Verification Report#
Lifecycle Verification Report
|
status: valid
security: YES
safety: ASIL_B
|
||||
Verification report for the Lifecycle module. This report is generated based on the module verification plan and the module verification work product (wp__verification_module_ver_report), and covers all components of the module. |
|||||
Legend — status values and chart colours
valid_inspected — agreed and formally inspected
valid — agreed, formal inspection still outstanding
invalid — not agreed; metamodel checks are skipped
valid — agreed; QM needs are not formally inspected, so this is their final state (valid_inspected counts here too)
invalid — not agreed; metamodel checks are skipped
Components#
Component Overview#
Component |
Safety |
Security |
Status |
|---|---|---|---|
ASIL_B |
YES |
valid |
|
ASIL_B |
NO |
valid |
Health Monitor#
Component Requirements Statistics#
ASIL B — Requirements
QM — Requirements
Component Architecture Statistics#
ASIL B — Architecture Elements
QM — Architecture Elements
Requirements Traceability#
The following table lists all requirements of this component together with their verification status and the tests that (fully or partially) verify them:
Show requirements table
ID |
Title |
Safety |
Status |
Testlink |
|---|---|---|---|---|
Dummy Component |
ASIL_B |
valid |
Test Coverage#
Per-source-file line and branch coverage aggregated from the LCOV report
produced by bazel coverage.
Show test coverage table
Note
No coverage data available for this component. Run bazel coverage
with the corresponding targets and rebuild the docs to populate this
table.
Architectural Elements#
The following table lists the architectural elements of this component
together with their inspection status. Elements that have been formally
inspected carry the valid_inspected status; elements with another
status have not yet been inspected.
Show architectural elements table
ID |
Title |
Safety |
Status |
Tags |
|---|---|---|---|---|
Health Monitor Static View |
ASIL_B |
valid |
||
Deadline Monitor |
ASIL_B |
valid |
||
Logic Monitor |
ASIL_B |
valid |
||
Health Monitor |
ASIL_B |
valid |
||
HealthMonitor Creation |
ASIL_B |
valid |
||
HealthMonitor background thread |
ASIL_B |
valid |
||
DeadlineMonitor Usage |
ASIL_B |
valid |
||
LogicMonitor Usage |
ASIL_B |
valid |
||
HeartbeatMonitor Usage |
ASIL_B |
valid |
||
Health Monitoring Startup Interaction |
ASIL_B |
valid |
||
Health Monitoring Shutdown Interaction |
ASIL_B |
valid |
Verification & Safety Analysis Documents#
Presence of the standard verification and safety analysis work products for
this component. A dash (—) means the corresponding document is missing.
Show work products table
Work Product |
Kind |
Realized by |
Status |
||
|---|---|---|---|---|---|
Requirements Inspection |
|
||||
Architecture Inspection |
|
||||
Implementation Inspection |
|
||||
DFA |
|
||||
FMEA |
|
Launch Manager#
Component Requirements Statistics#
ASIL B — Requirements
QM — Requirements
Component Architecture Statistics#
ASIL B — Architecture Elements
QM — Architecture Elements
Requirements Traceability#
The following table lists all requirements of this component together with their verification status and the tests that (fully or partially) verify them:
Show requirements table
ID |
Title |
Safety |
Status |
Testlink |
|---|---|---|---|---|
Invalid dependency |
ASIL_B |
valid |
||
Component activation timeout |
ASIL_B |
valid |
||
Fast shutdown |
ASIL_B |
invalid |
||
Dropping process responsibility |
ASIL_B |
invalid |
||
Coordination stop dependency |
ASIL_B |
invalid |
||
Dangling dependency |
ASIL_B |
valid |
||
Condition check based on at least one dependency |
ASIL_B |
valid |
||
Condition check for each SWC its dependencies |
ASIL_B |
valid |
||
Forward process information |
ASIL_B |
invalid |
||
Multiple instance of executable |
ASIL_B |
invalid |
||
Launching terminal |
ASIL_B |
valid |
||
Standard handle redirection |
ASIL_B |
valid |
||
Non-root support |
ASIL_B |
valid |
||
Process capability support |
ASIL_B |
valid |
||
File descriptor inheritance support |
ASIL_B |
valid |
||
Security policy support |
ASIL_B |
valid |
||
ASLR support |
ASIL_B |
valid |
||
Resource limit support |
ASIL_B |
valid |
||
Process detach from parent support |
ASIL_B |
invalid |
||
Stop timeout |
ASIL_B |
valid |
||
Configurable delay between SIGTERM and SIGKILL |
ASIL_B |
valid |
||
Runtime configuration compliance |
ASIL_B |
invalid |
||
Run Target activation timeout |
ASIL_B |
valid |
||
Alive monitoring failure |
ASIL_B |
valid |
||
Monitoring and recovery: adopted process monitoring |
ASIL_B |
invalid |
||
Component failure during run target switch |
ASIL_B |
valid |
||
Component recovery action failure escalation |
ASIL_B |
valid |
||
Recovery Action |
ASIL_B |
valid |
||
Recovery state manager notification |
ASIL_B |
valid |
||
Run target recovery action failure escalation |
ASIL_B |
valid |
||
Fallback run target recovery action failure escalation |
ASIL_B |
invalid |
||
Recovery Action - component failure stopping the component |
ASIL_B |
invalid |
||
Recovery Action - component failure replacing component |
ASIL_B |
invalid |
||
Recovery Action - component failure switch to fallback run target |
ASIL_B |
invalid |
||
Recovery Action - run target failure switch Run Target |
ASIL_B |
valid |
||
Launch manager external watchdog notification |
ASIL_B |
valid |
||
Launch manager external watchdog notification - failed test |
ASIL_B |
valid |
||
Launch manager external monitoring configuration |
ASIL_B |
valid |
||
Logging slog2 and file support |
ASIL_B |
valid |
||
Logging state transitions |
ASIL_B |
valid |
||
Logging timestamp |
ASIL_B |
valid |
||
Logging DAG |
ASIL_B |
valid |
||
Configuration file support |
ASIL_B |
invalid |
||
Global process properties |
ASIL_B |
valid |
||
Lazy check of configured commands |
ASIL_B |
valid |
||
Dependency based startup order |
ASIL_B |
valid |
||
Ready Condition - File state |
ASIL_B |
valid |
test_ready_condition_file (passed); test_ready_condition_file_not_existing (passed) |
|
Configuration of component readiness conditions |
ASIL_B |
valid |
||
Launching run target |
ASIL_B |
valid |
||
Switch between run targets |
ASIL_B |
valid |
||
Handling process args |
ASIL_B |
valid |
test_sandbox_options (passed); test_recovery_action_simple_rep_failure (passed); test_fallback_to_same_target_restarts (passed); test_switch_run_target (passed); test_process_launch_args (passed) |
|
Process user, group IDs support |
ASIL_B |
valid |
||
Process priority support |
ASIL_B |
valid |
||
Scheduling support |
ASIL_B |
valid |
||
CWD support |
ASIL_B |
valid |
||
Supplementary group support |
ASIL_B |
valid |
||
Ready Condition - OS Process State |
ASIL_B |
valid |
test_sandbox_options (passed); test_recovery_action_simple_rep_failure (passed); test_process_fd_leak (passed) |
|
Run target to component dependencies |
ASIL_B |
valid |
test_sandbox_options (passed); test_recovery_action_simple_rep_failure (passed); test_fallback_to_same_target_restarts (passed); test_switch_run_target (passed) |
|
CPU runmask support |
ASIL_B |
valid |
||
Shutdown signal handling |
ASIL_B |
valid |
||
Launching processes in parallel |
ASIL_B |
valid |
||
Component monitoring during startup |
ASIL_B |
valid |
test_crash_on_startup (passed); test_recovery_action_simple_rep_failure (passed); test_recovery_action_complex_rep_failure (passed); test_process_crash_monitoring (passed); test_crash_ignores_dependents (passed) |
|
Recovery Action - component failure reactivate the component |
ASIL_B |
valid |
||
Configurable amount of retries on startup |
ASIL_B |
valid |
||
Ready Condition - Lifecycle Interface |
ASIL_B |
valid |
test_incorrect_config_non_reporting (passed); test_recovery_action_simple_rep_failure (passed); test_process_fd_leak (passed); test_fallback_to_same_target_restarts (passed); test_recovery_action_complex_rep_failure (passed) |
|
Recovery Action - component failure switch Run Target |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_recovery_action_complex_rep_failure (passed); test_process_crash_monitoring (passed) |
|
Normal shutdown |
ASIL_B |
valid |
||
Process state |
ASIL_B |
valid |
test_switch_run_target (passed); test_rt_running_when_process_exits (passed) |
|
Run target to run target dependencies |
ASIL_B |
valid |
||
Launch Manager shutdown |
ASIL_B |
valid |
||
Configuration dependency view |
QM |
invalid |
||
Configuration Verification tool |
QM |
invalid |
Test Coverage#
Per-source-file line and branch coverage aggregated from the LCOV report
produced by bazel coverage.
Show test coverage table
Note
No coverage data available for this component. Run bazel coverage
with the corresponding targets and rebuild the docs to populate this
table.
Architectural Elements#
The following table lists the architectural elements of this component
together with their inspection status. Elements that have been formally
inspected carry the valid_inspected status; elements with another
status have not yet been inspected.
Show architectural elements table
ID |
Title |
Safety |
Status |
Tags |
|---|---|---|---|---|
Launch Manager Static View |
ASIL_B |
valid |
Verification & Safety Analysis Documents#
Presence of the standard verification and safety analysis work products for
this component. A dash (—) means the corresponding document is missing.
Show work products table
Work Product |
Kind |
Realized by |
Status |
||
|---|---|---|---|---|---|
Requirements Inspection |
|
||||
Architecture Inspection |
|
||||
Implementation Inspection |
|
||||
DFA |
|
||||
FMEA |
|
The following additional tables are used for checking traceability completeness.
Tracability of (valid) Feature Requirements to Component Requirements#
Valid feature requirements without any derived component requirements are highlighted in red.
Show component traceability table
Traceability of (valid) Feature Requirements to Feature Architecture#
Valid feature requirements without any linked feature architecture element are highlighted in red.
Show architecture traceability table
Traceability of (valid) Component Requirements to Component Architecture#
Valid component requirements without any linked component architecture elements are highlighted in red.
Show component architecture traceability table
ID |
Title |
Fulfils Back |
Status |
|---|---|---|---|
Alive monitoring failure |
valid |
||
ASLR support |
valid |
||
Component activation timeout |
valid |
||
Component failure during run target switch |
valid |
||
Component monitoring during startup |
valid |
||
Component recovery action failure escalation |
valid |
||
Condition check based on at least one dependency |
valid |
||
Condition check for each SWC its dependencies |
valid |
||
Configurable amount of retries on startup |
valid |
||
Configurable delay between SIGTERM and SIGKILL |
valid |
||
Configuration of component readiness conditions |
valid |
||
CPU runmask support |
valid |
||
CWD support |
valid |
||
Dangling dependency |
valid |
||
Dependency based startup order |
valid |
||
Dummy Component |
comp_arc_dyn__deadline_monitor__dynamic_view; comp_arc_dyn__health_lib_thread__dynamic_view; comp_arc_dyn__health_monitor__dynamic_view; comp_arc_dyn__health_monitor__shutdown_view; comp_arc_dyn__health_monitor__startup_view; comp_arc_dyn__heartbeat_monitor__dynamic_view; comp_arc_dyn__logic_monitor__dynamic_view; comp_arc_sta__deadline_monitor__static_view; comp_arc_sta__health_mon__hm; comp_arc_sta__health_monitor__static_view; comp_arc_sta__logic_monitor__static_view; real_arc_int__deadline_monitor__interface; real_arc_int__health_monitor__interface; real_arc_int__heartbeat_monitor__interface; real_arc_int__logic_monitor__interface |
valid |
|
File descriptor inheritance support |
valid |
||
Global process properties |
valid |
||
Handling process args |
valid |
||
Invalid dependency |
valid |
||
Launch manager external monitoring configuration |
valid |
||
Launch manager external watchdog notification |
valid |
||
Launch manager external watchdog notification - failed test |
valid |
||
Launch Manager shutdown |
valid |
||
Launching processes in parallel |
valid |
||
Launching run target |
valid |
||
Launching terminal |
valid |
||
Lazy check of configured commands |
valid |
||
Logging DAG |
valid |
||
Logging slog2 and file support |
valid |
||
Logging state transitions |
valid |
||
Logging timestamp |
valid |
||
Non-root support |
valid |
||
Normal shutdown |
valid |
||
Process capability support |
valid |
||
Process priority support |
valid |
||
Process state |
valid |
||
Process user, group IDs support |
valid |
||
Ready Condition - File state |
valid |
||
Ready Condition - Lifecycle Interface |
valid |
||
Ready Condition - OS Process State |
valid |
||
Recovery Action |
valid |
||
Recovery Action - component failure reactivate the component |
valid |
||
Recovery Action - component failure switch Run Target |
valid |
||
Recovery Action - run target failure switch Run Target |
valid |
||
Recovery state manager notification |
valid |
||
Resource limit support |
valid |
||
Run Target activation timeout |
valid |
||
Run target recovery action failure escalation |
valid |
||
Run target to component dependencies |
valid |
||
Run target to run target dependencies |
valid |
||
Scheduling support |
valid |
||
Security policy support |
valid |
||
Shutdown signal handling |
valid |
||
Standard handle redirection |
valid |
||
Stop timeout |
valid |
||
Supplementary group support |
valid |
||
Switch between run targets |
valid |