All Technical Articles
AlgorithmsAI

Where AI Anomaly Detection Beats Rules

By Engineering — Algorithms · February 8, 2026 · 6 min read

We use both. The interesting question is which decisions belong to which approach. The split is not where most marketing decks would put it.

The "AI-powered" claim is doing a lot of work in our space. The honest answer is that we use machine-learned models for some decisions and explicit rules for others, and we are quite particular about which is which.

Where rules win

  • Trip conditions for a red-state alert. These have to be inspectable, auditable, and class-society-presentable. A neural network is not.
  • Network health (cable break detection, node liveness). Deterministic, not probabilistic.
  • Calibration drift compensation. Linear, well-understood physics.

Where models help

  • False-positive suppression. The space of nuisance signatures is too varied for explicit rules.
  • Per-deck baselining. Different ships, different cargo mixes, different baselines.
  • Anomaly clustering for post-voyage analysis.
The reverse split — rules for nuisance suppression, models for alarm trips — is a common mistake and produces systems that are both noisy and opaque.
Frequently asked

Questions, answered

Does RoRoSafe use AI or rule-based detection?+

Both — and the split matters. Machine-learned models handle some decisions and explicit rules handle others, chosen deliberately rather than by marketing. The honest answer is that AI-powered is doing a lot of unearned work in this space.

Which decisions stay rule-based and why?+

The red-state alert trip conditions, which must be inspectable, auditable, and class-society-presentable (a neural network is not); network health such as cable-break detection and node liveness, which is deterministic; and calibration-drift compensation, which is linear, well-understood physics.

Where do machine-learned models actually help?+

False-positive suppression, where the space of nuisance signatures is too varied for explicit rules; per-deck baselining across different ships and cargo mixes; and anomaly clustering for post-voyage analysis. The reverse split — models for alarm trips, rules for suppression — produces systems that are both noisy and opaque.

Related reading

Continue the thread