Chris Johnson, Index
Leveson's Completeness Criteria
- Output to Trigger Relationships.
- Links between input & output events.
- For any output to actuators:
- can effect on process be detected?
- if output fails can this be seen?
- What if response is:
- missing, too early or too late?
- If response recieved without trigger
- then erroneous state.