+Requirement Model
- +Blinking LED
- +UART
+Logical Function Model
- Controller
- LED
- PC
- Button
- Blinking LED
- UART
+Software Model
- +Software
  - +Button
    - ButtonRead
    - +run_readButton
      - press_cnt
  - +LED
    - drv_LED
    - run_LED
  - +UART
- +RTE
  - +Activation Engine
    - Button Timebase
    - LED timebase
  - +Signal Layer
    - HWI LED
    - HWI_Button
    - button state
    - button_edge
    - button_cnt
    - HWO_UART
    - +Signal-Pools
      - Button
  - +System States
    - Blink
    - UART
    - +State-Handler
- +RTOS
  - Button
  - LED
  - UART
- +Linkage
  - +Output-Sections
  - +Protection-Sets
    - BaseProtection
    - UART
- +DataTypes
+Hardware Model
- +Nucelo-F446RE
  - +STM32F446RE
    - Arm® Cortex®-M4
    - main
    - +GPIO
      - PA5
      - PC13-TAMPER-RTC
    - USART
  - Button
  - LED
+Testing Model
- +Item Tests
  - (Test_128) Smoke-Test
- +Functional Tests
  - +Blinking LED
    - (Test_132) Regular blink
    - (Test_133) LED permanent ON
  - +UART
    - (Test_134) UART functional/system test

Runnable

run_LED

Controls the LED signal and thus the LED

Warnings

Safety (1)

Safety Warnings for Runnable run_LED.
Safety warnings are related to the Requirements Layer, especially the SIL

run_LED has a SIL required of SIL_1 but a SIL achieved of QM

Diagrams

Relationships

Requirements Model

Logical Function Model

Software Model

Hardware Model

Safety

Required
The highest SIL derived from SafetyRequirements and Technical Functions. SIL derived	SIL_1
This attribute allows to overwrite the derived SIL level. The result is the SIL effective attribute. SIL manual	derived
The reason why the derived SIL is ignored and an explicit SIL is set. reason
The SIL required for this implementation unit is defined by the derived SIL but can be overwritten by "SIL manual". SIL required	SIL_1
Achieved
The achieved SIL for this implementation unit. Has to be provided by the user. SIL achieved	QM
A justification why a certain SIL was achieved. justification

Properties

Base

Name

run_LED

Type

Runnable

Description

Controls the LED signal and thus the LED

User-ID

Runnable_14

UID

_KtLgAOTWEeyrV5NXTwe27Q

software unit configuration

Parent

LED

WCET

Stack

ROM

runnable configuration

Has a return value

false

System-States (2)

Systemstates the runnable is active in.

State	isStart	Runnables	Tasks
Blink In this state, an LED will blink.	true	run_LED run_UART_wakeUp run_readButton	Button LED UART
UART A state that is entered if the user has pressed the button. Here, periodic UART messages are sent.	false	run_LED run_UART_send run_readButton	Button LED UART

Ports

Ingoing Trigger Ports (1)

Trigger IN ports attached runnable run_LED.

Port	Events	Signal event source	Container	Task	Guard	Order
Runnable_00_blink_Tick	LED timebase		run_LED	LED		0

Ingoing Data Ports (1)

Data IN ports attached to runnable run_LED.

Port	Signals	Source	Container
Runnable_blink_Button_IN	button state	run_readButton	run_LED

Outgoing Data Ports (1)

Data OUT ports attached to runnable run_LED.

Port	Signals	Target	Container
Runnable_00_blink_OUT	HWI LED	drv_LED	run_LED

Requirement Layer

(Safety)Requirements (2)

(Safety)Requirements referencing to runnable run_LED.

(Safety)Requirement	Parent	User-ID	Author	Creation Date	Start Date	Deadline	Expense	Responsibe	Category	Type	Status	Justification	Function Type	SIL derived	SIL manual	SIL required	Tests	Technical Functions	Software	Other SW	Hardware	Signals	Global variables	Activation events	Use-Cases	User-Stories	Refining	Conflicting	refined by	conflicted by
Requirement_32 - LED Blink In order to indicate that uRTE is up and running, an LED shall blink (toggle its binary state) with an frequency of 1/100ms.	Blinking LED	Requirement_32	Thomas Barth	Tue Jun 07 13:05:57 CEST 2022			0.0	Thomas Barth	product	functional	implemented		-	-	-	-	(Test_132) Regular blink	Blinking LED	run_LED					LED timebase					Requirement_94 - LED Requirement_32 - LED Blink Requirement_93 - LED Button
Requirement_93 - LED Button While the button is pressed, the LED shall be on permanently.	Blinking LED	Requirement_93		Wed Jun 08 17:18:27 CEST 2022			0.0		product	functional	implemented		-	-	-	-	(Test_133) LED permanent ON	Blinking LED	run_LED										Requirement_94 - LED Requirement_32 - LED Blink Requirement_93 - LED Button

(Safety)Requirements to guards and drivers (1)

(Safety)Requirements referencing to guards, functions and drivers

(Safety)Requirement	Parent	User-ID	Author	Creation Date	Start Date	Deadline	Expense	Responsibe	Category	Type	Status	Justification	Function Type	SIL derived	SIL manual	SIL required	Tests	Technical Functions	Software	Other SW	Hardware	Signals	Global variables	Activation events	Use-Cases	User-Stories	Refining	Conflicting	refined by	conflicted by
SafetyRequirement_110 - Hardware Interfacing How to read and write data form and to hardware.	UART	SafetyRequirement_110	Thomas Barth	Thu Jun 09 20:50:22 CEST 2022			0.0	Thomas Barth	product	functional	approved		System_Function	QM	derived	QM			ButtonRead drv_LED								SafetyRequirement_111 - SignalLayer features Requirement_95 - UART

Functional Layer

Technical Functions (1)

Technical functions referencing to runnable run_LED.

Function	LFB	Software	Hardware	Other Software	SIL required	SIL achieved	SIL justification	sub Technical Functions	Requirements	sub Requirements
Blinking LED An LED shall blink to indicate that the system is alive and responding.	Button Controller LED	run_LED drv_LED run_readButton ButtonRead	PA5		SIL_1	QM		Blinking LED UART	Requirement_32 - LED Blink Requirement_93 - LED Button SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART	Requirement_32 - LED Blink Requirement_93 - LED Button SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART

Technical functions to guards and drivers (1)

Technical functions referencing to guards, functions and drivers of runnable run_LED.

Function	LFB	Software	Hardware	Other Software	SIL required	SIL achieved	SIL justification	sub Technical Functions	Requirements	sub Requirements
Blinking LED An LED shall blink to indicate that the system is alive and responding.	Button Controller LED	run_LED drv_LED run_readButton ButtonRead	PA5		SIL_1	QM		Blinking LED UART	Requirement_32 - LED Blink Requirement_93 - LED Button SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART	Requirement_32 - LED Blink Requirement_93 - LED Button SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART

Software Layer

IN Signals (1)

Ingoing signals of runnable run_LED.

Signal	Type	Storage	Runnables OUT	Runnables IN	Tasks	SystemStates	Requirements	miminum Age	maximum Age	Checksum	Force Sync	Inline	ISR API	effective inline	SIL required	SIL achieved	Initial value (D)	Pointer access (D)	Datatype (D)	Alt-In (D)	Alt-Out (D)	In-Driver (D)	Out-Driver (D)	OnData (D)	OnError (D)	OnTrigger (E)
button state A representation of the current button state	Data	local in .rtos.task.Button .rtos.task.LED .rtos.task.UART	run_readButton	run_LED run_UART_send	Button LED UART	Blink UART	SafetyRequirement_93 - Runnable activation by signal events Requirement_95 - UART SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART SafetyRequirement_96 - Inter-task communication SafetyRequirement_97 - local and global signals Requirement_95 - UART SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_97 - local and global signals Requirement_95 - UART	0	105	false	false	false	false	false	SIL_1	QM	false	false	uRTE_boolean_t			-		Runnable_run_UART_send_TPortIN_1 in run_UART_send		-

OUT Signals (1)

Outgoing signals of runnable run_LED.

Signal	Type	Storage	Runnables OUT	Runnables IN	Tasks	SystemStates	Requirements	miminum Age	maximum Age	Checksum	Force Sync	Inline	ISR API	effective inline	SIL required	SIL achieved	Initial value (D)	Pointer access (D)	Datatype (D)	Alt-In (D)	Alt-Out (D)	In-Driver (D)	Out-Driver (D)	OnData (D)	OnError (D)	OnTrigger (E)
HWI LED Hardware interface for the LED	Data	local in .rtos.task.LED	run_LED		LED	Blink UART		0	0	false	false	false	false	false	-	QM	0	false	uRTE_boolean_t			-	drv_LED			-

Software units (1)

Software units which are associated with runnable run_LED.

Unit	Parent	Function calls	other Software Elements	Technical Functions	Requirements	Type	Tasks	WCET	Stack	ROM	Globals	ProtectionSets	SIL required	SIL achieved	sub Technical Functions (R)	sub Requirements (R)	Has a return value (R)	SystemStates (R)	Ingoing Trigger Ports (R)	Outgoing Trigger Ports (R)	Ingoing Data Ports (R)	Outgoing Data Ports (R)	Signals (D)	Runnables (D)	DataType (D)	Is Synchronous (D)	Hardware (D)	Ports (G)	Callers (F)	Return Type (F)	Parameters (F)
drv_LED Hardware write-Interface towards the LED	LED			Blinking LED	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	OutDriver	LED	0	0	0			SIL_1	QM	-	-	-	-	-	-	-	-	HWI LED	run_LED	uRTE_boolean_t	true	PA5	-	-	-	-

Tasks (1)

Tasks runnable run_LED is executed by.

Task	Core	SIL	Priority	Software	States	Signals	Init	Hardware	OutputSections	Own TimeBase	Stack
LED Task responsible to let the LED blink	Arm® Cortex®-M4	SIL_1	4	run_LED drv_LED	Blink UART	HWI LED button state	-	Arm® Cortex®-M4 main PA5	.rtos.task.LED .uRTE	false	.rtos.task.LED

DataTypes (1)

Datatypes runnable run_LED is associated with.

Type	Atomic	Primitive	Initial value	Typedef path	Signals	Drivers	Global Variables
uRTE_boolean_t This type used by uRTE internally and is avaiable for general purpose. Its save to delete this type if it is not needed.	true	true	0	generated at src_rte\signals\types\uRTE_boolean_t_type.h	HWI LED HWI_Button button state	ButtonRead drv_LED

Activation-Events (1)

Activation Events triggering the execution of runnable run_LED.

Event	Type	Cycle Time (C)	Offset (C)	Task-Init (S)	Requirements	Ports	Runnables	Tasks	SystemStates	SIL required	SIL achieved
LED timebase The timebase for the LED logic. Has an bit of offset to make sure it comes after the button has been read (button value is polled).	CyclicEvent	100	2	-	Requirement_32 - LED Blink	Runnable_00_blink_Tick in run_LED	run_LED	LED	Blink UART	SIL_1	QM

Runnables providing data (1)

Runnables providing data for runnable run_LED.

Unit	Parent	Function calls	other Software Elements	Technical Functions	Requirements	Type	Tasks	WCET	Stack	ROM	Globals	ProtectionSets	SIL required	SIL achieved	sub Technical Functions	sub Requirements)	Has a return value	SystemStates	Ingoing Trigger Ports	Outgoing Trigger Ports	Ingoing Data Ports	Outgoing Data Ports
run_readButton Acquires the button state periodically and provides button signals	Button			Blinking LED UART	SafetyRequirement_94 - Global variables Requirement_95 - UART	Runnable	Button	0	0	0	press_cnt		SIL_1	QM	Blinking LED UART	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	false	Blink UART	Runnable_run_readButton_Tick	Runnable_run_readButton_Edge_OUT	run_readButton_HW_IN	Runnable_run_readButton_Button_OUT Runnable_run_readButton_button_pressed_cnt

Hardware Layer

Hardware Components (2)

Hardware runnable run_LED is associated with. Including executing CPUs, hardware referenced by its protectionSets and driver hardware of connecting signals.

Component	Type	Start	End	SIL required	SIL achieved	Sub-Components	Technical Functions	sub Technical Functions	Requirements	sub Requirements
Arm® Cortex®-M4 Arm® 32-bit Cortex®-M4 CPU with FPU, Adaptive real-time accelerator (ART Accelerator) allowing 0-wait state execution from Flash memory, frequency up to 180 MHz, MPU, 225 DMIPS/1.25 DMIPS/MHz (Dhrystone 2.1), and DSP instructions	Core	-	-	-	QM
PA5 LD2 [Green Led] on the Nucelo Board	Periphery	GPIOA_BASE	GPIOB_BASE - 1	SIL_1	QM		Blinking LED

Testing Layer

Tests (2)

Tests derived from referencing requirements.

Test	User-ID	Group	Priority	Status	Procedure and Input-Data	Expected Results	gen Name	gen Props	SIL	Requirements	Technical-Functions	Software-Units	Signals	Global variables	Activation-Events	Hardware-Components
(Test_132) Regular blink The LED has to blink with a frequency of 1/100ms.	Test_132	Functional Tests Blinking LED	0	implemented	Regular power-on without user-input	A blinking LED				Requirement_32 - LED Blink	Blinking LED	run_LED			LED timebase
(Test_133) LED permanent ON Check if the LED is permanent on if there is user-input from the button	Test_133	Functional Tests Blinking LED	0	implemented	After a regular power-on, the button is pressed	The LED shall be permanently on while the button is pressed				Requirement_93 - LED Button	Blinking LED	run_LED