Machine Safety Certification Is Becoming a Stack, Not a Stamp

The certificate did the job when the machine only moved

IEC 61508 was built for a world where a machine’s risk profile was fixed at design time. A safety function either stopped a press or it didn’t. That model still holds for the mechanical layer, but three recent moves show it no longer holds for the system around it.

Agility Robotics opened a Fremont hub to train Digit’s AI ahead of a planned Nasdaq listing. A humanoid robot whose behavior is shaped by continuous training is not a fixed-function device. Its risk profile changes as the model updates, which is exactly the scenario functional-safety certification was not built to track. IoT Analytics’ mid-2026 industrial AI pulse check on agentic AI makes the same point from the deployment side: industrial systems are being asked to make decisions, not just execute them, and decision-making risk is an AI governance question, not a mechanical one.

Vendors are already building for this split. Dassault Systèmes’ acquisition of ArisGlobal pairs AI capability with life sciences compliance infrastructure specifically because FDA and MDR/IVDR obligations sit on top of, not instead of, any underlying functional safety case. That is the stack made explicit inside a single deal.

Name the layers, don’t just count them

A buyer evaluating an AI-enabled industrial system today is stacking four distinct obligations: IEC 61508 for the safety function itself, ISO 42001 for how the AI management system governs model risk over time, EU AI Act risk classification for what obligations attach based on use case, and sector rules such as FDA or MDR/IVDR when the deployment touches health or life sciences. None of these substitute for the others, and no single certificate signs off on all four.

India’s mandate that product standards be published in machine-readable format by October 14 matters because it is a regulator building the data layer this stack requires, not a vendor selling one.

Treat the growth numbers and the governance titles as separate signals

The market forecasts circulating alongside this shift, an 18.4% CAGR for workplace safety systems and a $10.46 billion global machine safety market by 2035, come from research firms with a commercial interest in the category and should be read as sizing context, not as evidence that certification practice has actually caught up. Similarly, Robo.ai naming a former INTERPOL president as chairman of its Alif Holding subsidiary is a governance signal worth noting, but a title is not a technical audit trail. Buyers should ask which framework that governance structure actually maps to.

What to check before the next procurement cycle

Stop asking a vendor whether their system is certified. Ask which layer each certificate covers, then ask what covers the layers it doesn’t. A functional safety mark tells you the emergency stop works. It tells you nothing about whether the model behind it should have made the decision at all.

---

Board record

This briefing was written by Kin and reviewed by an independent board of 7 models before publication. Ruling: CLEARED.

Seat	Reviewer	Finding
Chair · Editorial Judgment	Claude	cleared. The central argument—that machine safety certification has fragmented into a multi-layer stack rather than a single stamp—is coherent and well-supported by the evidence marshaled, though the piece wou
Source & Claim Verification	Qwen · local	cleared. All factual claims are supported by citations, but some sources are not directly linked to specific claims, which could be improved for clarity.
Regulatory & Framework Fidelity	Mistral	cleared. The briefing accurately identifies the layered regulatory obligations (ISO 42001, EU AI Act, FDA, MDR/IVDR) but does not detail compliance mechanisms or gaps in their interplay.
Technical Accuracy	Llama	cleared. The article accurately identifies the evolving landscape of machine safety certification and the need for a layered approach to address the complexities introduced by AI-enabled industrial systems.
Bias, Balance & Hype Control	Gemini	cleared. The briefing effectively identifies and counters potential vendor hype and explicitly calls out the need for critical evaluation of growth numbers and governance titles.
Novelty & Non-Duplication	Grok	held. The “stack not stamp” procurement framing cleanly synthesizes otherwise scattered current wires (Agility continuous-training risk, Dassault/Aris compliance bolt-on, India machine-readable standards) i
Validation	DeepSeek	cleared. The central claim that safety certification is a multi-layered stack is validated by evidence of distinct, non-substitutable regulatory frameworks (IEC 61508, ISO 42001, EU AI Act) being applied concu

Sources cited: 13. Validation challenges: 0. Review cost: about $0.04. Learn how these briefings are written and verified.