List of Safety Goals

ID	Name	Safe State	ASIL	Fault Tolerant Time Interval	Warning & Degradation Concept	Necessary Driver Actions	Emergency Operation Time Interval	Contributing requirements	Single-Point Fault Metric Target Achieved	Latent Fault Metric Target Achieved	Diagnostic Coverage Worksheets	PMHF in FIT	PMHF	FTA for PMHF
G001	Prevent exposure to high voltage	Put battery in "Safe" state and prevent battery restart until service	D			- Pull vehicle on a side - Turn off vehicle - Put vehicle in "safe state" - Evacuate vehicle without touching metallic parts		• [SR001] [a] Prevent exposure to unintended high voltage to passengers, drivers, and other nearby people • [SR002] [b] Detect presence of unintended high-voltage / leakage • [SR003] [c] Safe state: Completely disable battery output until vehicle has been serviced • [SR004] [e] Degraded state: In case of detection of unintended high voltage, do not allow vehicle operation for more than xx kmph / yy minutes • [SR005] [d] Unintended exposure to high voltage fault shall not exist in the system for more than xxx seconds • [SR006] [f, g] Notify driver with a warning indication within xxx seconds of detection of high voltage exposure risk • [SR007] [i] Fault through Exposure to high voltage error shall override all other vehicle-level functions • [SR059] [h] The battery shall enter safe state in a maximum of xxx seconds	• No	• No		No fault tree selected for PMHF	⚫⚪⚪
G002	Prevent battery from operating outside SOA	Put battery in "protected state" until battery recovers	D			- Slow down the vehicle and pull vehicle on a side - Put vehicle in "safe state" -> Emergency Disconnect button is engaged - Evacuate the vehicle - Wait until battery reports recovery		• [SR012] Prevent battery from operating outside temperature SOA • [SR013] Prevent battery from operating outside voltage SOA • [SR014] Ptrevent battery from operating outside current SOA • [SR056] Prevent battery from operating outside Pressure SOA	• No	• No		No fault tree selected for PMHF	⚫⚪⚪
G003	Prevent incorrect vehicle operation due to unreliable transmission or reception of critical hardware and software signals.	Limit battery current draw	D			- Slow down the vehicle - Do not exceed vehicle speed beyond "safe speed" until fault recovers		• [SR051] [a] Provide alterate path of communication for critical signals • [SR052] [b] Provide mechanism to detect faulty hardware and software signals • [SR053] [c, e] Transition vehicle to limp mode upon detection of faulty signals • [SR054] [d] Fault tolerance (TBD) • [SR055] [f] Notify driver upon encountering communication failures	• No	• No		No fault tree selected for PMHF	⚫⚪⚪

21-Feb-2025 2:10 pm