Trustworthy Companion AI for Human-Aware Transition of Control: Motivation, Architecture, and Research Roadmap

Transitions of control between automated driving systems and human drivers remain safety-relevant and cognitively demanding moments in human–automation interaction. Recent studies show that transition performance depends not only on takeover timing or response speed but also on traffic complexity, driver readiness, automation limitations, trust calibration, and situational-awareness recovery. As in-vehicle interaction evolves toward conversational and agentic AI assistance, takeover support also becomes a problem of governing how natural-language AI systems communicate with the driver under uncertainty. This paper proposes a digital-twin-mediated framework for human-aware takeover support in automated driving. In this framework, the companion AI is treated as an assumed LLM-based in-vehicle conversational or agentic assistant used as an advisory interaction component. The contribution is defined at the architectural level: human, vehicle, and context/road digital twins provide structured semantic state abstractions through a semantic state interface exposing confidence, freshness, provenance, and consistency metadata, while a trustworthy companion AI (TCAI) layer grounds, constrains, validates, and governs companion AI output proposals before HMI delivery. Building on the research on driver-state monitoring, adaptive HMI, trust calibration, explainability, conversational assistance, and human assistance systems (HASs), the framework coordinates advisory interaction across vigilance support, contextual explanation, trust-calibrating communication, and directive handover guidance. The TCAI layer combines bounded reasoning, human-factor-derived guardrails, state-consistency management, dynamic explanation-depth control, trust-dynamics modeling, graded watchdog veto handling, mandatory access-control assumptions, and deterministic fallback. Safety-critical vehicle-control and minimum risk condition (MRC) functions remain assigned to the deterministic vehicle-control stack, while the authorized output path of the TCAI layer is validated HMI delivery. The paper concludes with a validation agenda and technical roadmap covering planned transitions, urgent handovers, degraded or adversarial conditions, temporal fusion of driver-state evidence, phase-sensitive HMI policies, trust-calibration trajectories, driver veto and partial-disabling mechanisms, and staged simulator-to-vehicle evaluation. Although motivated by SAE Level 3 automation, the framework may also inform fallback-related Level 4 scenarios in which human and automated agency must be managed under uncertainty.