ABSTRACT
As systems become increasingly autonomous, the human-machine role allocation changes. This can result in new failure modes of concern in safety-critical applications such as Urban Air Mobility (UAM). In the Assured Human Machine Interface for Increasingly Autonomous Systems (AHMIIAS) project with NASA, we developed a framework for 1) specifying the roles of a human operator and autonomous co-pilot, 2) verifying that the team satisfies safety properties, and 3) verifying that the autonomous co-pilot meets its requirements.