2026· Proceedings of the 15th International Conference on Data Science, Technology and Applications· pp. 887-898· 0 citations· 25 references
TL;DR
The results show that lifecycle integrity can be evaluated as a structural property of the artifact graph, enabling early, machine-checkable detection of missing relations.
Abstract
: Industrial cyber-physical systems rely on structured safety lifecycle in which hazards, risks, requirements, architecture, and verification activities are related across defined phases. In practice, these elements are distributed across heterogeneous documents, making structural consistency and traceability difficult to maintain. This paper presents an approach in which lifecycle elements are encoded as structured documentation artifacts with explicit types and relations. From a data-centric perspective, these artifacts are treated as structured data objects whose relations form a constrained graph representation of lifecycle information. A controlled vocabulary and constrained relations define a consistent representation of lifecycle data. The artifacts are processed through a documentation build workflow that acts as a deterministic data processing and validation pipeline, automatically generating traceability views and completeness checks. Structural constraints over artifact relations cover verification, evidence linkage, SIL allocation, and hazard coverage. The approach is demonstrated on a reproducible IEC 61508 SIL 2 Emergency Stop example, with an open demo site and repository that provide all sources and build scripts. Violations introduced by removing required relations are detected as non-empty coverage tables. The results show that lifecycle integrity can be evaluated as a structural property of the artifact graph, enabling early, machine-checkable detection of missing relations.
A lifecycle model for LLM systems is proposed that supports security analysis by structuring it around security-relevant boundaries rather than workflow optimisation, and is supported by a 12-stage LLMOps pillar and a 9-category governance pillar.
Eleftherios Batzolis, George Drosatos, V. Katsouros et al.· 0 citations
This paper presents an airborne software development approach for manned and unmanned aerial vehicles aimed at reducing inconsistencies across system, model-based functional, and embedded software domains. In environments influenced by standards such as ARP-4754B and DO-178C, these inconsistencies typically stem from insufficient enforcement across domain boundaries rather than missing process definitions. Building on a previously proposed toolchain centered on a relational interface database, we identify recurring failure modes and propose a repository-centered implementation to address them, tailored to small, resource-constrained teams operating without heavyweight process overhead. Each domain is assigned a primary repository with cross-repository references and dedicated CI pipelines that generate, update, and validate the exchanged artifacts. Automated interface updates, differential change notifications, and consistency checks propagate changes with minimal manual effort and surface inconsistencies before the time-consuming code-generation and compilation steps. An initial implementation in an ongoing experimental project is described, with qualitative feedback from its early use.
Nils Schlautmann, V. Sinitsyn, Benjamin Engelhard et al.· 0 citations
Compliance reporting for well integrity remains narration-heavy, labour-intensive, and inconsistent across assets. This study develops a compliance-as-code approach that encodes integrity obligations (hazard identification, risk assessment, barrier verification, documentation) into 187 machine-checkable rules mapped to ISO 16530-1 lifecycle phases. Integrated into a Well Integrity Management System (WIMS), the rules automatically evaluate evidence completeness and generate regulator-ready compliance packs with exception lists and corrective workflows. A pilot on 42 wells (22 active, 20 late-life) demonstrated transformative outcomes: audit preparation time halved (50.4% reduction), total compliance findings decreased by 40.1% (with 66.7% improvement in barrier-mapping consistency and 58.3% reduction in missing documentation), and traceability (the ability to link each compliance assertion to verifiable evidence) improved from 44% to 92%. The system proved robust under degraded data quality, producing zero false positive compliance assertions. Late-life wells and low-maturity WIMS environments showed the largest absolute gains. This practical digital compliance layer reduces operational costs, non-compliance risk, and long-term liability while improving data-handover readiness for farm-ins and divestments, establishing a new benchmark for lifecycle well integrity management.
O. Ogali, I. Okafor, E. Okoro et al.· SPE Nigeria Annual Internati...· 0 citations
The NIS-2 Directive increases the need for continuous, auditable compliance evidence and motivates a shift from document-based compliance toward machine-readable compliance artifacts. The Open Security Controls Assessment Language (OSCAL) is a standard for this purpose, which the German Federal Office for Information Security (BSI) is adapting with Grundschutz++. However, companies are still managing extensive legacy IT security concepts (IT-SCs), and migrating them without verification could transfer outdated assets into the new format. While existing research primarily addresses the generation of new concepts, there is a lack of a verification framework that extracts legacy IT-SCs into an auditable intermediate representation, deterministically compares the extracted graph with an independently constructed reference state, and exports schemavalid OSCAL artifacts. This paper introduces the Automated Security Concept Structure Extraction and Reverse Topologychecking (ASSERT) Framework, which addresses this gap by using ontology-based extraction of legacy documents into formal document graphs, a five-class graph difference against a verified reference graph, and the export into schema-valid OSCAL outputs for system description and assessment evidence. Using the BSI's RecPlast dataset, we compare a local open-weight model and a commercial model across three configurations with different levels of reference-ontology exposure. The evaluation shows that ASSERT makes document-infrastructure inconsistencies measurable, but reveals a trade-off between discovering undocumented entities and enforcing a schema.
Lea R. Muth, Marian Margraf· International Conference on...· 0 citations
The results indicate that language-model assistance can add value in regulated automotive requirements workflows when it is embedded in deterministic, provenance-rich, and expert-governed processes.
The central finding is that the same four points generalize without modification to AI coding agents and to general agentic workflows, where a defined purpose, an auditable trail, verification, and safe delivery produce tamper-evident evidence at every stage.
P. Gresham· Universal Library of Innovat...· 0 citations