C.29.3:4 - Solution
Build and compare two routes from an input to the result required by the use:
input → abstract computation → required result
input → prepared system
→ system actions
→ interpreted result
The second route must supply the result relation needed by the receiving work. This can be equality, a bound, agreement of output distributions or a property of continuing behavior. Input preparation and output interpretation can differ.
Recover the needed result → prepare a representable input → construct the executing actions → interpret the output or behavior → compare the routes → repair the failed connection → use the sufficient result.
Enter at an already available contribution. A known device behavior can guide a revised formulation; a settled implementation can supply an operation within a larger computation.
C.29.3:4.1 - Determine what the receiving work needs
State the inputs and the consequence to be supplied. For a terminating computation, identify the output and its meaning. For continued interaction, identify the property that must hold across the relevant histories: for example, whether another admission is permitted without exceeding capacity.
Choose the comparison accordingly. An integer command can require equality of counts. A physical readout can support an interval containing the computed value. A concurrent procedure can need a bound that holds during every permitted intermediate state.
For a sampling computation, identify the requested distribution or statistic and the discrepancy that the receiving use can tolerate. Individual draws from two adequate samplers can differ. If the computation supplies an estimate to a larger learning or control method, determine what accuracy that method needs from the estimate.
Keep the computational result and its later physical use distinguishable. A controller can calculate a command, and an actuator can then change a physical system. The calculation and the resulting movement consume different premises. In the robot example below, the interface must realize the intended count; interpreting that count as travel additionally uses the motion model.
Use the available premises for a conditional design. An assertion about a performed execution uses the observations and operating circumstances needed to establish that assertion. Additional testing is selected for what it could change in the receiving decision, through C.11.DUA.
C.29.3:4.2 - Construct input preparation
Explain how a required input is set in the system. Identify the physical or operational state that represents it: a stored value, an applied signal, an arranged material stock or another prepared condition.
Determine the admitted range and the relevant distinctions. A signed field has a finite range. A voltage input has units and a reference. A stock of three exclusive cards differs from two independent stocks of three. Recover initial state when the input is interpreted relative to it.
Apply the preparation to the required input. If it cannot be represented, choose among changing the encoding, changing the arrangement, restricting the input set or revising the computation. A large integer can sometimes be represented by several smaller values, but their execution must preserve the intended composition.
State rounding or other preparation loss in the same quantity that the receiving comparison uses. Retain a sufficient bound when it answers the question. Locate a lost distinction before deciding that a more precise number will restore it.
C.29.3:4.3 - Construct the actions that execute the operations
For each operation whose realization is unresolved, identify what the system does and how its state changes. Connect sequences through the state they leave for the next operation.
When one logical operation spans several physical actions, examine the intervening states. Reserving a card, crossing a room boundary and returning the card are separate events. A visitor can be outside while the card is unavailable. Either show that the intervening behavior preserves the needed result, or change the model or the arrangement.
For shared operation, determine how the same resource or state is accessed. Exclusive possession means that each card can be held by only one participant at a time. Independent copies of an available-card count require a different coordination mechanism. The applicable engineering or administrative method supplies that mechanism.
For repeated or timed operation, include completion, reset and ordering where they affect the result. Two relative increments add only when both are executed under the intended rule. Repeating an absolute target ordinarily asks for the same target again. An ongoing physical process can require a temporal model rather than a sequence of instantaneous assignments.
A physical evolution can itself perform the computation. Determine which initial preparation, controls and interval make its readout useful. A sampler may use a stationary law; a finite-time estimator may use a transient. Choose the evolution and reading rule for the requested result.
A.3.3 supplies the construction of state and permitted continuations. A.6.1:4.6 supplies the realization relation when a reusable operation declaration needs it. Their contributions leave the particular circuit, physical interaction or operating procedure to its subject method.
C.29.3:4.4 - Construct result interpretation
Identify the state or indication that the receiver can actually obtain, and explain how it yields the computational result. Give its scale, reference, timing and aggregation rule wherever those change the answer. When several observations yield an estimate, include their dependence in the sampling argument; the number of readings alone does not determine the estimate’s uncertainty.
Derive this interpretation from the executing relation. An input scale need not be the output scale. In the analog example below, each input uses one volt for ten units, while the output uses one volt for twenty units.
Check whether different possible outcomes have become indistinguishable to the readout. Counting unavailable cards can bound occupancy without determining it. A command acknowledgment can establish receipt without establishing completed motion. In each case, return the consequence the indication supports.
Use C.16 when reading the result requires a measurement model. Instrument loading, calibration, finite resolution or disturbances enter that model when they change the inference. A bound or another suitable indication can answer the question without reconstructing an inaccessible exact value.
C.29.3:4.5 - Compare the routes over the claimed scope
Work a small input through both routes with its meanings intact. Then establish why the required relation holds over the input range or histories for which the result will be used.
For a finite case, a complete case analysis can suffice. For an invariant, show it in the initial state and show how every permitted operation preserves it. For an approximate result, propagate the relevant losses to the quantity used by the receiver. For a sampler or statistical estimator, compare the relevant distributions or estimation properties. Use the mathematical, numerical or empirical method appropriate to that claim.
For example, a required binary sampler gives output 1 with probability 0.5. Suppose the device model gives probability p between 0.49 and 0.51 under the intended preparation. The absolute discrepancy in that probability is at most 0.01, so it meets a tolerance of 0.02. Comparing two individual draws cannot establish or refute that distributional result. Estimating p from a finite run requires the sampling assumptions and uncertainty calculation appropriate to those observations.
When the requested result contains several random components, compare their joint behavior. Suppose the target is a pair of independent fair bits. Preparing one fair bit B and returning (B,B) gives the right distribution at each output separately. But the target assigns probability 1/2 to unequal outputs; this system assigns probability 0. Using two independent draws gives each of the four pairs probability 1/4 and restores the requested result. The realization must provide that joint sampling behavior. When its observations are dependent, use the actual joint law or change how the second component is obtained.
Choose changed cases from consequential features of the arrangement: an endpoint of the command range, a different initial state, an overlapping action or a possible indication error. These cases help locate failures. A sampled success supports the tested case; the broader argument supplies the broader conclusion.
Separate three possible outcomes:
- The interpreted execution supplies the required result under the stated conditions.
- It supplies a weaker result, such as an interval or occupancy bound, that may still answer the receiving question.
- A connection fails or remains unknown, and its location determines the next construction, observation or restriction.
C.29.3:4.6 - Repair the connection and its dependents
Return to the part that changes the answer. Repair input preparation when a value cannot be represented. Repair the execution when permitted actions violate the intended operation. Repair readout when the available indication has been given the wrong meaning. Revise the physical or computational model when its retained state cannot express the relevant behavior.
Compare repairs by the result the work needs. Restricting a command range may be sufficient for one device. Splitting commands may preserve a larger range at the cost of extra execution time. Include the preparation, conversion, repeated execution and readout consumed by the proposed repair when comparing its cost with the available alternatives. A stronger sensor may be unnecessary when a conservative bound already settles the action.
Revisit contributions that consume the changed value, meaning or condition. Retain independent results whose assumptions still hold. B.5.MPC connects this local repair to the wider physical, mathematical and computational question.
When adapting the formulation and the apparatus together could improve the result, compare both directions. Ask which physical operations are available, how they can be interpreted computationally, and which change to the arrangement would make the useful operation easier or more reliable. C.29.2 develops the resulting formulation. Designing a new computational model or notation can require a substantial further method; name that task when the present construction reaches it.
C.29.3:4.7 - Return the result at the strength obtained
Give the usable realization, input conditions, interpreted consequence and the change that would require reconsideration. Preserve the derivation or operating explanation at the depth needed by its receiver; a short calculation may be enough.
A conditional design can finish before a device is built. An observed execution can establish a result for its actual conditions. An identified incompatibility can stop an unsuitable implementation and open another. Further information or assurance is obtained when the receiving use requires its contribution.