MASS UK Industry Conduct Principles and Code of Practice 2022 (V6)

“Emergency Stop” means the ability to reduce propulsion to a safe state in a timely manner. In this context:
n “a safe state” means a level at which it is not likely to cause damage either directly or indirectly. Note that some
MASS (e.g. wave propelled) may not have any means of cutting propulsion power to zero; but in a harbour or
sheltered waters the wave propulsive power may reasonably be expected to be a safely low level;
n “in a timely manner” means within a time that is short enough to ensure that the risk from uncontrolled propulsive
power can be contained before it is likely to cause damage. In open ocean conditions this may be relaxed, whereas
in a docking situation the propulsion may need to be cut more quickly, within seconds or less;
n “Full Shut Down” means the ability to turn off all systems as required on the MASS remotely, for example in the
case of a fire.
“Fail Safe” is a design feature or practice that in the event of a specific type of failure, inherently responds in a way that
will cause no or minimal harm to other equipment, to the environment or to people. Unlike inherent safety to a particular
hazard, a system being "fail-safe" does not mean that failure is impossible or improbable, but rather that the system's
design prevents or mitigates unsafe consequences of the system's failure. That is, if and when a "fail-safe" system fails,
it remains at least as safe as it was before the failure. Since many types of failure are possible, failure mode and effects
analysis are used to examine failure situations and recommend safety design and procedures.
Definitions for Level of Control (LoC) are shown at Table 1-4 and should be considered alongside the Degrees of
Autonomy in Table 1-2. In practice, levels of control may be different for different functions aboard the same MASS (e.g.
a MASS navigating under LoC4, may also deploy a payload that is controlled at LoC2). The LoC applied to the MASS
may also change during a voyage (e.g. LoC 1 in a VTS, but LoC 4 in open ocean passage).
“Maritime Autonomous Systems (MAS)” general term is used to refer to systems of a remotely operated, semiautonomous,
or autonomous nature.
“MoD Maritime Levels of Automation” – the following Levels of Automation are proposed by the Royal Navy to
categorise maritime air, surface and underwater automated systems, whilst allowing the manning state to be decoupled
from the complexity of automation in use. The Automation State and Oversight Condition are specified in tandem to
describe the current system state (e.g. Automation Level 4D).
Table 1-5: MoD Maritime Levels of Automation
Automation
State
Description
Oversight
Condition
Description
"Length" and "(L)" in relation to a ship means the greater of the following distances:
n 96% of the total length on the waterline at 85% of the least moulded depth measured from the top of the keel, OR
the length from the fore-side of the stem to the axis of the rudder stock on that waterline.
n Where the stem contour is concave above the waterline at 85% of the least moulded depth, both the forward terminal
of the total length and the fore-side of the stem respectively shall be taken at the vertical projection to that waterline
of the aftermost point of the stem contour (above that waterline). In ships designed with a rake of keel the waterline
on which this length is measured shall be parallel to the designed waterline;
“Levels of control” A number of systems for categorising the level of control applicable to MASS have been developed,
notably by the European Defence Agency’s Safety and Regulations for European Crewless Maritime Systems (SARUMS)
group.
Table 1-4: Level of Control Definitions
1 – None
2 – Follow tasks
(directed)
There is no automation in use. All
activity is under the direct control
of an operator. MAS will generally
not fall into this category, but the
operator may decide to revert to
this state when in Oversight
Condition B or C, such as for
safety or tactical reasons.
The MAS employs rudimentary
automation which is not “selfdirected”,
but instead requires
operator command and control.
This includes basic activity such
as maintaining a course or following
a track, with little or no regard
to the operating environment.
A – On-board
control
B – Off-board,
Close Control
The MAS is controlled by onboard
operators.
Close Control: A form of Mission
Control in which the MAS is
continuously controlled, for
example in speed and heading,
in order for the mission to be
accomplished. Supervision by
the operator is continuous in this
Oversight Condition.
Level Name Description
0 Crewed MASS is controlled by operators aboard
1 Operated
Under Operated control all cognitive functionality is within the human operator. The
operator has direct contact with the MASS over e.g., continuous radio (R/C) and/or cable
(e.g., tethered UUVs and ROVs). The operator makes all decisions, directs and controls
all vehicle and mission functions.
2 Directed
3 Delegated
4 Monitored
5 Autonomous
Under Directed control some degree of reasoning and ability to respond is implemented
into the MASS. It may sense the environment, report its state and suggest one or several
actions. It may also suggest possible actions to the operator, such as e.g. prompting the
operator for information or decisions. However, the authority to make decisions is with the
operator. The MASS will act only if commanded and/or permitted to do so.
The MASS is now authorised to execute some functions. It may sense environment, report
its state and define actions and report its intention. The operator has the option to object
to (veto) intentions declared by the MASS during a certain time, after which the MASS
will act. The initiative emanates from the MASS and decision-making is shared between
the operator and the MASS.
The MASS will sense environment and report its state. The MASS defines actions,
decides, acts and reports its action. The operator may monitor the events.
The MASS will sense environment, define possible actions, decide and act. The Crewless
Vessel is afforded a maximum degree of independence and self-determination within the
context of the system capabilities and limitations. Autonomous functions are invoked by
the on-board systems at occasions decided by the same, without notifying any external
units or operators.
3 – Seek goals
(delegated)
4 – Plan,
execute
and exploit
(autonomous)
The MAS conducts largely preprogrammed
missions, employing
automation to seek defined goals,
for example: surveying an area,
intercepting a target, or safely
navigating to a location.
The MAS can sense the
environment, identify possible
activity, decide and act in order to
achieve the operator’s specified
intent. Depending on the capabilities
of the system, the MAS can
also determine follow-on actions
without recourse to the operator
in order to exploit the situation,
such as shadowing and reporting
a located vessel of interest or
conducting clearance of detected
mine-like objects.
C – Off-board,
Loose Control
D – None
Loose Control: A form of Mission
Control in which the MAS
determines its own actions, e.g.
speed, heading and the appropriate
tactics required to accomplish the
assigned task. Supervision may
be intermittent in this Oversight
Condition, and one operator may
supervise multiple systems.
The MAS is operating without
operator supervision.
20
MASS UK Industry Conduct Principles and Code of Practice Version 6
MASS UK Industry Conduct Principles and Code of Practice Version 6
21