SNIP_CLASSIC_WDGM_SECTION_7_1_3_Global_Supervision_Status

7.1.3 Global Supervision Status Based on the Local Supervision Status of all Supervised Entities, the Global Supervision Status is computed. The Global Supervision Status has similar values as the Local Supervision Status. The main differences are the addition of the WDGM_GLOBAL_STATUS_STOPPED value. [SWS_WdgM_91005] shows the values and transitions between them. [SWS_WdgM_91005] Global Supervision Status ⌈ stm SPEC_WdgM_Global_Supervision_Status WDGM_GLOBAL_STATUS_DEACTIVATED WDGM_GLOBAL_STATUS_OK WDGM_GLOBAL_STATUS_FAILED WDGM_GLOBAL_STATUS_EXPIRED WDGM_GLOBAL_STATUS_STOPPED (13) (5) (12) (6) (12) (18) (8) (3) (7) (11) (4) (12) (10) (12) (17) (1) (15) (14) (9) (2) (16) ⌋ [SWS_WdgM_00213] Upstream requirements: SRS_ModeMgm_09112 ⌈The Watchdog Manager module shall have one Global Supervision Status for the whole monitored software.⌋ [SWS_WdgM_00387] ⌈Global Supervision Status shall be statically initialized with WDGM_GLOBAL_STATUS_DEACTIVATED (see Transition (18) in [SWS_WdgM_91005]).⌋ The Watchdog Manager module provides a feature to postpone the error reaction (the error reaction being not setting a correct trigger condition) for a configurable amount of time measured in multiples of the Supervision Cycle, named Expired Supervision Tolerance (see configuration parameter WdgMExpiredSupervisionCycleTol [ECUC_WdgM_00329]). The Expired Supervision Tolerance is implemented within the state machine of the Global Supervision Status. The defined state machine is in the state WDGM_GLOBAL_ STATUS_EXPIRED while the blocking is postponed. [SWS_WdgM_00214] Upstream requirements: SRS_ModeMgm_09112 ⌈The function WdgM_MainFunction shall calculate the Global Supervision Status in every Main Function Period. The function shall compute the Global Supervision Status after computation of every Local Supervision Status.⌋ The cyclic update of Global Supervision Status is necessary to trigger the timely transition from WDGM_GLOBAL_STATUS_EXPIRED to WDGM_GLOBAL_STATUS_STOPPED. {DRAFT} Note that, in case of clustered software architecture, multiple WdgM_MainFunction instances may exist. In this case, Global Supervision Status can be updated every call of any WdgM_MainFunction instance. Following rules shall be used to calculate the Global Supervision Status: [SWS_WdgM_00285] Upstream requirements: SRS_BSW_00101 ⌈If the function WdgM_Init [SWS_WdgM_00151] was successfully called then the function shall change the Global Supervision Status to WDGM_GLOBAL_STATUS_OK. And the Expired Cycle Counter shall be set to zero (0). (see Transition (13) in [SWS_WdgM_91005]).⌋ [SWS_WdgM_00286] ⌈If the Global Supervision Status was either WDGM_GLOBAL_ STATUS_OK or WDGM_GLOBAL_STATUS_FAILED or WDGM_GLOBAL_STATUS_EXPIRED or WDGM_GLOBAL_STATUS_STOPPED and the function WdgM_DeInit [SWS_WdgM_00261] is successfully called, then the function shall change the Global Supervision Status to WDGM_GLOBAL_STATUS_DEACTIVATED (see Transitions (14), (15), (16) and (17) in [SWS_WdgM_91005]).⌋ It has to be considered carefully that a deactivation of WdgM when it is in states WDGM_GLOBAL_STATUS_EXPIRED or WDGM_GLOBAL_STATUS_STOPPED can hinder error reporting or error reaction. [SWS_WdgM_00078] Upstream requirements: SRS_ModeMgm_09112 ⌈If the Global Supervision Status was WDGM_GLOBAL_STATUS_OK and the Local Supervision Status of all Supervised Entities are either WDGM_LOCAL_STATUS_OK or WDGM_LOCAL_STATUS_DEACTIVATED then the function WdgM_MainFunction shall keep the Global Supervision Status WDGM_GLOBAL_STATUS_OK (see Transition (1) in [SWS_WdgM_91005]).⌋ [SWS_WdgM_00076] Upstream requirements: SRS_ModeMgm_09112 ⌈If the Global Supervision Status was WDGM_GLOBAL_STATUS_OK, the Local Supervision Status of at least one Supervised Entity is WDGM_LOCAL_STATUS_FAILED, and no Supervised Entity is in Local Supervision Status WDGM_LOCAL_STATUS_EXPIRED, then the function WdgM_MainFunction shall change the Global Supervision Status to WDGM_GLOBAL_STATUS_FAILED (see Transition (2) in [SWS_WdgM_91005]).⌋ The Watchdog Manager module supports a feature to delay the error reaction (switching to WDGM_LOCAL_STATUS_EXPIRED) for a configurable amount of time. This could be used to allow clean-up activities before a watchdog reset, e.g. writing the error cause, writing NVRAM data. [SWS_WdgM_00215] Upstream requirements: SRS_ModeMgm_09163 ⌈If the Global Supervision Status was WDGM_GLOBAL_STATUS_OK, the Local Supervision Status of at least one Supervised Entity is WDGM_LOCAL_STATUS_EXPIRED, and the Expired Supervision Tolerance is configured to a value larger than zero (see configuration parameter WdgMExpiredSupervisionCycleTol [ECUC_WdgM_00329]), then function WdgM_MainFunction shall change the Global Supervision Status to WDGM_GLOBAL_STATUS_EXPIRED. And increment the Expired Cycle Counter. (see Transition (3) in [SWS_WdgM_91005]).⌋ [SWS_WdgM_00216] ⌈If the Global Supervision Status was WDGM_GLOBAL_STATUS_OK, the Local Supervision Status of at least one Supervised Entity is WDGM_LOCAL_STATUS_EXPIRED, and the Expired Supervision Tolerance is configured to zero (see configuration parameter WdgMExpiredSupervisionCycleTol [ECUC_WdgM_00329]), then the function WdgM_MainFunction shall change the Global Supervision Status to WDGM_GLOBAL_STATUS_STOPPED (see Transition (4) in [SWS_WdgM_91005]).⌋ [SWS_WdgM_00217] ⌈If the Global Supervision Status was WDGM_GLOBAL_STATUS_FAILED, the Local Supervision Status of at least one Supervised Entity is WDGM_LOCAL_STATUS_FAILED, and no Supervised Entity is in Local Supervision Status WDGM_LOCAL_STATUS_EXPIRED, then function WdgM_MainFunction shall remain in Global Supervision Status WDGM_GLOBAL_STATUS_FAILED. (see Transition (5) in [SWS_WdgM_91005])⌋ [SWS_WdgM_00218] ⌈If the Global Supervision Status was WDGM_GLOBAL_STATUS_FAILED and the Local Supervision Status of all Supervised Entities is either WDGM_LOCAL_STATUS_OK or WDGM_LOCAL_STATUS_DEACTIVATED then function WdgM_MainFunction shall change the Global Supervision Status to WDGM_GLOBAL_STATUS_OK (see Transition (6) in [SWS_WdgM_91005]).⌋ [SWS_WdgM_00077] Upstream requirements: SRS_ModeMgm_09112, SRS_ModeMgm_09163 ⌈If the Global Supervision Status was WDGM_GLOBAL_STATUS_FAILED, the Local Supervision Status of at least one Supervised Entity is WDGM_LOCAL_STATUS_EXPIRED, and the Expired Supervision Tolerance is configured to a value larger than zero (see configuration parameter WdgMExpiredSupervisionCycleTol [ECUC_WdgM_00329]), then function WdgM_MainFunction shall change the