Specialty centers · Model-in-the-Loop Engineering

Two printable safety-case and sensor briefs you can assign this term

Free engineering briefs where a model is a component with tolerances and failure modes — not a magic accuracy score. Students write the safety case for handing one actuator decision to a model, including when a human must stay in the loop. ENG-04 and ENG-01 have single-brief PDFs; every brief is in the bank PDF; the other ten are full on the page. No account. No student data leaves your school.

Shop rule

Teacher-approved plant only — one bounded actuator, hardware interlock or operator confirm on anything that can injure someone. Students document safety cases and refusal logs; they do not wire unsupervised model output to production equipment.

How to run one

  • Students choose the brief. You sign the scope sheet before energizing anything new.
  • Two scheduled checkpoints. Score with the six questions below.
  • Mentor is advisory — school-supervised, never one-to-one unsupervised.

Featured packets

Worked sample · printable PDF

ENG-04 · The safety case for handing off

Your academy lab has a single actuator decision a model might trigger — open a damper, divert a part, enable a motor stage, release a brake, or raise a warn-only alarm. Can you write the safety case for letting the model request that action — including the exact conditions under which a human must remain in the loop, the acceptance tests that must pass first, and what you refused to automate?

Featured · printable PDF

ENG-01 · Sensor truth vs. sensor noise

Given a teacher-approved physical or simulated plant and one logged sensor, can you (1) separate physics from filter/model invention, (2) report uncertainty in engineering units, and (3) name a real fault a maintainer would miss if they trusted the processed stream — without claiming the plant is production-ready?

Catalog (10 briefs on the page)

  • ENG-02 · Predictive maintenance that earns its keep

    On a public equipment-degradation dataset the teacher approves, can you beat a dumb time-based maintenance rule — and show whether the model’s false alarms cost more than the failures it prevents?

  • ENG-03 · Tolerance stack-up meets ML

    When a model’s output drives a mechanical decision, how does its error add to tolerance stack-up — and what is the total error budget in millimeters, degrees, or newtons?

  • ENG-05 · Digital twin skepticism

    For a teacher-provided simple physical system, when does a learned residual beat a physics-first model — and when is the twin “good enough” only for some decisions, not all?

  • ENG-06 · Fault injection lab

    When you inject named sensor faults into an approved loop, does the controller fail gracefully (detected, safe state) or silently (wrong output, no alarm)?

  • ENG-07 · Edge vs. cloud latency

    For the same model task on edge vs. cloud paths the teacher approves, what is end-to-end latency — and does it fit inside the control-loop deadline for your named decision?

  • ENG-08 · Calibration drift

    After a teacher-defined distribution shift (seasonal temperature, wear, or load change), can you detect that the model’s errors drift — and say whether recalibration or human takeover is the right response?

  • ENG-09 · Human factors in the loop

    When you design the operator interface for a model-assisted decision, do operators over-trust the score — and can you measure that with a short, ethical user test?

  • ENG-10 · Standards crosswalk

    Can you map your design review to one safety or quality standard clause your mentor recognizes — and state what is not covered by your project?

  • ENG-11 · PLTW / senior design fit

    Can you scope one brief from this bank so it hits your academy’s existing capstone checkpoint calendar — without inventing a new course or skipping a required gate?

  • ENG-12 · Refuse the autonomy

    Pick a use case where the correct engineering answer is not to deploy the model — and defend that refusal with evidence, not vibes.

Six-dimension rubric

  • R1Is the decision scoped to one named actuator / loop, with units and a safety boundary?
  • R2Could another student re-run the acceptance tests from the write-up?
  • R3Is there an honest human-only or rule-only baseline?
  • R4Did they name silent failures, latency, and wrong-actuation limits in engineering units?
  • R5Could a mentor sign the one-page safety summary without a follow-up call?
  • R6Who is harmed if autonomy is mis-scoped, and what did the student refuse to automate?

Feedback

Scope unclear? Safety language off? Tell us here — you do not have to leave an email.

Optional email gets a confirmation. Please do not include student names.