rules of engagement are designed.
Ready to see robots patrolling your site?
Before any hardware is bought, we can build a simulated copy of your site and show the fleet patrolling it at night while you configure the checks in plain language.