A system, method and processor readable medium for identifying an operational design domain (ODD) for operation of an autonomous driving system (ADS). In one aspect, a proposed map is used to generate a geographic dataset. Performance of the ADS is evaluated against the geographic dataset under a range of environment& conditions, thereby identifying a bounded-risk portion of a proposed condition space defined by the proposed map and the range of environmental conditions. The operational design domain is identified based on the bounded-risk portion of the proposed condition space. The ODD can be updated as additional data is received. When a vehicle using the ADS is likely to leave the ODD, an operator can be alerted.