Session log

Session log

The most recent 120 pull requests merged into liondriver-dev, newest first. The list is generated at each sync from the merge commits in the repository, so it is never typed by hand and never falls behind; older merges are in the commit history. Each line is the pull request's title; the glossary decodes the codes in them.

What the log does not show: a change pushed to the branch without a pull request, and the state of a work product. For the state, use the roadmap and the work product register. For named states of the whole record, see the baselines and the snapshot releases.

Merged pull requests

2026-11-03

• #586 CI: diff-report comment job waits up to 30 min; confirmation README lists SR-04
• #579 controlsd: prove the non-finite input guards by injection and mutation (SWF-ACT-044)
• #582 sim: the DM stop brakes at the minimum-risk stop rate, 2.0 m/s² ramped at 4 m/s³ (DQ-424 A)
• #577 WP-S-02 v0.67: TSR-412 status follows panda 0e8a7b9
• #578 docs workflow: job time guard 120 s → 300 s
• #576 WP-S-05 §4.2a: 0xe0 debug-log read on the car-mode allow-list
• #575 Pin panda 0e8a7b9: every control-request index is bounded (SWSR-412a)
• #574 Cybersecurity page: CSR requirement diagrams (SysML V-28) and the trust boundaries one by one
• #573 Software folder page: follow one requirement, and the safety task in time
• #572 Software folder page: the software on one page, where it stands, and a diagram gallery
• #569 selfdrived: a soft-disable fault in preEnabled ends the engagement attempt (DQ-433 A)
• #570 Hardware and software pages: animated circuits (WP-H-02 Fig. 3-7, 3-8) and UML state machines (WP-W-05 Fig. 5-1 to 5-3)

2026-11-02

• #568 Apply answered decisions: forced stop at 2 m/s², host SWSRs, lizard, Dependabot, AI view; register
• #566 Skills: seven more; fixes for Mock-up 3, tsc_to_xlsx, the DQ-424 chart and drifted counts
• #565 Apply DQ-041 A (contact ITIC first) and DQ-430 A (AUTOSAR schema check in CI)
• #564 Physics plan round 3, phase B: lane markings at night, fog (TL-54)
• #561 Skills: decision-inbox, assurance-figure, road-scene; inbox explains unsure answers; new explorer and viewer links
• #562 Apply batches 18 and 19 (17 answers, plus DQ-149 A and DQ-162 A) and open batch 20

2026-11-01

• #560 SOTIF: WP-V-02 §5.3.1 counts 11 scenarios written as files (KS-04, #559)
• #558 WP-W-04 v1.7: coverage class for the 13 software-only mechanisms (DQ-343 A)
• #559 sim: KS-04 written, an exit with its gore, a widening lane and a lane drop (SIM-OI-5)
• #557 DQ-343 A: DC targets for hardware mechanisms only; software-only checks rated by WP-W-04 class
• #551 DQ-423 A: no second sweep; remaining public files follow the GD rule at their next edit
• #556 Prove the host supervision by mutation (SWF-ACT-055); WP-H-05 link reserve; watchdog hang times
• #550 DQ-431 A: measure the 0x262 rate before deciding the TSR-401 overrun
• #554 WP-H-07: LSI range from the STM32H725 datasheet decides TSR-501 (OI-7)
• #555 TSR-501, WP-S-04, VS-FI-17: watchdog reset time per hang type
• #552 TSC follow-ups: CSR-024 wording, WP-W-04 rows for SM-29 and SM-39
• #553 TSC group 2: SPI CRC selected, per-mode whitelist, MPU, pins and coverage analyses
• #547 sim: hang types of the safety MCU (SIM-OI-3, VS-FI-17) and the IWDG's LSI spread
• #549 FMEDA mechanisms linked to WP-S-03 §6; TX XOR relabel; IWDG and SM-20 alignment
• #548 TSC: close the open items that need no vehicle test (group 1)

2026-10-31

• #546 ci: check that every host CAN TX path in the panda firmware runs the safety hook (SWF-016.C1)
• #545 Virtual HIL bench: panda HIL tests test_12…test_16 on the host, in CI
• #544 decisions: DQ-425, DQ-426, DQ-427 applied as assumed (no objection by proceed_after)
• #543 KS-28 pass criteria (SH-14 emergency vehicles): WP-V-03 v0.12 §3.4.1

2026-10-30

• #542 AUTOSAR description of LionDriver (ARXML, R22-11), generated from the model, WP-S-05, trace data and opendbc
• #541 SH-14: no response to emergency vehicles (WP-C-05 v0.11)
• #540 Concept folder: two figures at the top of the index page (A + D)

2026-10-29

• #539 SysML V-03 at phone width
• #538 WP-S-03 v0.22: SM-44 start-up fault-code entry check, SM-45 stock-AEB stand-down, TSR-635 under SM-26
• #537 SysML V-27: safety mechanisms per safety goal
• #535 Figure 2-1: show the whole text of every key entry
• #536 Pin opendbc f23b4fa: Toyota inactive acceleration while not active (SWF-052); mutate the stock-AEB cap (SWF-093.C2)
• #534 WP-A-04 v1.21: BE-8.06 and MCS-08.4 cite the TSR-610 interlock
• #533 selfdrived: forward collision warning only from fresh and valid inputs (TSR-625)
• #532 selfdrived, dmonitoringd: no engagement while the driver-camera view is open (TSR-610, DQ-427)
• #531 FTA README: lead with the traditional sheets and summarise the ASIL C trees

2026-10-28

• #530 controls: clear the lateral integrator when steering assist ends (SWF-042.C1, DQ-426)
• #529 FMEA figures: keep the original drawings as the record, add card versions beside them
• #528 FTA: keep the traditional sheets as the record, add the card view beside them
• #527 TL-60: accept Falstad release circuitjs115 for the harness box check
• #520 Rename assurance/case to assurance/case-records, and link it from 10-safety-case
• #519 Clause-check register: ISO 21448 (SOTIF) obligations
• #518 Timing page: SysML parametric diagram of the fault reaction times (V-25)
• #516 FMEDA SG-009 rev 0.10: link R7/R8 rows to DFMEA DFM-022/023

2026-10-27

• #517 Decision register: open batch 19
• #513 FMEA cards and review figures: restyle like the fault trees and FMEA trees
• #515 DFMEA rev 0.13: harness box camera-side termination R7/R8 in intercept
• #511 Harness box: SBU1 bench source, termination-loss step, R7/R8 in the SG-009 FMEDA
• #514 Align the RX timeout bound to ≤ 0.162 s across the work products
• #512 Prove the controlsd and selfdrived call sites of four host measures by mutation

2026-10-26

• #510 Harness box ngspice pilot: passive-network faults as predictions for VS-HW-22…24
• #509 FMEA figures: restyle the failure-chain and structure trees like the fault trees
• #507 Harness box switch path: ngspice DC points and a Falstad link, checked against each other
• #508 Figure 2-1: name the DFI range in the description
• #506 Figure 2-1: wrap measure chips that would run past the figure edge
• #505 manager: test-only environment switches have no effect in the reference build on the device (DQ-425)
• #504 Prove the host safety tests by mutation in CI (SWF-ACT-078)
• #503 Freeze BL-007 and re-rate every FMEA against it
• #502 DFA: one DFI numbering across dfa.yaml and WP-A-03
• #486 Clause-check register (ISO 26262-3 pilot) and trace check K5
• #500 HSI page: SysML internal block diagram (V-24) and the MCU parts behind each HSI
• #497 WP-A-03 v0.22: Figure 4-1, the DFA on the two decomposition channels
• #499 Production page: SysML life-cycle activity (V-23) and 8xx requirement diagram
• #495 FTA viewer and restyled sheets: every fault tree on one interactive page, sheets in the same style
• #498 TSR page: lead with SysML views, add V-22 TSR requirement diagrams
• #496 System requirements page drawn from the SysML model: use case and requirement diagrams
• #493 HSI hardware/software responsibilities in the SysML model (WP-S-05 §11.4, view V-20, check H4)
• #494 Technical safety requirements page: where the 128 TSRs sit and what is in the code
• #490 Apply batch 17 (ten answers, all A) and open batch 18
• #489 WP-A-03 0.21: §5.1 shows the DFA figures (5-2 to 5-6)
• #483 DQ-421 follow-up: TARA scene cards, Figure 9-1, summary pages and wiki animations; DQ-423 opened
• #492 Production and operation page: the TSR-8nn requirements over the life of the installed item
• #488 Dashboard card: keep long hazard entries clear of the rating rows; HE-01.6 at ASIL C

2026-10-25

• #491 SysML timing budgets and HSI signals in the model
• #487 SysML behaviour: state-machine records and the start-up sequence in the model
• #479 DFA README: the item boundary in the DFA view, four more figures, review notes
• #482 Apply the lead's batch 16 answers (DQ-127, 129, 131, 132, 134, 137, 138, 140, 421)
• #485 System requirements page, and SysML end to end: stakeholder needs and use cases
• #484 Verification page: the vehicle cases, what each covers and which come first
• #478 Physics plan round 3: the plan, and phase A (wet curves, crests, a stopped car, fan dust)
• #481 Integration page: the steps, the bench and the 27 test cases with their expected results
• #477 Cybersecurity requirements page: zones, boot chain, mode lock and the 64 CSRs
• #476 Decision register: batch 16 answers copied in, batch 17 opened
• #475 Timing page: the FTTIs, the budgets and where each timing requirement stands
• #474 HSI page: the interfaces of the safety MCU and what the SoC can ask of it
• #468 Physics plan phases B and C: gusts, tunnels, headlights, sun on the device, mount modes, cranking dip
• #472 Decision register: DQ-421 (disclosure of unfixed security gaps), DQ-420 queued

2026-10-24

• #473 Apply DQ-419 A: next vehicles stay on unsigned CAN and ISO CAN FD
• #469 Apply DQ-126 B: panda housekeeping code developed to ASIL C
• #471 TSC page: freedom from interference as a generated figure
• #470 System views: functional flow and the safety envelope's states
• #464 SysML MBSE extension: functions, security zones, integration build-up and system modes (V-10 to V-13)
• #466 Comms: vehicle networks and E2E protection, a CAN wiki page and its figures
• #467 AI system page: the models, what bounds them and the AI safety requirements
• #462 SysML model as record of the architecture tables (SY-05): every column in the model, gen_tables.py, T1 check
• #465 ODD page: where the item is meant to work, and what happens at the edge
• #463 Cybersecurity concept page: goals, claims and the concept on the item
• #461 Item definition page: the item, its elements and its four views
• #460 Abbreviations: one list, defined on every covered page and figure
• #459 TARA page: the analysis itself, with the item boundary in the cybersecurity view
• #458 HARA page: the analysis itself, with the item's functions in the hazard view
• #457 03-system README: systems-engineering alignment (INCOSE, NASA) with N2 and VCRM from the SysML model
• #456 SOTIF page: the analysis itself, with the ODD in the SOTIF view
• #455 FSC and TSC pages: the concepts themselves, with the item boundary in the safety view

Older history: all closed pull requests.