Deployments
Waymo, Apollo Go and Tesla carry paying riders with no driver at the wheel
Waymo reports more than 500,000 paid rides a week across 14 US cities. Baidu's Apollo Go gave about 1 million fully driverless rides in Q2 2026, down from 3.2 million in Q1 after city regulators cut back service. Tesla runs unsupervised rides in six metro areas but still places safety monitors in many cars and does not publish a fleet count.
| Deployment | Developer / operator | Where | Scale | Autonomy | Status | Controls declared |
|---|---|---|---|---|---|---|
| Waymo One | Waymo (Alphabet) / Waymo | 14 US cities including Phoenix, San Francisco, Los Angeles, Austin, Atlanta, Denver | 500,000+ paid rides a week; 4,000+ vehicles (Sep 2026) | Driverless, rider only | Commercial | Software recall after school-bus passings; publishes crash-rate data |
| Apollo Go | Baidu / Baidu; Dubai Taxi in Dubai | Wuhan and other Chinese cities; Dubai; Abu Dhabi | About 1 million driverless rides in Q2 2026; 23 million+ cumulative (Jun 2026) | Driverless with remote support | Commercial; some Wuhan cars back to safety drivers | Safety drivers reinstated in parts of Wuhan |
| Tesla Robotaxi | Tesla | Austin, Dallas, Houston, Miami, Orlando, Tampa; SF Bay Area with safety driver | About 2.4 million paid miles (Jun 2026) | Mixed: unsupervised in some cars, monitors in others | Commercial | Safety monitors in many cars |
Recent events
- Multiple Apollo Go robotaxis stalled on Wuhan roads on the night of March 31, 2026, stranding riders on overpasses.
- China stopped issuing new robotaxi permits in late April 2026 and resumed city by city in July after a safety review.
- Zoox began charging for rides in its purpose-built vehicle in Las Vegas on August 10, 2026, after an NHTSA exemption on July 30.
- Waymo filed a software recall after Austin ISD logged 19 school-bus passings; NHTSA opened its probe in October 2025.
- Pony.ai says it runs fare-charging driverless service in all four tier-one Chinese cities, around the clock in Shenzhen.
- NHTSA sent ADS developers a letter on first-responder interactions on July 8, 2026.
Attack surface
Five of ten attack-surface dimensions rate very significant or critical
No dimension rates critical. Ratings use five levels, from limited to critical, and cover the paths an attacker or a failure can take into the agent.
| Dimension | Rating | Why |
|---|---|---|
| Physical access | Significant | Vehicles parked between rides, charging stations, service depots, and maintenance facilities present direct contact surface for tampering with sensors, ports, and physical interfaces |
| Identity and authentication | Very significant | Rider accounts, payment methods, fleet operator credentials, and remote operator access each represent compromise paths |
| Command and control channels | Very significant | Fleet dispatch APIs, remote operations channels, in-vehicle command paths, V2X interfaces |
| Perception and sensors | Very significant | Cameras, lidar, radar, GNSS, and IMU |
| Connectivity surface | Significant | Continuous cellular connectivity, V2X protocols where deployed, paired-phone trust for rider interaction |
| OTA and update pipeline | Very significant | Firmware, autonomy models, behavioral policies, and operational parameters all flow through OTA |
| Data capture and retention | Very significant | Cabin interior and exterior video, audio, rider behavior, trip history, biometric inference |
| Integrations and permissions | Moderate | Payment processors, mapping services, traffic infrastructure, customer service platforms |
| Behavioral and policy boundary | Significant | Operational design domain limits, geofencing, behavioral constraints at the action layer |
| Multi-agent coordination | Significant, growing | Fleet management orchestrates dispatch, routing, and supervision across the entire fleet |
Incidents
Six registry incidents involve robotaxis and autonomous vehicles; the developer found three first
Each row links to its full record, with the control that failed, who found it and whether a reporting rule applied.
| Incident | Date | Agent | Found by | Control that failed |
|---|---|---|---|---|
| Uber Test Vehicle Kills Pedestrian in Tempe | Mar 2018 | Autonomous test vehicle | Developer | Emergency braking left to an unmonitored backup driver |
| Cruise Robotaxi Drags a Pedestrian | Oct 2023 | Robotaxi | Developer | Post-collision pullover with a person under the car |
| Tesla Recalls Autopilot After NHTSA Investigation | Dec 2023 | Level 2 driver assistance | Third party | Driver engagement controls too weak for the system's reach |
| Xiaomi SU7 Crashes on Assisted Driving | Mar 2025 | Level 2 driver assistance | Not disclosed | Construction-zone handling with a one-second handover |
| Apollo Go Robotaxi Falls Into a Construction Pit | Aug 2025 | Robotaxi | Third party | Perception stopped short of a marked work zone |
| Waymo Robotaxis Pass Stopped School Buses | Sep 2025 | Robotaxi | Developer | School bus stop behavior in the driving software |
Rules
California and China both tightened operator duties in April 2026
| Rule | Jurisdiction | What it requires | Status |
|---|---|---|---|
| California DMV AV regulations | California | Notices of noncompliance for moving violations; first-responder link answered in 30 seconds; leave an emergency geofence within two minutes; licensed remote operators | Adopted Apr 28, 2026, phasing in |
| MIIT, MPS and MOT ICV supervision measures | China | Tighter supervision of intelligent connected vehicle road testing and demonstration | Issued Apr 14, 2026 |
| Draft Road Traffic Safety Law revision | China | Manufacturer handles violations while the autonomous function is active | First reading Aug 2026 |
| NHTSA exemptions and AV Framework | US federal | Exemptions for vehicles without manual controls, with crash and stop reporting (Zoox: up to 2,500 a year) | Granted Jul 2026 |
| EU Regulation 2022/1426 | EU | Type approval for fully automated vehicles on defined routes; 1,500 per type per year | In force |
Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.
Record
Page Record
- Agent class
- Physical
- Datasets
- ai_deployments.csv (3 rows for this page); ai_attack_surface.csv (10 rows); ai_incidents.csv (6 linked)
- Key sources
- Waymo rides (InsideEVs)
Pony.ai filing (SEC)
China permit freeze (CnEVPost)
California DMV - Source notes
- Waymo One: vehicle count from a secondary source; Tesla Robotaxi: fleet size not disclosed
- Last verified
- October 2026