We present a partial formal analysis of the ABZ 2026 planetary rover case study, focusing on abnormal scenarios and failure-handling behavior. From a space-systems engineering perspective, we first identified representative abnormal scenarios through what-if analysis and then formalized the relevant interactions among goal reasoning, planning, map validation, communication, and recovery-related components in Quint as a shared-state transition system. We analyzed this model through simulation and bounded verification, which revealed several specification issues and ambiguities, including a gap in the interruption semantics of safe-location instructions and underspecified decision criteria in failure handling. We also explored a focused Event-B model of the FailureMode component as a complementary analysis. The study shows how lightweight formal modeling can help domain engineers clarify abnormal behavior in an autonomous space-system specification.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Formal Modeling and Analysis of a Planetary Rover Under Abnormal Scenarios with Quint

  • Riki Nakamura,
  • Shunichiro Nomura,
  • Takahiro Kato,
  • Takato Hatae,
  • Satoshi Ikari,
  • Ryu Funase,
  • Shinichi Nakasuka

摘要

We present a partial formal analysis of the ABZ 2026 planetary rover case study, focusing on abnormal scenarios and failure-handling behavior. From a space-systems engineering perspective, we first identified representative abnormal scenarios through what-if analysis and then formalized the relevant interactions among goal reasoning, planning, map validation, communication, and recovery-related components in Quint as a shared-state transition system. We analyzed this model through simulation and bounded verification, which revealed several specification issues and ambiguities, including a gap in the interruption semantics of safe-location instructions and underspecified decision criteria in failure handling. We also explored a focused Event-B model of the FailureMode component as a complementary analysis. The study shows how lightweight formal modeling can help domain engineers clarify abnormal behavior in an autonomous space-system specification.