Files
Stefan Lohmaier a47e0aed3e
Validate / build-test (macos-latest) (push) Failing after 2s
Validate / build-test (windows-latest) (push) Failing after 16s
Validate / build-test (ubuntu-latest) (push) Successful in 18s
Validate / reports (push) Successful in 52s
feat(i18n): tools + landing page + doorstop generator in English
Phase 1 of full English translation:
- generate_doorstop_items.py: all 55 items (SG/SYS/SWE/SA/SWA) rewritten in English
- generate_landing_page.py: full UI labels, KPI cards, section headings in English
- traceability.py: docstring, error messages, HTML headers in English
- generate_test_report.py: report content + table headers in English
- All 55 markdown items in safety/sg/, reqs/, arch/ regenerated in English

Still to come:
- demo-epb filled Word docs (PID, plans, safety, manuals, audit artefacts)
- Code comments + test names + CI workflow step names
- README + dev-process repo templates
2026-05-12 03:28:54 -07:00

1.4 KiB

active, derived, header, level, normative, reviewed, links, asil
active derived header level normative reviewed links asil
true false Safety Manager 1.1 true null
SWE-007
SWE-008
SWE-009
SWE-010
SWE-011
SWE-012
D

SWA-001: Safety Manager

Responsibility

Highest safety layer. Detects engine-off, activates hill-hold, triggers auto-apply. Life-critical logic with redundant checks.

Static view

@startuml
package "Safety Manager" {
  [Engine State Monitor]
  [Hill-Hold Logic]
  [Auto-Apply Logic]
}
[Safety Manager] ..> [Apply Controller] : apply request
[Wheel Speed Plausi] --> [Safety Manager] : v_vehicle
[Inclinometer Filter] --> [Safety Manager] : grade
@enduml

Provided interfaces

Status safety_mgr_init(void);
void   safety_mgr_step_50ms(const SafetyInputs* in);

Dynamic behaviour

@startuml
[*] --> Idle
Idle --> HillHoldArmed : grade>5% & v=0 & brake
HillHoldArmed --> HillHoldActive : brake released
HillHoldActive --> Idle : v>2 km/h
Idle --> AutoApplyArmed : engine_off & v=0
AutoApplyArmed --> AutoApplyTriggered : t>=2s
AutoApplyTriggered --> Idle : applied
@enduml

Resources

  • Stack: <= 256 B
  • Worst-case timing: 200 us per call

Mapping to requirements

Requirement How covered
SWE-007 engine_off + v<0.5 in step_50ms
SWE-008 2 s filter and trigger
SWE-009 hill-hold activation
SWE-010 brake-released detection