Title: A Practical Approach for the automation of product safety case generation in CI Framework

Author(s): Doria Ramadan

Publication Event: Proceedings of the Thirty First Safety-Critical Systems Symposium

Publication Date: 2023-02-07

Resouce URL: https://scsc.uk/r1750.pdf

Abstract:

The safety element out of context (SEooC) is described by ISO 26262 part 10. It addresses safety-related elements that are not developed in the context of a particular vehicle but rather with assumptions that have to be validated before integration into the final system. It aims at reducing the certification cost through modularization and reuse of element certification evidence. A complete safety case is needed for every release instead of just at the start of production(SOP) within agile product development that uses continuous integration and continuous deployment (CI/CD). So effective approaches to managing the safety cases are needed to fit into the CI framework. In this paper, we provide a practical approach that facilitates implementing the safety-critical applications as fragments of safety elements out of context (SEooC) and automating the merging of modular safety case fragments at the end to build the product line safety case. The approach shows a reduction in development costs. We design it to get fully automated SEooC integration and verification in modern CI/CD frameworks. We get an automated SEooC integration flow starting from integration in the CI process, passing through the verification of assumptions and the configurations, and ending by generating the safety case of SEooC. We build the approach into an embedded testing framework to verify the SEooC integration constraints and ensure the SEooC integrator follows the assumptions mentioned in the safety contract. Finally, the proposed approach leads to having a continuous automated generation of proof of compliance with the safety contract assumptions.