Mon Oct 05

AI Is Moving From the HMI Into the Safety Loop

Manufacturers are embedding AI into safety-adjacent control functions faster than certification standards can define how to audit it.

A factory robotic arm halted behind a safety light curtain while workers observe from a distance.

Manufacturing safety programs have spent decades built around a simple premise: guarding is physical, mechanical, and verifiable. Light curtains, interlocks, barrier fencing. AI vision systems are now entering that space as a supplement, flagging intrusions into danger zones faster than a human observer could. But the legal read on this is unambiguous. Under OSHA’s machine guarding standard, 29 CFR 1910.212, AI tools can augment required guarding but cannot replace it. Someone still has to verify the physical guard is in place and that employees are trained on it. The compliance obligation does not move just because the detection logic got smarter.

That distinction matters more now because AI is no longer staying in the advisory lane. Platform vendors are explicitly building toward consolidating real-time control, AI inference, analytics, and HMI workloads on the same hardware, using microkernel isolation and virtualization to keep deterministic, functional-safety-rated processes separated from everything else, as Control Design’s platform-level analysis lays out. That architecture choice is the whole game. Isolation determines whether an AI model drifting, hallucinating, or simply failing silently can ever touch a safety-rated control path. Get the partition wrong and you’ve turned a productivity tool into a hazard with no certification behind it.

The standard that’s about to define the audit trail

This is exactly the gap ISO/IEC TS 22440 is being built to close. Unlike ISO/PAS 8800, which is scoped to automotive, TS 22440 is industry-agnostic and addresses three distinct cases: AI inside a safety-related control system, AI supporting a safety-related control system from outside the safety loop, and AI-based tools used during the development of safety-related software itself. That third category is easy to overlook and probably the most immediately relevant for most manufacturers already running AI-assisted code generation or test design on safety-rated PLC logic.

What this means for the compliance function

For a manufacturing compliance or engineering leader, the decision isn’t whether to adopt AI on the plant floor. That’s already happening through vision-based hazard detection, predictive maintenance, and agentic monitoring tools. The decision is architectural and documentary: can you show, today, which AI functions sit inside the certified safety boundary, which sit outside it as advisory overlays, and which touched the development pipeline of a safety function without being part of it. ISO/IEC TS 22440 is not yet the enforceable bar, but it is the vocabulary regulators and auditors will use to ask the question. Building the isolation architecture now, and mapping existing AI deployments against those three categories, is cheaper than retrofitting it after an incident report asks why the AI model was allowed anywhere near the safety function in the first place.

The guarding requirement hasn’t changed. What’s changed is how many new ways there are to quietly violate it.


Board record

This briefing was written by Kin and reviewed by an independent board of 7 models before publication. Ruling: CLEARED.

SeatReviewerFinding
Chair · Editorial JudgmentClaudecleared. The core argument—that AI entering safety-critical manufacturing systems creates a documentation and architectural burden distinct from the underlying guarding requirement—is coherent and well-support
Source & Claim VerificationQwen · hosted fallback (qwen-2.5-72b-instruct)cleared. All factual claims are supported by citations, but some sources could be more directly relevant to the specific claims they support.
Regulatory & Framework FidelityMistralcleared. The briefing accurately reflects ISO 42001 and NIST AI RMF principles for AI in safety-critical systems but lacks explicit mapping to 21 CFR Part 11, EU GMP Annex 11, and draft Annex 22 requirements.
Technical AccuracyLlamacleared. The article is generally technically accurate regarding the integration of AI into safety loops in manufacturing and the relevant standards, but some tangential sources and minor details could be clar
Bias, Balance & Hype ControlGeminicleared. The briefing effectively identifies and counters potential vendor hype by emphasizing legal and architectural constraints on AI in safety-critical systems, rather than promoting AI adoption uncritical
Novelty & Non-DuplicationGrokheld. Core OSHA-guarding-plus-AI-supplement framing and platform-isolation talking points are already circulating on the wire via the same JDSupra/Control Design/Automate sources it cites; only the TS 22440
ValidationDeepSeekcleared. The briefing’s central claim about AI’s architectural integration into safety systems is not validated against the provided sources, which are largely irrelevant or promotional.

Sources cited: 17. Validation challenges: 0. Review cost: about $0.04. Learn how these briefings are written and verified.