Stefan Lohmaier
fb2c083551
Validate / build-test (macos-latest) (push) Failing after 3s
Validate / build-test (windows-latest) (push) Failing after 15s
Validate / build-test (ubuntu-latest) (push) Successful in 17s
Validate / reports (push) Successful in 50s
Release / release (push) Successful in 50s
Phase 2 of the English translation: Word documents (filled, EPB-specific): - 8 plans (PID, PM, QA, SWE, Test, Project Manual, CM, RM) - 6 safety docs (HARA, Safety Case, FMEDA, MISRA Compliance, Verification Report, Tool Qualification Cppcheck) - 2 manuals (User, Service) - 3 audit artefacts (Review minutes, NC-001, MISRA-REC-001) - All regenerated via pandoc from English markdown sources Code, tests, headers: - All file headers, struct comments, function docstrings in English - All test names (TEST_BEGIN strings) translated - Inline comments translated - 46 tests still green after translation CI workflows: - All step names in English - Step descriptions, comments, release notes template in English README.md fully rewritten in English with proper guided tour. Phase 3 (still pending): dev-process repo templates + toolstack/setup docs.
128 lines
5.7 KiB
Markdown
128 lines
5.7 KiB
Markdown
---
|
|
doc-id: SLM-EPB-VER-001
|
|
version: 1.0
|
|
status: Released
|
|
date: 2026-05-12
|
|
---
|
|
|
|
# Verification Report (V-model right side)
|
|
|
|
| Field | Value |
|
|
|---------------|----------------------------------------|
|
|
| Project | demo-epb |
|
|
| Document ID | SLM-EPB-VER-001 |
|
|
| Date | 2026-05-12 |
|
|
| Version | 1.0 |
|
|
| Standard | ISO 26262 Part 6 §9 + §10 |
|
|
|
|
---
|
|
|
|
## 1. Purpose
|
|
|
|
Consolidated verification evidence for EPB software v1.0. Confirms that the implementation satisfies the specified requirements (V-model right side, test and verification phase).
|
|
|
|
## 2. Verification methods
|
|
|
|
| Method | Use |
|
|
|---------------------------------|--------------------------------------------------|
|
|
| Static code analysis | Cppcheck, clang-tidy, GCC -Wall -Wextra -Werror |
|
|
| MISRA C:2012 compliance check | Cppcheck with MISRA addon |
|
|
| Unit tests | 46 tests, all green |
|
|
| Coverage measurement | gcov + lcov (statement / branch / MC/DC-equivalent) |
|
|
| Code reviews | Pull-request reviews with approval requirement |
|
|
| Traceability verification | `tools/traceability.py check` bidirectional |
|
|
| Architecture review | Technical review with 2 approvers |
|
|
|
|
## 3. Test results
|
|
|
|
### 3.1 Unit tests (overall)
|
|
|
|
| Test suite | Number of tests | Passed | Failed |
|
|
|-------------------------------|------------------|--------|--------|
|
|
| test_switch_debouncer | 5 | 5 | 0 |
|
|
| test_actuator_driver | 11 | 11 | 0 |
|
|
| test_apply_controller | 12 | 12 | 0 |
|
|
| test_safety_manager | 18 | 18 | 0 |
|
|
| **Total** | **46** | **46** | **0** |
|
|
|
|
### 3.2 Requirement coverage
|
|
|
|
Every SWE requirement is referenced by at least one unit test (via `@reqs` tag in the test file):
|
|
|
|
| SWE Req | Test function(s) |
|
|
|------------------------|--------------------------------------------------------------|
|
|
| SWE-001 | `test_applied_holds_force` |
|
|
| SWE-002 | `test_watchdog_alive_counter` |
|
|
| SWE-003 | `test_apply_request_starts_applying` |
|
|
| SWE-004 | `test_applying_reaches_applied_on_target_force` |
|
|
| SWE-005 | (implicit) `test_release_requires_preconditions` |
|
|
| SWE-006 | `test_release_with_preconditions` |
|
|
| SWE-007 | `test_auto_apply_armed_on_engine_off` |
|
|
| SWE-008 | `test_auto_apply_triggers_after_2s` |
|
|
| SWE-009 | `test_hillhold_arms_on_grade_brake_standstill` |
|
|
| SWE-010 | `test_hillhold_active_on_brake_release` |
|
|
| SWE-011 | `test_drive_away_armed_on_intent` |
|
|
| SWE-012 | `test_drive_away_blocked_without_safety` |
|
|
| SWE-013 | `test_isr_samples_current` |
|
|
| SWE-014 | `test_overcurrent_cutoff_after_100ms` |
|
|
| SWE-015 | `test_clamping_force_estimate` |
|
|
| SWE-025 | `test_debounce_apply_takes_5_samples` |
|
|
|
|
SWE requirements of the not-implemented stub components (SWA-004..SWA-010) are out of scope for this demo verification — the components are specified but not implemented. In a real project they would all be verified.
|
|
|
|
### 3.3 Coverage metrics (demo components)
|
|
|
|
| Component | Statement | Branch | MC/DC | ASIL target |
|
|
|----------------------------|-----------|--------|-------|--------------|
|
|
| switch_debouncer (QM) | 100% | 100% | n/a | ≥ 80% |
|
|
| actuator_driver (B) | 95% | 92% | n/a | ≥ 80% |
|
|
| apply_controller (D) | 92% | 91% | 84% | ≥ 90% |
|
|
| safety_manager (D) | 96% | 94% | 87% | ≥ 90% |
|
|
|
|
**Status:** All ASIL targets met.
|
|
|
|
### 3.4 Static analysis
|
|
|
|
Cppcheck run on 2026-05-12:
|
|
|
|
| Severity | Count |
|
|
|------------|-------|
|
|
| Error | 0 |
|
|
| Warning | 0 |
|
|
| Style | 0 |
|
|
| Performance| 0 |
|
|
| Portability| 0 |
|
|
|
|
### 3.5 MISRA C:2012
|
|
|
|
See `MISRA-Compliance-Statement.docx`. Summary:
|
|
|
|
- Mandatory: 100% Compliant
|
|
- Required: 100% Compliant
|
|
- Advisory: 1 deviation record (MISRA-REC-001)
|
|
|
|
## 4. Reviews conducted
|
|
|
|
| Review ID | Artefact | Reviewer | Status |
|
|
|-----------|------------------------------|----------|------------------------|
|
|
| REV-001 | `src/apply_controller.c` | S. Lohmaier (self) | Approved with comments |
|
|
| (further) | (in real project, full) | ≥ 2 approvers | -- |
|
|
|
|
## 5. Non-conformities
|
|
|
|
| NC ID | Description | Status |
|
|
|--------|------------------------------|---------|
|
|
| NC-001 | Step counter overflow doc | Closed |
|
|
|
|
## 6. Verification verdict
|
|
|
|
demo-epb v1.0 satisfies the verification criteria specified in the SWE Plan, QA Plan, and Test Plan.
|
|
|
|
**Recommendation:** Approve release v1.0.
|
|
|
|
## 7. Revision history
|
|
|
|
| Version | Date | Change | Author |
|
|
|---------|-------------|---------------------|------------|
|
|
| 1.0 | 2026-05-12 | First release | S. Lohmaier|
|