Skip to main content

4. Requirements Specification

4.1 Functional Requirements​

The requirements in this chapter are targets for the CADL language and its toolchain; they do not state that the current implementation meets them. Chapter 10 gives the implementation status per implementation phase, not per requirement.

4.1.1 Institution Description (FR-1)​

IDRequirement NameDescription
FR-1.1Actor DefinitionBe able to define SoS constituent systems (actors) with identifiers, roles, and autonomy levels.
FR-1.2Contract DefinitionBe able to define contracts including parties, authority scope, information sharing structure, responsibilities, and incentives.
FR-1.3Authority Structure DescriptionBe able to explicitly describe decision scope and decision makers, quantifiable by the decision centralization degree β (0 = distributed, 1 = centralized).
FR-1.4Information Sharing Structure DescriptionBe able to define observable information for each actor and sharing modes (push/pull/broadcast).
FR-1.5Incentive DescriptionBe able to define incentive structures including rewards, penalties, and reputation mechanisms.
FR-1.6Environment ModelingBe able to define environmental parameters such as latency, failure rate, and demand rate as intervals or probability distributions.

4.1.2 Protocol Description (FR-2)​

IDRequirement NameDescription
FR-2.1Event-Driven ProtocolBe able to define message exchange procedures between actors based on trigger conditions.
FR-2.2Timing ConstraintsBe able to impose time constraints such as response time limits, timeouts, and periodic execution.
FR-2.3Fallback DefinitionBe able to define alternative behaviors on timeout or failure.
FR-2.4Protocol CompositionBe able to define composite protocols combining parallel execution, sequential execution, and conditional branches of multiple protocols.

4.1.3 Algorithm Reference (FR-3)​

IDRequirement NameDescription
FR-3.1Algorithm Abstract ReferenceBe able to reference algorithms such as route planning and optimization by name and input/output interface.
FR-3.2Algorithm SwitchingBe able to describe dynamic algorithm switching in response to environmental conditions or governance structures.

4.1.4 Verification (FR-4)​

IDRequirement NameDescription
FR-4.1Static Type CheckingBe able to statically check consistency of contract parties, authorities, and information sharing.
FR-4.2Consistency VerificationBe able to detect contradictions in obligations between contracts and authority conflicts.
FR-4.3Deadlock DetectionBe able to detect deadlock possibilities between protocols.
FR-4.4Safety VerificationBe able to verify maintenance of safety invariants during institutional transitions.
FR-4.5Compositional VerificationBe able to confirm overall consistency through differential verification when actors join or leave.

4.1.5 Regime Transition (FR-5)​

IDRequirement NameDescription
FR-5.1Transition Condition DefinitionBe able to define institutional transition conditions based on environmental parameter thresholds.
FR-5.2Transition ProtocolBe able to describe transition procedures during institutional switching (gradual switching, rollback, etc.).
FR-5.3Regime Map DefinitionBe able to define institutional boundaries in environmental parameter space.

4.2 Non-Functional Requirements​

The following are likewise targets, including the quantitative ones (e.g. NFR-3) and the conversion targets (NFR-5); see Chapter 10 for what the current implementation provides. NFR-7 separates human-readable text from identifiers: identifiers stay ASCII (Appendix A, §A.1) because they become names in generated code (Python, Solidity, Rego, C#), where non-ASCII names are not accepted by every target and would require normalization rules. The reference implementation accepts Unicode text in strings and comments and, from cadl 0.3.9, reports an id that violates the ASCII rule as an error (Appendix A, §A.12).

IDRequirement NameDescription
NFR-1Universal ReadabilityA broad range of stakeholders including students, enterprise practitioners, municipal officials, and citizens can understand the intent and structure of institutional descriptions. The primary means are YAML-based declarative syntax, vocabulary close to natural language (authority, responsibility, incentive, etc.), and graduated description levels (overview/design/verification).
NFR-2Graduated ParticipationProvide three graduated description levels (overview, design, verification) matching user expertise, enabling non-experts to participate from overview level and experts up to verification level, each according to their abilities.
NFR-3ScalabilityBe able to process SoS descriptions including 100 or more actors and 50 or more contracts within practical timeframes (verification: within minutes).
NFR-4ExtensibilityHave a plugin mechanism to add domain-specific vocabulary and constraints as libraries.
NFR-5InteroperabilitySupport code generation to SysMLv2 [OMG, 2025], AADL [Feiler & Gluch, 2012], and smart contracts (Solidity [Solidity Documentation]).
NFR-6AI AffinityEnsure syntax is regular and has little ambiguity so LLMs can generate, modify, and explain CADL descriptions from natural language. Designed with AI-assisted barrier reduction (NL→CADL conversion, natural language explanation generation) in mind.
NFR-7InternationalizationBe able to write human-readable text — string values such as name, description, and role, and comments — in any language using Unicode characters (Japanese, etc.). Identifiers (actor, contract, and protocol ids and the names used in expressions) are restricted to ASCII.
NFR-8VisualizationAutomatically generate diagrams such as authority structure diagrams, protocol sequence diagrams, and regime maps from CADL descriptions, enabling non-technical users to visually grasp the overall institutional picture.

4.3 Constraints​

IDDescription
C-1Be able to map to the five-layer framework [Shimoyama & Matsubara, 2026]; the mapping is given in Section 2.2.
C-2Be able to describe SoS classifications (D/A/C/V-SoS) from [ISO/IEC/IEEE 21841:2019].
C-3Be able to integrate with IEC 62853 [IEC 62853:2018] process views (consensus-building, accountability, fault response, change management).
C-4Have a formal foundation based on assume-guarantee contract semantics.