For the Assignment, see the SVN. You can also access it from the command line as follows:

svn export https://svn.eecs.yorku.ca/repos/4312/2015F/Public/Assign-Isolette

(you will need the SVN login/passwd)

Question: m_st is described as the status of the sensor and operator settings. When does the controller set it to invalid?

Answer: The prefix “m” in m_st means that m_st is a monitored variable and thus we cannot set it (or control it). It comes from the Plant (i.e. the environment). It signals invalid if any of the sensors have failed or if the operator console (another device in the Plant) has failed. Thus, this falls into the category of an E-description not an R-description.

The Controller (the SUD) can now use m_st to decide whether to sound an alarm or not (see REQ3).

(In REMH, each sensor has its own failure channel. To keep the assignment manageable, have conglomerated all the failure channels into one variable, i.e. m_st)