When a self-driving car makes a mistake, engineers have decades of safety standards to fall back on. When a humanoid robot does, the rulebook barely exists. That gap is what Nvidia is trying to close. On October 8, Ars Technica reported that Nvidia has expanded Halos, the safety system it introduced for autonomous vehicles in 2025, into Halos for Robotics, a framework covering the buildout, operations, and certification of robot AI. The timing matters: as humanoids move out of cages and onto crowded factory floors, safety is becoming the bottleneck that decides which robots actually get deployed.

The stakes have been rising all year. Humanoid robots are now clocking real shifts in warehouses and automotive plants, with Digit 4 accumulating more than 65,000 hours of field operation at customer sites, according to Agility Robotics. But most of those hours happened inside workcells: fenced-off zones that keep workers and machines apart. The workcell solved the safety problem by removing the humans. The next generation of robots has to solve it the other way around, by working safely next to people. That is the problem Halos for Robotics is designed to address.

Humanoid robot working in an industrial facility
Humanoid robots are leaving their fenced workcells. The question is whether they can work safely next to people. (Photo: Calder Brief)

What the framework actually covers

Halos for Robotics is an integrated stack that combines hardware and software. At its core is the IGX Thor compute module, built for robots and industrial equipment. It includes an independent processor dedicated to safety-related tasks, which separates general robot computation from safety-critical functions. The idea is containment: if the robot's main AI crashes or misbehaves, the safety layer keeps running on its own silicon and can halt the machine. Amit Goel, Nvidia's head of robotics ecosystem and edge computing, has argued that this cohabitation is unavoidable in physical AI systems, where the capabilities that perform real work and the functions that keep people safe have to operate together on the same hardware.

The software side performs continuous checks on hardware components and software libraries to detect abnormalities. The Holoscan Sensor Bridge, which processes sensor input, sits inside the framework to validate whether sensor data has been corrupted before it reaches safety-related computation. The same approach can extend to individual components such as microcontrollers or field-programmable gate arrays. On top of that, Nvidia supplies simulation tools that validate robot behavior in virtual environments, plus inspection programs that catch safety issues during development, so potential risks surface before a robot ever enters a real workplace.

Why robots are harder to certify than cars

Enjoying this story?

Get the five most important stories in tech, every morning. Free.

Here is the hard part. Automotive functional safety grew up around a relatively uniform problem: a car, a road, a set of well-understood failure modes. Standards and verification systems are relatively established there. Robots have no such uniformity. A floor-cleaning robot in an office, an autonomous forklift moving heavy loads in a warehouse, and a humanoid working on an assembly line among people face wildly different hazards, and the same standard cannot sensibly govern all three. Nvidia's answer is configurability: developers assemble safety functions suited to each operating environment, while the platform tries to maintain control and consistency across the system. Flexibility without losing rigor is the central engineering challenge.

The environments themselves are part of the problem. Goel has pointed to factories, warehouses, and hospitals where layouts are not fixed: a robot moving through a corridor may not immediately recognize a person approaching from a blind spot or around a corner. When a forklift and a human share a hallway, neither follows a lane the way cars do. For robots to move autonomously near people, the industry needs safety mechanisms built to handle genuinely unforeseen situations, not just the scenarios the test suite covered. That is a different discipline from proving an assembly-line arm behaves itself behind a fence.

The first robots betting on it

Robotics safety: the numbers behind the news

Field hours, order books, and the scale Nvidia is betting on.

Digit 4 field hours
65,000+
Digit 5 multi-year orders
$300M+
Digit 5 payload increase
40%
RoboFab planned annual capacity
10,000 units
Nvidia physical AI revenue
~$10B/yr

Note: Figures are approximate.

"Digit 5 is removing a major barrier to scaling humanoid robots in industrial environments," says Agility Robotics CEO Peggy Johnson.

The first company to apply Halos is Agility Robotics, which built its new Digit 5 humanoid on the framework. Unveiled on September 15, Digit 5 is Agility's first robot engineered for what the industry calls cooperative safety: working in close proximity to people without the physical safety barriers that earlier generations required. The new safety architecture combines human detection, motion cues, and an independent safety controller. The hardware got a serious upgrade too: repeated lifts up to 50 pounds, 40 percent more payload than Digit 4; a 90-minute battery that fast-charges in 9 minutes for a 10-to-1 run-to-charge ratio; and swappable end-effectors on ISO-standard mounts so one robot can move between tote handling, machine tending, kitting, and palletizing instead of being locked to a single task.

The order book suggests customers are buying the premise. Agility says it has collected more than $300 million in multi-year Digit 5 orders from manufacturing, warehousing, and logistics customers, and its RoboFab facility in Oregon is designed to produce up to 10,000 units a year, with early access expected in the first half of 2027 and broader availability by the end of the year. Johnson says the company built Digit 5 to the exact requirements customers gave after three years of Digit 4 working on their production floors.

Agility is not alone. Boston Dynamics has joined as an early partner, pursuing a safety platform covering the quadruped Spot, the logistics robot Stretch, and the humanoid Atlas, with deployment at Hyundai Motor factories mentioned as a possibility from 2028. Germany's KION Group is adopting Halos for autonomous forklifts and mobile robots. LG is developing its own humanoid using Nvidia's Isaac GR00T foundation model. The pattern is converging on a platform model: the hardware and the AI brains may differ, but the safety layer increasingly comes from one supplier.

Safety as the price of scale

Humanoid robot working in an industrial facility
Humanoid robots are leaving their fenced workcells. The question is whether they can work safely next to people. (Photo: Calder Brief)

That convergence matters because the robotics industry's next chapter is defined by where robots are allowed to work, not just what they can do. A robot confined to a fenced workcell can only be deployed in facilities redesigned around it, which sharply limits the addressable market. A robot certified to work safely alongside people can be deployed in any facility built for human workers, which is nearly all of them. Nvidia's business math reflects the bet: CEO Jensen Huang said in a March 2026 podcast that the company's physical AI business is generating about $10 billion in annual revenue, positioning it as one of the company's key growth engines.

The deeper question is whether robots can graduate from performing fixed, scripted tasks to handling multiple jobs across diverse environments. Factories, warehouses, and hospitals where people and robots share the same space are exactly the environments where the economics look best and the safety stakes run highest. If an integrated safety framework can demonstrably reduce accident risk and deployment cost across different manufacturers and robot types, it becomes a necessary condition for commercialization rather than a nice-to-have. If it cannot, humanoids risk stalling at the pilot stage: impressive demos, thin order books, and a long tail of "coming soon." The next twelve months of deployments will tell us which outcome we get.