What is functional safety?

Functional safety is the part of overall safety that depends on the correct functioning of electrical, electronic, and programmable electronic safety-related systems. That's the formal definition from IEC 61508-4:2010, section 3.1.11, and every word in it matters.

The key phrase is "correct functioning." Functional safety isn't about whether the machine does its job — it's about whether the safety system does its job. These are different questions with different engineering implications.

A machine can work perfectly and still be unsafe if the safety system protecting it has a latent fault. A conveyor can run at the correct speed, a robot arm can follow the correct path, a motor can deliver the correct torque — and if the emergency stop circuit has a hidden failure, the machine is not functionally safe.

The question functional safety asks is: when something fails — a sensor, a processor, a communication link, a power supply, a software function — does the system reach a safe state? A safe state is a condition where the risk is eliminated or reduced to an acceptable level. For a robot arm, the safe state might be "motors de-energized." For an autonomous vehicle, it might be "vehicle stopped with hazard lights active." For a nuclear reactor, it might be "control rods inserted."

The entire discipline of functional safety engineering — the standards (IEC 61508, ISO 13849, IEC 62061), the certification processes (TÜV, UL, Pilz), the architectural patterns (dual-channel, voting, diagnostic coverage) — exists to make the answer to that question as reliable as possible. Safety Integrity Levels (SIL 1 through SIL 4) quantify how reliable: the higher the SIL, the lower the probability that the safety system will fail to perform its function when demanded.

For anyone building Physical AI systems, this is the starting concept. Every conversation about robot safety certification, about EU Machinery Regulation compliance, about SIL levels and Performance Levels, begins here. If you're building robots and this term is unfamiliar — this is where to start.