Internet of Things (IoT) and AI

Chapter 14
Emerging Trends and Future IoT–AI Systems

Bachelors Program in AI & ML
Internet of Things (IoT) and AI   •   Bachelor

Emerging Trends and Future IoT–AI Systems

Introduction and Context

The Internet of Things (IoT) is evolving from a collection of connected sensors into a distributed intelligence infrastructure. Earlier IoT systems primarily measured physical conditions, transmitted data to cloud platforms, and supported dashboards or rule-based automation. Contemporary systems increasingly interpret data locally, learn from heterogeneous devices, coordinate autonomous actions, and interact with digital representations of physical environments.

This transformation is driven by several developments: foundation models capable of learning general representations from sensor data, autonomous AI agents, swarm intelligence, privacy-preserving machine learning, digital twins, neuromorphic hardware, ambient intelligence, satellite IoT, and emerging 6G networks. These technologies are not independent. A future industrial or urban system may combine an event-driven neuromorphic sensor, a small on-device foundation model, a privacy-preserving learning protocol, an autonomous agent, a digital twin, and satellite connectivity.

The central engineering challenge is not simply achieving higher prediction accuracy. IoT–AI systems must operate under constraints of energy, bandwidth, latency, safety, privacy, reliability, explainability, interoperability, and cost. Consequently, future system design requires both technical competence and critical evaluation of social and governance consequences.

Learning Objectives

After completing this chapter, students should be able to:

1. Explain the role of generative and foundation models in sensor-data analysis.

2. Distinguish autonomous agents from conventional predictive IoT applications.

3. Describe swarm intelligence and assess its suitability for distributed systems.

4. Explain major privacy-preserving learning techniques and their trade-offs.

5. Analyze digital-twin ecosystems as integrated cyber–physical systems.

6. Discuss neuromorphic computing, ambient intelligence, satellite IoT, and 6G-enabled systems.

7. Evaluate emerging IoT–AI architectures using technical, ethical, and operational criteria.

1. From Connected Devices to Distributed Intelligence

A traditional IoT architecture commonly includes sensing, communication, processing, application, and management layers. In a future architecture, intelligence is distributed across several locations:

  • Device or edge layer: Sensors and actuators perform immediate measurement and control.
  • Near-edge layer: Gateways or local servers aggregate data and execute low-latency models.
  • Cloud or data-centre layer: Large models, historical analytics, and global coordination are performed.
  • Physical and simulated environment: Digital twins maintain computational representations of assets, processes, and contexts.
  • Network intelligence layer: Communication systems dynamically manage routing, spectrum, quality of service, and computing resources.

This arrangement is often called edge–cloud intelligence. It avoids the assumption that every decision should be sent to a remote cloud. A safety-critical controller may need millisecond-level response and must continue functioning during network disruption. Conversely, training a large foundation model generally requires substantial computational resources and may be performed centrally.

A useful design principle is to place each task where its requirements are best satisfied. Tasks involving immediate safety, low latency, or sensitive raw data should generally be close to the data source. Tasks requiring broad historical context, large-scale optimization, or cross-site learning may be placed in the cloud or a federated infrastructure.

2. Generative and Foundation Models for Sensor Data

2.1 Definitions and characteristics

A foundation model is a model trained on broad and large-scale data that can be adapted to many downstream tasks. Large language models are one example, but foundation models can also be built for images, time series, audio, multimodal data, and physical signals. A generative model learns a data distribution or a conditional relationship sufficiently well to generate new samples, reconstruct missing observations, simulate trajectories, or transform one representation into another.

Sensor data differ from ordinary text. They are often multivariate, irregularly sampled, noisy, non-stationary, and dependent on physical processes. A temperature series, vibration signal, GPS trace, and camera stream may have different sampling rates and reliability characteristics. Therefore, directly applying a language model to sensor data without suitable representation and validation can produce misleading results.

2.2 Major uses

Foundation and generative models can support:

  • Representation learning: learning general-purpose embeddings of machine states or environmental conditions.
  • Anomaly detection: identifying observations that do not conform to learned normal patterns.
  • Missing-data reconstruction: estimating gaps caused by communication failures or sensor faults.
  • Synthetic data generation: producing realistic training data when fault examples are rare.
  • Forecasting: predicting demand, equipment condition, traffic, or energy production.
  • Natural-language interaction: allowing an operator to query an IoT system conversationally.
  • Cross-modal reasoning: relating a vibration signal to maintenance records, images, and operating instructions.

A generative model is not automatically a reliable simulator. Generated data may preserve superficial statistical patterns while violating physical laws. For example, a model may generate a plausible temperature sequence that changes too rapidly for the thermal mass of the equipment. Physical constraints, domain-specific validation, and uncertainty estimation are therefore essential.

2.3 Model architectures and adaptation

Common approaches include transformer models for long-range temporal dependencies, diffusion models for conditional generation, autoencoders for representation and reconstruction, and hybrid neural–physical models. Adaptation may use fine-tuning, parameter-efficient tuning, prompting, transfer learning, or retrieval from a domain knowledge base.

A practical sensor foundation-model pipeline includes:

1. Define the operational task and safety boundary.

2. Standardize units, timestamps, metadata, and sensor quality indicators.

3. Segment or tokenize streams into meaningful windows or events.

4. Pre-train using self-supervised objectives such as masked-signal reconstruction or next-window prediction.

5. Adapt the model using site-specific data.

6. Validate against physical constraints, drift, rare events, and out-of-distribution conditions.

7. Deploy with monitoring, fallback logic, and human oversight.

2.4 Critical limitations

Foundation models can be computationally expensive, difficult to interpret, vulnerable to contaminated training data, and poorly calibrated in unfamiliar conditions. Synthetic data can amplify bias. A model trained on well-maintained machines may fail on older equipment. Large models may also create a false impression that a natural-language explanation is evidence of correct reasoning. In safety-relevant IoT, generated recommendations should be treated as decision support unless they have been independently verified.

3. Autonomous Agents in IoT

An autonomous agent is a computational entity that perceives an environment, maintains an internal state, selects actions, and evaluates outcomes in pursuit of objectives. An IoT agent may control building systems, schedule robot operations, coordinate energy storage, or manage maintenance workflows.

A predictive model answers questions such as “What is likely to happen?” An agent additionally decides “What should be done?” This distinction introduces action, responsibility, and risk.

3.1 Agent architecture

A robust IoT agent commonly contains:

  • Perception: processing sensor observations and data-quality information.
  • State estimation: maintaining a representation of the current environment.
  • World model: predicting how actions affect the environment.
  • Planning: selecting a sequence of actions.
  • Policy or controller: translating plans into commands.
  • Memory: storing relevant historical events and procedures.
  • Safety layer: enforcing constraints and preventing unsafe actions.
  • Human interaction: communicating uncertainty and requesting approval when necessary.

Agents may be reactive, deliberative, or hybrid. A reactive agent responds rapidly to events, while a deliberative agent plans over a longer horizon. Industrial systems often require both: a planning agent may schedule maintenance, while a local controller immediately shuts down an overheating motor.

3.2 Agentic risks and design requirements

Autonomy must be bounded. An agent should have explicit permissions, a limited action space, authenticated commands, audit logs, rate limits, and a safe fallback state. It should not be allowed to interpret an ambiguous instruction as authorization to modify critical infrastructure.

Important evaluation criteria include task success, response latency, resource consumption, safety violations, robustness to sensor faults, and ability to recover from incorrect actions. Human approval is particularly important where actions affect health, public safety, financial commitments, or legally protected data.

4. Swarm Intelligence and Collective IoT Systems

Swarm intelligence studies how relatively simple agents produce coordinated behavior through local interaction. Examples in nature include ants, bees, birds, and fish. In IoT, a swarm may consist of mobile robots, drones, agricultural sensors, or autonomous vehicles.

Swarm systems generally use decentralized or partially decentralized coordination. Each agent has limited information, follows local rules, and communicates with neighbors. Global behavior emerges from local interactions. Advantages include scalability, resilience to individual failures, adaptability, and reduced dependence on a central controller.

Important computational ideas include:

  • Ant-colony-inspired optimization: virtual pheromone values guide agents toward promising routes or solutions.
  • Particle-swarm optimization: candidate solutions adjust their movement using individual and collective experience.
  • Consensus protocols: agents iteratively approach agreement on a value or decision.
  • Formation control: agents maintain spatial relationships while moving.
  • Task allocation: agents distribute sensing, delivery, or inspection tasks.

Swarm intelligence is not synonymous with uncontrolled autonomy. Communication delays, conflicting objectives, malicious devices, and unstable feedback can cause oscillation or unsafe group behavior. Designers must specify convergence conditions, collision avoidance, identity management, and mechanisms for overriding the swarm.

5. Privacy-Preserving Learning

IoT data may reveal health conditions, household routines, industrial processes, location, or workplace behavior. Protecting data is therefore a system requirement rather than an optional feature.

5.1 Federated learning

In federated learning, devices or organizations train local models and share model updates rather than sharing raw data. A basic synchronous aggregation rule is:

\[

w_{t+1}=\sum_{k=1}^{K}\frac{n_k}{\sum_{j=1}^{K}n_j}w_{t+1}^{(k)}

\]

Here, \(w_{t+1}^{(k)}\) is the locally updated parameter vector from participant \(k\), \(n_k\) is its number of training examples, and \(K\) is the number of participants. The formula assumes that updates are compatible, participants are authorized, and the server can obtain sufficiently reliable updates. Weighting by sample count is appropriate in the standard federated averaging setting, but it does not solve bias caused by non-representative or non-independent local data.

Federated learning reduces raw-data movement but does not guarantee privacy. Model updates can leak information, and a malicious participant can submit poisoned updates.

5.2 Differential privacy

Differential privacy limits the influence of any individual record on a released result. Informally, an algorithm is \(\varepsilon\)-differentially private if the probability of any output changes only by a bounded multiplicative factor when one person’s record is added or removed. Smaller \(\varepsilon\) generally means stronger privacy but more noise and lower utility.

Noise may be added to aggregated statistics or clipped model updates. Clipping limits the maximum contribution of a participant before noise is introduced. Privacy budgets must be tracked across repeated releases; privacy is not free merely because data remain on devices.

5.3 Other mechanisms

  • Secure aggregation: the server receives only an aggregate of encrypted updates.
  • Homomorphic encryption: selected computations are performed on encrypted data, usually with significant computational cost.
  • Trusted execution environments: protected hardware executes code in an isolated region.
  • Data minimization: collect only the data necessary for a defined purpose.
  • Synthetic or de-identified data: reduce direct exposure, although re-identification risk must be assessed.

Privacy engineering requires a threat model. Protection against an honest-but-curious server differs from protection against colluding devices, inference attacks, or physical compromise of a sensor.

6. Digital-Twin Ecosystems

A digital twin is a persistent digital representation of a physical asset, process, or system that is connected to its real-world counterpart through data and, in some cases, control. A static simulation is not necessarily a digital twin; the twin normally requires an ongoing relationship with the physical entity and a defined purpose.

A digital-twin ecosystem may contain:

  • physical assets and sensors;
  • data ingestion and time synchronization services;
  • geometric, physical, and machine-learning models;
  • databases and semantic descriptions;
  • visualization and user interfaces;
  • control and workflow systems;
  • security, identity, and governance services.

Digital twins support predictive maintenance, production optimization, energy management, training, safety analysis, and lifecycle planning. At the component level, a twin may represent a pump. At a higher level, it may represent an entire factory or city. Multiple twins can be composed, but composition requires compatible identifiers, units, semantics, update rates, and access policies.

The principal challenge is model fidelity. A twin may be highly accurate for temperature prediction but unsuitable for structural stress analysis. Calibration, validation, version management, uncertainty representation, and traceability are therefore essential. A twin that silently uses stale data can become more dangerous than no twin because its visual precision encourages misplaced confidence.

7. Neuromorphic Computing and Event-Driven IoT

Neuromorphic computing designs hardware and algorithms inspired by aspects of biological neural systems. Many neuromorphic systems use event-driven processing and spiking neural networks. Instead of processing every time step uniformly, computation occurs when meaningful events arrive.

This approach is attractive for IoT because sensors such as event-based cameras, auditory devices, and tactile systems can produce sparse event streams. Potential benefits include low latency, low energy consumption, and efficient real-time response. Applications include gesture recognition, anomaly detection, robotics, and always-on environmental monitoring.

However, neuromorphic systems require specialized programming methods, training approaches, toolchains, and evaluation metrics. They may be difficult to integrate with conventional cloud models. Event sparsity is also application-dependent; a dense or noisy environment may reduce the expected energy advantage. Neuromorphic computing should therefore be selected after measuring workload characteristics, not merely because it is biologically inspired.

8. Ambient Intelligence

Ambient intelligence describes environments that use embedded sensing, communication, and AI to respond adaptively to people and context. Smart homes, assisted living, intelligent classrooms, and responsive workplaces are examples.

Ambient systems require context awareness: the system must infer who is present, what activity is occurring, and what assistance may be appropriate. This creates risks of continuous surveillance, discriminatory inference, unwanted personalization, and manipulation. Good design emphasizes consent, transparency, local processing where possible, accessible controls, and the ability to disable or override adaptation.

In healthcare or assisted living, ambient intelligence can identify falls or unusual routines, but false alarms can cause distress and missed events can create liability. Evaluation must include diverse users, environmental variation, and human factors—not only classification accuracy.

9. Satellite IoT and 6G-Enabled Systems

Satellite IoT extends connectivity to oceans, deserts, remote infrastructure, agriculture, logistics routes, and disaster zones. Low-earth-orbit constellations can provide lower latency than traditional high-orbit systems, but satellite links still face intermittent visibility, energy constraints, weather effects, limited bandwidth, and higher communication cost than many terrestrial links.

Effective satellite IoT often uses store-and-forward operation, message prioritization, compression, edge filtering, and intermittent synchronization. A sensor should not transmit every raw measurement when a local model can identify and transmit only an event or summary. Nonetheless, aggressive filtering can hide rare but important conditions.

Emerging 6G visions include integrated sensing and communication, AI-native network management, extremely high data rates, ultra-low latency services, heterogeneous terrestrial–aerial–satellite networks, and improved positioning. These are research and standardization directions rather than universally available capabilities. Their value depends on spectrum policy, infrastructure cost, energy use, cybersecurity, and interoperability.

AI may help 6G networks predict traffic, optimize radio resources, detect faults, and coordinate edge computing. At the same time, AI-driven networking creates new attack surfaces. A compromised model could misallocate resources or deny service to selected devices. Network decisions should therefore remain auditable and subject to policy constraints.

10. An Integrated Future Architecture

A future smart-agriculture system illustrates how these technologies can interact. Soil sensors and drones collect local observations. A neuromorphic device detects acoustic or visual pest events with low power. A foundation model combines weather, soil, and crop data to forecast stress. Federated learning allows farms to improve a shared model without centralizing raw operational data. An autonomous agent recommends irrigation or dispatches a drone, subject to agronomic and safety constraints. A digital twin represents fields, equipment, and water resources. Satellite IoT maintains connectivity in remote regions, while terrestrial and future 6G networks provide higher-capacity links where available.

This architecture is powerful but not automatically desirable. It requires identity management, data ownership rules, local fallback operation, model monitoring, and clear accountability for decisions. It also requires economic analysis: a technically superior system may be inappropriate if maintenance, connectivity subscriptions, or skilled personnel are unaffordable.

11. Illustrative Case: Predictive and Autonomous Maintenance in a Distributed Water Utility

Background

Consider a fictional regional water utility operating pumps and treatment facilities across urban and rural locations. Some sites have reliable fibre connectivity; others depend on cellular or satellite links. Pump failures are costly and can interrupt service.

Problem

The utility collects vibration, pressure, temperature, flow, and electrical-current measurements. Existing threshold alarms produce many false positives and do not detect gradual degradation. Sending all raw data to a central cloud is expensive and exposes operational information.

Analysis

The utility identifies four requirements: rapid local detection of dangerous conditions, improved long-term fault prediction, operation during communication outages, and protection of infrastructure data. It also recognizes that a fully autonomous shutdown could create service disruption if a sensor is faulty.

Approach and solution

A local edge model detects abnormal vibration and pressure patterns. A compact temporal foundation model is adapted using historical maintenance records and self-supervised learning on unlabeled sensor streams. Sites participate in federated training, with secure aggregation and a formal privacy budget for sensitive operational data.

Each pump has a digital twin containing its specifications, maintenance history, current state, and uncertainty estimates. An agent proposes inspection schedules and spare-part orders, but high-impact actions require engineer approval. A rule-based safety controller can stop a pump when independently verified pressure and temperature limits are exceeded. Remote sites transmit event summaries through satellite IoT when terrestrial links fail.

Outcome

In an initial pilot, the utility evaluates not only detection accuracy but also false-alarm rate, missed failures, energy consumption, communication volume, response time, and operator workload. The system reduces unnecessary inspections and improves visibility of gradual degradation. However, engineers discover that a model trained mainly on modern pumps performs poorly on an older pump family. The deployment is revised to include equipment-specific calibration and a fallback diagnostic procedure.

Learning points

The case demonstrates that future IoT–AI systems are socio-technical systems. Foundation models do not remove the need for domain data. Federated learning does not eliminate governance. Agents require boundaries. Digital twins require valid synchronization. Satellite connectivity improves reach but does not replace local intelligence. Most importantly, evaluation must include safety, reliability, cost, and human responsibility.

12. Governance, Ethics, and Professional Practice

Future IoT–AI systems raise several governance questions:

  • Who owns sensor data and derived predictions?
  • Is consent meaningful when sensing is continuous or embedded in public infrastructure?
  • Can individuals challenge an automated decision?
  • Who is responsible when an autonomous agent causes harm?
  • How are cybersecurity updates delivered to long-lived devices?
  • Does the system disadvantage communities with weaker connectivity?
  • Can models be audited without exposing confidential data?

Professional practice should incorporate privacy by design, security by design, accessibility, lifecycle documentation, data and model provenance, risk assessment, incident response, and decommissioning plans. Systems should comply with applicable data-protection, product-safety, cybersecurity, telecommunications, and sector-specific regulations. Compliance is a baseline, not a substitute for responsible engineering.

13. Best Practices for Designing Future IoT–AI Systems

1. Begin with a clearly defined operational problem rather than a fashionable technology.

2. Use the smallest model and least data that meet the requirement.

3. Separate prediction, recommendation, and control responsibilities.

4. Place safety-critical functions in independently verifiable controllers.

5. Design for intermittent connectivity and degraded operation.

6. Measure uncertainty, calibration, drift, fairness, energy, latency, and total cost.

7. Use privacy-enhancing techniques with an explicit threat model.

8. Maintain human oversight proportional to potential harm.

9. Standardize identity, metadata, time, units, and semantic interoperability.

10. Test rare events, adversarial conditions, sensor failures, and distribution shifts.

11. Maintain audit logs and model-version records.

12. Plan updates, maintenance, retraining, and secure retirement from the beginning.

Chapter Summary

Future IoT–AI systems distribute intelligence across devices, edge infrastructure, cloud platforms, networks, and digital representations of physical environments. Generative and foundation models can reconstruct, forecast, simulate, and integrate heterogeneous sensor data, but they require physical validation and careful monitoring. Autonomous agents extend prediction into planning and action, making safety boundaries and accountability essential. Swarm intelligence supports scalable decentralized coordination, although instability and security threats must be controlled.

Privacy-preserving learning combines federated learning, differential privacy, secure aggregation, encryption, and data minimization. Digital twins connect physical assets with persistent computational models and support prediction, optimization, and lifecycle management. Neuromorphic computing offers event-driven efficiency for selected workloads, while ambient intelligence enables context-aware environments but raises surveillance and consent concerns. Satellite IoT expands coverage to remote locations, and emerging 6G systems may integrate communication, sensing, computing, and AI.

The principal lesson is that technical capability alone does not define a successful IoT–AI system. Reliability, safety, privacy, inclusion, governance, human factors, sustainability, and economic feasibility must be evaluated together.

Key Terms

Foundation model: A broadly trained model adaptable to multiple downstream tasks.

Generative model: A model capable of producing or reconstructing data samples or sequences.

Sensor foundation model: A foundation model trained on one or more types of sensor or time-series data.

Autonomous agent: A system that perceives, reasons or plans, and acts toward objectives.

Edge intelligence: Processing and AI inference performed near the data source.

Swarm intelligence: Collective behavior emerging from local interactions among distributed agents.

Federated learning: Collaborative model training in which raw local data remain at participating sites.

Differential privacy: A formal privacy framework limiting the effect of any individual record on an output.

Secure aggregation: A protocol that reveals an aggregate of updates without revealing each individual update.

Digital twin: A connected digital representation of a physical asset, process, or system.

Neuromorphic computing: Computing inspired by neural systems, often using event-driven spiking hardware.

Ambient intelligence: Context-aware intelligence embedded in environments and everyday objects.

Satellite IoT: IoT connectivity provided partly or entirely through satellite networks.

6G: The emerging generation of mobile-network research focused on integrated, intelligent, and heterogeneous connectivity.

Model drift: Degradation caused by changes in data, environments, equipment, or relationships over time.

Data minimization: Collecting and retaining only data necessary for a defined purpose.

Human-in-the-loop: A design in which people review, approve, or guide automated decisions.

Cyber–physical system: A system integrating computation, communication, sensing, and physical processes.

Review Questions

Short Answer Questions

1. What distinguishes a foundation model from a task-specific sensor model?

2. Why does federated learning not guarantee privacy by itself?

3. Define a digital twin and distinguish it from a static simulation.

4. State two advantages and two limitations of neuromorphic computing.

5. Why are safety boundaries necessary for autonomous IoT agents?

Long Answer Questions

1. Explain the uses and limitations of generative models for sensor data.

2. Describe the architecture and governance requirements of an autonomous IoT agent.

3. Compare centralized control and swarm intelligence for distributed robots.

4. Explain federated learning, differential privacy, and secure aggregation as complementary techniques.

5. Discuss how satellite IoT and emerging 6G networks may reshape future IoT architectures.

Analytical / Application Questions

1. Design an IoT–AI architecture for monitoring a remote wind farm. Justify the placement of sensing, inference, storage, connectivity, and human approval functions.

2. A hospital proposes ambient intelligence based on cameras, microphones, and wearable sensors. Analyze the privacy, fairness, safety, and consent risks and recommend safeguards.

3. A digital twin recommends shutting down a factory pump, but its sensor data are stale and the model has not been validated on that pump type. Decide how the system should respond and explain the required fallback and governance process.

Multiple Choice Questions with Answers

Question 1

Which characteristic most directly distinguishes a foundation model from a task-specific model?

A. It is trained only on one device

B. It is broadly trained and adaptable to multiple tasks

C. It cannot process sensor data

D. It always operates without cloud connectivity

Correct Answer: B. It is broadly trained and adaptable to multiple tasks

Question 2

What is a primary purpose of a safety layer in an autonomous IoT agent?

A. To increase the number of model parameters

B. To prevent or constrain unsafe actions

C. To eliminate all sensor measurements

D. To replace identity management

Correct Answer: B. To prevent or constrain unsafe actions

Question 3

In federated learning, what is normally kept at the participating device or site?

A. The raw local training data

B. The global model architecture only

C. The satellite orbital path

D. The physical actuator

Correct Answer: A. The raw local training data

Question 4

Which technique formally limits the influence of an individual record on a released result?

A. Digital twinning

B. Differential privacy

C. Formation control

D. Edge caching

Correct Answer: B. Differential privacy

Question 5

Which statement best describes a digital twin?

A. A disconnected historical spreadsheet

B. A connected digital representation of a physical asset or process

C. A hardware encryption key

D. A network routing algorithm only

Correct Answer: B. A connected digital representation of a physical asset or process

Question 6

Why can neuromorphic computing be attractive for some IoT applications?

A. It always provides unlimited memory

B. It can process sparse events with low energy and low latency

C. It removes the need for sensors

D. It guarantees perfect predictions

Correct Answer: B. It can process sparse events with low energy and low latency

Question 7

What is a major risk of ambient intelligence?

A. It cannot use contextual information

B. Continuous sensing may create surveillance and consent problems

C. It requires no communication infrastructure

D. It is limited to satellite applications

Correct Answer: B. Continuous sensing may create surveillance and consent problems

Question 8

Which operating condition is especially important for satellite IoT systems?

A. Continuous high-bandwidth connectivity at every location

B. Intermittent connectivity and the need for store-and-forward operation

C. The absence of energy constraints

D. Guaranteed zero communication cost

Correct Answer: B. Intermittent connectivity and the need for store-and-forward operation

Question 9

Why should generated sensor sequences be checked against physical constraints?

A. Generative models may produce statistically plausible but physically impossible data

B. Physical systems never generate data

C. Validation prevents all model adaptation

D. Foundation models cannot represent time

Correct Answer: A. Generative models may produce statistically plausible but physically impossible data

Question 10

Which is an appropriate best practice for safety-critical IoT control?

A. Allowing a language model to control all actuators without limits

B. Separating independently verifiable safety control from higher-level recommendations

C. Deleting audit logs after every action

D. Ignoring sensor failures during deployment

Correct Answer: B. Separating independently verifiable safety control from higher-level recommendations

Internet of Things (IoT) and AI
Chapter 14 of 14