一个小安全带，让语言模型在停车场驾驶真实汽车 快速通过三种工具，而驾驶座上有个人类，一只脚 在刹车上方。它运行在逗号装置上，且 OpenPilot 在支持的丰田车型中， 将车辆暴露给任何使用 MCP（Codex、Claude Code、Cursor）的聊天应用，作为 一台服务器 drivingbench_sandbox，配备三个工具：observe、set_motion。 stop_now。模型说的、做的、汽车做的一切，都是 记录下来，作为一个你可以回放的痕迹。

这是针对封闭课程的研究软件。请阅读下一节 别的什么都行。

免责声明与安全

请自行承担风险。 该软件控制转向、加速和 基于语言模型输出的机动车辆制动。语言 模特会犯错;这段代码、设备、汽车和人都会犯错 监督。作者提供本软件原样，不保证任何 对任何损害、伤害、损失、罚款或其他情况不承担任何责任 其使用或由此衍生的任何结果。如果你使用 你是司机和驾驶员，你对车辆负责 每一刻。

DrivingBench Harness

A small harness that lets a language model drive a real car at parking-lot speed through three tools, while a human sits in the driver’s seat with a foot over the brake. It runs on a comma device with openpilot in a supported Toyota, and exposes the car to any chat app that speaks MCP (Codex, Claude Code, Cursor) as one server, drivingbench_sandbox, with three tools: observe, set_motion, stop_now. Everything the model says and does, and everything the car did, is recorded as a trace you can replay.

This is research software for closed courses. Read the next section before anything else.

Disclaimer and safety

Use at your own risk. This software commands the steering, acceleration and braking of a motor vehicle based on the output of a language model. Language models make mistakes; so does this code, the device, the car, and the person supervising. The authors provide this software as is, without warranty of any kind, and accept no liability for any damage, injury, loss, fine, or other consequence arising from its use or from anything derived from it. If you use it, you are the driver and the operator, and you are responsible for the vehicle at every moment.

The authors are not affiliated with, endorsed by, or supported by comma.ai, openpilot, Toyota, or the makers of any model or chat application named here. openpilot’s own terms and safety model apply to the device; this project modifies openpilot in ways its authors never intended or reviewed.

Do not trust the software limits. The harness has a speed ceiling, an emergency speed cut-off, command expiry, and cancels motion on brake, pedal, disengagement, or invalid sensors. These are ordinary code paths on an unreviewed system, not safety functions; any of them can fail. The safety measures are the human ones:

• A licensed, sober, attentive driver in the driver’s seat, foot over the brake, hands ready, at all times. The brake or the steering wheel always wins: pressing either cancels the model’s command and disengages openpilot.
• Private property you have permission to use, empty of people and other vehicles, with soft obstacles (cones) only. Never on public roads, never near pedestrians, never with passengers, never at night or in rain until you have far more experience with the system than this README can give you.
• Walking pace. The defaults cap commands at 3 m/s (about 7 mph); keep them there.
• One operator supervises the car and the UI; treat every command in the Drive-tab history as something you personally authorized.
• Do a supervised check of every release before letting a model drive with it (docs/deployment.md), and recalibrate the steering scale on your car (docs/steering-calibration.md).
• Know your local law. Operating a modified driver-assistance system, even on