Skip to content

Requirement rephrasing and split-up - #647

Open
TimoSteuerwaldETAS wants to merge 2 commits into
eclipse-score:mainfrom
etas-contrib:feature/rephrase_requirements
Open

TimoSteuerwaldETAS wants to merge 2 commits into
eclipse-score:mainfrom
etas-contrib:feature/rephrase_requirements

Conversation

@TimoSteuerwaldETAS

@TimoSteuerwaldETAS TimoSteuerwaldETAS commented Sep 17, 2026 •

Copy link
Copy Markdown
Contributor

Rephrased and set state accordingly as discussed in weekly lifecyle meeting on 12th August, 9th and 16th September.

As discussed in weekly lifecyle meeting on 9th and 16th September.
:security: NO
:safety: ASIL_B
:derived_from: feat_req__lifecycle__liveliness_detection[version==1]
:status: valid

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This thins one should be invalid? Might need some clarification. Stop the process and then what? is it considered active?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To my understanding, the ones which I kept valid are:

  • for switching run targets (comp_req__launch_man__recovery_stop_start)
  • for restarting the component (comp_req__launch_man__recovery_relaunch)
  • for a switching to a minimal diagnosable state like fallback run target (comp_req__launch_man__recovery_stop)

However I am not entirely sure if my interpretation is correct.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think from the meeting minutes

"Proposal is to set at least comp_req__launch_man__recovery_stop to invalid"
Then we shall transform this into the crash recovery "feature"

:security: NO
:safety: ASIL_B
:derived_from: feat_req__lifecycle__liveliness_detection[version==1]
:status: valid

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this one should also be set to invalid and clarified. I think the requirement should describe what happens with the dependants, do they get restarted?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's clarify in the meeting.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we discussed this a longer time ago once in Score and if I remember correctly dependent processes shall be unaffected by a restarted process (i.e. restart component recovery action).

The assumption is that e.g. IPC communication btw. processes can be reestablished (which is supported in mw::com / ara::com).

@SimonKozik SimonKozik left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add use cases documented in the minutes here: https://github.com/orgs/eclipse-score/discussions/2386#discussioncomment-17825072

@TimoSteuerwaldETAS

Copy link
Copy Markdown
Contributor Author

Please add use cases documented in the minutes here: https://github.com/orgs/eclipse-score/discussions/2386#discussioncomment-17825072

Please have a look at the note boxes. What exactly are you missing?

#####################################

.. note::
Requirements which are not planned to be implemented in the version 1.0 of the Launch Manager are set to status **invalid**.

@NicolasFussberger NicolasFussberger Sep 24, 2026 •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is Score 1.0 release and Launch Manager 1.0 the same thing?
AFAIK valid from field is referring to score release and not to the launch manager release.

The :term:`Launch Manager` shall be able to react to a process failure by
stopping the process.

.. comp_req:: Recovery by stopping the process and starting another process

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess this is not in 1.0 scope

Comment on lines +692 to +693
The :term:`Launch Manager` shall be able to react to a process failure by
relaunching the process.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe something like this:

Suggested change
The :term:`Launch Manager` shall be able to react to a process failure by
relaunching the process.
When configured, the :term:`Launch Manager` shall be able to react to a
:term:`Component` activation failure by reactivating the failed
:term:`Component` only.

it clarifies that

  1. its component activation
  2. only for the failing comp
  3. only if configured

Comment on lines +731 to +732
The :term:`Launch Manager` shall be able to react to a process failure by
triggering :term:`QNX` :term:`Operating System` Device Safe State (:term:`DSS`).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
The :term:`Launch Manager` shall be able to react to a process failure by
triggering :term:`QNX` :term:`Operating System` Device Safe State (:term:`DSS`).
When configured, the :term:`Launch Manager` shall be able to react to a :term:`Component` activation failure by
triggering a :term:`QNX` :term:`Operating System` Device Safe State (:term:`DSS`).

This branch is waiting to be deployed

1 waiting deployment
workflow-approval — 47dee1fd Waiting Sep 21, 2026 by TimoSteuerwaldETAS via Build and test unit-tests-arm64-qnx / approval #940
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Backlog

Development

Successfully merging this pull request may close these issues.

4 participants