textual-notation-of-model/packages/features/aebs/aebs_conceptual_architecture.sysml

Source

1/*2 * DE4SDV AEBS system architecture model slice.3 *4 * This package mirrors INC-AEBS-006 from5 * methodologies/sysmod-sysmlv2/pilots/aebs-conceptual-architecture.yaml.6 *7 * Domain boundary: system architecture only. Autoware, ROS 2/DDS,8 * Eclipse S-CORE, Android SDV/AAOS, middleware adapters, processes, ECUs,9 * sensors, networks, actuators, calibrated thresholds, and compliance claims10 * are intentionally excluded.11 *12 * Semantic basis:13 * - SysML v2 specification section 7.15: allocation assigns responsibility14 *   for realizing features of one element to another element.15 * - Systems-Modeling/SysML-v2-Release commit 3f895b73265276bff92c6f67ac407486e49ffe6d,16 *   validation/12-Dependency Relationships/12b-Allocation-1.sysml.17 * - State decomposition follows the same release's validation/05-State-based18 *   Behavior/5-State-based Behavior-1.sysml.19 */2021package DE4SDV_AEBSConceptualArchitecture {22  private import DE4SDV_AEBSFunctionalBehavior::Features::AEBS::FunctionalBehavior::*;23  private import SAF_Viewpoints::*;24  private import DE4SDV_Stakeholders::*;25  private import SysideViews::**;26  private import Views::*;2728  /* ──────────────────────────────────────────29   * Conceptual information definitions30   * ────────────────────────────────────────── */3132  enum def AEBSAvailabilityKind {33    unavailable;34    degraded;35    valid;36  }3738  enum def AEBSInterventionKind {39    none;40    interventionRequested;41    inhibited;42  }4344  item def AEBSOperatingContext {45    doc /*46     * Technology-neutral intervention-eligibility and inhibition context47     * supplied to the conceptual decision boundary. Concrete providers and48     * middleware are deferred to physical realization. System lifecycle and49     * AEBS availability are intentionally excluded; they have separate owners.50     *51     * This is intentionally a nominal, opaque contract in INC-AEBS-006. The52     * eligibility and inhibition facts carried by the item are not yet defined53     * as attributes because their source requirements and value domains remain54     * open. The item name establishes an exchange boundary, not a complete55     * data schema.56     */57  }5859  item def PredictedEgoPath {60    doc /*61     * Technology-neutral predicted subject-vehicle path used for target62     * relevance and collision-risk evaluation. No trajectory message,63     * geometry representation, or prediction mechanism is selected here.64     *65     * This is intentionally a nominal, opaque contract in INC-AEBS-006.66     * Horizon, coordinate frame, validity, timing, uncertainty, and path67     * representation remain requirements/interface gaps. The item name68     * establishes the conceptual producer-consumer boundary without inventing69     * a physical or software schema.70     */71  }7273  item def InterventionDecision {74    doc /*75     * Conceptual emergency-intervention intent after considering collision risk,76     * intervention eligibility/inhibition context, driver override, degradation,77     * and other inhibiting conditions.78     */79    attribute intervention : AEBSInterventionKind;80  }8182  item def EmergencyInterventionRequest {83    doc /*84     * Technology-neutral request for emergency intervention after arbitration.85     * It expresses AEBS intent only. Brake-command values, lighting status,86     * vehicle-control arbitration, and actuator engagement are physical-domain87     * responsibilities deferred to INC-AEBS-007/008.88     */89    attribute intervention : AEBSInterventionKind;90  }9192  dependency emergencyRequestFunctionalTrace93    from EmergencyInterventionRequest to EmergencyBrakingCommand;9495  item def AEBSDegradationState {96    doc /*97     * Conceptual valid/degraded/unavailable result from health supervision.98     * Concrete diagnostic codes and middleware health services are deferred.99     */100    attribute availability : AEBSAvailabilityKind;101  }102103  item def ObservationHealthStatus {104    doc /*105     * Conceptual freshness, consistency, and validity status produced while106     * acquiring vehicle-motion and target observations.107     *108     * This is intentionally a nominal, opaque contract in INC-AEBS-006.109     * The observation-specific status dimensions, timing, and aggregation110     * semantics remain requirements/interface gaps. AEBS availability is not111     * carried by this item; it is carried by AEBSDegradationState and solely112     * owned and produced by HealthAndDegradationSupervision.113     */114  }115116  /* ──────────────────────────────────────────117   * Conceptual port definitions118   * ────────────────────────────────────────── */119120  port def VehicleMotionInput {121    in item vehicleMotionState : VehicleMotionState;122  }123124  port def VehicleMotionOutput {125    out item vehicleMotionState : VehicleMotionState;126  }127128  port def ForwardTargetInput {129    in item forwardTargetState : ForwardTargetState;130  }131132  port def ForwardTargetOutput {133    out item forwardTargetState : ForwardTargetState;134  }135136  port def PredictedEgoPathInput {137    in item predictedEgoPath : PredictedEgoPath;138  }139140  port def PredictedEgoPathOutput {141    out item predictedEgoPath : PredictedEgoPath;142  }143144  port def CollisionRiskInput {145    in item collisionRiskAssessment : CollisionRiskAssessment;146  }147148  port def CollisionRiskOutput {149    out item collisionRiskAssessment : CollisionRiskAssessment;150  }151152  port def DriverOverrideInputPort {153    in item driverOverrideInput : DriverOverrideInput;154  }155156  port def OperatingContextInput {157    in item operatingContext : AEBSOperatingContext;158  }159160  port def InterventionDecisionInput {161    in item interventionDecision : InterventionDecision;162  }163164  port def InterventionDecisionOutput {165    out item interventionDecision : InterventionDecision;166  }167168  port def AEBSFailureStatusInput {169    in item aebsFailureStatus : AEBSFailureStatus;170  }171172  port def DegradationStateInput {173    in item degradationState : AEBSDegradationState;174  }175176  port def DegradationStateOutput {177    out item degradationState : AEBSDegradationState;178  }179180  port def ObservationHealthInput {181    in item observationHealthStatus : ObservationHealthStatus;182  }183184  port def ObservationHealthOutput {185    out item observationHealthStatus : ObservationHealthStatus;186  }187188  port def DriverWarningRequestInput {189    in item driverWarningRequest : DriverWarningRequest;190  }191192  port def DriverWarningRequestOutput {193    out item driverWarningRequest : DriverWarningRequest;194  }195196  port def EmergencyInterventionInput {197    in item emergencyInterventionRequest : EmergencyInterventionRequest;198  }199200  port def EmergencyInterventionOutput {201    out item emergencyInterventionRequest : EmergencyInterventionRequest;202  }203204  port def FailureIndicationInput {205    in item failureIndicationRequest : FailureIndicationRequest;206  }207208  port def FailureIndicationOutput {209    out item failureIndicationRequest : FailureIndicationRequest;210  }211212  port def AEBSEvidenceEventOutput {213    out item aebsEvidenceEvent : AEBSEvidenceEvent;214  }215216  /* ──────────────────────────────────────────217   * Conceptual component definitions218   * ────────────────────────────────────────── */219220  part def StateAcquisitionAndNormalization {221    doc /*222     * Validates and normalizes vehicle-motion and target observations without223     * selecting a concrete sensor, service provider, or middleware.224     */225    port vehicleMotionIn : VehicleMotionInput;226    port targetObservationIn : ForwardTargetInput;227    port normalizedVehicleStateOut : VehicleMotionOutput;228    port normalizedTargetStateOut : ForwardTargetOutput;229    port observationHealthOut : ObservationHealthOutput;230  }231232  part def EgoPathPrediction {233    doc /* Produces a technology-neutral predicted ego path from normalized vehicle motion. */234    port vehicleMotionIn : VehicleMotionInput;235    port predictedEgoPathOut : PredictedEgoPathOutput;236  }237238  part def TargetProcessing {239    doc /* Selects and characterizes targets relevant to the predicted ego path. */240    port targetStateIn : ForwardTargetInput;241    port predictedEgoPathIn : PredictedEgoPathInput;242    port relevantTargetStateOut : ForwardTargetOutput;243  }244245  part def CollisionRiskEvaluation {246    doc /*247     * Assesses forward collision risk from vehicle state, relevant target248     * state, predicted path, and explicitly open braking assumptions.249     */250    port vehicleMotionIn : VehicleMotionInput;251    port relevantTargetStateIn : ForwardTargetInput;252    port predictedEgoPathIn : PredictedEgoPathInput;253    port collisionRiskOut : CollisionRiskOutput;254  }255256  part def InterventionDecisionAndArbitration {257    doc /*258     * Decides emergency-intervention intent while considering intervention259     * eligibility/inhibition context, driver override, degradation, and other260     * inhibiting conditions.261     */262    port collisionRiskIn : CollisionRiskInput;263    port driverOverrideIn : DriverOverrideInputPort;264    port operatingContextIn : OperatingContextInput;265    port degradationStateIn : DegradationStateInput;266    port interventionDecisionOut : InterventionDecisionOutput;267268    exhibit state overrideStates {269      state noOverride;270      state overrideAccepted;271    }272  }273274  part def DriverWarningManagement {275    doc /* Produces a conceptual driver-warning request without prescribing HMI technology. */276    port collisionRiskIn : CollisionRiskInput;277    port driverWarningRequestOut : DriverWarningRequestOutput;278279    exhibit state warningStates {280      doc /* Warning state remains independent from override and intervention state. */281      state inactive;282      state warningRequested;283    }284  }285286  part def EmergencyInterventionCoordination {287    doc /*288     * Issues and retains a conceptual emergency-intervention request only from an289     * affirmative arbitrated decision. Physical emergency supervision, command290     * gating, vehicle interfacing, and brake actuation are outside INC-AEBS-006.291     */292    port interventionDecisionIn : InterventionDecisionInput;293    port emergencyInterventionOut : EmergencyInterventionOutput;294295    exhibit state interventionStates {296      doc /*297       * Emergency-state ownership is explicit. Numeric retention and release298       * guards remain open requirements and are not invented here.299       */300      state inactive;301      state interventionRequested;302      state emergencyActive;303    }304  }305306  part def HealthAndDegradationSupervision {307    doc /*308     * Sole conceptual owner of valid, degraded, and unavailable AEBS operation;309     * reconciles input and subsystem health and requests failure indication.310     */311    port failureStatusIn : AEBSFailureStatusInput;312    port observationHealthIn : ObservationHealthInput;313    port degradationStateOut : DegradationStateOutput;314    port failureIndicationOut : FailureIndicationOutput;315316    exhibit state availabilityStates {317      state valid;318      state degraded;319      state unavailable;320    }321  }322323  part def EvidenceRecording {324    doc /*325     * Observes risk, decision, degradation, warning, intervention, and failure326     * events and emits a conceptual evidence event. Storage technology, retention,327     * and evidence acceptance criteria remain open.328     */329    port collisionRiskIn : CollisionRiskInput;330    port interventionDecisionIn : InterventionDecisionInput;331    port degradationStateIn : DegradationStateInput;332    port driverWarningRequestIn : DriverWarningRequestInput;333    port emergencyInterventionIn : EmergencyInterventionInput;334    port failureIndicationIn : FailureIndicationInput;335    port evidenceEventOut : AEBSEvidenceEventOutput;336  }337338  /* ──────────────────────────────────────────339   * Conceptual system composition and exchanges340   * ────────────────────────────────────────── */341342  part def VehicleTargetAEBSSystem {343    doc /*344     * Technology-neutral conceptual realization of the vehicle-target AEBS345     * functional baseline. Conceptual elements own responsibilities and exchange346     * typed information; no physical software or hardware realization is347     * implied.348     */349350    port vehicleMotionObservationIn : VehicleMotionInput;351    port targetObservationIn : ForwardTargetInput;352    port driverOverrideObservationIn : DriverOverrideInputPort;353    port operatingContextIn : OperatingContextInput;354    port subsystemHealthIn : AEBSFailureStatusInput;355356    port driverWarningRequestOut : DriverWarningRequestOutput;357    port emergencyInterventionRequestOut : EmergencyInterventionOutput;358    port failureIndicationRequestOut : FailureIndicationOutput;359    port evidenceEventOut : AEBSEvidenceEventOutput;360361    part stateAcquisition : StateAcquisitionAndNormalization;362    part egoPathPrediction : EgoPathPrediction;363    part targetProcessing : TargetProcessing;364    part collisionRiskEvaluation : CollisionRiskEvaluation;365    part interventionDecision : InterventionDecisionAndArbitration;366    part warningManagement : DriverWarningManagement;367    part emergencyCoordination : EmergencyInterventionCoordination;368    part healthSupervision : HealthAndDegradationSupervision;369    part evidenceRecording : EvidenceRecording;370371    exhibit state lifecycleStates {372      doc /*373       * System lifecycle is independent from component-owned warning,374       * intervention, and availability state machines.375       */376      state standby;377      state monitoring;378    }379380    // Boundary delegation binds external ports to their conceptual owners.381    bind vehicleMotionObservationIn = stateAcquisition.vehicleMotionIn;382    bind targetObservationIn = stateAcquisition.targetObservationIn;383    bind driverOverrideObservationIn = interventionDecision.driverOverrideIn;384    bind operatingContextIn = interventionDecision.operatingContextIn;385    bind subsystemHealthIn = healthSupervision.failureStatusIn;386387    // State, path, target, and risk exchanges.388    flow from stateAcquisition.normalizedVehicleStateOut.vehicleMotionState389      to egoPathPrediction.vehicleMotionIn.vehicleMotionState;390    flow from stateAcquisition.normalizedVehicleStateOut.vehicleMotionState391      to collisionRiskEvaluation.vehicleMotionIn.vehicleMotionState;392    flow from stateAcquisition.normalizedTargetStateOut.forwardTargetState393      to targetProcessing.targetStateIn.forwardTargetState;394    flow from stateAcquisition.observationHealthOut.observationHealthStatus395      to healthSupervision.observationHealthIn.observationHealthStatus;396    flow from egoPathPrediction.predictedEgoPathOut.predictedEgoPath397      to targetProcessing.predictedEgoPathIn.predictedEgoPath;398    flow from egoPathPrediction.predictedEgoPathOut.predictedEgoPath399      to collisionRiskEvaluation.predictedEgoPathIn.predictedEgoPath;400    flow from targetProcessing.relevantTargetStateOut.forwardTargetState401      to collisionRiskEvaluation.relevantTargetStateIn.forwardTargetState;402403    // Risk, decision, warning, intervention, health, and evidence exchanges.404    flow from collisionRiskEvaluation.collisionRiskOut.collisionRiskAssessment405      to interventionDecision.collisionRiskIn.collisionRiskAssessment;406    flow from collisionRiskEvaluation.collisionRiskOut.collisionRiskAssessment407      to warningManagement.collisionRiskIn.collisionRiskAssessment;408    flow from collisionRiskEvaluation.collisionRiskOut.collisionRiskAssessment409      to evidenceRecording.collisionRiskIn.collisionRiskAssessment;410411    flow from healthSupervision.degradationStateOut.degradationState412      to interventionDecision.degradationStateIn.degradationState;413    flow from healthSupervision.degradationStateOut.degradationState414      to evidenceRecording.degradationStateIn.degradationState;415416    flow from interventionDecision.interventionDecisionOut.interventionDecision417      to emergencyCoordination.interventionDecisionIn.interventionDecision;418    flow from interventionDecision.interventionDecisionOut.interventionDecision419      to evidenceRecording.interventionDecisionIn.interventionDecision;420421    bind driverWarningRequestOut = warningManagement.driverWarningRequestOut;422    flow from warningManagement.driverWarningRequestOut.driverWarningRequest423      to evidenceRecording.driverWarningRequestIn.driverWarningRequest;424425    bind emergencyInterventionRequestOut = emergencyCoordination.emergencyInterventionOut;426    flow from emergencyCoordination.emergencyInterventionOut.emergencyInterventionRequest427      to evidenceRecording.emergencyInterventionIn.emergencyInterventionRequest;428429    bind failureIndicationRequestOut = healthSupervision.failureIndicationOut;430    flow from healthSupervision.failureIndicationOut.failureIndicationRequest431      to evidenceRecording.failureIndicationIn.failureIndicationRequest;432433    bind evidenceEventOut = evidenceRecording.evidenceEventOut;434  }435436  action functionalFlow : VehicleTargetAEBSFunctionalFlow;437  part system : VehicleTargetAEBSSystem;438439  /*440   * Functional-to-conceptual responsibility allocation. One functional action may441   * allocate to multiple conceptual elements when the conceptual decomposition makes442   * previously combined responsibilities explicit.443   */444  allocation def FunctionalToSystemResponsibility;445446  allocation acquireStateAllocation : FunctionalToSystemResponsibility447    allocate functionalFlow.acquireState448    to system.stateAcquisition;449450  allocation assessRiskPathAllocation : FunctionalToSystemResponsibility451    allocate functionalFlow.assessRisk452    to system.egoPathPrediction;453  allocation assessRiskTargetAllocation : FunctionalToSystemResponsibility454    allocate functionalFlow.assessRisk455    to system.targetProcessing;456  allocation assessRiskEvaluationAllocation : FunctionalToSystemResponsibility457    allocate functionalFlow.assessRisk458    to system.collisionRiskEvaluation;459460  allocation requestWarningAllocation : FunctionalToSystemResponsibility461    allocate functionalFlow.requestWarning462    to system.warningManagement;463464  allocation evaluateOverrideAllocation : FunctionalToSystemResponsibility465    allocate functionalFlow.evaluateOverride466    to system.interventionDecision;467468  allocation requestBrakingDecisionAllocation : FunctionalToSystemResponsibility469    allocate functionalFlow.requestBraking470    to system.interventionDecision;471  allocation requestBrakingCoordinationAllocation : FunctionalToSystemResponsibility472    allocate functionalFlow.requestBraking473    to system.emergencyCoordination;474475  allocation monitorFailureAllocation : FunctionalToSystemResponsibility476    allocate functionalFlow.monitorFailure477    to system.healthSupervision;478479  allocation recordEvidenceAllocation : FunctionalToSystemResponsibility480    allocate functionalFlow.recordEvidence481    to system.evidenceRecording;482483  /* ──────────────────────────────────────────484   * Concerns and human-reviewable views485   * ────────────────────────────────────────── */486487  concern conceptualStructureConcern : ConceptualStructureConcern {488    doc /*489     * Reviewers need the conceptual AEBS boundary, decomposition, responsibility490     * ownership, and conceptual/physical separation to be explicit.491     */492    subject;493    stakeholder systemsEngineer : SystemsEngineer;494    stakeholder reviewer : OpenSourceReviewer;495  }496497  concern conceptualInternalExchangeConcern : ConceptualInternalExchangeConcern {498    doc /*499     * Reviewers need typed boundary and internal exchanges, direction, and500     * delegation to conceptual owners without middleware leakage.501     */502    subject;503    stakeholder systemsEngineer : SystemsEngineer;504    stakeholder reviewer : OpenSourceReviewer;505  }506507  concern conceptualFunctionMappingConcern : ConceptualFunctionMappingConcern {508    doc /*509     * Reviewers need every AEBS functional action allocated to one or more510     * conceptual elements without implying physical realization.511     */512    subject;513    stakeholder systemsEngineer : SystemsEngineer;514    stakeholder reviewer : OpenSourceReviewer;515  }516517  view aebsSystemStructureView {518    viewpoint selectedSystemStructureViewpoint : SystemStructureDefinitionViewpoint {519      frame conceptualStructureConcern;520    }521522    expose system;523    expose system::stateAcquisition;524    expose system::egoPathPrediction;525    expose system::targetProcessing;526    expose system::collisionRiskEvaluation;527    expose system::interventionDecision;528    expose system::warningManagement;529    expose system::emergencyCoordination;530    expose system::healthSupervision;531    expose system::evidenceRecording;532    /*533     * This is a decomposition view. The tree renderer may list ports owned by534     * the exposed parts, but it does not render the bind and flow edges below.535     * Port connectivity is defined in VehicleTargetAEBSSystem and536     * selected by aebsSystemInternalExchangeView.537     */538    render asTreeDiagram;539  }540541  view aebsSystemInternalExchangeView {542    viewpoint selectedSystemInternalExchangeViewpoint : SystemInternalExchangeViewpoint {543      frame conceptualInternalExchangeConcern;544    }545546    /*547     * Exposing direct conceptual-system members selects the boundary ports,548     * bindings, flows, and component usages that define connectivity. The549     * interconnection renderer draws bind and flow edges between ports.550     */551    expose system;552    expose system::**;553    attribute depth = -1;554    attribute showAnnotationRows = false;555    attribute maxCompartmentEntries = 0;556    render asInterconnectionDiagram;557  }558559  view aebsSystemFunctionMappingView : MVD::MatrixView {560    viewpoint selectedSystemFunctionMappingViewpoint : SystemFunctionMappingViewpoint {561      frame conceptualFunctionMappingConcern;562    }563    view :>> rowView {564      expose functionalFlow::acquireState;565      expose functionalFlow::assessRisk;566      expose functionalFlow::requestWarning;567      expose functionalFlow::evaluateOverride;568      expose functionalFlow::requestBraking;569      expose functionalFlow::monitorFailure;570      expose functionalFlow::recordEvidence;571      attribute :>> representation = Rep::name;572    }573    view :>> columnView {574      expose system::stateAcquisition;575      expose system::egoPathPrediction;576      expose system::targetProcessing;577      expose system::collisionRiskEvaluation;578      expose system::interventionDecision;579      expose system::warningManagement;580      expose system::emergencyCoordination;581      expose system::healthSupervision;582      expose system::evidenceRecording;583      attribute :>> representation = Rep::name;584    }585    view :>> cellView {586      expose DE4SDV_AEBSConceptualArchitecture::*;587      attribute :>> direction = SysideViews::MatrixTraceabilityDirection::row2col;588    }589  }590}591