Local master authority that does not depend on the model or the satcom
A physical, on-board halt and helm that works when the shore SOC, the agent, and the uplink do not. One tired remote watchstander is not the last control for a fleet.
No compiled flow or public database names this control yet.
Risk this mitigates
24Given that the IMO MASS Code is in force for cargo ships, GNSS/AIS spoofing is an operational fact in several seas, and language models are being wired onto ECDIS, remote-ops, and port automation, there is a possibility of an autonomous or remotely operated ship acting on a confident false fix, a ghost AIS contact, or a prompt that reaches steering resulting in collision, grounding, a blocked strait or port, pollution, and casualties — plus a trade shock if the failure clusters.
Residual composite 24 · still above the threshold
Effect if implemented
Applied to every failure scenario on that risk, then re-ranked. Axes are clamped at 1.
- Likelihood
- −1
- Consequence
- −1
- Urgency
- −0