What does it not do, and where are its limits?

The company states its limits before its results.

1. It works on the design

Whether the machine is built as designed, whether the wiring is right, whether the motor on the built machine stops within the commanded time — the platform says nothing about any of it. Testing does not shrink. What shrinks is one family of problems: the ones meant to be caught in test that were not.

2. A verdict answers only the question it was given

If the check is that two axes never enter a shared zone at the same time, that is what was checked. Nothing about a third axis, nothing about recovery from an emergency stop. What each check covered is stated with its result.

3. A model is an abstraction

State combinations grow sharply with the size of the machine, so a model leaves things out, and judgement goes into what to leave out. That judgement, and the scope that fell outside the model because of it, is stated rather than hidden.

4. Software interlocks are not safety functions

The safety interlock module produces software interlocks that protect operation. Emergency stop, safety doors and hard limits stay with hardwired circuits or a safety PLC.

What DatumProof does not do

• Take over control software. It does not write or replace PLC programs or control software. The platform produces the tables and procedures control design works from.
• Replace electrical CAD. It does not draw wiring diagrams; it exports lists electrical CAD imports.
• Make testing unnecessary. Everything only the real machine can settle stays testing’s job.
• Recover a model from existing source code. What is read is drawings and design documents.

Human-readable versions: product — assumptions and scope · about

Back to the question list.