emergency stop with monitored manual reset (ST twin)¶


suite id	`st_estop_reset`
domain	motor_control
language	ST
difficulty	easy
validation status	candidate
origin	authored
license	CC-BY-4.0
syntax pair of	`g_estop_reset`

Structured Text rendering of g_estop_reset, for cross-language comparison of the same safety function

What is proved¶

From benchmarks/motor_control/st_estop_reset/props.yaml. What each kind claims, and what it becomes on either route, is on The properties we prove.

id	kind	claim	requirement
`P1`	`invariant`	`!(Run && EStop)`	ISO 13850 stop function: the drive is never energised while the emergency stop is actuated.

Variants¶

file	expected verdict	violates	method
`estop_reset.st`	SAFE	none	expert

Files¶

file	what it is	size	sha256
`benchmark.yml`	benchmark metadata	0.6 KB	`c3388da93915`
`estop_reset.st`	structured text	0.8 KB	`234d460f66dd`
`props.yaml`	property file	0.2 KB	`1ce16a3f5a05`

Recorded runs¶

A task can carry two routes. ld is ESBMC's ladder front end reading the program directly. via C is the same solver reached through Beremiz and MatIEC, which is the only route that reaches ST, IL, FBD and SFC; see How ESBMC-PLC works.

st_estop_reset__estop_reset__viac via C (props.yaml, expected SAFE): master SAFE