sm_protection

State machine governing protective entry hold and exit.

Inherited Component

Safety_Manager

Inherited Requirements

Relationship Diagram

SW Unit Relations

Incoming Relations

Relation	UML Type	Visibility	Source Unit	Description
SWR-005	composition	private	ao_safety	Safety active object embeds protection state machine.

Data Types

sm_protection_contextstruct

Internal runtime context for sm_protection.

Struct Members

Name	Type	Description
sm_state	uint8_t	Protection SM state.
hazard_latched	bool	Hazard latch state.
override_forced	bool	Forced override state.
transition_tick	uint32_t	Last transition tick.

sm_protection_eventstruct

Event payload handled by sm_protection.

Struct Members

Name	Type	Description
signal_id	uint16_t	Protection SM event id.
hazard_detected	bool	Hazard trigger input.
clear_request	bool	Clear request input.
sensor_valid	bool	Sensor validity guard input.

sm_protection_resultenum

Result code for sm_protection operations.

Enum Members

Name	Value	Description
OK	0	Protection transition applied.
INVALID_TRANSITION	1	Transition blocked by guards.
LATCH_ACTIVE	2	Hazard latch remains active.

Attributes

Attribute	Type	Visibility	Description
ctx	sm_protection_context	private	Runtime context for sm_protection state timing and error tracking.

Methods

dispatch

Return Type: sm_protection_result
Visibility: public
Description: Process one sm_protection event and update runtime outputs.

Parameters

Name	Type	Direction	Description
event	sm_protection_event	in	Process one sm_protection event and update runtime outputs.

init

Return Type: sm_protection_result
Visibility: public
Description: Initialize sm_protection runtime state and dependencies.

Dynamic Behaviour

State Machines

sm_protection_state

This state machine specifies protection entry hold and guarded exit behavior including hazard source latching mandatory output disable enforcement and clear condition evaluation that prevents unsafe return to normal operation.