From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,f039470e8f537101 X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-07-29 17:53:21 PST Path: archiver1.google.com!postnews1.google.com!not-for-mail From: aek@vib.usr.pu.ru (Alexander Kopilovitch) Newsgroups: comp.lang.ada Subject: Re: Ariane5 FAQ Date: 29 Jul 2003 17:53:21 -0700 Organization: http://groups.google.com/ Message-ID: References: <7u9Ua.13412$634.10307@nwrdny03.gnilink.net> <3F215120.1040706@attbi.com> <1059151910.357790@master.nyc.kbcfp.com> <3F248CEE.5050709@attbi.com> <3F269F90.2090706@attbi.com> NNTP-Posting-Host: 62.152.82.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1059526401 13361 127.0.0.1 (30 Jul 2003 00:53:21 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: 30 Jul 2003 00:53:21 GMT Xref: archiver1.google.com comp.lang.ada:40975 Date: 2003-07-30T00:53:21+00:00 List-Id: Robert I. Eachus wrote: > > How can > > one exclude anything from the simulator's contract if nobody can see differences > > between the Ariane 4 and Ariane 5? > >No knowledge of the difference between the Ariane 4 and Ariane 5 was >involved. The perfectly reasonable assumption was made that there was >no need to simulate the alignment functions which ran before takeoff, >because there was nothing to be learned there. (This is a case where >the Araine 4 and 5 really were identical. Sitting on the pad, the >accelerometers and gyros were identical and the launch site was >identical.) Again what slipped through was that there was a requirement >in the Ariane 4 to continue running the alignment software after MEI >(main engine ignition), even though those results were "thrown away" if >MEI resulted in a launch. Ok, I agree, I recognize that kind of logic (I think I have seen it several times, when I contacted with high-position managers). And I think that too high concentration of this kind of logic within a project is a smoking gun by itself. Well, I downgrade the seriouseness of the allegation (in some non-technical sense -;), but I'm still not sure enough that not giving the part of the source code to the simulator's developers is true fact and not just good guess. Anyway, assuming that that is a true fact, I'm going to include into the next draft of FAQ the following Q-A pair: ---------------------------------------------------------------------------- Q. So, if the limitations were clearly reflected in comments within the source code then most probably they would be seen by the simulator's developers and the disaster would be averted? A. Probably NO. Because that part of the source code (aligment function), where the limitations were violated in the flight, was not given to the simulator's developers. That happened because simulation of that function of real device was excluded from the contract for the simulator development. The reason for that omission was that for Ariane 5 that function is not needed after takeoff, and that before takeoff that function was really identical for the Ariane 4 and Ariane 5. What was overlooked is that for the Ariane 4 that function WAS executed after takeoff (about 40 seconds), so the unchanged real device will execute that function for the Ariane 5 despite the absence of any need for it there. ---------------------------------------------------------------------------- >This is one of those very hard to understand things until you have that >Aha! moment. Just because of that I'm going to include that Q-A pair into the FAQ even being not sure enough that it is really true, but have only good probability of that. Alexander Kopilovitch aek@vib.usr.pu.ru Saint-Petersburg Russia