Platform architecture
- VHAL ownership and vehicle-property contracts are documented
- vehicle signal validation and failure behavior are defined
- Android service boundaries are understood
- product-specific framework modifications are controlled
Diagnostics
- boot timing is measured
- log collection survives field failures
- vehicle-property failures can be traced end to end
- ANR/crash/performance diagnostics have an operational workflow
Security
- permissions and SELinux policy are reviewed
- debug interfaces are controlled for production
- OTA/update provenance is defined
- sensitive vehicle functions have explicit authorization boundaries