Safe Requirements?
If the requirement,
- Upon receipt of a sensor update containing the information that a vessel V is at temperature D, the system shall update the displayed temperature of vessel V to D within S1 seconds,
is satisfied, is the hazard,
- An “invalid” temperature, D, is displayed for vessel V at time T,