Verification Report#
Lifecycle Verification Report
|
status: valid
security: YES
safety: ASIL_B
|
||||
Verification report for the Lifecycle module. This report is generated based on the module verification plan and the module verification work product (wp__verification_module_ver_report), and covers all components of the module. |
|||||
Legend — status values and chart colours
valid_inspected — agreed and formally inspected
valid — agreed, formal inspection still outstanding
invalid — not agreed; metamodel checks are skipped
valid — agreed; QM needs are not formally inspected, so this is their final state (valid_inspected counts here too)
invalid — not agreed; metamodel checks are skipped
Components#
Component Overview#
Component |
Safety |
Security |
Status |
|---|---|---|---|
ASIL_B |
YES |
valid |
|
ASIL_B |
NO |
valid |
Health Monitor#
Component Requirements Statistics#
ASIL B — Requirements
QM — Requirements
Component Architecture Statistics#
ASIL B — Architecture Elements
QM — Architecture Elements
Requirements Traceability#
The following table lists all requirements of this component together with their verification status and the tests that (fully or partially) verify them:
Show requirements table
ID |
Title |
Safety |
Status |
Testlink |
|---|---|---|---|---|
Dummy Component |
ASIL_B |
valid |
Test Coverage#
Coverage measurements available for 0/38 selected source files. Green: covered; red: not covered. Percentages describe the available measurements.
Line coverage: no data.
Branch coverage: no data.
Architectural Elements#
The following table lists the architectural elements of this component
together with their inspection status. Elements that have been formally
inspected carry the valid_inspected status; elements with another
status have not yet been inspected.
Show architectural elements table
ID |
Title |
Safety |
Status |
Tags |
|---|---|---|---|---|
Health Monitor Static View |
ASIL_B |
valid |
||
Deadline Monitor |
ASIL_B |
valid |
||
Logic Monitor |
ASIL_B |
valid |
||
Health Monitor |
ASIL_B |
valid |
||
HealthMonitor Creation |
ASIL_B |
valid |
||
HealthMonitor background thread |
ASIL_B |
valid |
||
DeadlineMonitor Usage |
ASIL_B |
valid |
||
LogicMonitor Usage |
ASIL_B |
valid |
||
HeartbeatMonitor Usage |
ASIL_B |
valid |
||
Health Monitoring Startup Interaction |
ASIL_B |
valid |
||
Health Monitoring Shutdown Interaction |
ASIL_B |
valid |
Verification & Safety Analysis Documents#
Presence of the standard verification and safety analysis work products for
this component. A dash (—) means the corresponding document is missing.
Show work products table
Work Product |
Kind |
Realized by |
Status |
||
|---|---|---|---|---|---|
Requirements Inspection |
|
||||
Architecture Inspection |
|
||||
Implementation Inspection |
|
||||
DFA |
|
||||
FMEA |
|
Launch Manager#
Component Requirements Statistics#
ASIL B — Requirements
QM — Requirements
Component Architecture Statistics#
ASIL B — Architecture Elements
QM — Architecture Elements
Requirements Traceability#
The following table lists all requirements of this component together with their verification status and the tests that (fully or partially) verify them:
Show requirements table
ID |
Title |
Safety |
Status |
Testlink |
|---|---|---|---|---|
Invalid dependency |
ASIL_B |
valid |
||
Component activation timeout |
ASIL_B |
valid |
||
Fast shutdown |
ASIL_B |
invalid |
||
Dropping process responsibility |
ASIL_B |
invalid |
||
Coordination stop dependency |
ASIL_B |
invalid |
||
Dangling dependency |
ASIL_B |
valid |
||
Lifecycle Interface programming languages |
ASIL_B |
valid |
||
Condition check based on at least one dependency |
ASIL_B |
valid |
||
Condition check for each SWC its dependencies |
ASIL_B |
valid |
||
Forward process information |
ASIL_B |
invalid |
||
Multiple instance of executable |
ASIL_B |
invalid |
||
Launching terminal |
ASIL_B |
valid |
||
Standard handle redirection |
ASIL_B |
valid |
||
Non-root support |
ASIL_B |
valid |
||
Process capability support |
ASIL_B |
valid |
||
File descriptor inheritance support |
ASIL_B |
valid |
||
Security policy support |
ASIL_B |
valid |
||
ASLR support |
ASIL_B |
valid |
||
Process detach from parent support |
ASIL_B |
invalid |
||
Stop timeout |
ASIL_B |
valid |
||
Configurable delay between SIGTERM and SIGKILL |
ASIL_B |
valid |
||
Runtime configuration compliance |
ASIL_B |
invalid |
||
Run Target activation timeout |
ASIL_B |
valid |
||
Queue a run target selection |
ASIL_B |
valid |
||
Force a run target selection |
ASIL_B |
valid |
||
Alive monitoring failure |
ASIL_B |
valid |
||
Monitoring and recovery: adopted process monitoring |
ASIL_B |
invalid |
||
Component failure during run target switch |
ASIL_B |
valid |
||
Component recovery action failure escalation |
ASIL_B |
valid |
||
Recovery Action |
ASIL_B |
valid |
||
Report process liveliness |
ASIL_B |
valid |
||
Report failed process liveliness |
ASIL_B |
invalid |
||
Alive reporting programming language support |
ASIL_B |
valid |
||
Recovery state manager notification |
ASIL_B |
valid |
||
Run target recovery action failure escalation |
ASIL_B |
valid |
||
Fallback run target recovery action failure escalation |
ASIL_B |
invalid |
||
Recovery Action - component failure stopping the component |
ASIL_B |
invalid |
||
Recovery Action - component failure replacing component |
ASIL_B |
invalid |
||
Recovery Action - component failure switch to fallback run target |
ASIL_B |
invalid |
||
Recovery Action - run target failure switch Run Target |
ASIL_B |
valid |
||
Launch manager external watchdog notification |
ASIL_B |
valid |
||
Launch manager external watchdog notification - failed test |
ASIL_B |
valid |
||
Launch manager external monitoring configuration |
ASIL_B |
valid |
||
Logging slog2 and file support |
ASIL_B |
valid |
||
Logging state transitions |
ASIL_B |
valid |
||
Logging timestamp |
ASIL_B |
valid |
||
Logging DAG |
ASIL_B |
valid |
||
Configuration file support |
ASIL_B |
invalid |
||
Global process properties |
ASIL_B |
valid |
||
Lazy check of configured commands |
ASIL_B |
valid |
||
Dependency based startup order |
ASIL_B |
valid |
||
Resource limit support |
ASIL_B |
valid |
||
Ready Condition - File state |
ASIL_B |
valid |
test_ready_condition_file (passed); test_ready_condition_file_not_existing (passed) |
|
Configuration of component readiness conditions |
ASIL_B |
valid |
||
Handling process args |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_switch_run_target (passed); test_recovery_action_simple_rep_failure (passed); test_process_launch_args (passed); test_sandbox_options (passed) |
|
Ready Condition - Lifecycle Interface |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_recovery_action_simple_rep_failure (passed); test_incorrect_config_non_reporting (passed); test_recovery_action_complex_rep_failure (passed); test_process_fd_leak (passed) |
|
Run target to component dependencies |
ASIL_B |
valid |
test_fallback_to_same_target_restarts (passed); test_switch_run_target (passed); test_recovery_action_simple_rep_failure (passed); test_sandbox_options (passed) |
|
Component monitoring during startup |
ASIL_B |
valid |
test_crash_ignores_dependents (passed); test_recovery_action_simple_rep_failure (passed); test_process_crash_monitoring (passed); test_recovery_action_complex_rep_failure (passed); test_crash_on_startup (passed) |
|
Switch between run targets |
ASIL_B |
valid |
||
Normal shutdown |
ASIL_B |
valid |
||
Process state |
ASIL_B |
valid |
test_switch_run_target (passed); test_rt_running_when_process_exits (passed) |
|
Run target to run target dependencies |
ASIL_B |
valid |
||
Recovery Action - component failure switch Run Target |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_process_crash_monitoring (passed); test_recovery_action_complex_rep_failure (passed) |
|
Ready Condition - OS Process State |
ASIL_B |
valid |
test_recovery_action_simple_rep_failure (passed); test_process_fd_leak (passed); test_sandbox_options (passed) |
|
Launching run target |
ASIL_B |
valid |
||
Launching processes in parallel |
ASIL_B |
valid |
||
Launch Manager shutdown |
ASIL_B |
valid |
||
Recovery Action - component failure reactivate the component |
ASIL_B |
valid |
||
Configurable amount of retries on startup |
ASIL_B |
valid |
||
Shutdown signal handling |
ASIL_B |
valid |
||
Process user, group IDs support |
ASIL_B |
valid |
||
Process priority support |
ASIL_B |
valid |
||
Scheduling support |
ASIL_B |
valid |
||
CWD support |
ASIL_B |
valid |
||
Supplementary group support |
ASIL_B |
valid |
||
CPU runmask support |
ASIL_B |
valid |
||
Configuration dependency view |
QM |
invalid |
||
Configuration Verification tool |
QM |
invalid |
Test Coverage#
Coverage measurements available for 0/163 selected source files. Green: covered; red: not covered. Percentages describe the available measurements.
Line coverage: no data.
Branch coverage: no data.
Architectural Elements#
The following table lists the architectural elements of this component
together with their inspection status. Elements that have been formally
inspected carry the valid_inspected status; elements with another
status have not yet been inspected.
Show architectural elements table
ID |
Title |
Safety |
Status |
Tags |
|---|---|---|---|---|
Launch Manager Static View |
ASIL_B |
valid |
Verification & Safety Analysis Documents#
Presence of the standard verification and safety analysis work products for
this component. A dash (—) means the corresponding document is missing.
Show work products table
Work Product |
Kind |
Realized by |
Status |
||
|---|---|---|---|---|---|
Requirements Inspection |
|
||||
Architecture Inspection |
|
||||
Implementation Inspection |
|
||||
DFA |
|
||||
FMEA |
|
The following additional tables are used for checking traceability completeness.
Tracability of (valid) Feature Requirements to Component Requirements#
Valid feature requirements without any derived component requirements are highlighted in red.
Show component traceability table
Traceability of (valid) Feature Requirements to Feature Architecture#
Valid feature requirements without any linked feature architecture element are highlighted in red.
Show architecture traceability table
Traceability of (valid) Component Requirements to Component Architecture#
Valid component requirements without any linked component architecture elements are highlighted in red.
Show component architecture traceability table
ID |
Title |
Fulfils Back |
Status |
|---|---|---|---|
Alive monitoring failure |
valid |
||
Alive reporting programming language support |
valid |
||
ASLR support |
valid |
||
Component activation timeout |
valid |
||
Component failure during run target switch |
valid |
||
Component monitoring during startup |
valid |
||
Component recovery action failure escalation |
valid |
||
Condition check based on at least one dependency |
valid |
||
Condition check for each SWC its dependencies |
valid |
||
Configurable amount of retries on startup |
valid |
||
Configurable delay between SIGTERM and SIGKILL |
valid |
||
Configuration of component readiness conditions |
valid |
||
CPU runmask support |
valid |
||
CWD support |
valid |
||
Dangling dependency |
valid |
||
Dependency based startup order |
valid |
||
Dummy Component |
comp_arc_dyn__deadline_monitor__dynamic_view; comp_arc_dyn__health_lib_thread__dynamic_view; comp_arc_dyn__health_monitor__dynamic_view; comp_arc_dyn__health_monitor__shutdown_view; comp_arc_dyn__health_monitor__startup_view; comp_arc_dyn__heartbeat_monitor__dynamic_view; comp_arc_dyn__logic_monitor__dynamic_view; comp_arc_sta__deadline_monitor__static_view; comp_arc_sta__health_mon__hm; comp_arc_sta__health_monitor__static_view; comp_arc_sta__logic_monitor__static_view; real_arc_int__deadline_monitor__interface; real_arc_int__health_monitor__interface; real_arc_int__heartbeat_monitor__interface; real_arc_int__logic_monitor__interface |
valid |
|
File descriptor inheritance support |
valid |
||
Force a run target selection |
valid |
||
Global process properties |
valid |
||
Handling process args |
valid |
||
Invalid dependency |
valid |
||
Launch manager external monitoring configuration |
valid |
||
Launch manager external watchdog notification |
valid |
||
Launch manager external watchdog notification - failed test |
valid |
||
Launch Manager shutdown |
valid |
||
Launching processes in parallel |
valid |
||
Launching run target |
valid |
||
Launching terminal |
valid |
||
Lazy check of configured commands |
valid |
||
Lifecycle Interface programming languages |
valid |
||
Logging DAG |
valid |
||
Logging slog2 and file support |
valid |
||
Logging state transitions |
valid |
||
Logging timestamp |
valid |
||
Non-root support |
valid |
||
Normal shutdown |
valid |
||
Process capability support |
valid |
||
Process priority support |
valid |
||
Process state |
valid |
||
Process user, group IDs support |
valid |
||
Queue a run target selection |
valid |
||
Ready Condition - File state |
valid |
||
Ready Condition - Lifecycle Interface |
valid |
||
Ready Condition - OS Process State |
valid |
||
Recovery Action |
valid |
||
Recovery Action - component failure reactivate the component |
valid |
||
Recovery Action - component failure switch Run Target |
valid |
||
Recovery Action - run target failure switch Run Target |
valid |
||
Recovery state manager notification |
valid |
||
Report process liveliness |
valid |
||
Resource limit support |
valid |
||
Run Target activation timeout |
valid |
||
Run target recovery action failure escalation |
valid |
||
Run target to component dependencies |
valid |
||
Run target to run target dependencies |
valid |
||
Scheduling support |
valid |
||
Security policy support |
valid |
||
Shutdown signal handling |
valid |
||
Standard handle redirection |
valid |
||
Stop timeout |
valid |
||
Supplementary group support |
valid |
||
Switch between run targets |
valid |