LLVM’s Real-time Safety Revolution Tools for Modern Mission Critical SystemsChris Apple ● 10-year veteran of the audio industry ● Previously Dolby, Roblox, Spatial Inc. ● Currently: layabout David

be ready for release. The Scrum framework includes the concept of “Done,” which constitutes a critical aspect of ensuring high-quality software. To be considered potentially releasable, a piece of functionality use Agile to build a large IT system from the ground up; however, in this case, it is absolutely critical that the development of the architecture precede sprint development. Alternatively, a program can some defects that can be addressed in future releases. System Criticality Program supports a critical mission in which defects may result in loss of life or high security risks. Industry has relevant

Pre-exasacaleKHRONOS SAFETY CRITICAL STANDARDS EVOLUTION OpenGL ES 1.0 - 2003 Fixed function graphics OpenGL ES 2.0 - 2007 Programmable Shaders OpenGL SC 1.0 - 2005 Fixed function graphics safety-critical subset OpenGL Programmable Shaders Safety-critical subset Vulkan 1.2 - 2020 Explicit Graphics and Compute and Display Vulkan SC 1.0 - 2022 Explicit Graphics, Compute and Display safety-critical subset SYCL 2020 C++-based heterogeneous parallel compute programming framework for safety-critical systems Khronos has 20 years experience in standards for safety-critical markets Leveraging proven mainstream standards with shipping

rules 3. Automotive Safety case Safety Critical API Evolution minimize API surface area , reduce ambiguity, UB, increase determinism New Generation Safety Critical APIs for Graphics, Compute and Display certification Rendering Compute Display • Khronos Safety Critical Advisory Forum • OpenCL/SYCL Safety Critical • Vulkan Safety Critical • JTC1/SC42 Machine Learning WG3 Trustworthiness • ITC22/SC32 mix • Joint Strike Fighter ++: checkable rules • Common Weakness Enumeration: a mix Many Safety Critical APIs • Safe but not C++11/14/17/20 • Joint Strike Fighter Air Vehicle C++ Coding Standards for

Dead Connections Detecting Slow Consumers Avoiding Network Isolation Detecting Broker Issues (Critical Analysis) Resource Manager Configuration Flow Control Guarantees of sends and commits Message operating system there is no guarantee the data has actually made it to disk, so if a failure occurs, critical data can be lost. Some more expensive disks have non volatile or battery backed write caches which Any successful ping will make the server OK to continue running Avoiding Network Isolation 92 Critical Analysis of the broker There are a few things that can go wrong on a production environment: Bugs

Dead Connections Detecting Slow Consumers Avoiding Network Isolation Detecting Broker Issues (Critical Analysis) Resource Manager Configuration Flow Control Guarantees of sends and commits 1 1.28 operating system there is no guarantee the data has actually made it to disk, so if a failure occurs, critical data can be lost. Some more expensive disks have non volatile or battery backed write caches which server OK to continue running Avoiding Network Isolation 149 Avoiding Network Isolation 150 Critical Analysis of the broker There are a few things that can go wrong on a production environment: Bugs

Dead Connections Detecting Slow Consumers Avoiding Network Isolation Detecting Broker Issues (Critical Analysis) Resource Manager Configuration 1 1.28 1.29 1.30 1.31 1.32 1.33 1.34 1.35 1 /console/jolokia 2.3.0 Full release notes. Versions 9 Highlights: Web admin console! Critical Analysis and deadlock detection on broker Support Netty native kqueue on Mac. Last-value queue operating system there is no guarantee the data has actually made it to disk, so if a failure occurs, critical data can be lost. Some more expensive disks have non volatile or battery backed write caches which

Standards, Documents, and Reports Safety in C++ and What We Can Do Coding Practices in Safety Critical Path Final Words and Q&A 1 2 3 4 5 6Safety/Security and C++ 5Security/Safety Concerns with • Limited Performance Physical/Logical Segregation? Reduce Coupling & Enhance CohesionSafety Critical Path vs Non-Real Time Domain Risk Driven Architecture 27 SW System/Item (Class C) SW Item Guidelines: Generic Google C++ Style Guide: Generic MISRA 2023 C++17: Safety Critical AUTOSAR C++14: Safety Critical JSF++: Safety Critical SEI CERT C++ Coding Standard: Generic + SecurityCompiler Hardening

at a time (mutually exclusive access). ○ This region is called the ‘critical section’ that is protected by the lock. ○ Critical because we only want one thread at a time to enter and modify the shared is called the ‘critical section’ that is protected by the lock. ○ Critical because we only want one thread at a time to enter and modify the shared state in the program. 80 Critical section thread is called the ‘critical section’ that is protected by the lock. ○ Critical because we only want one thread at a time to enter and modify the shared state in the program. 81 Critical section thread

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 7.2 Mutex and Critical Section . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 7.3 Future t([](){ std::cout << "hello world." << std::endl; }); t.join(); return 0; } 7.2 Mutex and Critical Section We have already learned the basics of concurrency technology in the operating system, or member function, Because calling member functions, you need to call unlock() at the exit of each critical section, and of course, exceptions. At this time, C++11 also provides a template class std::lock_guard