Verification Report#
Lifecycle Verification Report
|
status: draft
security: YES
safety: ASIL_B
|
||||
Verification report for the Lifecycle module. This report is generated based on the module verification plan and the module verification work product (wp__verification_module_ver_report), and covers all components of the module. |
|||||
Legend — status values and chart colours
valid_inspected — agreed and formally inspected
valid — agreed, formal inspection still outstanding
invalid — not agreed; metamodel checks are skipped
valid — agreed; QM needs are not formally inspected, so this is their final state (valid_inspected counts here too)
invalid — not agreed; metamodel checks are skipped
Components#
Component Overview#
Component |
Safety |
Security |
Status |
|---|---|---|---|
ASIL_B |
YES |
valid |
|
ASIL_B |
NO |
valid |
Health Monitor#
Component Requirements Statistics#
ASIL B — Requirements
QM — Requirements
Component Architecture Statistics#
ASIL B — Architecture Elements
QM — Architecture Elements
Requirements Traceability#
The following table lists all requirements of this component together with their verification status and the tests that (fully or partially) verify them:
Show requirements table
ID |
Title |
Safety |
Status |
Testlink |
|---|---|---|---|---|
Dummy Component |
ASIL_B |
valid |
Test Coverage#
Per-source-file line and branch coverage aggregated from the LCOV report
produced by bazel coverage.
Show test coverage table
Note
No coverage data available for this component. Run bazel coverage
with the corresponding targets and rebuild the docs to populate this
table.
Architectural Elements#
The following table lists the architectural elements of this component
together with their inspection status. Elements that have been formally
inspected carry the valid_inspected status; elements with another
status have not yet been inspected.
Show architectural elements table
ID |
Title |
Safety |
Status |
Tags |
|---|---|---|---|---|
Health Monitor Static View |
ASIL_B |
valid |
||
Deadline Monitor |
ASIL_B |
valid |
||
Logic Monitor |
ASIL_B |
valid |
||
Health Monitor |
ASIL_B |
valid |
||
HealthMonitor Creation |
ASIL_B |
valid |
||
HealthMonitor background thread |
ASIL_B |
valid |
||
DeadlineMonitor Usage |
ASIL_B |
valid |
||
LogicMonitor Usage |
ASIL_B |
valid |
||
HeartbeatMonitor Usage |
ASIL_B |
valid |
||
Health Monitoring Startup Interaction |
ASIL_B |
valid |
||
Health Monitoring Shutdown Interaction |
ASIL_B |
valid |
Verification & Safety Analysis Documents#
Presence of the standard verification and safety analysis work products for
this component. A dash (—) means the corresponding document is missing.
Show work products table
Work Product |
Kind |
Realized by |
Status |
||
|---|---|---|---|---|---|
Requirements Inspection |
|
||||
Architecture Inspection |
|
||||
Implementation Inspection |
|
||||
DFA |
|
||||
FMEA |
|
Launch Manager#
Component Requirements Statistics#
ASIL B — Requirements
QM — Requirements
Component Architecture Statistics#
ASIL B — Architecture Elements
QM — Architecture Elements
Requirements Traceability#
The following table lists all requirements of this component together with their verification status and the tests that (fully or partially) verify them:
Show requirements table
ID |
Title |
Safety |
Status |
Testlink |
|---|---|---|---|---|
Invalid dependency |
ASIL_B |
valid |
||
Component activation timeout |
ASIL_B |
valid |
||
Fast shutdown |
ASIL_B |
invalid |
||
Dropping process responsibility |
ASIL_B |
invalid |
||
Coordination stop dependency |
ASIL_B |
invalid |
||
Dangling dependency |
ASIL_B |
valid |
||
Condition check based on at least one dependency |
ASIL_B |
valid |
||
Condition check for each SWC its dependencies |
ASIL_B |
valid |
||
Forward process information |
ASIL_B |
invalid |
||
Multiple instance of executable |
ASIL_B |
invalid |
||
Launching terminal |
ASIL_B |
valid |
||
Standard handle redirection |
ASIL_B |
valid |
||
Non-root support |
ASIL_B |
valid |
||
Process capability support |
ASIL_B |
valid |
||
File descriptor inheritance support |
ASIL_B |
valid |
||
Security policy support |
ASIL_B |
valid |
||
ASLR support |
ASIL_B |
valid |
||
Resource limit support |
ASIL_B |
valid |
||
Process detach from parent support |
ASIL_B |
invalid |
||
Stop timeout |
ASIL_B |
valid |
||
Configurable delay between SIGTERM and SIGKILL |
ASIL_B |
valid |
||
Runtime configuration compliance |
ASIL_B |
invalid |
||
Run Target activation timeout |
ASIL_B |
valid |
||
Monitoring and recovery: recovery wait time |
ASIL_B |
valid |
||
Monitoring and recovery: adopted process monitoring |
ASIL_B |
invalid |
||
Recovery by stopping the component |
ASIL_B |
invalid |
||
Recovery by stopping the component and starting another component |
ASIL_B |
invalid |
||
Recovery by stopping the servicing of the watchdog |
ASIL_B |
invalid |
||
Launch manager external watchdog notification |
ASIL_B |
valid |
||
Launch manager external watchdog notification - failed test |
ASIL_B |
valid |
||
Launch manager external monitoring configuration |
ASIL_B |
valid |
||
Logging slog2 and file support |
ASIL_B |
valid |
||
Logging state transitions |
ASIL_B |
valid |
||
Logging timestamp |
ASIL_B |
valid |
||
Logging DAG |
ASIL_B |
valid |
||
Configuration file support |
ASIL_B |
invalid |
||
Global process properties |
ASIL_B |
valid |
||
Lazy check of configured commands |
ASIL_B |
valid |
||
Configuration of component readiness conditions |
ASIL_B |
valid |
||
Configuration of component activation timeout |
ASIL_B |
valid |
||
Configuration of Run Target activation timeout |
ASIL_B |
valid |
||
Dependency based startup order |
ASIL_B |
valid |
||
Ready Condition - File state |
ASIL_B |
valid |
test_ready_condition_file (passed); test_ready_condition_file_not_existing (passed) |
|
Handling process args |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_switch_run_target (passed); test_recovery_action_simple_rep_failure (passed); test_process_launch_args (passed); test_sandbox_options (passed) |
|
Ready Condition - Lifecycle Interface |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_recovery_action_simple_rep_failure (passed); test_incorrect_config_non_reporting (passed); test_recovery_action_complex_rep_failure (passed); test_process_fd_leak (passed) |
|
Run target to component dependencies |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_switch_run_target (passed); test_recovery_action_simple_rep_failure (passed); test_sandbox_options (passed) |
|
Component monitoring during runtime |
ASIL_B |
valid |
test_crash_ignores_dependents (passed); test_process_crash_monitoring (passed) |
|
Switch between run targets |
ASIL_B |
valid |
||
Normal shutdown |
ASIL_B |
valid |
||
Process state |
ASIL_B |
valid |
test_switch_run_target (passed); test_rt_running_when_process_exits (passed) |
|
Run target to run target dependencies |
ASIL_B |
valid |
||
Recovery by switching the Run Target |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_process_crash_monitoring (passed); test_recovery_action_complex_rep_failure (passed) |
|
Component monitoring during startup |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_recovery_action_complex_rep_failure (passed); test_crash_on_startup (passed) |
|
Ready Condition - OS Process State |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_process_fd_leak (passed); test_sandbox_options (passed) |
|
Launching run target |
ASIL_B |
valid |
||
Launching processes in parallel |
ASIL_B |
valid |
||
Launch Manager shutdown |
ASIL_B |
valid |
||
Process state notification |
ASIL_B |
valid |
||
Recovery by reactivating the component |
ASIL_B |
valid |
||
Configurable amount of retries on startup |
ASIL_B |
valid |
||
Shutdown signal handling |
ASIL_B |
valid |
||
Process user, group IDs support |
ASIL_B |
valid |
||
Process priority support |
ASIL_B |
valid |
||
Scheduling support |
ASIL_B |
valid |
||
CWD support |
ASIL_B |
valid |
||
Supplementary group support |
ASIL_B |
valid |
||
CPU runmask support |
ASIL_B |
valid |
||
Configuration dependency view |
QM |
invalid |
||
Configuration Verification tool |
QM |
invalid |
Test Coverage#
Per-source-file line and branch coverage aggregated from the LCOV report
produced by bazel coverage.
Show test coverage table
Note
No coverage data available for this component. Run bazel coverage
with the corresponding targets and rebuild the docs to populate this
table.
Architectural Elements#
The following table lists the architectural elements of this component
together with their inspection status. Elements that have been formally
inspected carry the valid_inspected status; elements with another
status have not yet been inspected.
Show architectural elements table
ID |
Title |
Safety |
Status |
Tags |
|---|---|---|---|---|
Launch Manager Static View |
ASIL_B |
valid |
Verification & Safety Analysis Documents#
Presence of the standard verification and safety analysis work products for
this component. A dash (—) means the corresponding document is missing.
Show work products table
Work Product |
Kind |
Realized by |
Status |
||
|---|---|---|---|---|---|
Requirements Inspection |
|
||||
Architecture Inspection |
|
||||
Implementation Inspection |
|
||||
DFA |
|
||||
FMEA |
|
The following additional tables are used for checking traceability completeness.
Tracability of (valid) Feature Requirements to Component Requirements#
Valid feature requirements without any derived component requirements are highlighted in red.
Show component traceability table
Traceability of (valid) Feature Requirements to Feature Architecture#
Valid feature requirements without any linked feature architecture element are highlighted in red.
Show architecture traceability table
Traceability of (valid) Component Requirements to Component Architecture#
Valid component requirements without any linked component architecture elements are highlighted in red.
Show component architecture traceability table
ID |
Title |
Fulfils Back |
Status |
|---|---|---|---|
ASLR support |
valid |
||
Component activation timeout |
valid |
||
Component monitoring during runtime |
valid |
||
Component monitoring during startup |
valid |
||
Condition check based on at least one dependency |
valid |
||
Condition check for each SWC its dependencies |
valid |
||
Configurable amount of retries on startup |
valid |
||
Configurable delay between SIGTERM and SIGKILL |
valid |
||
Configuration of component activation timeout |
valid |
||
Configuration of component readiness conditions |
valid |
||
Configuration of Run Target activation timeout |
valid |
||
CPU runmask support |
valid |
||
CWD support |
valid |
||
Dangling dependency |
valid |
||
Dependency based startup order |
valid |
||
Dummy Component |
comp_arc_dyn__deadline_monitor__dynamic_view; comp_arc_dyn__health_lib_thread__dynamic_view; comp_arc_dyn__health_monitor__dynamic_view; comp_arc_dyn__health_monitor__shutdown_view; comp_arc_dyn__health_monitor__startup_view; comp_arc_dyn__heartbeat_monitor__dynamic_view; comp_arc_dyn__logic_monitor__dynamic_view; comp_arc_sta__deadline_monitor__static_view; comp_arc_sta__health_mon__hm; comp_arc_sta__health_monitor__static_view; comp_arc_sta__logic_monitor__static_view; real_arc_int__deadline_monitor__interface; real_arc_int__health_monitor__interface; real_arc_int__heartbeat_monitor__interface; real_arc_int__logic_monitor__interface |
valid |
|
File descriptor inheritance support |
valid |
||
Global process properties |
valid |
||
Handling process args |
valid |
||
Invalid dependency |
valid |
||
Launch manager external monitoring configuration |
valid |
||
Launch manager external watchdog notification |
valid |
||
Launch manager external watchdog notification - failed test |
valid |
||
Launch Manager shutdown |
valid |
||
Launching processes in parallel |
valid |
||
Launching run target |
valid |
||
Launching terminal |
valid |
||
Lazy check of configured commands |
valid |
||
Logging DAG |
valid |
||
Logging slog2 and file support |
valid |
||
Logging state transitions |
valid |
||
Logging timestamp |
valid |
||
Monitoring and recovery: recovery wait time |
valid |
||
Non-root support |
valid |
||
Normal shutdown |
valid |
||
Process capability support |
valid |
||
Process priority support |
valid |
||
Process state |
valid |
||
Process state notification |
valid |
||
Process user, group IDs support |
valid |
||
Ready Condition - File state |
valid |
||
Ready Condition - Lifecycle Interface |
valid |
||
Ready Condition - OS Process State |
valid |
||
Recovery by reactivating the component |
valid |
||
Recovery by switching the Run Target |
valid |
||
Resource limit support |
valid |
||
Run Target activation timeout |
valid |
||
Run target to component dependencies |
valid |
||
Run target to run target dependencies |
valid |
||
Scheduling support |
valid |
||
Security policy support |
valid |
||
Shutdown signal handling |
valid |
||
Standard handle redirection |
valid |
||
Stop timeout |
valid |
||
Supplementary group support |
valid |
||
Switch between run targets |
valid |