SEARCH · Engineering Papers

Results for “controls prototyping”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 667 records · Page 37

All sources NASA NTRS DOE OSTI

NASA NTRS2000

Analysis and Test of a Proton Exchange Membrane Fuel Cell Power System for Space Power Applications

An effort is underway to develop a prototype Proton Exchange Membrane (PEM) Fuel Cell breadboard system for fuhlre space applications. This prototype will be used to develop a comprehensive design basis for a space-rated PEM fuel cell powerplant. The prototype system includes reactant pressure regulators, ejector-based reactant pumps, a 4-kW fuel cell stack and cooling system, and a passive, membranebased oxygen / water separator. A computer model is being developed concurrently to analytically predict fluid flow in the oxidant reactant system. Fuel cells have historically played an important role in human-rated spacecraft. The Gemini and Apollo spacecraft used fuel cells for vehicle electrical power. The Space Shuttle currently uses three Alkaline Fuel Cell Powerplants (AFCP) to generate all of the vehicle's 15-20kW electrical power. Engineers at the Johnson Space Center have leveraged off the development effort ongoing in the commercial arena to develop PEM fuel cel ls for terrestrial uses. The prototype design originated from efforts to develop a PEM fuel cell replacement for the current Space Shuttle AFCP' s. In order to improve on the life and an already excellent hi storical record of reliability and safety, three subsystems were focused on. These were the fuel cell stack itself, the reactant circulation devices, and reactant / product water separator. PEM fuel cell stack performance is already demonstrating the potential for greater than four times the useful life of the current Shuttle's AFCP. Reactant pumping for product water removal has historically been accomplished with mechanical pumps. Ejectors offer an effective means of reactant pumping as well as the potential for weight reduction, control simplification, and long life. Centrifugal water separation is used on the current AFCP. A passive, membrane-based water separator offers compatibility with the micro-gravity environment of space, and the potential for control simplification, elimination of moving parts in an oxygen environment, and long life. The prototype system has been assembled from components that have previously been tested and evaluated at the component level. Preliminary data obtained from tests performed with the prototype system, as well as other published data, has been used to validate the analytical component models. These components have been incorporated into an integrated oxidant fluid system model. Results obtained from both the performance tests and the analytical model are presented.

Vasquez, Arturo↗

NASA NTRS2017

Controlling Tensegrity Robots through Evolution using Friction based Actuation

Traditional robotic structures have limitations in planetary exploration as their rigid structural joints are prone to damage in new and rough terrains. In contrast, robots based on tensegrity structures, composed of rods and tensile cables, offer a highly robust, lightweight, and energy efficient solution over traditional robots. In addition tensegrity robots can be highly configurable by rearranging their topology of rods, cables and motors. However, these highly configurable tensegrity robots pose a significant challenge for locomotion due to their complexity. This study investigates a control pattern for successful locomotion in tensegrity robots through an evolutionary algorithm. A twelve-rod hardware model is rapidly prototyped to utilize a new actuation method based on friction. A web-based physics simulation is created to model the twelve-rod tensegrity ball structure. Square-waves are used as control policies for the actuators of the tensegrity structure. Monte Carlo trials are run to find the most successful number of amplitudes for the square-wave control policy. From the results, an evolutionary algorithm is implemented to find the most optimized solution for locomotion of the twelve-rod tensegrity structure. The software pattern coupled with the new friction based actuation method can serve as the basis for highly efficient tensegrity robots in space exploration.

Tensegrit↗

NASA NTRS1992

A surgical support system for Space Station Freedom

Surgical techniques in microgravity are being developed for the Health Maintenance Facility (HMF) on Space Station Freedom (SSF). This will be a presentation of the proposed surgical capabilities and ongoing hardware and procedural investigations. Methods: Procedures and prototype hardware, which include a medical restraint system, a surgical overhead isolation canopy, a suction device, and a regional laminar flow device were evaluated. This was accomplished by realistic sterile surgical simulations involving both mannequins and animals during KC-135 parabolic flight and in a high fidelity ground based HMF mockup. Results: Animal surgery in the environment of microgravity allowed the observation of unique arterial and venous bleeding characteristics for the first time. The ability to control bleeding and to prevent cabin atmosphere contamination was also demonstrated. Conclusions: The procedures and prototype hardware tested provided valuable information and should be investigated and developed further. The use of standard surgical techniques are possible in microgravity if the principles of personnel and supply restraint and operative field containment are adhered to.

Campbell, M. R.↗

NASA NTRS2016

Closed Loop Control Compact Exercise Device for Use on MPCV

Long duration space travel to Mars or to an asteroid will expose astronauts to extended periods of reduced gravity. To combat spaceflight physiological deconditioning, astronauts will use resistive and aerobic exercise regimens for the duration of the space flight to minimize the loss of bone density, muscle mass and aerobic capacity that occurs during exposure to a reduced gravity environment. Unlike the International Space Station (ISS), the mass and volume available for an exercise device in the next generation of spacecraft is limited. Therefore, compact exercise device prototypes are being developed for human in the loop evaluations. The NASA Human Research Program (HRP) is managing Advanced Exercise Concepts (AEC) requirements development and candidate technology maturation for all exploration mission profiles from Multi-Purpose Crew Vehicle (MPCV) exploration missions (e.g., EM-2, up to 21 day) to Mars Transit (up to 1000 day) missions. Numerous technologies have been considered and evaluated against HRP-approved functional requirements and include flywheel, pneumatic and closed-loop microprocessor-controlled motor driven power plants. Motor driven technologies offer excellent torque density and load accuracy characteristics as well as the ability to create custom mechanical impedance (the dynamic relationship between force and velocity) and custom load versus position exercise algorithms. Further, closed-loop motor-driven technologies offer the ability to monitor exercise dose parameters and adapt to the needs of the crewmember for real time optimization of exercise prescriptions. A simple proportional-integral-derivative (PID) controller is demonstrated in a prototype motor driven exercise device with comparison to resistive static and dynamic load set points and aerobic work rate targets. The resistive load term in the algorithm includes a constant force component (Fcmg) as well as inertial component (Fima) and a discussion of system tuning is presented in terms of addressing key functional requirements and human interfaces. The device aerobic modality is modelled as a rowing exercise using ground data sets obtained from Concept 2 rowers as well as competitive rowing1. A discussion of software and electronic implementations are presented which demonstrate unique approaches to meeting the constrained mass, volume and power requirements of the MPCV. . In addition to utilizing traditional PID control, controllers utilizing state feedback with gains solved using a Linear Quadratic Regulator will be developed. Controllability and observability will be utilized to investigate the need for state measurement in the design. As the control system directly interacts with human test subjects, robust methods such as H-infinity are also being investigated.1. Kleshnev V. Biomechanics. In: Rowing, Handbook of Sports Medicine and Science. ed. by Secher N., Voliantis S. IOC Medical Commission, Blackwell Pub. pp. 22-34, 2007

microgravity↗

NASA NTRS1991

Investigation of Techniques for Simulating Communications and Tracking Subsystems on Space Station Freedom

The need to reduce the costs of Space Station Freedom has resulted in a major redesign and downsizing of the Station in general, and its Communications and Tracking (C&T) components in particular. Earlier models and simulations of the C&T Space-to-Ground Subsystem (SGS) in particular are no longer valid. There thus exists a general need for updated, high fidelity simulations of C&T subsystems. This project explored simulation techniques and methods that might be used in developing new simulations of C&T subsystems, including the SGS. Three requirements were placed on the simulations to be developed: (1) they run on IBM PC/XT/AT compatible computers; (2) they be written in Ada as much as possible; and (3) since control and monitoring of the C&T subsystems will involve communication via a MIL-STD-1553B serial bus, that the possibility of commanding the simulator and monitoring its sensors via that bus be included in the design of the simulator. The result of the project is a prototype of a simulation of the Assembly/Contingency Transponder of the SGS, written in Ada, which can be controlled from another PC via a MIL-STD-1553B bus.

Deacetis, Louis A.↗

NASA NTRS1991

Software technology testbed softpanel prototype

The following subject areas are covered: analysis of using Ada for the development of real-time control systems for the Space Station; analysis of the functionality of the Application Generator; analysis of the User Support Environment criteria; analysis of the SSE tools and procedures which are to be used for the development of ground/flight software for the Space Station; analysis if the CBATS tutorial (an Ada tutorial package); analysis of Interleaf; analysis of the Integration, Test and Verification process of the Space Station; analysis of the DMS on-orbit flight architecture; analysis of the simulation architecture.

Source record↗

NASA NTRS1994

The Buffer Diagnostic Prototype: A fault isolation application using CLIPS

This paper describes problem domain characteristics and development experiences from using CLIPS 6.0 in a proof-of-concept troubleshooting application called the Buffer Diagnostic Prototype. The problem domain is a large digital communications subsystems called the real-time network (RTN), which was designed to upgrade the launch processing system used for shuttle support at KSC. The RTN enables up to 255 computers to share 50,000 data points with millisecond response times. The RTN's extensive built-in test capability but lack of any automatic fault isolation capability presents a unique opportunity for a diagnostic expert system application. The Buffer Diagnostic Prototype addresses RTN diagnosis with a multiple strategy approach. A novel technique called 'faulty causality' employs inexact qualitative models to process test results. Experimental knowledge provides a capability to recognize symptom-fault associations. The implementation utilizes rule-based and procedural programming techniques, including a goal-directed control structure and simple text-based generic user interface that may be reusable for other rapid prototyping applications. Although limited in scope, this project demonstrates a diagnostic approach that may be adapted to troubleshoot a broad range of equipment.

Porter, Ken↗

NASA NTRS1987

Electronic prototyping

The potential benefits of automation in space are significant. The science base needed to support this automation not only will help control costs and reduce lead-time in the earth-based design and construction of space stations, but also will advance the nation's capability for computer design, simulation, testing, and debugging of sophisticated objects electronically. Progress in automation will require the ability to electronically represent, reason about, and manipulate objects. Discussed here is the development of representations, languages, editors, and model-driven simulation systems to support electronic prototyping. In particular, it identifies areas where basic research is needed before further progress can be made.

Hopcroft, J.↗

NASA NTRS2003

Experimental Evaluation of Verification and Validation Tools on Martian Rover Software

We report on a study to determine the maturity of different verification and validation technologies (V&V) on a representative example of NASA flight software. The study consisted of a controlled experiment where three technologies (static analysis, runtime analysis and model checking) were compared to traditional testing with respect to their ability to find seeded errors in a prototype Mars Rover. What makes this study unique is that it is the first (to the best of our knowledge) to do a controlled experiment to compare formal methods based tools to testing on a realistic industrial-size example where the emphasis was on collecting as much data on the performance of the tools and the participants as possible. The paper includes a description of the Rover code that was analyzed, the tools used as well as a detailed description of the experimental setup and the results. Due to the complexity of setting up the experiment, our results can not be generalized, but we believe it can still serve as a valuable point of reference for future studies of this kind. It did confirm the belief we had that advanced tools can outperform testing when trying to locate concurrency errors. Furthermore the results of the experiment inspired a novel framework for testing the next generation of the Rover.

Brat, Guillaume↗

NASA NTRS2006

Development Status of Amine-based, Combined Humidity, CO2, and Trace Contaminant Control System for CEV

Under a NASA-sponsored technology development project, a multi-disciplinary team consisting of industry, academia, and government organizations lead by Hamilton Sundstrand is developing an amine-based humidity and CO2 removal process and prototype equipment for Vision for Space Exploration (VSE) applications. Originally this project sought to research enhanced amine formulations and incorporate a trace contaminant control capability into the sorbent. In October 2005, NASA re-directed the project team to accelerate the delivery of hardware by approximately one year and emphasize deployment on board the Crew Exploration Vehicle (CEV) as the near-term developmental goal. Preliminary performance requirements were defined based on nominal and off-nominal conditions and the design effort was initiated using the baseline amine sorbent, SA9T. As part of the original project effort, basic sorbent development was continued with the University of Connecticut and dynamic equilibrium trace contaminant adsorption characteristics were evaluated by NASA. This paper summarizes the University sorbent research effort, the basic trace contaminant loading characteristics of the SA9T sorbent, design support testing, and the status of the full-scale system hardware design and manufacturing effort.

Smith, Fred↗

NASA NTRS1993

Titan III Feasibility for HL-20 Prototype Missions

A set of studies was performed to investigate the feasibility of using the Titan III launch vehicle to launch an unmanned prototype HL-20 personnel launch system and, potentially, operational HL-20 missions. The launch of an HL-20 spacecraft on a Titan III poses a unique set of concerns, primarily because the lifting body vehicle is carried on top of the Titan vehicle without a fairing. The Titan III/HL-20 feasibility study addressed the primary vehicle issues of performance, aerodynamics, loads, control and stability, launch availability, and vehicle configuration for the launch of an unmanned HL-20 prototype vehicle. Titan launch operations, launch site systems, and facilities were assessed to determine HL-20 operations compatibility. Additional studies determined the potential launch opportunity and window capabilities of the Titan III for the operational HL-20 mission and the existing Titan III's reliability. The feasibility study determined that the Titan III system, with minor changes, is compatible with the HL-20 vehicle and mission. It could provide nearly daily launch windows for a rendezvous with Space Station Freedom. Titan III reliability, when combined with the HL-20 launch escape system, provides a sufficiently high probability of crew survival to support its consideration as the primary vehicle for HL-20 operational missions.

Benson, Scott W.↗

NASA NTRS2026

Prototype Demonstration of Solar Carbothermal System to Extract Oxygen from Regolith

The Carbothermal Reduction Demonstration (CaRD) project was an effort to develop a prototype system to demonstrate the extraction of oxygen from simulated lunar regolith using concentrated solar energy and a carbothermal reaction. The prototype consisted of a deployable solar concentrator capable of tracking the sun, carbothermal reactor, fluid system, gas analysis, and a solar concentrator control system consisting of avionics and software. These subsystems were developed by multiple NASA centers and a private industry partner, Sierra Space. The various teams worked together to define requirements and interfaces to successfully assemble the complex system and demonstrate an integrated solar carbothermal process. The solar concentrator developed at Glenn Research Center (GRC) was designed to be stowed for a launch environment then deployed on the lunar surface. It utilized a crossed dragone configuration of composite mirrors to direct horizontal sunlight onto a target 90° from the incoming sunlight. The key performance parameters for the solar concentrator were efficiency and power density. The carbothermal reactor was developed by Sierra Space through a separate project called the Carbothermal Oxygen Production Reactor (COPR) where it successfully demonstrated a fully automated process in a thermal vacuum environment. The fluid system needed for the carbothermal reaction was also developed by Sierra Space and successfully demonstrated in the same thermal vacuum test. The gas analysis system was developed at Kennedy Space Center (KSC) and was required to determine the amount of oxygen extracted during each test. The gas analysis system was based on the Mass Spectrometer Observing Lunar Operations (MSOLO) instrument. Avionics and software for the CaRD prototype were also developed at KSC and based on experience with MSOLO avionics and software. The control system was designed to stow, deploy, track the sun, and perform beam alignment of the concentrated light. The prototype subsystems were integrated and tested at Johnson Space Center’s (JSC) Energy Systems Test Area. A heliostat was used to direct sunlight toward the prototype in a way that is representative of the sunlight conditions at the south pole of the Moon. When concentrated sunlight was focused on simulated lunar regolith within the reactor, the gas analysis team confirmed the presence of carbon monoxide gas, which confirmed that a solar carbothermal reaction took place. The key performance parameter for the integrated prototype was grams of oxygen extracted per kilowatt hour of energy arriving at the concentrator primary mirror. The prototype design successfully demonstrated end-to-end capability and further steps to achieve a flight capable system have been defined. With lunar data, engineers would be able to design a scaled-up system capable of extracting oxygen from regolith at useful quantities for crew life support and rocket propellant. On the long term, this method of In-Situ Resource Utilization could be used to drastically reduce the cost and risk of a sustained human presence on the Moon by reducing the amount of oxygen that would have to be delivered.

Aaron Paz↗

NASA NTRS2026

Prototype Demonstration of an Integrated Solar Concentrator System and Carbothermal Reactor Using Solar Energy to Extract Oxygen from Regolith

Oxygen from Regolith↗

NASA NTRS2026

Prototype Demonstration of Solar-Carbothermal System to Extract Oxygen From Regolith

The Carbothermal Reduction Demonstration (CaRD) project was an effort to develop a prototype system to demonstrate the extraction of oxygen from simulated lunar regolith using concentrated solar energy and a carbothermal reaction. The prototype consisted of a deployable solar concentrator capable of tracking the sun, carbothermal reactor, fluid system, gas analysis, and a solar concentrator control system consisting of avionics and software. These subsystems were developed by multiple NASA centers and a private industry partner, Sierra Space. The various teams worked together to define requirements and interfaces to successfully assemble the complex system and demonstrate an integrated solar carbothermal process. The solar concentrator developed at Glenn Research Center (GRC) was designed to be stowed for a launch environment then deployed on the lunar surface. It utilized a crossed dragone configuration of composite mirrors to direct horizontal sunlight onto a target 90° from the incoming sunlight. The key performance parameters for the solar concentrator were efficiency and power density. The carbothermal reactor was developed by Sierra Space through a separate project called the Carbothermal Oxygen Production Reactor (COPR) where it successfully demonstrated a fully automated process in a thermal vacuum environment [1]. The fluid system needed for the carbothermal reaction was also developed by Sierra Space and successfully demonstrated in the same thermal vacuum test. The gas analysis system was developed at Kennedy Space Center (KSC) and was required to determine the amount of oxygen extracted during each test. The gas analysis system was based on the Mass Spectrometer Observing Lunar Operations (MSOLO) instrument. Avionics and software for the CaRD prototype were also developed at KSC and based on experience with MSOLO avionics and software. The control system was designed to stow, deploy, track the sun, and perform beam alignment of the concentrated light. The prototype subsystems were integrated and tested at Johnson Space Center’s (JSC) Energy Systems Test Area. A heliostat was used to direct sunlight toward the prototype in a way that is representative of the sunlight conditions at the south pole of the Moon. When concentrated sunlight was focused on simulated lunar regolith within the reactor, the gas analysis team confirmed the presence of carbon monoxide gas, which confirmed that a solar carbothermal reaction took place. The key performance parameter for the integrated prototype was grams of oxygen extracted per kilowatt hour of energy arriving at the concentrator primary mirror. The prototype design successfully demonstrated end-to-end capability and further steps to achieve a flight capable system have been defined. With lunar data, engineers would be able to design a scaled-up system capable of extracting oxygen from regolith at useful quantities for crew life support and rocket propellant. On the long term, this method of In-Situ Resource Utilization could be used to drastically reduce the cost and risk of a sustained human presence on the Moon by reducing the amount of oxygen that would have to be delivered.

Koorosh R Araghi↗

NASA NTRS1987

Test results of a pumped two-phase mounting plate with ammonia

The design, fabrication, and testing of full-scale prototype units of a two-phase mounting plate (TPMP), which will be used in a two-phase ammonia-based thermal control system for a large spacecraft, are described. The mounting plate uses an evaporator design in which liquid is mechanically pumped through porous feed tubes within the plate. The prototype TPMPs were tested with ammonia at heat loads over 3000 W (3.2 W/sq cm) and local heat fluxes of up to 4 W/sq cm. Calculated total heat transfer coefficients from these tests were between 0.8 and 1.0 W/sq cm per C. This represents a better than twenty-fold improvement over comparable single-phase heat transfer coefficients. Design diagrams are included.

Swanson, T. D.↗

NASA NTRS1989

An experiment-based comparative study of fuzzy logic control

An approach is presented to the control of a dynamic physical system through the use of approximate reasoning. The approach has been implemented in a program named POLE, and the authors have successfully built a prototype hardware system to solve the cartpole balancing problem in real-time. The approach provides a complementary alternative to the conventional analytical control methodology and is of substantial use when a precise mathematical model of the process being controlled is not available. A set of criteria for comparing controllers based on approximate reasoning and those based on conventional control schemes is furnished.

Berenji, Hamid R.↗

NASA NTRS2013

The Antarctic Search for Meteorites: A Model for Deep Space Exploration

In an era of shrinking buying power and reduced flight opportunities, NASA must extract the greatest possible value from all sources of insight into the future of human space exploration. Antarctica is one such source. The history of Antarctic exploration has many political and technical parallels with the development of space, and Antarctica's remoteness and harsh climate make it an excellent proxy for space (e.g., [1,2]). Links between exploration of space and of the Antarctic date back to the International Geophysical Year of 1957-1958, which saw both the launch of Sputnik 1 and the establishment of a station at the South Pole. The Antarctic Search for Meteorites (ANSMET) is an annual expedition to the south polar plateau to collect meteorites. Although its intent is not to simulate a space mission, the handful of astronauts who have participated in ANSMET agree that it is very similar to a long-duration space flight. Independently, NASA and other space agencies have simulated deep space exploration missions in "analog" activities at remote field sites on Earth (e.g., [3]). These include NASA Extreme Environment Mission Operations (NEEMO) [4,5], Desert Research And Technology Studies (Desert RATS) [6,7], and the Pavilion Lake Research Project (PLRP or simply Pavilion Lake) [8]. This report focuses on NEEMO, Desert RATS, and PLRP because of the author's firsthand experience with them. Other noteworthy analogs, such as the arctic Haughton Mars Project and the European Space Agency's underground Cooperative Adventure for Valuing and Exercising human behavior and performance Skills (CAVES), are not treated here. NASA analogs often include fully staffed control centers, astronauts serving as crew, and realistic mission timelines lasting one to two weeks. Analogs have provided key insights into system architectures and operational concepts for the future human exploration of deep space. They have pioneered techniques for human communication with significant speed-of-light delays, for conducting spacewalks on natural objects with negligible surface gravity, and for empowering exploration crews to work with reduced dependence on a ground control center. They have field-tested dozens of emerging technologies including spacewalking tools and full-scale prototype vehicles and habitats. They have provided valuable experience for astronauts preparing for their first space flight, and for flown crewmembers who will take command roles on later flights. Some analogs, especially PLRP, have connected observers in the field with science teams in remotely located control centers to produce high-quality, publishable scientific results. The analogs have accomplished all of this at a tiny fraction of the cost of an actual space flight. This report treats ANSMET as space flight analog. The chapter following this introduction describes ANSMET in depth. The report then presents data on logistics and crew considerations that may be useful for developers of future human space exploration missions. It offers detailed comparisons between ANSMET and past, present, and future space flights on the Space Shuttle, the International Space Station (ISS), and a proposed Mars mission. Those comparisons are intended to complement the work of Eppler [2], who compares ANSMET to the Apollo moon flights. This report also compares ANSMET with the Desert RATS, NEEMO, and PLRP analogs. It then presents observations and makes recommendations related to ANSMET's value as a simulated space mission. The report ends with a short conclusion. The remainder of this introductory chapter provides background material to help readers interpret the rest of the report. It gives brief overviews of Space Shuttle and ISS missions along with information on a notional future human flight to Mars. It also presents the general features of three of NASA's space flight "analog" projects. With those points of reference in place, the chapter concludes with an overview of ANSMET.

Love, Stanley G.↗

NASA NTRSDate not supplied

A Verification Framework for Runtime Assurance of Autonomous UAS

Runtime Assurance (RTA) is a design-time architecture for safety-critical systems where an internal monitor acts upon detecting a violation of a property. The simplex architecture is an instance of RTA, where the action taken is to hand control of the overall system to a trusted controller when an untrusted one violates a safety property. Simplex RTA is emerging as a method for allowing AI/ML and other unverified software to be integrated into safety-critical applications like aircraft. To this end, the American Society for Testing and Materials (ASTM) and NASA have each published guidelines on the use of RTA in such systems. In the simplex RTA framework, a system has an advanced controller (AC) and a reversionary controller (RC). The system is allowed to operate with the AC until a runtime monitor detects that some property has been violated and then the RC takes over. Assuming that the sample rate of the monitor will detect improper functioning with enough time for the RC to correct the impending problem, and that the RC is trusted, the system will operate as intended. This use of the simplex RTA framework can allow for the integration of untrusted, but possibly more performant, controllers in a safe way. This paper presents a formalization of a simplex RTA framework in the Prototype Verification System (PVS) theorem prover using an embedding of differential dynamic logic (DDL) called Plaidypvs. A novel feature of this framework is that it can be instantiated at different levels of abstraction. This feature allows for the formal verification of a system with an untrusted black box component, such as an AI/ML controller. This paper does not address the many difficulties in deploying RTA in an industrial-level system. Instead, the focus is on the formal verification of the simplex RTA framework in the language of hybrid programs. Hybrid programs are programs that include both discrete and continuous dynamics and can be used to model complex cyber-physical systems. Plaidypvs is a tool that enables formalization of hybrid programs in the PVS theorem prover. Plaidypvs enables the verification of the general simplex RTA framework and then, by specializing some components of the hybrid program, verifying instances of the framework while treating the untrusted component as a black box. A selection of Unmanned Aircraft Systems (UAS) operations are shown as instances of the general RTA framework in PVS. This offers the benefit of design time verification of relevant safety properties to the system, and it also gives requirements on the sample rate of sensors that determine the time interval in which the ‘switch’ property of the RTA framework is checked.

PVS↗