{
 "public_id": "AIR-2025-0187",
 "incident_id": "2025-12-waymo-school-bus-passing-recall",
 "date_disclosed": "2025-12-04",
 "date_occurred": "2025-09",
 "title": "Waymo vehicles illegally passed stopped school buses at least 19 times, including five after a software fix Waymo said had resolved it",
 "class": "safety_failure",
 "attack_surface": "autonomous_ops",
 "initial_vector": "none_autonomous_action",
 "agent_capability_abused": [
  "autonomous_driving",
  "traffic_law_compliance",
  "scene_understanding"
 ],
 "target_product": "Waymo Driver",
 "target_vendor": "Waymo (Alphabet)",
 "autonomy_level": "fully_autonomous",
 "impact_realized": true,
 "impact_type": [
  "physical_safety"
 ],
 "blast_radius": "at least 19 recorded incidents across the 2025 school year in Texas and Georgia; children boarding and alighting school buses",
 "cve": [],
 "taxonomy": {
  "owasp_asi": [
   "ASI08"
  ],
  "mitre_atlas": [],
  "labels": [
   "no_adversary",
   "traffic_law_violation",
   "fix_did_not_hold",
   "regulatory_investigation",
   "children_at_risk",
   "fleet_wide"
  ]
 },
 "defense_present": "school-bus detection logic, updated mid-incident",
 "defense_bypassed": true,
 "fix_shipped": "voluntary NHTSA software recall filed December 2025 after the first fix failed",
 "primary_sources": [
  "https://www.bgr.com/2051218/waymo-recall-self-driving-cars-safety-concerns/",
  "https://incidentdatabase.ai/cite/1300"
 ],
 "verified_quote": "In a November 20 letter posted by NHTSA, the Austin Independent School District said five incidents occurred in November after Waymo said it had made software updates to resolve the issue and asked the company to halt operations around scho",
 "confidence": "high",
 "notes": "The important fact is not the 19 violations but the five that happened after the fix. A vendor asserting a behavioural defect is resolved is a claim about a learned policy's behaviour in an open world, and here it did not hold — the school district had to keep counting. Pairs with the 2023 Tesla school-bus record as the same scenario at two different autonomy levels. AI Incident Database incident 1300.",
 "risk_category": "safety_harm",
 "risk_secondary": [
  "legal_ip"
 ],
 "risk_subcategory": "Physical Injury by Autonomous Action",
 "risk_sub_secondary": [],
 "ai_entity": "non_generative_autonomy",
 "agency": "agent_acted",
 "agency_debatable": false,
 "agency_reason": "the vehicles illegally passed stopped school buses 19 times",
 "vector_family": "none_autonomous",
 "vector_detail": "none_autonomous_action",
 "guardrail_kind": [
  "unknown"
 ],
 "guardrail_outcome": "silent",
 "xrefs": {
  "aiid": [
   1300
  ],
  "atlas": [],
  "cve": [],
  "ghsa": []
 },
 "primary_asi": "ASI08",
 "agent_framework": "robotaxi_stack",
 "model_provider": "none",
 "model_name": "",
 "detection_mechanism": "unknown",
 "tool_access": "unknown",
 "financial_loss_band": "unknown",
 "eai_category": "unsafe_actuation",
 "eai_domain": "agent_behaviour",
 "eai_secondary": [],
 "eai_reason": "subcategory: Physical Injury by Autonomous Action",
 "asi_curated": [],
 "asi_scope": "in_scope",
 "asi_provenance": "rule",
 "asi_reason": "ASI08 (fleet fan-out in a non-generative stack; other mechanisms out of scope)",
 "submitted_by": "EAI Internal"
}