Stability subsystem decomposition — six components from sensors to alarms
System
Container Ship Cargo Management System, first subsystem decomposition session. The project was scaffolded in the prior session with 9 subsystems, 7 stakeholder requirements, and 9 system requirements. This session targets the {{entity:Stability and Stress Monitoring System}} — selected as highest-priority because it is the primary safety-critical subsystem: incorrect calculations risk vessel capsizing during loading operations.
Decomposition
The {{entity:Stability and Stress Monitoring System}} decomposes into six components, structured as two parallel computation pipelines (intact stability and longitudinal strength) fed by a common sensor interface, converging at a centralised alarm generator.
Components:
- {{entity:Draught Sensor Interface}} {{hex:D4A53018}} — acquires 4-point hull draught readings via NMEA bus at 1 Hz, validates range and detects sensor failure within 5 seconds
- {{entity:Intact Stability Computer}} {{hex:51F53958}} — computes GM, GZ curve, dynamic stability area, and weather criterion per IMO A.749(18)
- {{entity:Longitudinal Strength Monitor}} {{hex:40E53B58}} — evaluates shear force and bending moment at 20+ frame stations against IACS UR S11 envelopes
- {{entity:Damage Stability Assessor}} {{hex:51F77B58}} — runtime probabilistic damage stability per SOLAS II-1, computing attained subdivision index for top 3 damage cases
- {{entity:Stability Alarm and Advisory Generator}} {{hex:41F57B19}} — tiered threshold monitoring (caution 80%, warning 90%, critical 95%) with 2-second alarm latency
- {{entity:Loading Condition Database}} {{hex:40851358}} — persistent storage for hydrostatic tables, tank calibration, and 100+ historical loading conditions
flowchart TB
DSI["Draught Sensor Interface"]
ISC["Intact Stability Computer"]
LSM["Longitudinal Strength Monitor"]
DSA["Damage Stability Assessor"]
AAG["Alarm and Advisory Generator"]
LCD["Loading Condition Database"]
DSI -->|draught, trim, heel| ISC
DSI -->|draught distribution| LSM
ISC -->|equilibrium condition| DSA
ISC -->|GM, GZ, weather ratio| AAG
LSM -->|SF, BM utilisation| AAG
DSA -->|attained index A| AAG
LCD -->|hydrostatic data| ISC
LCD -->|hull girder limits| LSM
The architecture decision records why this decomposition separates intact stability, damage stability, and longitudinal strength into independent modules: they derive from different regulatory instruments (IMO A.749, SOLAS II-1, IACS S11), operate at different update rates, and can be type-approved independently by class societies.
Analysis
The {{entity:Intact Stability Computer}} classified to {{hex:51F53958}}. Cross-domain similarity search found the closest non-sibling analog is the {{entity:Vehicle Dynamics Monitor}} from the autonomous vehicle domain (28/32 shared {{trait:Powered}} traits, Jaccard 0.875). Both components compute dynamic physical state from sensor inputs and feed safety-critical decision loops. The {{entity:AOCS Flight Software}} from the earth observation satellite domain also shares 28 traits — another real-time state estimator operating under strict timing constraints. These analogs suggest stability computation requirements around latency, accuracy, and degraded-mode operation are well-understood patterns across safety-critical domains.
The {{entity:Draught Sensor Interface}} classified to {{hex:D4A53018}}, distinctly different from the software components — it sits at the hardware-software boundary with physical sensor characteristics dominating its trait profile.
Requirements
Created 10 subsystem requirements ({{sub:SUB-SSMS-001}} through {{sub:SUB-SSMS-010}}) covering intact stability calculation, longitudinal strength monitoring, damage stability assessment, draught sensor acquisition, free surface correction, alarm generation, loading condition storage, degraded-mode operation, and weather criterion evaluation. All requirements include EARS patterns, quantified thresholds, verification methods, and engineering rationale.
Created 5 interface requirements ({{ifc:IFC-SSMS-IFC-001}} through {{ifc:IFC-SSMS-IFC-005}}) defining data exchange with the Stowage Planning Engine, VGM Compliance System, Cargo Operations Display, hull draught sensors (NMEA bus), and bridge alarm system (IEC 61162-450).
Created 4 verification plan entries ({{sys:VER-SSMS-VER-001}} through {{sys:VER-SSMS-VER-004}}) with specific test procedures for intact stability, longitudinal strength, alarm generation, and sensor interface validation.
Established 12 trace links: 8 derives links from {{sys:SYS-REQS-001}}, {{sys:SYS-REQS-005}}, and {{sys:SYS-REQS-009}} to SUB/IFC requirements, and 4 verifies links from SUB/IFC requirements to VER entries. Project totals: 36 requirements, 23 trace links, 3 diagrams.
Next
Eight subsystems remain undecomposed. Next priority should be the {{entity:Stowage Planning Engine}} — it has the most interfaces (7 connections) and is the computational core of the system. After that, the {{entity:Dangerous Goods Management System}} due to its safety and regulatory significance (IMDG Code). The existing STK and SYS requirements all lack rationale and section assignments — an interim QC pass should address this before the next decomposition session.