← All chapters Chapter 21

The Method End to End: A Camera and a Monitored ECU

Two modern systems chosen to disagree, read by one method.

The whole method runs at once on a front-camera sensor and an E-Gas engine-control unit, each generated mechanically from a single DSL description. The camera's object list is tamed by sorting failures into list, object, and communication levels; its tree is all order one, honest about a sensor with no internal redundancy. The E-Gas tree is order two and three, its shared microcontroller a visible common cause.

Full text of this chapter

The full text — with every derived fault tree, cut-set analysis, and worked example — is readable after signing in. Sign in right here (login and account in one step):