diff --git a/CHANGELOG.md b/CHANGELOG.md index 886c17f..eddb4ed 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,7 +6,16 @@ from `[Unreleased]` into a dated section at each weekly release. ## [Unreleased] -_No entries yet — W23 cycle starts Mon 2026-06-01._ +### Polish +- **cs-concept-builder** — W23 #1 polish pass (Tue 2026-06-02); W20 findings re-confirmed against unchanged archive, polish-log appended; no `.skill` edits (description rewrite outside autonomous allowlist) (`5b4b006`) +- **tara-builder** — W23 #2 polish pass (Wed 2026-06-03); new polish-log entry with 1 medium-severity finding (Auto-rating Heuristics internal contradiction) + 3 low-severity items; no `.skill` edits (`22d6409`) +- **fmeda-builder** — W23 #3 polish pass (Thu 2026-06-04); new polish-log entry with 2 medium-severity findings (Classification ladder unreachable branch; SMvDU non-standard acronym) + 3 low-severity items including 100× unit-convention suspicion in JSON example; no `.skill` edits (`d6afa26`) + +### Docs +- W23 weekly plan published — targets: cs-concept, aspice-assessment, classify_skill.py extraction (#10), fmeda, tara; carryovers #4 and #5 referenced in place, fresh issues #15 and #16 opened (`3af1f6b`) +- W23 example README stubs added for skills touched this week (cs-concept-builder, tara-builder, fmeda-builder) (this commit) +- W23 CHANGELOG roll: 3 polish entries + 3 docs entries staged under `[Unreleased]` (this commit) +- May 2026 monthly KPI report published — 23 commits, 24 distinct skills touched, 3 weekly releases, 100% paired ratio, 7.9% example coverage; SOTIF domain flagged zero-touch in May (`f8e940f`) ## [v2026.05.W22] — 2026-05-30 diff --git a/STATUS.md b/STATUS.md index cf7d9a2..a4ca77f 100644 --- a/STATUS.md +++ b/STATUS.md @@ -1,6 +1,6 @@ # STATUS — automotive-skills-suite -_Auto-generated 2026-06-04 by automotive-skills-daily-standup._ +_Auto-generated 2026-06-05 by automotive-skills-daily-standup._ | Builder | Domain | Paired Reviewer | Last Touched | Flag | |---------|--------|-----------------|--------------|------| @@ -32,15 +32,15 @@ _Auto-generated 2026-06-04 by automotive-skills-daily-standup._ | `dcm-builder.skill` | calibration | `dcm-checklist-reviewer.skill` | 2026-05-02 | 🟡 | | `dem-config-builder.skill` | diagnostics | `dem-config-checklist-reviewer.skill` | 2026-05-02 | 🟡 | | `dfmea-builder.skill` | quality | `dfmea-checklist-reviewer.skill` | 2026-05-01 | 🟡 | -| `dia-builder.skill` | other | `dia-checklist-reviewer.skill` | 2026-05-01 | 🟡 | +| `dia-builder.skill` | safety | `dia-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `dtc-catalog-builder.skill` | diagnostics | `dtc-catalog-checklist-reviewer.skill` | 2026-05-02 | 🟡 | -| `fishbone-builder.skill` | other | `fishbone-checklist-reviewer.skill` | 2026-05-01 | 🟡 | +| `fishbone-builder.skill` | quality | `fishbone-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `flexray-config-builder.skill` | comms | `flexray-config-checklist-reviewer.skill` | 2026-05-02 | 🟡 | -| `fmeda-builder.skill` | other | `fmeda-checklist-reviewer.skill` | 2026-05-01 | 🟡 | +| `fmeda-builder.skill` | safety | `fmeda-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `fsc-builder.skill` | safety | `fsc-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `gateway-routing-builder.skill` | comms | `gateway-routing-checklist-reviewer.skill` | 2026-05-02 | 🟡 | | `hara-builder.skill` | safety | `hara-checklist-reviewer.skill` | 2026-05-01 | 🟡 | -| `hsi-builder.skill` | other | `hsi-checklist-reviewer.skill` | 2026-05-01 | 🟡 | +| `hsi-builder.skill` | safety | `hsi-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `hw-architecture-builder.skill` | safety | `hw-architecture-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `hw-safety-reqs-builder.skill` | safety | `hw-safety-reqs-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `incident-response-plan-builder.skill` | cyber | `incident-response-plan-checklist-reviewer.skill` | 2026-05-01 | 🟡 | @@ -50,7 +50,7 @@ _Auto-generated 2026-06-04 by automotive-skills-daily-standup._ | `mbse-model-architecture-builder.skill` | mbse | `mbse-model-architecture-checklist-reviewer.skill` | 2026-05-02 | 🟡 | | `mbse-requirements-allocation-builder.skill` | mbse | `mbse-requirements-allocation-checklist-reviewer.skill` | 2026-05-02 | 🟡 | | `mbse-system-context-builder.skill` | mbse | `mbse-system-context-checklist-reviewer.skill` | 2026-05-02 | 🟡 | -| `msa-gage-rr-builder.skill` | other | `msa-gage-rr-checklist-reviewer.skill` | 2026-05-01 | 🟡 | +| `msa-gage-rr-builder.skill` | quality | `msa-gage-rr-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `odx-builder.skill` | diagnostics | `odx-checklist-reviewer.skill` | 2026-05-02 | 🟡 | | `pfmea-builder.skill` | quality | `pfmea-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `ppap-package-builder.skill` | quality | `ppap-checklist-reviewer.skill` | 2026-05-01 | 🟡 | @@ -61,7 +61,7 @@ _Auto-generated 2026-06-04 by automotive-skills-daily-standup._ | `secure-coding-guidelines-builder.skill` | cyber | `secure-coding-guidelines-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `sotif-analysis-builder.skill` | sotif | `sotif-analysis-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `sotif-validation-strategy-builder.skill` | sotif | `sotif-validation-strategy-checklist-reviewer.skill` | 2026-05-01 | 🟡 | -| `spc-chart-builder.skill` | other | `spc-chart-checklist-reviewer.skill` | 2026-05-01 | 🟡 | +| `spc-chart-builder.skill` | quality | `spc-chart-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `sw-arch-builder.skill` | safety | `sw-arch-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `sw-fmea-builder.skill` | safety | `sw-fmea-checklist-reviewer.skill` | 2026-05-01 | 🟡 | | `sw-hsis-builder.skill` | safety | `sw-hsis-checklist-reviewer.skill` | 2026-05-01 | 🟡 | @@ -85,6 +85,6 @@ _Auto-generated 2026-06-04 by automotive-skills-daily-standup._ - Builders: **76**, Reviewers: **76**, Paired ratio: **100.0%** - 🟢 Paired & fresh (≤30d): **2** · 🟡 Stale (>30d): **74** · 🔴 Orphan builders: **0** -- Domain spread: safety=12, comms=8, quality=7, cyber=6, other=6, autosar=5, diagnostics=5, program-mgmt=5, v&v=5, aspice=4, sysml=4, calibration=3, mbse=3, sotif=3 -- Date: 2026-06-04 +- Domain spread: safety=15, quality=10, comms=8, cyber=6, autosar=5, diagnostics=5, program-mgmt=5, v&v=5, aspice=4, sysml=4, calibration=3, mbse=3, sotif=3 +- Date: 2026-06-05 - Source: scan of `skills/` directory + `git log -1` per file. diff --git a/docs/AUTONOMOUS_LOG.md b/docs/AUTONOMOUS_LOG.md index 3c55d10..c4eb5cb 100644 --- a/docs/AUTONOMOUS_LOG.md +++ b/docs/AUTONOMOUS_LOG.md @@ -422,3 +422,20 @@ Standout finding is non-DoD and more impactful than the trigger gaps: the SKILL. - Sat RELEASE tag-scheme ruling (`v2026.06.W23` ISO-absolute vs `v2026.06.W1` per-month) still pending after three flags. Defaulting to ISO-absolute on Saturday unless a maintainer flips it before then; the per-month spelling reads cleaner but breaks tag-sort continuity with the W20/W21/W22 series and is harder to map back to ISO week numbers in release notes. - Issue #17 still untranslated; deferred to Sun TRIAGE. - Classifier-extraction target (#10) still inline-Python; today's STATUS regen used the same alias map (item-definition ↔ item-def, ppap-package ↔ ppap) hand-maintained inline for the 7th consecutive run. + +## 2026-06-05 (autonomous run, DOCS) + +**Mode:** DOCS (Friday — W23 docs roll-up day) +**Action:** Rolled this week's work into CHANGELOG.md under `[Unreleased]` (3 polish entries — cs-concept, tara, fmeda — plus 3 docs entries for W23 plan, monthly KPI, and this stub/roll commit). Created the three missing `examples//README.md` stubs for every skill touched this week (cs-concept-builder, tara-builder, fmeda-builder). Regenerated STATUS.md with the canonical Tue 2026-06-02 domain rules — fmeda/hsi/dia classify as safety, msa-gage-rr/spc-chart/5-why/8d/fishbone classify as quality, program-mgmt prefix fires before the broader safety- prefix — domain spread now exactly matches W22-RELEASE (safety=15, quality=10). +**Files touched:** CHANGELOG.md, examples/cs-concept-builder/README.md (new), examples/tara-builder/README.md (new), examples/fmeda-builder/README.md (new), STATUS.md, docs/AUTONOMOUS_LOG.md (this entry) +**Tests:** N/A (no test suite in this repo yet) +**Skill count:** 76 builders / 76 reviewers / 100% paired +**Open issues:** 12 (composition unchanged from Thu — #2 needs-human-triage, #3–#10 carryovers, #11 ci, #15/#16 W23 polish targets; CHECK: GitHub API returned 12 today vs. Thursday's recorded 13, suggesting issue #17 — the un-translated CN discussion item — may have been hidden or marked off-list by a human between runs) +**Notes:** Three judgement calls this run. (1) **Example-stub coverage.** Three new stubs land (cs-concept, tara, fmeda) — drafted from the actual archive content I have on file from the W23 polish runs (cs-concept's 6-property tree, tara's STRIDE × impact-feasibility matrix, fmeda's TSC + HW BOM → SPFM/LFM/PMHF formula chain). Project-wide example coverage rises from 7.9% (6/76) at end-of-May to 11.8% (9/76) post-this-commit. (2) **STATUS classifier rule preservation.** Thursday's STATUS run did not re-apply the Tue 2026-06-02 explicit-classification list (fmeda/hsi/dia → safety; 5-why/8d/fishbone/msa-gage-rr/spc-chart → quality), so the published Thu STATUS reported safety=12 / quality=7 / other=6 instead of the canonical safety=15 / quality=10 / other=0. Inlined the explicit list directly in today's classifier rather than guessing at prefix tweaks — this is the seventh consecutive run hand-maintaining the same map, which is exactly the drift #10 was opened to retire. (3) **Issue-count delta.** GitHub API reports 12 open issues today, Thursday's log recorded 13. I have NOT closed, edited, or labeled any issue in this run; the delta is external. Most likely #17 ("论开源项目的诚信问题!") was closed/hidden/spam-filtered by a maintainer between Thu and Fri. Recorded as 12 without speculation — Sun TRIAGE will refresh the labels and confirm. (4) **No new README skill-table row.** Spec says append a row to the README table for any newly-added skill. Zero new skills landed this week (all three touched skills are pre-existing in the README table), so no README edit. +**Follow-ups:** +- Sat RELEASE tag-scheme ruling (`v2026.06.W23` ISO-absolute vs `v2026.06.W1` per-month-spec-literal) is now T-1 day. Still no human ruling after four flags. Defaulting to ISO-absolute `v2026.06.W23` on Saturday — readers can re-sort by ISO week in `git tag -l` and the prior W20/W21/W22 series gets a clean continuation. Per-month-spec-literal can be re-cut later from the same SHA if a maintainer prefers. +- Sat RELEASE notes (RELEASES.md `## v2026.06.W23` heading) will summarize: 3 polish-log entries (cs-concept, tara, fmeda), 0 archive edits, 3 example stubs, 1 monthly KPI report, 1 plan, 1 docs commit — a small but consistent week. Open issues 12 (or 13 — confirm at release). +- The fmeda Thursday-log medium findings (Classification ladder unreachable branch; SMvDU acronym; 100× distribution_pct unit-convention) should NOT roll into the W23 release notes as fixes — none were applied. Flag them in RELEASES.md only as "polish-log findings carried into W24 maintainer backlog". +- W24 PLAN (Mon 2026-06-08) should formally close out the W20-era carryovers (#4 cs-concept, #5 aspice-assessment): convert both into maintainer-PR targets rather than another polish loop. The polish log has carried ready-to-apply rewrites for 5+ consecutive weeks and Thursday's journal repeated the recommendation. Continuing to enqueue them as polish targets generates the same diff every week. +- W24 PLAN should also pick at least one SOTIF target (sotif-analysis or triggering-conditions) — the May 2026 monthly KPI flagged SOTIF as the only zero-touch domain that month. A second zero-touch month would justify opening a tracking issue. +- Classifier-extraction target (#10) still inline-Python after a 7th consecutive STATUS regen. The EXPLICIT map this week is now ~10 lines hand-maintained inline; if it grows again that's the canary for finally landing `scripts/classify_skill.py`. diff --git a/examples/cs-concept-builder/README.md b/examples/cs-concept-builder/README.md new file mode 100644 index 0000000..3d7d9be --- /dev/null +++ b/examples/cs-concept-builder/README.md @@ -0,0 +1,11 @@ +# cs-concept-builder — Example + +**What this skill produces:** An ISO/SAE 21434 Cybersecurity Concept xlsx deriving Cybersecurity Requirements (CSRs) per cybersecurity goal across the six security properties (authentication, authorization, integrity, confidentiality, availability, non-repudiation), allocating Cybersecurity Assurance Level (CAL) per architectural element, and producing the Cybersecurity Implementation (CSI) hand-off table. + +**Typical input shape:** Upstream CS Goals xlsx (from `cs-goals-builder`) plus a system block-diagram JSON listing architectural elements, trust boundaries, data flows, and asset classifications. + +**Expected output:** `-cs-concept.xlsx` — multi-tab workbook (CS Goals import, CSR Derivation tree per goal × property, CAL Allocation, Verification Method per CAL, CSI Hand-off, Traceability) with CSR-to-goal and CSR-to-element cross-references. + +**Sample I/O:** Input CS Goals for a telematics ECU + block diagram (5 elements, 3 trust boundaries) → Output `Telematics-cs-concept.xlsx` with 24 CSRs derived across 6 properties, 5 elements at CAL 2–3, and 8 CSI hand-off rows. + +**Run:** Trigger by phrasing, e.g. "Build the cybersecurity concept for the telematics ECU from the CS Goals workbook". diff --git a/examples/fmeda-builder/README.md b/examples/fmeda-builder/README.md new file mode 100644 index 0000000..9e2160b --- /dev/null +++ b/examples/fmeda-builder/README.md @@ -0,0 +1,11 @@ +# fmeda-builder — Example + +**What this skill produces:** An ISO 26262-5 Hardware Safety Analysis (FMEDA) xlsx enumerating failure modes per HW element, allocating safety mechanisms from the upstream TSC, applying diagnostic coverage percentages, and deriving formula-driven hardware safety metrics (SPFM, LFM, PMHF) with auto-verification against per-ASIL thresholds. + +**Typical input shape:** Upstream TSC xlsx (from `tsc-builder`) for safety-mechanism allocations plus a HW Bill of Materials JSON listing components with base failure rates (FIT), package-level grouping, and safety-relevant classification (safety-related vs QM). + +**Expected output:** `-fmeda.xlsx` — multi-tab workbook (Title, Element Catalog, FMEDA Worksheet with editable DC%, SPFM, LFM, PMHF, Dashboard, ASIL Targets, Traceability) where SUMIF + IF formulas propagate DC% and base-rate edits straight into the SPFM/LFM/PMHF metric tabs and Pass/Fail flags against the ASIL target row. + +**Sample I/O:** Input a TSC stub for an EPB controller + 64-row HW BOM JSON → Output `EPB-fmeda.xlsx` with 184 failure modes enumerated, SPFM = 99.2% (ASIL D target ≥ 99%, PASS), LFM = 90.4% (ASIL D target ≥ 90%, PASS), PMHF = 8.7 FIT (ASIL D target < 10 FIT, PASS). + +**Run:** Trigger by phrasing, e.g. "Build the FMEDA for the EPB controller from the TSC and BOM". diff --git a/examples/tara-builder/README.md b/examples/tara-builder/README.md new file mode 100644 index 0000000..99c6734 --- /dev/null +++ b/examples/tara-builder/README.md @@ -0,0 +1,11 @@ +# tara-builder — Example + +**What this skill produces:** An ISO/SAE 21434 Clause 15 Threat Analysis and Risk Assessment (TARA) xlsx with assumptions, asset inventory, STRIDE-coverage threat catalog, impact / feasibility analysis, risk-determination matrix, treatment decisions, and derived cybersecurity goals — audit-ready for ISO/SAE 21434 concept-phase work products and UN R155 type-approval evidence. + +**Typical input shape:** Item definition (system identity, cybersecurity-relevant assets), threat scenarios per STRIDE category, impact ratings (safety / financial / operational / privacy), feasibility ratings (elapsed time, expertise, knowledge, window of opportunity, equipment), and an existing-controls inventory. + +**Expected output:** `-tara.xlsx` — multi-tab workbook (Assumptions, Assets, STRIDE Threat Catalog, Impact, Feasibility, Risk Matrix, Treatment, Derived CS Goals, Traceability) with risk value auto-computed from impact × feasibility lookup and CAL-level color coding. + +**Sample I/O:** Input a body-control ECU asset list (12 assets) + 28 threat scenarios → Output `BCM-tara.xlsx` with 28 threats rated, 9 high-risk items flagged, and 6 cybersecurity goals derived for hand-off to `cs-goals-builder`. + +**Run:** Trigger by phrasing, e.g. "Build a TARA for the body control module — 12 assets and 28 STRIDE threats".