Evidence E1.2.2.3.3.4.4.3.2.1.1.5.2 Non functional test reports

• Is evidence for Argument: A1.2.2.3.3.4.4.3.2.1.1.5 The safe state actuation is simple
• Is evidence for Argument: A1.2.2.3.3.4.4.3.2.1.2.2.4 Environmental monitor Diverse and independent monitors have been designed to use data from the input domain (sensors) to constrain the robot's capabilities to that of the defined environmental operational envelope by applying identified fail safe states.
• Is evidence for Argument: A1.2.2.3.3.4.4.3.2.1.2.2.2 Operational Monitor Diverse and independent monitors have been designed to use data from the input (sensors) and output (actuators) domain to constrain the robot's capabilities to that of the defined operational envelope by applying identified fail safe states.
• Is evidence for Argument: A1.2.2.3.3.4.4.3.2.1.2.2.3 Health Monitor Diverse and independent monitors have been designed to identify excursions from the robot system's 'normal' internal operating health envelope to constrain the robot's capabilities to that of the defined operational envelope by applying identified fail safe states.
• Is evidence for Argument: A1.2.2.3.3.4.4.3.2.1.2.1 The (Complex) Collision Sensor is diverse from that of the image classification (sub-symbolic AI) and is verifiable
• Is evidence for Argument: A1.2.2.3.3.4.4.3.2.1.2.2.1 Watch Dog Timers (WDT) have been employed to place the the robot in a safe state if the processing freezes
• Is evidence for Argument: A1.2.2.3.3.4.4.3.2.1.1.6.1 The SIF has undergone functional and non-functional testing which has confirmed its operation according to its requirements specification

Child nodes:

 Including:

• Performance test
• The guard has been shown to be EMC compliant (analysis and test).
• The guard has been shown to be resilient to the environment (analysis and test).