A Certified Vehicle Is Not an Eligible Operation
On September 3, 2026, Tesla began commercial Cybercab service in Austin in a vehicle with no steering wheel or pedals, and the federal regulator opened an Audit Query the same day — into the technical data and processes behind Tesla's self-certification, not into a crash or a defect. The contrast with Zoox, whose commercial exemption came with explicit operational conditions, makes visible a distinction that no certification document is built to settle: whether this vehicle may operate now.
What happens
On September 3, 2026, Tesla began commercial passenger service with its purpose-built Cybercab in Austin, Texas — a two-seat vehicle designed for autonomous operation, with no steering wheel, no pedals, and no conventional mirrors. The same day, the National Highway Traffic Safety Administration opened Audit Query AQ26002, announced publicly on September 4. For conformance with the Federal Motor Vehicle Safety Standards, the U.S. system does not have a manufacturer apply for approval; the manufacturer declares conformance, affixes a certification label to each vehicle, and the regulator oversees those declarations after the fact. Tesla certified conformance. Among the things the query will examine is how far that certification relied on judgments that certain standards written around human controls do not apply to a vehicle that has none.
The query, covering an estimated thousand vehicles, will assess the technical data and processes Tesla relied on to self-certify. Its stated trigger is public information about the certification basis, not an incident. The object under examination is the declaration and what it rested on.
The industry is reading it against Zoox. Zoox announced its own self-certification in July 2022; NHTSA opened an Audit Query into it in March 2023 and closed that query in August 2025 with a demonstration-use exemption. Zoox then applied for an exemption from specific requirements of eight standards under the formal exemption process and received commercial authorization, announced July 30, 2026 and effective July 31 — the first for a passenger robotaxi without manual controls. That exemption did not arrive alone. The Federal Register notice includes an Operational Authorization: conditions under which the vehicles may operate, subject to modification as the vehicle, the automated driving system, or the operating environment changes, with the possibility of separate authorizations for different regions, locations, or routes.
Two manufacturers, two doors through the same regulatory frame — a declaration with oversight afterward, or an exemption with conditions attached.
The usual reading
Read one way, this is a story about speed — one manufacturer testing how far self-certification stretches while another moved from self-certification to conditional exemption. Read the other way, it is a story about standards that predate the technology being rewritten while vehicles are already on the road.
Both readings treat the question as one of regulatory entry. The documents themselves are more layered than that, and the layering is what this case is about.
What a certification declares
A certification under the U.S. system is a manufacturer’s declaration of conformance, made at manufacture, attached to each vehicle. It says: this vehicle, as built, conforms to the applicable standards. Whether the declaration is well-founded is exactly what an Audit Query examines. What the declaration is not, on any reading, is a judgment about operation: it does not describe the conditions under which the vehicle may carry passengers, and it does not re-check anything on the morning a particular car leaves the depot. It is the manufacturer’s declaration that this vehicle meets the applicable federal safety standards — a basis under those standards, not a per-operation approval. Other permissions, federal, state, and local, sit alongside it; the Zoox notice requires them separately.
The exemption route rests on a different legal basis. It does not certify conformance by another mechanism; it relieves the manufacturer of specific requirements the vehicle does not meet, within a defined scope and under conditions, on findings such as an overall safety level at least equal to that of a compliant vehicle. The Zoox exemption is a grant rather than a declaration, bounded rather than open, revocable by the regulator — and it goes one layer further, carrying an Operational Authorization that states scope and conditions. That second layer answers a different question: within what range, under what conditions, has operation been permitted?
Neither layer answers the third question. Conditions written into an authorization are still conditions on paper until something applies them.
Three layers, three questions
The conformance declaration or granted exemption. Answers: under the federal safety standards, what does this vehicle rest on — the manufacturer’s declaration that it conforms, or the regulator’s grant relieving it of specific requirements it does not meet? Either way, this is a basis under those standards, not a per-operation approval.
The operating authorization and its conditions. Answers: within what scope and under what conditions has operation been permitted, and by whom? The authority comes from a regulatory instrument — explicit in the Zoox exemption’s Operational Authorization. Distinct from it, but alongside it, sit the operator’s own limits: an operational design domain, route plans, go/no-go rules. Those describe scope and decision conditions; they do not substitute for the source of authority. Both — the regulatory authorization and the operator’s conditions — are inputs an execution decision must use.
The execution-time eligibility decision. Answers: given this vehicle’s current state and the conditions that apply, may this operation open — or continue — now? Software build, sensor health, the zone being entered, an active emergency scene, a weather threshold, a live restriction. This is where the conditions from the second layer meet the state of the world — at the point an operation opens, and again wherever the basis for continuing changes.
The failure mode is not that any layer is missing from the regulatory frame. It is collapsing them — treating “certified” or “exempted,” or even “authorized to operate under conditions,” as the answer to “may this one run now.” The second layer supplies inputs to the third. It does not perform the third.
To be precise about what this case does and does not show: the Audit Query examines the first layer, the basis of Tesla’s certification. Its public scope says nothing about whether Tesla’s operations apply current-state checks before each trip, how well, or whether they have ever failed. This case does not demonstrate an absence of execution control. It demonstrates that the question the regulator is asking and the question an execution boundary asks are different questions — and that answering the first, either way, leaves the third open.
This series has met the third layer before, from two other directions. A navigable street is not an eligible operating zone — the where of eligibility (Cases 21). A clean prediction does not itself authorize continuation — the keep running of eligibility (Concepts 17). This case is the third face: the what. Being a certified vehicle is a fact about the object. Being an eligible operation is a decision about the moment.
Where this is heading
The regulator has said two things at once: the standards are being overhauled for vehicles without human controls, and the current standards remain in force until then. The Zoox exemption is notable for what it combines: conformance-related findings with explicit, modifiable operating conditions in one instrument. That combination sharpens the third layer rather than absorbing it: the more precisely conditions are written into an authorization, the more clearly someone must be responsible for applying them to the current state of each vehicle and for stopping an operation when a condition is not met.
Whatever AQ26002 concludes about the basis of Tesla’s certification, the conclusion will settle a question at the first layer. A finding that a vehicle’s conformance was adequately established does not stand in for the judgment that a given operation is eligible now — and a finding that it was not would not, by itself, tell us how that judgment was being made either.
The proposition
A certification declares conformance. An operating authorization sets the scope and conditions of permitted operation. An eligibility decision applies those conditions to this vehicle’s current state and opens — or holds — this operation. Each answers a different question. The second supplies authority and conditions; the third is the point at which they are applied to the vehicle as it is now — when the operation opens, and again when the basis for continuing changes.
If the conditions exist in the authorization, the question that remains is who applies them to the vehicle’s current state, and what stops the operation when they are not met.
Certification declares conformance. Eligibility decides whether this one may run now.
Sources: NHTSA Audit Query AQ26002 opening resume (Sept. 2026); NHTSA press release, Sept. 4, 2026; 49 CFR §567.4 (certification labeling); NHTSA AQ23001 closing resume (Zoox, Aug. 2025); Federal Register notice of the Zoox exemption and Operational Authorization, July 31, 2026; NHTSA press release on the Zoox exemption, July 30, 2026.