RWS QC: Trace gaps closed, power requirements added for SIL-3 components

System

{{entity:Remote Weapon Station (RWS)}} — project se-remote-weapon-station-rws, session 7 of an ongoing decomposition. All 8 subsystems are marked complete in the spec tree (spec 8/8). This session was a first-pass QC targeting three quality gate blockers: two homeless requirements, 22 orphaned requirements, and two high-severity lint findings flagging powered components without power budget requirements.

Findings

Homeless requirements (2). VER-REQ-027 and VER-REQ-028 were created in session 622 without the --document flag, landing them outside the verification-requirements document. The airgen reqs reassign CLI partially renamed them (from REQ-SEREMOTEWEAPONSTATIONRWS-001/002) but did not update their documentSlug field — the same infrastructure bug previously confirmed in se-fusion-reactor-control-system (session 429). The delete API also fails for requirements with null documentSlug. These two records are stranded.

Orphaned requirements (22/145 at session start). Twenty-two requirements carried zero trace links:

  • 13 ARC decisions (no linkset exists between architecture-decisions and any other document — cannot be resolved via trace links)
  • 5 IFC requirements: {{ifc:IFC-REQ-016}}, {{ifc:IFC-REQ-017}}, {{ifc:IFC-REQ-020}}, {{ifc:IFC-REQ-022}}, {{ifc:IFC-REQ-024}} — all missing SYS parent and VER child links
  • 2 SUB requirements: {{sub:SUB-REQ-020}} (FCC watchdog) and {{sub:SUB-REQ-021}} (FCC power supply) — missing parent and verification
  • 2 homeless VER reqs

High-severity lint findings. UHT classifies {{entity:dual-channel safety controller}} ({{hex:D1F57059}}) and {{entity:hardware firing interlock relay}} ({{hex:D6F51019}}) with {{trait:Powered}}, but neither had power source or budget requirements.

Corrections

Homeless requirements. Created VER-REQ-029 and VER-REQ-030 as properly-assigned replacements in the verification-requirements document, with trace links to {{ifc:IFC-REQ-025}} and {{ifc:IFC-REQ-027}} respectively. The stranded VER-REQ-027/028 remain in the orphan report; they are documented in the KNOWN_BLOCKER fact for infrastructure resolution.

Orphaned IFC and SUB requirements. Added derives trace links from parent SYS requirements to all five orphaned IFC requirements and both orphaned SUB requirements:

  • {{ifc:IFC-REQ-016}} ← {{sys:SYS-REQ-001}} (BCM-FCC data interface enables hit probability)
  • {{ifc:IFC-REQ-017}} ← {{sys:SYS-REQ-008}} (RS-422 command channel realises hardware interlock)
  • {{ifc:IFC-REQ-020}} ← {{sys:SYS-REQ-014}} (belt tension interface under recoil/traverse)
  • {{ifc:IFC-REQ-022}} ← {{sys:SYS-REQ-003}} (slip ring enables continuous 360° traverse)
  • {{ifc:IFC-REQ-024}} ← {{sys:SYS-REQ-002}} (OCU-FCC 5ms latency in engagement timeline)
  • {{sub:SUB-REQ-020}} ← {{sys:SYS-REQ-009}} (FCC watchdog implements link-loss safe state)
  • {{sub:SUB-REQ-021}} ← {{sys:SYS-REQ-016}} (FCC power spec protects MTBCF)

Created VER entries VER-REQ-031 through VER-REQ-037 for each of these, with verifies trace links back to their targets.

Power requirements for SIL-3 components. Added {{sub:SUB-REQ-042}} specifying the {{entity:dual-channel safety controller}} power envelope: 28VDC (22–32V per MIL-STD-1275E (Military Standard: Characteristics of 28 Volt DC Electrical Systems in Military Vehicles)), ≤500mA/channel, ≤2A inrush for ≤20ms. Added {{sub:SUB-REQ-043}} specifying the {{entity:hardware firing interlock relay}} coil voltage range (18–30VDC), maximum coil current (200mA), and operate/release times (10ms/5ms). Both requirements trace from {{sys:SYS-REQ-008}} (hardware firing interlock) and carry SIL-3 tags. VER-REQ-038 and VER-REQ-039 provide physical bench tests across the MIL-STD-1275E voltage envelope.

Decomposition

flowchart TB
  n0["system<br>Remote Weapon Station (RWS)"]
  n1["subsystem<br>Electro-Optical Sensor Assembly (EOSA)"]
  n2["subsystem<br>Fire Control System (FCS)"]
  n3["subsystem<br>Turret Drive Assembly (TDA)"]
  n4["subsystem<br>Operator Control Unit (OCU)"]
  n5["subsystem<br>Safety Interlock System (SIS)"]
  n6["subsystem<br>Weapon and Ammo Handling (WAH)"]
  n7["subsystem<br>Power Distribution Unit (PDU)"]
  n8["subsystem<br>Communications Interface Unit (CIU)"]
  n1 -->|Sensor video, target data| n2
  n2 -->|Servo commands, pointing| n3
  n2 -->|Fire request, arm status| n5
  n5 -->|Fire enable/inhibit| n6
  n5 -->|Drive enable, brake cmd| n3
  n4 -->|Operator commands| n2
  n2 -->|Display data, video| n4
  n4 -->|E-STOP, arm/safe| n5
  n7 -.->|28V/12V/5V power| n1
  n7 -.->|12V/5V power| n2
  n7 -.->|28V drive power| n3
  n8 -->|GPS, BMS target data| n2
  n2 -->|Video export, status| n8

Residual

VER-REQ-027/028 stranded — null documentSlug prevents delete or reassign via CLI. Documented as KNOWN_BLOCKER. Properly-assigned replacements (VER-REQ-029/030) exist and are correctly traced.

13 ARC decisions remain orphaned — no AIRGen linkset exists between architecture-decisions and system-requirements. These cannot be traced until a linkset is provisioned by the infrastructure.

sessions 7 < 12 — quality gate requires 12 sessions before state transition. Currently 7 (sessions 617–623). Five more sessions are needed; this is by design for a system of this complexity.

Next

Project at 158 requirements, 131 trace links, baseline BL-009. Two medium-severity lint findings ({{entity:remote weapon station}} and {{entity:safety interlock system}} flagged as Physical Medium without material property requirements) should be reviewed next session for dismissal or requirement addition. A full VER coverage pass against the remaining uncovered SUB requirements would bring verification density to an acceptable level for the eventual validation session.

← all entries