Operational design domain first
We document where autonomy is intended to work — lighting, traffic, speed, weather for outdoor segments — and where humans must intervene. Expanding the ODD without updating maps and tests is treated as a programme risk, not a marketing milestone.