Part of the V&V coverage initiative.
Problem
relay is the flight-software stream substrate — engines run at cycle rates measured in Hz to kHz. Silent performance regressions in any of LC/SCH/SC/HS/CFDP could push a deployed system past its WCET budget (which Lean proves — see proofs/lean/WcetAnalysis.lean and CompositionalWcet.lean). A criterion regression gate is the standard defense.
Recognized as evidence under ISO 26262-6 Table 10 row 1e ("performance test", HR at ASIL D).
Acceptance
Notes
- Benchmarks should reflect per-cycle budget; not microbenchmarks of isolated functions
- Pair with Kani state-machine proofs for complete engine verification story
- Realistic inputs: reuse fuzz corpus where viable
Part of the V&V coverage initiative.
Problem
relay is the flight-software stream substrate — engines run at cycle rates measured in Hz to kHz. Silent performance regressions in any of LC/SCH/SC/HS/CFDP could push a deployed system past its WCET budget (which Lean proves — see
proofs/lean/WcetAnalysis.leanandCompositionalWcet.lean). A criterion regression gate is the standard defense.Recognized as evidence under ISO 26262-6 Table 10 row 1e ("performance test", HR at ASIL D).
Acceptance
benches/engine_throughput.rsper engine (or one file with grouped criterion benches):rivet.yaml: link benchmarks to Lean WCET theoremsNotes