AoU Component Requirements

HealthMonitor Component AoU		status: draft security: NO safety: ASIL_B
tags: lifecycle, health_monitor version: 1 realizes: wp__requirements_comp_aou
doc__health_monitor_comp_aou		Generic Document

Component AoU

Start before running		status: valid security: NO safety: ASIL_B
tags: lifecycle, health_monitor reqtype: Functional version: 1
The application shall start the Health Monitor before it reports the Running state to the Launch Manager.
aou_req__health_monitor__start_order		Assumption of Use Requirement

Launch Manager alive supervision		status: valid security: NO safety: ASIL_B
tags: lifecycle, health_monitor reqtype: Functional version: 1
The integrator shall configure the Launch Manager alive supervision for every process that uses the Health Monitor. The expected alive interval shall be consistent with the supervisor notification cycle of the Health Monitor.
aou_req__health_monitor__lm_alive_cfg		Assumption of Use Requirement

Fault tolerant time budget		status: valid security: NO safety: ASIL_B
tags: lifecycle, health_monitor reqtype: Non-Functional version: 1
The integrator shall show that the following sum is within the fault tolerant time interval of the supervised safety goal: the maximum of the supervised time window, one internal evaluation cycle, the Launch Manager alive timeout,
aou_req__health_monitor__ftti_budget		Assumption of Use Requirement

Configuration from timing analysis		status: valid security: NO safety: ASIL_B
tags: lifecycle, health_monitor reqtype: Process version: 1
The integrator shall derive the time ranges and allowed transitions from the timing and control-flow analysis of the supervised application, and shall place the reporting calls where they reflect the safety-relevant behavior.
aou_req__health_monitor__cfg_derivation		Assumption of Use Requirement

Evaluation thread scheduling		status: valid security: NO safety: ASIL_B
tags: lifecycle, health_monitor reqtype: Non-Functional version: 1
The integrator shall configure the scheduling policy and priority of the Health Monitor evaluation thread so that it meets its internal evaluation cycle under worst-case load.
aou_req__health_monitor__thread_sched		Assumption of Use Requirement

Host application integrity		status: valid security: NO safety: ASIL_B
tags: lifecycle, health_monitor reqtype: Non-Functional version: 1
The process that hosts the Health Monitor shall be developed to ASIL B. Note The Health Monitor shares the address space of the hosting process (see Memory corruption detection (comp_req__health_monitor__mem_guard)).
aou_req__health_monitor__host_integrity		Assumption of Use Requirement

Monotonic clock provision		status: valid security: NO safety: ASIL_B
tags: lifecycle, health_monitor reqtype: Non-Functional version: 1
The operating system shall provide a monotonic clock that meets ASIL B integrity and has a resolution finer than the smallest configured time range.
aou_req__health_monitor__os_clock		Assumption of Use Requirement

No test stubs in production		status: valid security: NO safety: ASIL_B
tags: lifecycle, health_monitor reqtype: Process version: 1
The integrator shall not enable the stub_supervisor_api_client feature in production builds.
aou_req__health_monitor__no_stub		Assumption of Use Requirement