Skip to content

Commit f2f979b

Browse files
Comp Req inspection - Bitmanipulation
Resolves: #2479
1 parent 1f8581c commit f2f979b

5 files changed

Lines changed: 186 additions & 6 deletions

File tree

docs/modules/baselibs/bitmanipulation/docs/index.rst

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@ bitmanipulation
2727
:hidden:
2828

2929
requirements/index.rst
30+
requirements/chklst_req_inspection.rst
3031
architecture/index.rst
3132
safety_analysis/fmea.rst
3233
safety_analysis/dfa.rst
Lines changed: 172 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,172 @@
1+
..
2+
# *******************************************************************************
3+
# Copyright (c) 2026 Contributors to the Eclipse Foundation
4+
#
5+
# See the NOTICE file(s) distributed with this work for additional
6+
# information regarding copyright ownership.
7+
#
8+
# This program and the accompanying materials are made available under the
9+
# terms of the Apache License Version 2.0 which is available at
10+
# https://www.apache.org/licenses/LICENSE-2.0
11+
#
12+
# SPDX-License-Identifier: Apache-2.0
13+
# *******************************************************************************
14+
15+
16+
.. document:: Bitmanipulation Requirements Inspection Checklist
17+
:id: doc__bitmanipulation_req_inspection
18+
:status: valid
19+
:safety: ASIL_B
20+
:security: YES
21+
:realizes: wp__requirements_inspect
22+
23+
24+
Requirement Inspection Checklist
25+
================================
26+
27+
**Purpose**
28+
29+
The purpose of this requirement inspection checklist is to collect the topics to be checked during requirements inspection.
30+
31+
**Conduct**
32+
33+
As described in the concept :need:`doc_concept__wp_inspections` the following "inspection roles" are expected to be filled:
34+
35+
- author: `<https://github.com/rutik7>`_
36+
- reviewer: `<https://github.com/4og>`_
37+
- moderator: `<https://github.com/aschemmel-tech>`_
38+
- test expert: `<https://github.com/rahulthakre29>`_
39+
40+
**Checklist**
41+
42+
See also :need:`doc_concept__wp_inspections` for further information about reviews in general and inspection in particular.
43+
44+
.. list-table:: Component Requirement Inspection Checklist
45+
:header-rows: 1
46+
:widths: 10,30,50,6,6,8
47+
48+
* - Review ID
49+
- Acceptance Criteria
50+
- Guidance
51+
- Passed
52+
- Remarks
53+
- Issue link
54+
* - REQ_01_01
55+
- Is the requirement formulation template used?
56+
- see :need:`gd_temp__req_formulation`, this includes the use of "shall".
57+
-
58+
-
59+
-
60+
* - REQ_02_01
61+
- Is the requirement description *comprehensible* ?
62+
- If you think the requirement is hard to understand, comment here.
63+
-
64+
-
65+
-
66+
* - REQ_02_02
67+
- Is the requirement description *unambiguous* ?
68+
- Especially search for "weak words" like "about", "etc.", "relevant" and others (see the internet documentation on this). This check shall be supported by tooling.
69+
-
70+
-
71+
-
72+
* - REQ_02_03
73+
- Is the requirement description *atomic* ?
74+
- A good way to think about this is to consider if the requirement may be tested by one (positive) test case or needs more of these. The requirement formulation template should also avoid being non-atomic already. Note that there are cases where also non-atomic requirements are the better ones, for example if those are better understandable.
75+
-
76+
-
77+
-
78+
* - REQ_02_04
79+
- Is the requirement description *feasible* ?
80+
- If at the time of the inspection the requirement has already some implementation, the answer is yes. This can be checked via traces, but also :need:`gd_req__req_attr_impl` shows this. In case the requirement has no implementation at the time of inspection (i.e. not implemented at least as "proof-of-concept"), a development expert should be invited to the Pull-Request review to explicitly check this item.
81+
-
82+
-
83+
-
84+
* - REQ_02_05
85+
- Is the requirement description *independent from implementation* ?
86+
- This checkpoint should improve requirements definition in the sense that the "what" is described and not the "how" - the latter should be described in architecture/design derived from the requirement. But there can also be a good reason for this, for example we would require using a file format like JSON and even specify the formatting standard already on stakeholder requirement level because we want to be compatible. A finding in this checkpoint does not mean there is a safety problem in the requirement.
87+
-
88+
-
89+
-
90+
* - REQ_03_01
91+
- Is the *linkage to the parent feature/component requirement* correct?
92+
- Linkage to correct levels and ASIL attributes is checked automatically, but it needs checking if the child requirement implements (at least) a part of the parent requirement.
93+
-
94+
-
95+
-
96+
* - REQ_04_01
97+
- Is the requirement *internally and externally consistent*?
98+
- Does the requirement contradict other requirements within the same or higher levels? One may restrict the search to the feature for component requirements, for features to other features using same components.
99+
-
100+
-
101+
-
102+
* - REQ_05_01
103+
- Do the software requirements consider *timing constraints*?
104+
- This checkpoint encourages to think about timing constraints even if those are not explicitly mentioned in the parent requirement. If the reviewer of a requirement already knows or suspects that the code execution will be consuming a lot of time, one should think of the expectation of a "user".
105+
-
106+
-
107+
-
108+
* - REQ_06_01
109+
- Does the requirement consider *external interfaces*?
110+
- The SW platform's external interfaces (to the user) are defined in the Feature Architecture, so the Feature and Component Requirements should determine the input data use and setting of output data for these interfaces. Are all output values defined?
111+
-
112+
-
113+
-
114+
* - REQ_07_01
115+
- Is the *safety* attribute set correctly?
116+
- Derived requirements are checked automatically, see :need:`gd_req__req_linkage_safety`. But for the top level requirements (and also all AoU) this needs to be checked manually for correctness.
117+
-
118+
-
119+
-
120+
* - REQ_07_02
121+
- Is the attribute *security* set correctly?
122+
- For component requirements this checklist item is supported by automated check: "Every requirement which satisfies a feature requirement with security attribute set to YES inherits this". But the component requirements/architecture may additionally also be subject to a :need:`wp__sw_component_security_analysis`.
123+
-
124+
-
125+
-
126+
* - REQ_08_01
127+
- Is the requirement *verifiable*?
128+
- If at the time of the inspection already tests are created for the requirement, the answer is yes. This can be checked via traces, but also :need:`gd_req__req_attr_test_covered` shows this. In case the requirement is not sufficiently traced to test cases already, a test expert is invited to the inspection to give their opinion whether the requirement is formulated in a way that supports test development and the available test infrastructure is sufficient to perform the test.
129+
-
130+
-
131+
-
132+
* - REQ_08_02
133+
- Is the requirement verifiable by design or code review in case it is not feasibly testable?
134+
- In very rare cases a requirement may not be verifiable by test cases, for example a specific non-functional requirement. In this case a requirement analysis verifies the requirement by design/code review. If such a requirement is in scope of this inspection, please check this here and link to the respective review record. A test expert is invited to the inspection to confirm their opinion that the requirement is not testable.
135+
-
136+
-
137+
-
138+
* - REQ_09_01
139+
- Do the requirements that define a safety mechanism specify the error reaction leading to a safe state?
140+
- Alternatively to the safe state there could also be "repair" mechanisms. Also do not forget to consider REQ_05_01 for these.
141+
-
142+
-
143+
-
144+
145+
146+
.. attention::
147+
The above checklist entries must be filled according to your component requirements in scope.
148+
It is mandatory to fill remarks also for checklist entries which are passed, to be able to understand the verdict.
149+
150+
Note: If a Review ID is not applicable for your requirement, then state ""n/a" in status and comment accordingly in remarks. For example "no stakeholder requirement (no rationale needed)"
151+
152+
The following requirements in "valid" state and with "inspected" tag set are in the scope of this inspection:
153+
154+
.. needtable::
155+
:filter: "bitmanipulation" in docname and "requirements" in docname and docname is not None and status == "valid"
156+
:style: table
157+
:types: comp_req
158+
:tags: bitmanipulation
159+
:columns: id;status;tags
160+
:colwidths: 25,25,25
161+
:sort: title
162+
163+
And also the following AoUs in "valid" state and with "inspected" tag set (for these please answer the questions above as if the AoUs are requirements, except questions REQ_03_01 and REQ_03_02):
164+
165+
.. needtable::
166+
:filter: "bitmanipulation" in docname and "requirements" in docname and docname is not None and status == "valid"
167+
:style: table
168+
:types: aou_req
169+
:tags: bitmanipulation
170+
:columns: id;status;tags
171+
:colwidths: 25,25,25
172+
:sort: title

docs/modules/baselibs/bitmanipulation/docs/requirements/index.rst

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
..
22
# *******************************************************************************
3-
# Copyright (c) 2025 Contributors to the Eclipse Foundation
3+
# Copyright (c) 2025-2026 Contributors to the Eclipse Foundation
44
#
55
# See the NOTICE file(s) distributed with this work for additional
66
# information regarding copyright ownership.
@@ -36,6 +36,7 @@ Functional Requirements
3636
:safety: ASIL_B
3737
:satisfies: feat_req__baselibs__bitmanipulation, feat_req__baselibs__core_utilities
3838
:status: valid
39+
:tags: inspected
3940

4041
The bit manipulation component shall provide API for setting, clearing, toggling, and checking bits, as well as extracting bytes and manipulating half-bytes and bytes for any integral type up to 64 bits.
4142

@@ -46,6 +47,7 @@ Functional Requirements
4647
:safety: ASIL_B
4748
:satisfies: feat_req__baselibs__bitmanipulation, feat_req__baselibs__core_utilities
4849
:status: valid
50+
:tags: inspected
4951

5052
The bit manipulation library shall provide type-safe bitmask operations for scoped enumeration types.
5153

@@ -56,6 +58,7 @@ Functional Requirements
5658
:safety: ASIL_B
5759
:satisfies: feat_req__baselibs__bitmanipulation, feat_req__baselibs__safety
5860
:status: valid
61+
:tags: inspected
5962

6063
All bit manipulation functions shall validate input parameters and prevent data corruption.
6164

@@ -69,6 +72,7 @@ Non-Functional Requirements
6972
:safety: ASIL_B
7073
:satisfies: feat_req__baselibs__bitmanipulation
7174
:status: valid
75+
:tags: inspected
7276

7377
The bit manipulation API shall be header-only and not require external dependencies.
7478

@@ -81,6 +85,7 @@ Assumptions of Use (AoU)
8185
:security: NO
8286
:safety: ASIL_B
8387
:status: valid
88+
:tags: inspected
8489

8590
The user shall assume that the API performs bound checking to validate bit positions and ranges provided to the bit manipulation functions.
8691

@@ -90,6 +95,7 @@ Assumptions of Use (AoU)
9095
:security: NO
9196
:safety: ASIL_B
9297
:status: valid
98+
:tags: inspected
9399

94100
The user shall only use bit manipulation functions with integral types (integers, enumerations) as specified in the library's type constraints. Operations on floating-point or non-integral types are not supported.
95101

@@ -99,6 +105,7 @@ Assumptions of Use (AoU)
99105
:security: NO
100106
:safety: ASIL_B
101107
:status: valid
108+
:tags: inspected
102109

103110
The user shall use scoped enumeration types (enum class) whose enumerators are defined as non-zero power-of-two values (1, 2, 4, 8, 16, etc.)
104111

@@ -108,6 +115,7 @@ Assumptions of Use (AoU)
108115
:security: NO
109116
:safety: ASIL_B
110117
:status: valid
118+
:tags: inspected
111119

112120
The user shall implement external synchronization mechanisms (e.g., mutexes, atomic operations, or locks) when accessing or modifying the same integral value from multiple threads concurrently, as the library provides no internal thread safety guarantees.
113121

@@ -117,8 +125,9 @@ Assumptions of Use (AoU)
117125
:security: NO
118126
:safety: ASIL_B
119127
:status: valid
128+
:tags: inspected
120129

121130
The user shall validate byte and half-byte extraction indices to ensure they correspond to valid positions within the target integral type to prevent accessing invalid memory ranges.
122131

123132
.. needextend:: "__bitmanipulation__" in id
124-
:+tags: baselibs
133+
:+tags: baselibs, bitmanipulation

docs/modules/baselibs/result/docs/requirements/chklst_req_inspection.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ Requirement Inspection Checklist
3232
As described in the concept :need:`doc_concept__wp_inspections` the following "inspection roles" are expected to be filled:
3333

3434
- author: `<https://github.com/4og>`_
35-
- reviewer: these are all persons committing into this inspection document or giving a pull request verdict on it (can be derived from version mgt tool)
35+
- reviewer: `<https://github.com/aschemmel-tech>`_
3636
- moderator: only needed for conflict resolution between author and reviewers, is the safety manager, security manager or quality manager called in as a reviewer (can be derived from version mgt tool)
3737
- test expert: `<https://github.com/rahulthakre29>`_
3838

docs/modules/baselibs/result/docs/requirements/index.rst

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -161,6 +161,4 @@ Assumptions of Use (AoU)
161161

162162

163163
.. needextend:: "__result__" in id
164-
:+tags: baselibs
165-
.. needextend:: "result" in id
166-
:+tags: result_library
164+
:+tags: baselibs, result_library

0 commit comments

Comments
 (0)