Package-level declarations
Types
HIGH: Element analysis shall reference an element.
Omitting detailed QM analysis must remain an explicit, reviewable assessment.
Positive conclusions require their own engineering justification, including explicitly QM failures.
HIGH on excessive failures; INFO on an interface point above the maximum of all its failures.
HIGH: Failure ASIL shall be <= any(propagatesTo.asil).
HIGH: If failure multiplicity is SINGLE_POINT, all propagatesTo.multiplicity shall be SINGLE_POINT.
HIGH: every Failure shall be declared as a property of an InterfacePointAnalysis subclass — never as a free-floating top-level val.
MODERATE: If failure name ends with _S
HIGH: A failure may only propagate to failures of InterfacePointAnalysis instances whose interfacePoint is listed in the source IPA's usedIn.
HIGH: If failure ASIL = QM, its severity shall be < S10 (10.0).
HIGH: S10 or unknown severity, or non-QM or unknown ASIL, requires a safety measure or a valid independent failure.
HIGH: Failure severity shall be <= any(propagatesTo.severity).
Coverage follows interface containment inside an element, independently of the element hierarchy.
HIGH: every InterfacePointAnalysis shall be declared as a property of an Analysis subclass, directly or through nested interface-point analyses — never as a free-floating top-level val.
Check authored types as well as instances, including classes that have not been instantiated.
An explicit scope decision needs an assessment even when some detailed content has been retained.
HIGH: Effective ASIL of the analyzed interface point shall be <= any(usedIn.effectiveAsil).
HIGH: An interface point with ASIL > QM shall have at least one failure with severity >= S10.