textual-notation-of-model/packages/features/middleware/middleware_operational_context.sysml

Source

1/*2 * DE4SDV middleware operational context model slice.3 *4 * INC-MW-002 models the operational world for middleware integration only: no5 * AAOS SDV, Eclipse S-CORE, or AUTOSAR implementation details; no adapter6 * functional behavior; no logical realization; and no physical/software7 * realization.8 */910package DE4SDV_MiddlewareOperationalContext {11  package Features {12    package Middleware {13      package OperationalContext {14        private import DE4SDV_Stakeholders::*;15        private import DE4SDV_SYSMODAdapter::*;16        private import DE4SDV_MiddlewareIncrementFraming::Features::Middleware::IncrementFraming::*;17        private import DE4SDV_AEBSPhysicalSoftwareRealization::*;18        private import SAF_Viewpoints::*;19        private import StandardViewDefinitions::*;20        private import Views::*;2122        item def LifecycleCommand {23          doc /* Start, stop, suspend, resume, and shutdown command bundle from the middleware lifecycle manager. */24        }2526        item def HealthStatus {27          doc /* Health and availability status forwarded from middleware to the ADAS application. */28        }2930        item def UpdateNotification {31          doc /* Over-the-air update coordination and notification data. */32        }3334        part def MiddlewareIntegratedVehicleSystem;35        part def ADASApplicationStack :> Stakeholder;36        part def VehiclePlatformMiddleware :> Stakeholder;37        part def SafetyCertifiedMiddlewarePartition :> VehiclePlatformMiddleware;38        part def ApplicationMiddlewareAdapter :> Stakeholder;39        part def DiagnosticTechnician :> Stakeholder;40        part def OTAUpdateCoordinator :> Stakeholder;41        part def AEBNode :> Stakeholder;42        part def VehicleCommandGate :> Stakeholder;4344        part def MiddlewareOperationalContext {45          doc /*46           * Operational environment for middleware integration. The owned roles47           * are the performers and resources involved; this context is not an48           * implementation decomposition of the intended solution.49           */50          part adasApplication : ADASApplicationStack;51          part vehicleMiddleware : VehiclePlatformMiddleware;52          part adapter : ApplicationMiddlewareAdapter;53          part diagnosticTechnician : DiagnosticTechnician;54          part otaCoordinator : OTAUpdateCoordinator;55          part aebNode : AEBNode;56          part vehicleCommandGate : VehicleCommandGate;57        }5859        part middlewareOperationalContext : MiddlewareOperationalContext;6061        part def VehicleSignalExchangeCapability;62        part def DiagnosticAccessCapability;63        part def LifecycleCoordinationCapability;64        part def ServiceHealthMonitoringCapability;65        part def SoftwareUpdateCoordinationCapability;66        part def SafetyPathProtectionCapability;6768        part def MiddlewareIntegrationOperationalCapability {69          doc /* Stakeholder-visible capability taxonomy for middleware integration. */70          part vehicleSignalExchange : VehicleSignalExchangeCapability;71          part diagnosticAccess : DiagnosticAccessCapability;72          part lifecycleCoordination : LifecycleCoordinationCapability;73          part serviceHealthMonitoring : ServiceHealthMonitoringCapability;74          part softwareUpdateCoordination : SoftwareUpdateCoordinationCapability;75          part safetyPathProtection : SafetyPathProtectionCapability;76        }7778        part middlewareIntegrationCapability : MiddlewareIntegrationOperationalCapability;7980        use case def IntegrateADASWithVehiclePlatform :> SYSMODSystemUseCaseBase {81          doc /* Canonical middleware integration use case on the SYSMOD seam. */82          attribute redefines ucMotivation = "The ADAS application needs managed exchange of signals, diagnostics, lifecycle, health, and updates with the vehicle platform middleware.";83          attribute redefines ucTrigger = "The ADAS application starts and requests vehicle-platform services through the application-middleware adapter.";84          attribute redefines ucResult = "Vehicle signals, diagnostics, lifecycle, health, and update coordination are exchanged safely and observably between the ADAS application and the vehicle platform.";8586          objective {87            doc /* Enable safe and managed middleware integration without88                 * selecting the emergency-intervention path; that selection89                 * is deferred to requirements and logical architecture. */90          }91        }9293        use case 'integrate ADAS with vehicle platform' : IntegrateADASWithVehiclePlatform {94          subject middlewareOperationalContext : MiddlewareOperationalContext;95          actor adasApplication : ADASApplicationStack;96          actor vehicleMiddleware : VehiclePlatformMiddleware;97          actor adapter : ApplicationMiddlewareAdapter;98          actor diagnosticTechnician : DiagnosticTechnician;99          actor otaCoordinator : OTAUpdateCoordinator;100          actor aebNode : AEBNode;101          actor vehicleCommandGate : VehicleCommandGate;102103          objective {104            doc /*105             * Enable safe and managed exchange of vehicle signals, diagnostics,106             * lifecycle, health, and updates between the ADAS application and107             * the vehicle platform.108             *109             * The operational story presents both emergency intervention110             * options — through a safety-certified middleware partition and111             * via a direct vehicle-command path — without deciding between112             * them. The selection is deferred to requirements and logical113             * architecture phases.114             */115          }116117          first start;118          then include 'exchange vehicle signals' {119            subject;120            actor :>> adasApplication = 'integrate ADAS with vehicle platform'::adasApplication;121            actor :>> vehicleMiddleware = 'integrate ADAS with vehicle platform'::vehicleMiddleware;122            actor :>> adapter = 'integrate ADAS with vehicle platform'::adapter;123          }124          then include 'coordinate lifecycle' {125            subject;126            actor :>> adasApplication = 'integrate ADAS with vehicle platform'::adasApplication;127            actor :>> vehicleMiddleware = 'integrate ADAS with vehicle platform'::vehicleMiddleware;128            actor :>> adapter = 'integrate ADAS with vehicle platform'::adapter;129          }130          then include 'monitor service health' {131            subject;132            actor :>> adasApplication = 'integrate ADAS with vehicle platform'::adasApplication;133            actor :>> vehicleMiddleware = 'integrate ADAS with vehicle platform'::vehicleMiddleware;134            actor :>> adapter = 'integrate ADAS with vehicle platform'::adapter;135          }136          then include 'access diagnostics' {137            subject;138            actor :>> diagnosticTechnician = 'integrate ADAS with vehicle platform'::diagnosticTechnician;139            actor :>> vehicleMiddleware = 'integrate ADAS with vehicle platform'::vehicleMiddleware;140            actor :>> adapter = 'integrate ADAS with vehicle platform'::adapter;141          }142          then include 'coordinate software update' {143            subject;144            actor :>> otaCoordinator = 'integrate ADAS with vehicle platform'::otaCoordinator;145            actor :>> vehicleMiddleware = 'integrate ADAS with vehicle platform'::vehicleMiddleware;146            actor :>> adapter = 'integrate ADAS with vehicle platform'::adapter;147          }148          then include 'emergency intervention via safety path' [0..1] {149            subject;150            actor :>> aebNode = 'integrate ADAS with vehicle platform'::aebNode;151            actor :>> vehicleCommandGate = 'integrate ADAS with vehicle platform'::vehicleCommandGate;152          }153          then include 'emergency intervention direct path' [0..1] {154            subject;155            actor :>> aebNode = 'integrate ADAS with vehicle platform'::aebNode;156            actor :>> vehicleCommandGate = 'integrate ADAS with vehicle platform'::vehicleCommandGate;157          }158          then done;159        }160161        use case 'exchange vehicle signals' {162          subject middlewareOperationalContext : MiddlewareOperationalContext;163          actor adasApplication : ADASApplicationStack;164          actor vehicleMiddleware : VehiclePlatformMiddleware;165          actor adapter : ApplicationMiddlewareAdapter;166167          objective {168            doc /*169             * Exchange normal-driving vehicle signals through VSS-backed170             * interfaces so the ADAS application can consume vehicle speed,171             * yaw rate, longitudinal acceleration, and steering wheel angle.172             *173             * VSS signal references: Vehicle_Speed,174             * Vehicle_AngularVelocity_Yaw,175             * Vehicle_Acceleration_Longitudinal,176             * Vehicle_Chassis_SteeringWheel_Angle.177             */178          }179180          first start;181          then done;182        }183184        use case 'coordinate lifecycle' {185          subject middlewareOperationalContext : MiddlewareOperationalContext;186          actor adasApplication : ADASApplicationStack;187          actor vehicleMiddleware : VehiclePlatformMiddleware;188          actor adapter : ApplicationMiddlewareAdapter;189190          objective {191            doc /*192             * Coordinate vehicle startup and shutdown lifecycle transitions via193             * middleware-managed lifecycle commands.194             *195             * VSS-related lifecycle state and mode transitions are represented196             * through the operational handoff between the ADAS application and197             * the vehicle platform, including init, running, suspend, resume,198             * and shutdown coordination.199             */200          }201202          first start;203          then done;204        }205206        use case 'monitor service health' {207          subject middlewareOperationalContext : MiddlewareOperationalContext;208          actor adasApplication : ADASApplicationStack;209          actor vehicleMiddleware : VehiclePlatformMiddleware;210          actor adapter : ApplicationMiddlewareAdapter;211212          objective {213            doc /*214             * Monitor service health and fault conditions so the ADAS215             * application can detect degraded or unavailable middleware216             * services and respond to health status updates.217             *218             * VSS signal references: Vehicle_ADAS_AEBS_IsError,219             * Vehicle_ADAS_AEBS_FailureIndication_IsActive.220             */221          }222223          first start;224          then done;225        }226227        use case 'access diagnostics' {228          subject middlewareOperationalContext : MiddlewareOperationalContext;229          actor diagnosticTechnician : DiagnosticTechnician;230          actor vehicleMiddleware : VehiclePlatformMiddleware;231          actor adapter : ApplicationMiddlewareAdapter;232233          objective {234            doc /*235             * Provide authenticated diagnostic access during service so a236             * technician can inspect vehicle and ADAS diagnostic state through237             * middleware-mediated diagnostic services.238             *239             * VSS signal references: Vehicle_ADAS_AEBS_IsError and related240             * diagnostic-state indicators exposed through the platform.241             */242          }243244          first start;245          then done;246        }247248        use case 'coordinate software update' {249          subject middlewareOperationalContext : MiddlewareOperationalContext;250          actor otaCoordinator : OTAUpdateCoordinator;251          actor vehicleMiddleware : VehiclePlatformMiddleware;252          actor adapter : ApplicationMiddlewareAdapter;253254          objective {255            doc /*256             * Coordinate over-the-air software updates so the middleware can257             * manage service dependencies, safe vehicle states, partition-aware258             * update sequencing, and rollback consistency.259             */260          }261262          first start;263          then done;264        }265266        use case 'emergency intervention via safety path' {267          subject middlewareOperationalContext : MiddlewareOperationalContext;268          actor aebNode : AEBNode;269          actor vehicleMiddleware : SafetyCertifiedMiddlewarePartition;270          actor vehicleCommandGate : VehicleCommandGate;271272          objective {273            doc /*274             * Route emergency braking through a safety-certified middleware275             * partition to maintain unified lifecycle and health monitoring276             * while ensuring safety integrity.277             *278             * This option assumes the middleware path is qualified to the279             * required ASIL level and preserves a single managed operational280             * chain for monitoring and update control.281             */282          }283284          first start;285          then done;286        }287288        use case 'emergency intervention direct path' {289          subject middlewareOperationalContext : MiddlewareOperationalContext;290          actor aebNode : AEBNode;291          actor vehicleCommandGate : VehicleCommandGate;292293          objective {294            doc /*295             * Route emergency braking directly to the vehicle command gate,296             * bypassing the middleware, to minimize latency and avoid297             * dependency on middleware safety qualification.298             *299             * This option creates a parallel communication path and therefore300             * must be assessed later against lifecycle, health, and assurance301             * implications.302             */303          }304305          first start;306          then done;307        }308309        part def AAOSSDVIntegrationGuideSource {310          doc /*311           * External reference: AOSP AAOS SDV integration guide312           * (https://source.android.com/docs/automotive/sdv/workstreams/core/integration-guide).313           * This increment models the operational need; the AAOS SDV314           * implementation itself is not modeled here.315           */316        }317        part aaosSDVIntegrationGuideSource : AAOSSDVIntegrationGuideSource;318319        dependency aaosSDVIntegrationGuideTrace320          from DE4SDV_MiddlewareOperationalContext::Features::Middleware::OperationalContext::'integrate ADAS with vehicle platform'321          to aaosSDVIntegrationGuideSource;322        dependency middlewareOperationalContextFramingTrace323          from DE4SDV_MiddlewareOperationalContext::Features::Middleware::OperationalContext::'integrate ADAS with vehicle platform'324          to DE4SDV_MiddlewareIncrementFraming::Features::Middleware::IncrementFraming::middlewareIntegrationProblemStatement;325        dependency aebsIntegrationBoundaryContextTrace326          from DE4SDV_MiddlewareOperationalContext::Features::Middleware::OperationalContext::'integrate ADAS with vehicle platform'327          to DE4SDV_AEBSPhysicalSoftwareRealization::VehicleTargetAEBSPhysicalSoftwareBoundary;328329        concern operationalContextConcern : OperationalContextConcern {330          doc /*331           * Reviewers need the operational actors, context boundary, and both332           * emergency path options visible for this increment.333           */334          subject;335          stakeholder systemsEngineer : SystemsEngineer;336          stakeholder reviewer : OpenSourceReviewer;337        }338339        view middlewareOperationalContextView {340          viewpoint selectedOperationalContextViewpoint : OperationalContextDefinitionViewpoint {341            frame operationalContextConcern;342          }343344          expose MiddlewareOperationalContext;345          attribute depth = 1;346          attribute showAnnotationRows = false;347          attribute maxCompartmentEntries = 7;348          render asTreeDiagram;349        }350351        concern operationalStoryConcern : OperationalStoryConcern {352          doc /*353           * Reviewers need the operational story to show vehicle signal354           * exchange, lifecycle, health, diagnostics, updates, and both355           * emergency intervention options.356           */357          subject;358          stakeholder systemsEngineer : SystemsEngineer;359          stakeholder reviewer : OpenSourceReviewer;360        }361362        view middlewareOperationalStoryView {363          viewpoint selectedOperationalStoryViewpoint : OperationalStoryViewpoint {364            frame operationalStoryConcern;365          }366367          expose OperationalContext::'integrate ADAS with vehicle platform';368          expose OperationalContext::'integrate ADAS with vehicle platform'::*;369          attribute depth = 1;370          attribute showAnnotationRows = false;371          render asTreeDiagram;372        }373374        concern operationalCapabilityConcern : OperationalCapabilityConcern {375          doc /*376           * Reviewers need the operational capability expected from the377           * middleware integration to be described: the system shall be able378           * to exchange vehicle signals, diagnostics, lifecycle coordination,379           * health status, and software updates between an ADAS application380           * and a vehicle-level platform middleware, while presenting both381           * emergency intervention options instead of pre-deciding the path.382           */383          subject;384          stakeholder systemsEngineer : SystemsEngineer;385          stakeholder reviewer : OpenSourceReviewer;386        }387388        view middlewareOperationalCapabilityView {389          viewpoint selectedOperationalCapabilityViewpoint : OperationalCapabilityDefinitionViewpoint {390            frame operationalCapabilityConcern;391          }392393          expose MiddlewareIntegrationOperationalCapability;394          attribute depth = 1;395          attribute showAnnotationRows = false;396          attribute maxCompartmentEntries = 6;397          render asTreeDiagram;398        }399      }400    }401  }402}403