Newest papers

Execution-Time Validation of Context-Carrying Action Intents in Industrial Cyber-Physical Systems

Luca D’Agati, Giuseppe Tricomi, Fabio Orazio Mirto, Merlino Giovanni · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.27971 · cited by 0 works (OpenAlex) · open-access PDF

Chinese

在 reveddedded 命令内核中,虽然已有有效的进程,但从已知的政策中,操作员和计时器的命令在推断、确认和运输后到达控制器,而工厂可能在同一时间内发生了变化,例如通过操作员暂停。 这种命令被释放或累积,当它不再正确时,我们称之为执行差距,并询问哪个组件应该进行最后检查,以及在哪个状态的版本上。 行动意图方案(AIS)是一个合同,其中一个生产者声明其决定持续了多长时间,并且它假定了什么。 运行时间XAIR在释放每一个意图之前重新检查,可以在文本存储中对其执行权限进行原子,并可以将其释放作为一个版本条件的复制,控制

Machine translation (Meta M2M100); the English original follows.

Abstract

In industrial cells, commands from learned policies, operators and schedulers reach the controller after inference, confirmation and transport, and the plant may have changed meanwhile, for instance by an operator pause. Such a command is released, or takes effect, when it is no longer correct. We call this the execution gap and ask which component should make the last check, and against which version of which state. The Action Intent Schema (AIS) is a contract in which a producer states how long its decision stays valid and what it assumes. The runtime XAIR rechecks each intent before release, can commit its authorization atomically in the context store, and can release it as a version-conditional command, which the controller executes only if its version of the state is unchanged. In controlled ablations with declared ground truth on emulated and physical cells, OpenPLC and ARM and RISC-V boards, a check on a replica always left an unprotected interval: a pause written from a few to over 100ms after submission escaped it. Only a check in the scan of a software controller, either a controller-local interlock or the version-conditional command, closed the interval for the state that controller owns; only the version-conditional command also refused commands after a pause that had been undone. A global version revoked up to every valid command under unrelated updates. Versions scoped to what the intent reads, or to the truth of its predicates, did not; with continuous signals on the variables the intent reads, only the latter avoided false revocations, though it burdens the store as predicates accumulate. On one embedded-board core, XAIR validated 148-168 intents/s.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Commit, Computer science, Context (archaeology), Computer security, Software, Action (physics)

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange