Business Rules - Automotive

This document lists the fundamental business rules of the automotive domain, identified by a unique code BR-NNN. Each rule is technology-independent and describes an invariant constraint on system behaviour.

---

BR-001 - Mandatory type approval before commercialisation

Code: BR-001 Name: No vehicle may be placed on the EU market without a valid approval Description: Before being placed on the market, each vehicle type must obtain an approval (WTA, SSTA or IVA) issued by the approval authority of an EU Member State. The individual Certificate of Conformity (COC) must be issued for every vehicle produced. Rationale: Ensure the safety of vehicles in circulation and compliance with harmonised technical requirements across the EU. Priority: CRITICAL Actors: OEM Manufacturer, HomologationAuthority Violation: The manufacturer cannot register, sell, or deliver vehicles without a valid COC. Traceability: EU Regulation 2018/858 Art. 6; type-approval.md; BR-003.

---

BR-002 - VIN must be globally unique and immutable

Code: BR-002 Name: The VIN must be globally unique and cannot be modified after production Description: Each manufactured vehicle receives a VIN (Vehicle Identification Number) conforming to ISO 3779:2009. The VIN is assigned once during production and cannot be modified. Its structure (WMI + VDS + VIS) guarantees global uniqueness and manufacturer traceability. Rationale: Enable vehicle traceability throughout its entire useful life (recalls, maintenance, historical records, end of life). Priority: CRITICAL Actors: OEM Manufacturer Violation: A vehicle with a duplicate or altered VIN cannot be registered. VIN alteration is a criminal offence in many jurisdictions. Traceability: ISO 3779:2009; EU Regulation 2018/858 Art. 3(22); production.md.

---

BR-003 - COC CO2 values must match the approved type

Code: BR-003 Name: CO2 emissions in the individual COC must match the approved type values Description: The Certificate of Conformity (COC) issued for each produced vehicle must report CO2 emission values (WLTP cycle) and fuel consumption conforming to those certified in the type approval. Variations beyond permitted tolerance require re-examination of the approval. Rationale: Ensure declared emission values match the approved type. Prevent testing cycle manipulation (reference: 2015 emissions scandal). Priority: HIGH Actors: OEM Manufacturer, HomologationAuthority Violation: Systematic divergences may lead to approval revocation and penalties under EU Regulation 2018/858 Art. 84. Traceability: EU Regulation 2018/858 Annex IX; UNECE GTR 15 (WLTP); EU Regulation 2017/1151.

---

BR-004 - Recall notification within 10 days of discovery

Code: BR-004 Name: The manufacturer must notify a recall to the authority within 10 days of discovery Description: When a manufacturer identifies a defect compromising the safety or regulatory compliance of already-sold vehicles, it must formally notify the competent approval authority within 10 days. The notification must include: defect description, affected vehicles, proposed corrective action, timeline. Rationale: Minimise risk to end users by reducing the time between defect discovery and corrective action. Priority: CRITICAL Actors: OEM Manufacturer, HomologationAuthority Violation: Failure to notify within the deadline exposes the manufacturer to administrative and criminal penalties. The EU Safety Gate database monitors notified recalls. Traceability: EU Regulation 2018/858 Art. 11; Safety Gate database (ex RAPEX); recall.md.

---

BR-005 - ASIL D required for steer-by-wire and brake-by-wire systems

Code: BR-005 Name: Electronic-only steering and braking systems require ASIL D Description: Systems where mechanical control is replaced or supplemented by an electronic system (steer-by-wire, brake-by-wire, ESC) must be designed and verified at ASIL D (maximum) level per ISO 26262, for the combination: severity S3 (fatal), exposure E4 (high), controllability C3 (difficult to control). Rationale: Loss of steering or braking control at speed is one of the gravest causes of fatal accidents. ISO 26262 mandates extremely rigorous development and verification processes for these systems. Priority: CRITICAL Actors: OEM Manufacturer, Tier 1 Supplier Violation: An ASIL D classified system that does not meet ISO 26262 process requirements cannot be approved. Traceability: ISO 26262:2018 Part 3; production.md; entities.md#component.

---

BR-006 - Euro 6/7 limits mandatory for ICE vehicles approved in the EU

Code: BR-006 Name: New ICE vehicles approved in the EU must comply with Euro 6d (until 2034) / Euro 7 emission limits Description: Internal combustion engine vehicles newly approved in the EU must comply with Euro 6d limits for NOx, HC, CO, PM and PN, measured in laboratory (WLTP) and under real driving conditions (RDE with conformity factors CF defined by EU Reg. 2017/1151). The Euro 7 proposal (COM(2022)586) introduces additional limits on brakes and tyres. Rationale: Reduce air pollution from road traffic, the main cause of NO2 threshold exceedances in EU urban areas. Priority: HIGH Actors: OEM Manufacturer, HomologationAuthority Violation: Vehicles not complying with applicable limits cannot obtain EU type approval. Traceability: EU Regulation 715/2007; EU Regulation 2017/1154 (Euro 6d-temp/6d); Proposal COM(2022)586 (Euro 7); type-approval.md.

---

BR-007 - Mandatory Cybersecurity Management System (UN R155)

Code: BR-007 Name: New vehicle types approved in the EU from July 2022 require a certified CSMS Description: UNECE Regulation 155 (UN R155) requires OEMs to implement a Cybersecurity Management System (CSMS) certified by a technical authority. The CSMS must cover the entire vehicle lifecycle: risk identification, mitigation measures, threat monitoring, and incident management. From July 2024 it applies to vehicles in continuous production. Rationale: Connected vehicles (V2X, OTA, telematics) introduce cyber attack surfaces with potential impact on the physical safety of occupants. Priority: HIGH Actors: OEM Manufacturer, HomologationAuthority Violation: Type approval is denied or revoked if the manufacturer cannot demonstrate a UN R155-compliant CSMS. Traceability: UNECE Reg. 155 (UN R155); type-approval.md; entities.md#vehicle.

---

BR-008 - Mandatory Software Update Management System (UN R156)

Code: BR-008 Name: Vehicles capable of OTA updates require a certified SUMS conforming to UN R156 Description: Vehicles capable of receiving Over-The-Air (OTA) software updates must have a Software Update Management System (SUMS) ensuring authenticity, integrity, non-retroactive modifiability, and rollback capability of updates. The SUMS must be certified by a technical authority under UNECE Reg. 156. Rationale: Prevent injection of malicious firmware or unauthorised degradation of safety systems. Priority: HIGH Actors: OEM Manufacturer, HomologationAuthority Violation: Vehicles with OTA capabilities non-compliant with UN R156 cannot be approved. Traceability: UNECE Reg. 156 (UN R156); entities.md#vehicle; BR-007.

---

BR-009 - COC mandatory for vehicle registration

Code: BR-009 Name: Each sold vehicle requires an individual Certificate of Conformity Description: The Certificate of Conformity (COC) is issued by the manufacturer for each individual vehicle produced. It certifies conformity to the approved type. It is the document required for registration in all EU Member States. Without a valid COC, the vehicle cannot travel on or be used on public roads. Rationale: Ensure that every vehicle in circulation meets the technical requirements for which the type was approved. Priority: CRITICAL Actors: OEM Manufacturer, Dealer, Registration Authority Traceability: EU Regulation 2018/858 Annex IX; production.md.

---

BR-010 - Mandatory energy recovery on BEV and HEV vehicles

Code: BR-010 Name: BEV and HEV vehicles must have a regenerative braking energy recovery system Description: Pure electric (BEV) and hybrid (HEV, PHEV) vehicles must integrate a regenerative braking system that converts kinetic energy into electrical energy during deceleration. The system is part of the energy efficiency measurement under the WLTP cycle. Rationale: Maximise energy efficiency and minimise energy consumption - a fundamental objective of CO2 emission regulations for electrified vehicles. Priority: MEDIUM Actors: OEM Manufacturer, Tier 1 Supplier Traceability: UNECE GTR 15 (WLTP, regenerative braking cycle); EU Regulation 2019/631; entities.md#powertrain.