Skip to main content
Incident intelligence/SS-IR-062CASE FILE OPEN
Symbolic editorial illustration for SS-IR-062SERVANTSTACK // INCIDENT INTELLIGENCEFORENSIC IMAGE // VERIFIED FRAME
SS-IR-062 // INCIDENT REPORTOfficial finding

Xiaomi

SU7 Driver Burns to Death After Crash-Disabled Electronic Doors Trap Him Inside

EXECUTIVE BRIEF

In the early hours of October 13-14, 2025, a 31-year-old driver crashed a Xiaomi SU7 into a central divider in Chengdu, China, and the electric sedan burst into flames.

AUTONOMOUS & AVIATION
FAILURE CHAINTRACE COMPLETE
  1. 01TRIGGERIn the early hours of October 13-14, 2025, a 31-year-old driver crashed a Xiaomi SU7 into a central divider in…
  2. 02MACHINE ACTIONAutonomous actor
  3. 03MISSING GATEExecution gate and human override
  4. 04IMPACTPhysical safety
01 // INCIDENT SUMMARY

The short version

In the early hours of October 13-14, 2025, a 31-year-old driver crashed a Xiaomi SU7 into a central divider in Chengdu, China, and the electric sedan burst into flames.

02 // KEY FACTS

Case telemetry

INCIDENT
SS-IR-062
DATE
October 13, 2025
SYSTEM
Xiaomi
LOCATION / SCOPE
Chengdu, China
EVIDENCE
Official finding
AI ROLE
Autonomous actor
HARM
Physical safety
SOURCES
3 cited records
03ENTRY POINT // WHAT HAPPENED

The event

In the early hours of October 13-14, 2025, a 31-year-old driver crashed a Xiaomi SU7 into a central divider in Chengdu, China, and the electric sedan burst into flames. The collision triggered a short circuit in the high-voltage battery pack, which fed abnormal current into the low-voltage system and disabled the powered door release. The SU7 has no external mechanical emergency handle: its only manual release sits inside a storage pocket in the door, requiring a rescuer to reach a full arm into the burning cabin. Bystanders smashed a window and groped for the interior handle but found it unresponsive. The driver could not get out and died in the fire. This was the third fatal-concern Xiaomi incident of 2025 and the second to expose doors locking shut after a crash. Months earlier, in spring 2025, a Xiaomi SU7 operating in advanced driver-assist (ADAS) mode struck a concrete barrier on a highway in Anhui province and caught fire, killing all three occupants, who likewise could not get the doors open. Chinese regulators subsequently moved to ban fully concealed electronic-only door handles on EVs.

04CAUSAL TRACE // AI'S ACTUAL ROLE

What the machine did

Two separate automated subsystems failed with no human able to override either at the moment it mattered. The crash safety logic is supposed to auto-unlock the doors when an impact is detected or airbags deploy; here the same impact that should have triggered that unlock instead shorted the high-voltage battery and starved the low-voltage circuit that powers the latches, so the software-controlled release simply never fired and there was no validated mechanical fallback within reach. In the earlier spring 2025 case, the driver-assist system was in control on the highway when the car hit a barrier. In both events the vehicle's automation operated as a closed loop: occupants and rescuers had no fast, certain manual path to defeat the electronics once the electronics had failed. The design assumed the automated unlock would always work and never validated the failure mode where loss of power and a crash occur together.

Autonomous actorAutomation was a causal participant—not a decorative label for the system around it.
05BLAST RADIUS // CONSEQUENCES

Where the failure landed

A 31-year-old driver burned to death trapped inside his own car. Combined with the earlier spring 2025 ADAS crash that killed three, the incidents drove a public safety debate in China, a market sell-off in Xiaomi shares, and the company's announcement of a safety committee. Chinese regulators responded by moving to ban fully concealed electronic-only door handles on EVs, forcing the entire industry to add validated mechanical emergency releases.

06 // EVIDENCE STATUS

Official finding

Supported by a court, regulator, inquiry, or other official record cited below.

SOURCE RECORD UPDATED 2026-07-09

07 // SOURCE LEDGER

3 cited records

  1. 01
  2. 02
  3. 03
08CONTROL FAILURE // MISSING GOVERNANCE

Execution gate and human override

The failure pattern in this case: Autonomous high-consequence action.

09INTERVENTION POINT // HUMAN IN THE MIDDLE

The moment the path could change

A trained operator receives the evidence, owns the go/no-go decision, and retains an immediate override.

AI PROPOSES→HUMAN OWNS THE DECISION→SYSTEM EXECUTES
10CONTROL DEPLOYMENT // AUTHORITYGATE

High-consequence gate · human override

AuthorityGate's Operational Resilience framework requires a human SME safety-of-life review gate on any change to occupant egress and emergency-release logic before it ships. A named safety engineer must sign off on a documented failure-mode analysis covering the exact scenario that killed this driver: simultaneous high-voltage short and low-voltage power loss during a crash. That gate would have blocked release of a design whose only emergency exit depends on the same powered circuit the crash can destroy, and forced a change-validation step requiring a tested, reachable mechanical release that works with zero electrical power. No automated egress design reaches production without a human SME confirming the de-energized, post-crash escape path on a physical test rig.

RELEVANT KEYSTONE CONTROLHuman-in-the-Loop ValidationHow high-risk actions route to a named subject-matter expert who owns the go or no-go decision.
12 // THE ALTERNATIVE

Autonomy is a design choice.

See the operating model that keeps AI useful while preserving human authority at consequential moments.

Compare AgenticAI and AugmentedAI →