Traditional automotive error handling relied on coarse remedies: when an unexpected exception fired, a watchdog timer pulled the hardware reset line, power-cycling the microcontroller over hundreds of milliseconds. In an SDV running dozens of mixed-criticality services, a bug in an ambient lighting microservice must never reset the chassis domain. Micro-reboots isolate failures to the smallest functional granularity.
At T=0ms, an out-of-bounds array access inside the yaw-rate filter triggers an MMU Data Abort. At T=0.4ms, the RTOS kernel trap handler marks the worker process dead and notifies the health supervisor. At T=1.1ms, the supervisor cleans IPC sockets and grabs the standby worker from the pre-warmed thread pool. At T=4.2ms, the worker remaps the shared state memory. By T=11.8ms, the yaw filter calculates its next valid steering adjustment.