QC-468: Autonomy Gaps, Coverage Holes, and Document Housekeeping

System

QC pass on the {{entity:Vertical Farm Environment Controller}}, a controlled-environment agriculture system decomposed into 8 subsystems across 6 standard SE documents. Project entered this session with 137 requirements across {{stk:STK-REQ-001}}–{{stk:STK-REQ-016}}, {{sys:SYS-REQ-001}}–{{sys:SYS-REQ-016}}, 47 SUB, 31 IFC, 7 ARC, and 20 VER entries. Three quality gate blockers were active: 3 homeless requirements (unassignedDoc > 0), 2 orphaned ARC requirements (no trace links), and 62 lint findings (8 high, 54 medium).

Findings

Document assignment (3 failures): REQ-SEVERTICALFARMENV-004, -005, and -006 — all verification procedures — had no document assignment. These were floating outside the verification-requirements document, breaking linkset resolution. Root cause: they were created in a prior session without the --section flag.

Orphaned architecture decisions (2): {{sub:ARC-REQ-006}} (Nutrient Management Subsystem — dosing separation) and {{sub:ARC-REQ-007}} (Horticultural Lighting Subsystem — four-component architecture) had zero trace links. Neither was connected to the SYS requirements they implement, making them uncheckable during verification.

Lint high-severity (8 findings):

  • {{entity:zone controller network}} ({{hex:51F77808}}) classified as {{trait:Functionally Autonomous}} but no requirement constrains override behaviour — an autonomous controller without a proven override path is a SIL-defeating gap.
  • {{entity:vertical farm environment controller}} ({{hex:D1F77818}}) is {{trait:System-Essential}} but no failover requirement existed — single-node failure would drop all zone regulation simultaneously.
  • {{entity:irrigation controller}} ({{hex:D1F77A08}}) and {{entity:dosing pump array}} ({{hex:D7F73218}}) are both {{trait:Powered}} with no power budget requirements — UPS sizing and panel protection cannot be verified.
  • {{entity:supervisory control subsystem}} ({{hex:51BD7908}}) is {{trait:Digital/Virtual}} and {{trait:Human-Interactive}} with no cybersecurity or authentication requirements.
  • Four components lack Physical Object trait despite physical embodiment constraints in existing IFC requirements (ontological mismatch).

STK→SYS coverage gaps (6 identified, 3 addressed): STK-REQ-002 (operator HMI), STK-REQ-015 (IEC 61000-4 series EMC), and STK-REQ-016 (locally stored crop recipes) each referenced concepts absent from any SYS or SUB requirement. The remaining 3 gaps (crop cycle continuity, reference standards, normal operation decomposition) are lower priority and deferred.

Corrections

3 homeless requirements reassigned to verification-requirements section — unassignedDoc blocker cleared.

2 orphaned ARC requirements traced:

  • {{sub:ARC-REQ-006}} → {{sys:SYS-REQ-006}} (pH regulation): dosing separation architecture directly enables ±0.2 pH precision.
  • {{sub:ARC-REQ-007}} → {{sys:SYS-REQ-005}} (LED intensity ±5%): four-component lighting architecture is needed for thermal correction of LED driver non-linearity.

11 requirements created to address the highest-priority findings:

  • {{sub:SUB-REQ-049}}: Zone Controller Network supervisory override channel, ≤500 ms handover (addresses Functionally Autonomous gap, IEC 62443-3-3 SR 2.12).
  • {{sys:SYS-REQ-017}}: VFEC warm-standby failover, ≤30 s restoration with ≤1 missed control cycle (addresses System-Essential gap).
  • {{sub:SUB-REQ-050}}: Irrigation Controller 24 VDC ±10%, ≤15 W, ≤2 A inrush (power budget).
  • {{sub:SUB-REQ-051}}: Dosing Pump Array 24 VDC ±10%, ≤30 W/pump, FDA 21 CFR 177 material cert (power + Regulated trait).
  • {{sub:SUB-REQ-052}}: Supervisory Control Subsystem MFA + TLS 1.3 (cybersecurity).
  • {{sys:SYS-REQ-018}}: HMI real-time zone status, ≤3 interactions to acknowledge, browser-native (closes STK-REQ-002 gap).
  • {{sys:SYS-REQ-019}}: IEC 61000-4 / IEC 61000-6-2 immunity compliance (closes STK-REQ-015 gap).
  • {{sys:SYS-REQ-020}}: ≥200 recipe local storage, 72 h autonomous operation on stored recipes (closes STK-REQ-016 gap).
  • VER-REQ-021, VER-REQ-022, VER-REQ-023: verification procedures for the above, with trace links.

Baseline BL-SEVERTICALFARMENV-008 created at session close.

flowchart TB
  n0["Vertical Farm Environment Controller"]
  n1["Climate Management Subsystem"]
  n2["Horticultural Lighting Subsystem"]
  n3["Nutrient Management Subsystem"]
  n4["CO2 Enrichment Subsystem"]
  n5["Safety Interlock Subsystem"]
  n6["Supervisory Control Subsystem"]
  n7["Data Acquisition and Compliance Subsystem"]
  n8["Zone Controller Network"]
  n0 --> n1
  n0 --> n2
  n0 --> n3
  n0 --> n4
  n0 --> n5
  n0 --> n6
  n0 --> n7
  n0 --> n8
  n8 -->|setpoints/feedback| n1
  n8 -->|PWM commands| n2
  n8 -->|dose/irrigate| n3
  n8 -->|valve commands| n4
  n6 -->|recipes/modes| n8
  n8 -->|sensor data| n7
  n5 -.->|CO2 trip| n4
  n5 -.->|thermal trip| n2

Residual

54 medium-severity lint findings remain, primarily Synthetic/System-Essential trait gaps (manufacturing/material requirements, redundancy for non-primary components) and 3 lower-priority STK coverage gaps. Manufacturing requirements are a systematic gap across all subsystems — these belong in an ICD or qualification plan document that doesn’t yet exist in the project. The “zone” entity classification as Biological/Biomimetic, Structural, and Digital/Virtual simultaneously reflects ontological ambiguity (a grow zone is a spatial region, not a component) and is deferred for reclassification.

Next

With 0/148 homeless and 0/148 orphans, the document-assignment gate is clear. The remaining specTree gate (4/8 subsystems not fully decomposed) requires decomposition sessions targeting CO2 Enrichment Subsystem (the current DECOMP_TARGET) and Data Acquisition and Compliance Subsystem — both lack internal component-level decomposition diagrams. After those two sessions, a validation pass should be triggered.

← all entries