The CLEARSY Safety Platform (CSSP) was designed to ease the development of safety critical systems and to reduce the overall costs (development, deployment, and certification) under the pressure of the worldwide market. A smart combination of hardware features (double processor) and formal method (B method and code generators) was used to produce a SIL4-ready platform where safety principles are built-in and cannot be altered by the developer. Summarizing a 5-year return of experience in the effective application in the railways, this article explains how this approach is a game-changer and tries to anticipate the future of this platform for safety critical systems. In particular, the education of future engineers and the seamless integration in existing engineering processes with the support of Domain Specific Languages are key topics for a successful deployment in other domains. DSL like Robosim to program mobile robots and relay circuits to design railway signalling systems are connected to the platform.
Audit-First Rollback Semantics for Safety-Critical Deployment Pipelines
School of Software, Harbin Institute of Technology（哈尔滨工业大学软件学院）；School of Computer Science and Technology, Harbin Institute of Technology（哈尔滨工业大学计算机科学与技术学院）；School of Future Science and Engineering, Soochow University（苏州大学未来科学与工程学院）
UniSTPA: A Safety Analysis Framework for End-to-End Autonomous Driving
National Key Laboratory of Automotive Chassis Integration and Bionics, Jilin University, Changchun, China（吉林大学汽车底盘集成与仿生国家级重点实验室）；School of Engineering and Physical Sciences, Heriot‐Watt University, Edinburgh, United Kingdom（赫瑞-沃森大学工程与物理科学学院）
