From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,f039470e8f537101 X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-08-01 13:19:47 PST Path: archiver1.google.com!postnews1.google.com!not-for-mail From: aek@vib.usr.pu.ru (Alexander Kopilovitch) Newsgroups: comp.lang.ada Subject: Re: Ariane5 FAQ Date: 1 Aug 2003 13:19:47 -0700 Organization: http://groups.google.com/ Message-ID: References: <3F215120.1040706@attbi.com> <1059151910.357790@master.nyc.kbcfp.com> <3F248CEE.5050709@attbi.com> <3F269F90.2090706@attbi.com> <3F298D00.20102@attbi.com> NNTP-Posting-Host: 195.242.18.31 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1059769187 29200 127.0.0.1 (1 Aug 2003 20:19:47 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: 1 Aug 2003 20:19:47 GMT Xref: archiver1.google.com comp.lang.ada:41134 Date: 2003-08-01T20:19:47+00:00 List-Id: Robert I. Eachus wrote: >As far as I know the simulation developers did have ACCESS to all of the >source code. It was the documentation that they didn't have. So some >programmer might have noticed that the alignment code ran for 40 seconds >after ignition, but without the documentation the hypothetical >simulation programmer had no reason to doubt that it was done for valid >reasons. Thank you for clarification of this point. So, I'm going to change the answer (the "Q" remains unchanged) in the next draft of the FAQ, to the following: ---------------------------------------------------------------------------- Q. So, if the limitations were clearly reflected in comments within the source code then most probably they would be seen by the simulator's developers and the disaster would be averted? A. Probably No. Because simulation of the alignment function of real device was excluded from the contract for the simulator development. Consequently, the simulator's developers have no stimulus (without the documentation, which was not given to them) to look into the part of the source code where the limitations were violated in the flight. (They may look there out of curiosity, but time pressure and general stress surrounding the project left too little room for curiosity.) The reason for omission of the alignment function from the simulator was that for Ariane 5 that function is not needed after takeoff, and that before takeoff that function was really identical for the Ariane 4 and Ariane 5. What was overlooked is that for the Ariane 4 that function WAS executed after takeoff (about 40 seconds), so the unchanged real device will execute that function for the Ariane 5 despite the absence of any need for it there. ---------------------------------------------------------------------------- Alexander Kopilovitch aek@vib.usr.pu.ru Saint-Petersburg Russia