Skip to content

Sensor Calibration Fleet Operations

Last updated: 2026-05-09

Purpose

This page defines fleet operations for sensor calibration after vehicles leave the lab. Calibration is treated as a controlled artifact with release gates, telemetry, drift response, maintenance triggers, rollback rules, and safety-case evidence. The goal is to prevent calibration drift from becoming a silent perception, localization, or free-space failure.

Calibration Scope

Calibration itemExamplesRuntime dependency
IntrinsicsCamera intrinsics/distortion, LiDAR beam correction, radar mounting modelProjection, detection, segmentation, calibration monitors
ExtrinsicsLiDAR-camera, LiDAR-LiDAR, LiDAR-IMU, radar-camera, sensor-kit-to-baseFusion, SLAM, occupancy, obstacle shape, localization
Time offsetsSensor hardware timestamp offset, trigger skew, IMU/LiDAR temporal alignmentDeskew, tracking, scan matching, velocity estimation
Vehicle geometryBase frame, wheelbase, ego box, sensor occlusion maskCollision envelope, projection masks, route clearance
Map alignmentSensor kit to map frame, datum, map tile transformLocalization, geofence, docking, stand clearance

Operating Model

  1. Factory or installation calibration creates the baseline package.
  2. Commissioning verifies the package on the target vehicle, route, map, and sensor firmware.
  3. Runtime monitors watch calibration health continuously or periodically.
  4. Fleet operations classify drift as green, yellow, red, or unknown.
  5. Maintenance recalibrates or physically repairs the vehicle.
  6. Release management signs a new calibration package and updates the compatibility manifest.

Calibration updates follow the same SUMS discipline as software because they can change vehicle behavior.

Fleet Telemetry

FieldTypeNotes
calibration.package_idstringSigned calibration artifact
calibration.sensor_kit_idstringSensor kit and mount revision
calibration.sensor_serialsstring arrayAll sensors used by the package
calibration.frame_tree_hashstringHash of safety-relevant TF tree
calibration.last_verified_timetimestampLast successful validation
calibration.stateenumgreen, yellow, red, unknown
calibration.pair.<pair>.translation_error_mdoubleResidual or drift proxy
calibration.pair.<pair>.rotation_error_degdoubleResidual or drift proxy
calibration.pair.<pair>.time_offset_msdoubleEstimated temporal offset
calibration.pair.<pair>.confidencedoubleMethod-specific confidence or validity
calibration.prerequisite.reasonenumstationary, moving_fast, low_features, bad_weather, no_overlap, sensor_fault
diagnostics.calibration.levelenumROS/Autoware diagnostic level

Publish diagnostic states through ROS diagnostics and fleet metrics through a versioned OpenTelemetry-compatible schema.

Drift Classes

StateConditionVehicle actionFleet action
GreenResiduals inside release envelope and checks recently passedNormal operationEligible for release evidence
YellowResidual trend or intermittent validation failure but safety margins remainContinue with approved speed/margin limitsMaintenance ticket and canary watch
RedResidual exceeds hard threshold, wrong sensor/package, or transform invalidRemove modality or controlled stop per safety caseIncident, route hold, recalibration required
UnknownMonitor missing, no overlap/features, telemetry schema broken, stale verificationTreat as degraded; exclude from release evidenceRepair telemetry or schedule validation run

Runbook

TriggerFirst 5 minutesNext actionClosure evidence
LiDAR-camera miscalibration redPreserve image, point cloud, projection preview, calibration package IDStop autonomous use of affected fusion path; inspect mount and lens/coverRecalibration report and replay pass
LiDAR-LiDAR overlap residual highCheck sensor health, point density, TF tree, route geometryReduce speed or stop if occupancy/fusion depends on pairResidual back inside threshold over validation route
LiDAR-IMU time offset highCheck PTP/GNSS/PPS state and IMU driver timestamp sourceBlock map-building and localization release evidenceTiming validation and replay RPE pass
Wrong calibration package activeStop dispatch or force reload approved packageAudit OTA manifest and vehicle inventoryActive manifest matches signed compatibility matrix
Monitor unavailableMark calibration unknown and alert fleet SRERepair diagnostic producer or schema pipelineMonitor emits valid green/yellow/red state

Release Gates

GatePass conditionBlock condition
K0 provenanceCalibration package links vehicle, sensor kit, serials, firmware, method, operator/tool versionPackage cannot be traced to physical sensors
K1 static validationTarget-based or surveyed validation inside installation toleranceBaseline residual exceeds release threshold
K2 route validationTargetless route/overlap validation passes on representative apron geometryOnly lab target evidence for airside release
K3 downstream impactLocalization, free-space, object projection, and map alignment metrics do not regressCalibration passes alone but perception-SLAM regresses
K4 drift monitorRuntime monitor detects injected perturbations before unsafe outputRed drift is silent or action is not consumed
K5 maintenance recoveryRecalibration workflow restores package and evidence without manual database editsField support can leave invisible local override
K6 compatibilityOTA manifest prevents package on wrong vehicle/sensor/map/runtimeCross-vehicle calibration reuse possible

Maintenance Rules

  • Recalibrate after sensor replacement, mount adjustment, collision/strike, windshield/camera service, LiDAR bracket repair, IMU replacement, firmware timestamp-mode change, or map datum/frame change.
  • Do not auto-apply online calibration corrections to safety-relevant transforms unless a separate safety case validates correction limits, scene degeneracy checks, and rollback.
  • Keep local field overrides time-limited, ticketed, and visible as config drift.
  • Preserve before/after bags and projection/registration previews for every red calibration event.
  • Do not use calibration-red logs for map publication or release claims.

Evidence Artifacts

ArtifactContents
Calibration packageIntrinsics, extrinsics, time offsets, frame tree, sensor serials, signatures
Tool manifestCalibration tool version, method, parameters, operator, environment
Validation reportResiduals, confidence, route/scene coverage, prerequisites, failed attempts
Fault-injection reportPerturbation magnitude, monitor response, alert latency, false alarm notes
Maintenance ticketPhysical finding, replaced parts, photos, torque/fixture checks
Runtime trendResidual history, state transitions, route/weather context
Release recordCompatibility manifest, safety-case claim IDs, approval, rollback package
  • 20-av-platform/sensors/calibration-tracking.md
  • 20-av-platform/sensors/multi-lidar-calibration.md
  • 40-runtime-systems/ros-autoware/autoware-localization-timing-diagnostics.md
  • 50-cloud-fleet/observability/slam-timing-health-dashboard.md
  • 60-safety-validation/verification-validation/multi-sensor-calibration-release-benchmark.md
  • 60-safety-validation/runtime-assurance/monitor-qualification-evidence.md

Sources

Public research notes collected from public sources.