|
| 1 | +.. |
| 2 | + # ******************************************************************************* |
| 3 | + # Copyright (c) 2025 Contributors to the Eclipse Foundation |
| 4 | + # |
| 5 | + # See the NOTICE file(s) distributed with this work for additional |
| 6 | + # information regarding copyright ownership. |
| 7 | + # |
| 8 | + # This program and the accompanying materials are made available under the |
| 9 | + # terms of the Apache License Version 2.0 which is available at |
| 10 | + # https://www.apache.org/licenses/LICENSE-2.0 |
| 11 | + # |
| 12 | + # SPDX-License-Identifier: Apache-2.0 |
| 13 | + # ******************************************************************************* |
| 14 | +
|
| 15 | +Safety Manual |
| 16 | +============= |
| 17 | + |
| 18 | +.. document:: Persistency Safety Manual |
| 19 | + :id: doc__persistency_safety_manual_v2 |
| 20 | + :status: valid |
| 21 | + :safety: ASIL_B |
| 22 | + :security: NO |
| 23 | + :tags: persistency |
| 24 | + :realizes: wp__module_safety_manual |
| 25 | + |
| 26 | +Introduction/Scope |
| 27 | +------------------ |
| 28 | +| This manual will cover the Feature Persistency. It's based on the components KVS and Tiny JSON. |
| 29 | +
|
| 30 | +Assumed Platform Safety Requirements |
| 31 | +------------------------------------ |
| 32 | +| For the module persistency the following safety related stakeholder requirements are assumed to define the top level functionality (purpose) of the module persistency. I.e. from these all the feature and component requirements implemented are derived. |
| 33 | +| List of stakeholder requirements, with ASIL B, the module's components requirements are derived from. |
| 34 | +
|
| 35 | +.. needtable:: |
| 36 | + :style: table |
| 37 | + :columns: title;id;status |
| 38 | + :colwidths: 25,25,15 |
| 39 | + :sort: title |
| 40 | + |
| 41 | + results = [] |
| 42 | + |
| 43 | + for need in needs.filter_types(["stkh_req"]): |
| 44 | + if need and "persistency" in need["tags"]: |
| 45 | + if need["safety"] == "ASIL_B": |
| 46 | + results.append(need) |
| 47 | + |
| 48 | + |
| 49 | +Assumptions of Use |
| 50 | +------------------ |
| 51 | + |
| 52 | +Assumptions on the Environment |
| 53 | +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ |
| 54 | +| Generally the assumption of the S-CORE platform SEooC is that it is integrated in a safe system, i.e. the POSIX OS it runs on is qualified and also the HW related failures are taken into account by the system integrator, if not otherwise stated in the module's safety concept. |
| 55 | +
|
| 56 | +List of AoUs expected from the environment the module runs on: |
| 57 | + |
| 58 | +.. needtable:: |
| 59 | + :style: table |
| 60 | + :columns: title;id;status |
| 61 | + :colwidths: 25,25,25 |
| 62 | + :sort: title |
| 63 | + |
| 64 | + results = [] |
| 65 | + |
| 66 | + for need in needs.filter_types(["aou_req"]): |
| 67 | + if need and "persistency" in need["tags"]: |
| 68 | + if need and "environment" in need["tags"]: |
| 69 | + results.append(need) |
| 70 | + |
| 71 | +Assumptions on the User |
| 72 | +^^^^^^^^^^^^^^^^^^^^^^^ |
| 73 | +| As there is no assumption on which specific OS and HW is used, the integration testing of the stakeholder and feature requirements is expected to be performed by the user of the platform SEooC. Tests covering all stakeholder and feature requirements performed on a reference platform (tbd link to reference platform specification), reviewed and passed are included in the platform SEooC safety case. |
| 74 | +| Additionally the components of the platform may have additional specific assumptions how they are used. These are part of every module documentation: :ref:`module_documentation`. Assumptions from components to their users can be fulfilled in two ways: |
| 75 | +| 1. There are assumption which need to be fulfilled by all SW components, e.g. "every user of an IPC mechanism needs to make sure that he provides correct data (including appropriate ASIL level)" - in this case the AoU is marked as "platform". |
| 76 | +| 2. There are assumption which can be fulfilled by a safety mechanism realized by some other S-CORE platform component and are therefore not relevant for an user who uses the whole platform. But those are relevant if you chose to use the module SEooC stand-alone - in this case the AoU is marked as "module". An example would be the "JSON read" which requires "The user shall provide a string as input which is not corrupted due to HW or QM SW errors." - which is covered when using together with safe S-CORE platform persistency feature. |
| 77 | +
|
| 78 | +List of AoUs on the user of the platform features or the module of this safety manual: |
| 79 | + |
| 80 | +.. needtable:: |
| 81 | + :style: table |
| 82 | + :columns: title;id;status |
| 83 | + :colwidths: 25,25,25 |
| 84 | + :sort: title |
| 85 | + |
| 86 | + results = [] |
| 87 | + |
| 88 | + for need in needs.filter_types(["aou_req"]): |
| 89 | + if need and "environment" not in need["tags"]: |
| 90 | + if need and "persistency" in need["tags"]: |
| 91 | + results.append(need) |
| 92 | + |
| 93 | +Safety concept of the SEooC |
| 94 | +--------------------------- |
| 95 | +| <Describe here the safety concept incl. which faults are taken care of, reactions of the implemented functions under anomalous operating conditions ... if this is not already documented sufficiently in the feature documentation "safety impact" section of all the features the module is used in.> |
| 96 | +
|
| 97 | +Safety Anomalies |
| 98 | +---------------- |
| 99 | +| Anomalies (bugs in ASIL SW, detected by testing or by users, which could not be fixed) known before release are documented in the platform/module release notes <add link to release note>. |
| 100 | +
|
| 101 | +References |
| 102 | +---------- |
| 103 | +| <link to the user manual> |
| 104 | +| <other links> |
0 commit comments