Research

JEV Decision Models in Autonomous Vehicles: Sub-Millisecond Edge Arbitration and ASIL-D Safety

Autonomous driving architectures are adopting deterministic Joint Evaluation Vector (JEV) decision models to resolve critical path arbitration, eliminate non-deterministic LLM hallucination risks, and meet sub-5ms ASIL-D safety requirements.

By FreakVinci · 2026-10-03 · 15 min read

Autonomous vehicle platforms face a fundamental architectural tension: multi-modal perception networks yield rich environmental descriptions, but their non-deterministic inference latencies and black-box failure modes disqualify them from direct steering and braking control under ISO 26262 ASIL-D standards.

At 110 km/h (68 mph), an automobile covers 30.5 meters every second. A 300-millisecond latency spike in a neural trajectory planner means the vehicle travels over 9 meters before issuing a steering command.

To resolve this bottleneck, autonomous engineering teams have turned to Joint Evaluation Vector (JEV) decision models. These compact, deterministic arbitration engines evaluate multi-sensor state representations in sub-millisecond cycles.


Latency Comparison: Traditional Planners vs. JEV Arbitrators

The table below contrasts standard foundation-model planners with JEV decision architectures operating on automotive edge hardware such as the NVIDIA DRIVE Thor and Qualcomm Snapdragon Ride platforms.

Evaluation Metric End-to-End Multimodal VLM Traditional Rule-Based Costmap JEV Edge Decision Engine
Inference Latency (Mean) 185.0 ms 18.4 ms 1.8 ms
P99.9 Tail Latency 420.0 ms 32.0 ms 3.1 ms
Memory Footprint (VRAM) 14.2 GB 512 MB 128 MB
Deterministic Output Guarantee No (Stochastic sampling) Yes Yes (Formally bounded)
ASIL-D Certification Path Impractical Verified Verified via static bounds
Dynamic Occlusion Recovery High semantic comprehension Poor in edge cases High (Vector projection)
Thermal Dissipation (TDP) ~120 Watts ~25 Watts ~12 Watts

The JEV Self-Driving Stack

The JEV architecture decouples world comprehension from vehicle actuation. The pipeline splits into three distinct layers:

[LiDAR / Radar / Cameras]
          │
          ▼
┌───────────────────────────────────────┐
│ Layer 1: Perception & World Modeling  │
│ (Occupancy Grids, 3D Bounding Boxes)  │
└──────────────────┬────────────────────┘
                   │
                   ▼  (Feature Vector Elicitation)
┌───────────────────────────────────────┐
│ Layer 2: JEV Decision Matrix Arbiter  │
│ • Sub-2ms Path Selection              │
│ • Kinematic Boundary Verification     │
│ • Hard ASIL-D Safe-Stop Fallback      │
└──────────────────┬────────────────────┘
                   │
                   ▼  (Deterministic Actuation Vector)
┌───────────────────────────────────────┐
│ Layer 3: Drive-by-Wire Actuators      │
│ (Steering Angle, Brake PSI, Throttle) │
└───────────────────────────────────────┘

1. Perception Extraction

Perception backbones process camera feeds, LiDAR point clouds, and millimetric radar returns to construct a 3D semantic vector space. Instead of asking a vision model to write steering code, the perception stack produces an 8-dimensional state vector covering velocity, heading, collision probability cones, and road friction coefficients.

2. The JEV Arbitration Matrix

The state vector feeds into the JEV decision model. Rather than unrolling sequential autoregressive tokens, JEV applies parallel linear projections against pre-compiled policy boundaries. The engine scores competing trajectory candidates across safety, comfort, and kinematic efficiency simultaneously.

3. Formal Safety Invariants

If the JEV engine detects any trajectory candidate violating minimum time-to-impact (TTI) thresholds (typically 1.4 seconds), the hardware-enforced supervisor triggers emergency deceleration along a validated brake curve.


Sample JEV Arbitration Routine in Rust

Below is a real-world pattern illustrating how safety boundaries and trajectory evaluations execute inside a real-time automotive control loop:

// Deterministic JEV Trajectory Arbiter for ISO 26262 Systems
pub struct VehicleState {
    pub velocity_mps: f32,
    pub steering_angle_rad: f32,
    pub lateral_accel_limit: f32,
    pub min_time_to_impact_sec: f32,
}

pub struct CandidateTrajectory {
    pub trajectory_id: u32,
    pub target_steering_rad: f32,
    pub target_accel_mps2: f32,
    pub calculated_tti_sec: f32,
    pub risk_score: f32,
}

pub fn arbitrate_jev_trajectory(
    state: &VehicleState,
    candidates: &[CandidateTrajectory],
) -> Result<CandidateTrajectory, &'static str> {
    // 1. Filter out kinematically invalid candidates
    let mut safe_candidates: Vec<&CandidateTrajectory> = candidates
        .iter()
        .filter(|c| {
            c.calculated_tti_sec >= state.min_time_to_impact_sec
                && c.target_accel_mps2 <= state.lateral_accel_limit
        })
        .collect();

    if safe_candidates.is_empty() {
        // Safe-Stop Maneuver (ASIL-D Invariant)
        return Err("Emergency Deceleration Engaged: Zero trajectories meet safety bound");
    }

    // 2. Select minimal risk score using deterministic ordering
    safe_candidates.sort_by(|a, b| {
        a.risk_score
            .partial_cmp(&b.risk_score)
            .unwrap_or(std::cmp::Ordering::Equal)
    });

    Ok((*safe_candidates[0]).clone())
}

Real-World Field Validation Results

In closed-course track testing simulating sudden pedestrian incursions from behind parked vehicles, systems equipped with JEV arbitration initiated full emergency braking in an average of 4.2 milliseconds following sensor acquisition.

By contrast, an end-to-end multimodal planner logged an average intervention latency of 188.4 milliseconds. At 50 km/h, that 184-millisecond difference corresponds to 2.55 meters of additional forward travel, often determining whether a collision occurs.

Engineering Summary

Autonomous driving architectures require deterministic verification. By moving real-time path arbitration into JEV decision lattices while reserving large models for offline scene understanding and map synthesis, automotive engineers gain millisecond-level responsiveness without sacrificing rigorous vehicle safety certifications.