Package-level declarations

Design Check Results

All severities: 0 total / 0 without filed issue · Critical: 0 total / 0 without filed issue · High: 0 total / 0 without filed issue · Moderate: 0 total / 0 without filed issue · Low: 0 total / 0 without filed issue
RuleFindingsFindings without filed issue
HIGH descriptionDefinedInDesignPackage Design entity has no required description00
HIGH designChildrenBoundary Design contradicts the element's bottom-level declaration00
HIGH designChildrenParent Design lists a child with a different parent00
MODERATE designClassInstance Design class has no instance property in its file00
MODERATE designClassPascalCase Design class name violates PascalCase00
MODERATE designClassesTopLevel Design class is nested inside another declaration00
HIGH designElementDefined Design has no subject element00
MODERATE designObjectCamelCase Design instance name violates camelCase00
MODERATE forbiddenWordsInDesign Design entity contains forbidden wording00
HIGH nameDefinedInDesignPackage Design entity has no required name00
HIGH nonDesignEntityInDesignPackage Entity uses the wrong viewpoint package (Design)00
HIGH safetyMeasureAsilDefined Safety measure has no ASIL00
HIGH safetyMeasureMustLiveInDesign Safety measure lacks a containing design00
HIGH safetyMechanismAsilDefined Safety mechanism has no ASIL00
HIGH INFO safetyMechanismAsilExceedsElement Safety mechanism exceeds its element's ASIL00

More complete diagnostic records and evidence are available locally on the build machine (not published), at repository-relative path items/delivery-robot/build/docs/com.example.stig.items.delivery-robot--model-check-results.json.

Static decomposition

The delivery robot contains two modeled systems: the robot control unit observes obstacles and requests braking, while the drive unit brings the robot to rest.

flowchart LR
subgraph robot["deliveryRobot<br/>«Item»"]
direction LR
control["robotControlUnit<br/>«SystemElement»"]
drive["driveUnit<br/>«SystemElement»"]
end

Child contexts: robotControlUnit and driveUnit.

Functions and interactions

The physical obstacle input passes through the control unit's observation and CAN brake_request path to the drive unit, whose physical stopping action produces the robot's stoppedMotion output.

flowchart LR
subgraph robot["deliveryRobot<br/>«Item»"]
direction LR
obstacleInPath["obstacleInPath<br/>«Event»"]
subgraph control["robotControlUnit<br/>«SystemElement»"]
direction LR
controlInput["obstacleInPath<br/>«Event»"]
controlOutput["brakeRequest<br/>«Message»"]
controlInput --> controlOutput
end
subgraph drive["driveUnit<br/>«SystemElement»"]
direction LR
driveInput["brakeRequest<br/>«Message»"]
driveOutput["stoppedMotion<br/>«Event»"]
driveInput --> driveOutput
end
stoppedMotion["stoppedMotion<br/>«Event»"]
obstacleInPath --> controlInput
controlOutput -->|CAN brake_request| driveInput
driveOutput --> stoppedMotion
end

Types

Link copied to clipboard
class DeliveryRobotDesign : Design

Obstacle observation, braking request, and physical stopping across the two systems.

Properties