Edit Research Statement: address DAS+Split comments with oldt/newt markup

This commit is contained in:
Split 2026-03-16 13:53:24 -04:00
parent ed29f6a09b
commit 54f0f2f1e5

View File

@ -1,108 +1,102 @@
% GOAL PARAGRAPH % GOAL PARAGRAPH
The goal of this research is to develop a methodology for creating autonomous The goal of this research is to develop a methodology for creating autonomous
control systems with event-driven control laws that have guarantees of safe and \oldt{control systems with event-driven control laws that have guarantees of
correct behavior.\splitnote{Strong, direct opening. Sets scope immediately.} safe and correct behavior.} \newt{hybrid control systems with mathematical
guarantees of safe and correct behavior.}\splitnote{Strong, direct opening.
Sets scope immediately.}
\dasinline{Title needs updated to High Assurance Hybrid \dasinline{Title needs updated to High Assurance Hybrid
Control Systems. Maybe removal of `formal'?} Control Systems. Maybe removal of `formal'?}
% INTRODUCTORY PARAGRAPH Hook % INTRODUCTORY PARAGRAPH Hook
Nuclear power relies on extensively trained operators who follow detailed Nuclear power relies on extensively trained operators who follow detailed
written procedures to manage reactor control.\dasinline{Why is there any written procedures to manage reactor control. Based on these procedures and
hyphenation at all? Why not full justification?} Based on these procedures and \oldt{operators'} \newt{their} interpretation of plant conditions,
\oldt{operators'} \newt{their} interpretation of plant conditions, \oldt{operators} \newt{they} make critical decisions \oldt{operators} \newt{they} make critical decisions about when to switch
about when to switch between control objectives. between control objectives.
\splitinline{Consider: ``operators'' appears 3x in two sentences. Maybe:
``Based on these procedures and their interpretation of plant conditions,
they make critical decisions...''}
% Gap % Gap
\oldt{But, reliance} \newt{This reliance} on human operators has created an economic challenge for \oldt{But, reliance} \newt{This reliance} on human operators has created an
next-generation nuclear power plants. economic challenge for next-generation nuclear power plants. Small modular
\splitinline{``But, reliance'' — the comma after ``But'' is unusual. Either reactors face significantly higher per-megawatt staffing costs than
drop it or restructure: ``However, this reliance...'' or ``This reliance, conventional plants.\dasinline{Obvious but source required.} Autonomous
however, has created...''} control systems \oldt{are needed that can} \newt{must} safely manage complex
\dasinline{Or just straight up ``this reliance''. operational sequences with the same assurance as human-operated systems, but
Right to the topic.}
Small modular reactors face significantly higher per-megawatt staffing costs
than conventional
plants.\dasinline{Obvious but source required.} Autonomous control systems \oldt{are
needed that can} \newt{must} safely manage complex
operational sequences with the same assurance as human-operated systems, but
without constant supervision. without constant supervision.
\splitinline{``are needed that can'' --- passive. Try: ``Autonomous control
systems must safely manage...''}
% APPROACH PARAGRAPH Solution % APPROACH PARAGRAPH Solution
To address this need, we will combine formal methods from computer science with To address this need, we will combine formal methods from computer science
control theory to build hybrid control systems that are correct by with control theory \oldt{to build hybrid control systems that are correct by
construction.\splitnote{Clear statement of approach.}\dasinline{Add construction.} \newt{to build hybrid control systems that are correct by
``and leverage existing domain knowledge'' or similar. construction, leveraging the extensive domain knowledge already embedded in
Industry knowledge can be reused here --- less like existing operating procedures and safety analyses.}
starting from scratch.}
% Rationale % Rationale
Hybrid systems use discrete logic to switch between continuous control modes, Hybrid systems use discrete logic to switch between continuous control modes,
similar to how operators change control strategies. Existing formal methods similar to how operators change control strategies. Existing formal methods
generate provably correct switching logic but cannot handle continuous dynamics generate provably correct switching logic but cannot handle continuous
during transitions, while traditional control theory verifies continuous dynamics during transitions, while traditional control theory verifies
behavior but lacks tools for proving discrete switching continuous behavior but lacks tools for proving discrete switching
correctness.\splitnote{Nice parallel structure showing the gap.} correctness.\splitnote{Nice parallel structure showing the gap.}
% Hypothesis and Technical Approach % Hypothesis and Technical Approach
We will bridge this gap through a three-stage methodology. First, we will We will bridge this gap through a three-stage methodology. First, we will
translate written operating procedures into temporal logic specifications using translate written operating procedures into temporal logic specifications
NASA's Formal Requirements Elicitation Tool (FRET), which structures using NASA's Formal Requirements Elicitation Tool (FRET). \oldt{which
requirements into scope, condition, component, timing, and response elements. structures requirements into scope, condition, component, timing, and
This structured approach enables realizability checking to identify conflicts response elements. This structured approach enables realizability checking to
and ambiguities in procedures before identify conflicts and ambiguities in procedures before implementation.}
implementation.\dasinline{Had to read this twice.} Second, we will synthesize \newt{FRET structures requirements into scope, condition, component, timing,
discrete mode switching logic using reactive and response elements, enabling realizability checking that identifies
synthesis\dasinline{Also had to read this twice. A lot of conflicts and ambiguities in procedures before implementation.}
\dasinline{Had to read this twice.}
Second, we will synthesize discrete mode switching logic using reactive
synthesis \oldt{to generate deterministic automata that are provably correct
by construction.} \newt{to produce deterministic automata that are correct by
construction.}\dasinline{Also had to read this twice. A lot of
jargon. Check topic stress.} jargon. Check topic stress.}
to generate deterministic automata that are provably Third, we will develop continuous controllers for each discrete mode using
correct by construction. Third, we will develop continuous standard control theory and reachability analysis. We will classify
controllers for each discrete mode using standard control theory and continuous modes based on their transition objectives \oldt{, and then employ
reachability analysis. We will classify continuous modes based on their assume-guarantee contracts and barrier certificates to prove that mode
transition objectives, and then employ assume-guarantee contracts\dasinline{I don't think transitions occur safely and as defined by the deterministic automata.}
I ever mention this phrase again specifically. Might be a \newt{and verify safe mode transitions using barrier certificates and
dogwhistle to other work unintentionally. Must be reachability analysis.}\dasinline{I don't think I ever mention this phrase
careful.} and barrier again specifically. Might be a dogwhistle to other work unintentionally. Must
certificates to prove that mode transitions occur safely and as defined by the be careful.}
deterministic automata. This compositional approach enables local verification
of continuous modes without requiring global trajectory analysis across the This compositional approach enables local verification of continuous modes
entire hybrid system. We will demonstrate this on an Emerson Ovation control without requiring global trajectory analysis across the entire hybrid system.
system.\dasinline{Where did this come from? Needs context.} \oldt{We will demonstrate this on an Emerson Ovation control system.}
\splitinline{This paragraph is dense. Consider breaking after the three \newt{We will validate this methodology through hardware-in-the-loop testing
stages, then a new paragraph for the compositional verification point and on an Emerson Ovation distributed control system, made possible through the
Emerson demo.} University of Pittsburgh Cyber Energy Center's industry partnership.}
\dasinline{Where did this come from? Needs context.}
% Pay-off % Pay-off
This approach \oldt{will demonstrate autonomous control can be used for} \newt{enables autonomous management of} complex This approach \oldt{will demonstrate autonomous control can be used for}
nuclear power operations while maintaining safety \newt{enables autonomous management of} complex nuclear power operations
guarantees. while maintaining safety guarantees.
\splitinline{``can be used for'' — weak. Try: ``...will demonstrate that
autonomous control can manage complex nuclear power operations while
maintaining safety guarantees.'' Or even stronger: ``...enables autonomous
management of complex nuclear power operations with safety guarantees.''}
% OUTCOMES PARAGRAPHS % OUTCOMES PARAGRAPHS
If this research is successful, we will be able to do the following: If this research is successful, we will be able to do the following:
\begin{enumerate} \begin{enumerate}
% OUTCOME 1 Title % OUTCOME 1 Title
\item \textit{Synthesize written procedures into verified control logic.} \item \textit{Synthesize written procedures into verified control logic.}
% Strategy % Strategy
We will develop a methodology for converting written operating procedures We will develop a methodology for converting written operating procedures
into formal specifications. These specifications will be synthesized into into formal specifications. These specifications will be synthesized into
discrete control logic using reactive synthesis tools. discrete control logic using reactive synthesis tools.
% Outcome % Outcome
Control engineers will be able to generate mode-switching controllers from \oldt{Control engineers will be able to generate mode-switching
regulatory procedures with little formal methods controllers from regulatory procedures with little formal methods
expertise,\dasinline{This may not be true, and perhaps expertise, reducing barriers to high-assurance control systems.}
does not belong.} reducing \newt{This will reduce barriers to high-assurance control systems by
barriers to high-assurance control generating verified mode-switching controllers directly from regulatory
systems.\splitnote{Good practical framing --- emphasizes accessibility.} procedures.}\dasinline{This may not be true, and perhaps does not belong.}
% OUTCOME 2 Title % OUTCOME 2 Title
\item \textit{Verify continuous control behavior across mode transitions. } \item \textit{Verify continuous control behavior across mode transitions.}
% Strategy % Strategy
We will develop methods using reachability analysis to ensure continuous We will develop methods using reachability analysis to ensure continuous
control modes satisfy discrete transition requirements. control modes satisfy discrete transition requirements.
% Outcome % Outcome
Engineers will be able to design continuous controllers using standard Engineers will be able to design continuous controllers using standard
practices while ensuring system correctness and proving mode transitions practices while ensuring system correctness and proving mode transitions
@ -110,18 +104,18 @@ If this research is successful, we will be able to do the following:
% OUTCOME 3 Title % OUTCOME 3 Title
\item \textit{Demonstrate autonomous reactor startup control with safety \item \textit{Demonstrate autonomous reactor startup control with safety
guarantees. } guarantees.}
% Strategy % Strategy
We will implement this methodology on a small modular reactor simulation We will implement this methodology on a small modular reactor simulation
using industry-standard control hardware. % Outcome using industry-standard control hardware.
Control engineers will be able to \oldt{implement high-assurance autonomous % Outcome
controls on industrial platforms they already use, enabling users to \oldt{Control engineers will be able to achieve autonomy without
achieve autonomy without retraining costs or developing new retraining costs or developing new equipment by implementing
equipment.} \newt{achieve autonomy without retraining costs or developing new equipment by implementing high-assurance autonomous controls on industrial platforms they already use.}\splitnote{Strong industrial grounding --- the ``platforms they high-assurance autonomous controls on industrial platforms they already
already use'' point is compelling for use.} \newt{Without retraining costs or new equipment, control engineers
adoption.}\dasinline{Flip the clauses. Put retraining will be able to implement high-assurance autonomous controls on industrial
and new equipment before the comma, end with building platforms they already use.}\dasinline{Flip the clauses. Put retraining
HAHACs with control hardware they already use. and new equipment before the comma, end with building HAHACs with control
That's the more important part.} hardware they already use. That's the more important part.}
\end{enumerate} \end{enumerate}