SEARCH · Search NASA

Results for “proof”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 487 records · Page 27

All sources NASA NTRS DOE OSTI

NASA NTRS1994

Superconducting rebalance acceleration and rate sensor

The goal of this program is the development of a high precision multisensor based on a high T(sub c) superconducting proof mass. The design of a prototype is currently underway. Key technical issues appear resolvable. High temperature superconductors have complicated, hysteretic flux dynamics but the forces on them can be linearly controlled for small displacements. Current data suggests that the forces on the superconductors decay over a short time frame and then stabilize, though very long term data is not available. The hysteretic force characteristics are substantial for large scale excursions, but do not appear to be an issue for the very small displacements required in this device. Sufficient forces can be exerted for non-contact suspension of a centimeter sized proof mass in a vacuum sealed nitrogen jacket cryostat. High frequency capacitive sensing using stripline technology will yield adequate position resolution for 0.1 micro-g measurements at 100 Hz. Overall, a reasonable cost, but very high accuracy, system is feasible with this technology.

Torti, R.↗

NASA NTRS1994

Quality assurance and risk management: Perspectives on Human Factors Certification of Advanced Aviation Systems

This paper is based on the experience of engineering psychologists advising the U.K. Ministry of Defense (MoD) on the procurement of advanced aviation systems that conform to good human engineering (HE) practice. Traditional approaches to HE in systems procurement focus on the physical nature of the human-machine interface. Advanced aviation systems present increasingly complex design requirements for human functional integration, information processing, and cognitive task performance effectiveness. These developing requirements present new challenges for HE quality assurance (QA) and risk management, requiring focus on design processes as well as on design content or product. A new approach to the application of HE, recently adopted by NATO, provides more systematic ordering and control of HE processes and activities to meet the challenges of advanced aircrew systems design. This systematic approach to HE has been applied by MoD to the procurement of mission systems for the Royal Navy Merlin helicopter. In MoD procurement, certification is a judicial function, essentially independent of the service customer and industry contractor. Certification decisions are based on advice from MoD's appointed Acceptance Agency. Test and evaluation (T&E) conducted by the contractor and by the Acceptance Agency provide evidence for certification. Certification identifies limitations of systems upon release to the service. Evidence of compliance with HE standards traditionally forms the main basis of HE certification and significant non-compliance could restrict release. The systems HE approach shows concern for the quality of processes as well as for the content of the product. Human factors certification should be concerned with the quality of HE processes as well as products. Certification should require proof of process as well as proof of content and performance. QA criteria such as completeness, consistency, timeliness, and compatibility provide generic guidelines for progressive acceptance and certification of HE processes. Threats to the validity of certification arise from problems and assumptions in T&E methods. T&E should seek to reduce the risk of specification non-compliance and certification failure.

Taylor, Robert M.↗

NASA NTRS1995

Introduction to Penelope

A formal program verification is a (mathematical) proof that a program executed according to its intended model meets some specification. This proves that the algorithm defined by the program is correct in the precise technical sense of being consistent with a particular specification. A program correct in this sense is free from a large and important class of errors, even though its behavior may still produce unintended results--either because the implementation of the programming language itself does not match the model of execution, or because the specification does not correctly express the user's intentions. Penelope is a prototype system for interactively developing and verifying programs that are written in a rich subset of sequential Ada. Penelope can be used to develop a program and its correctness proof incrementally, and in concert with one another. Incrementality is used in a number of ways to help make verification more tractable and more productive. For example, if an already-verified program is modified, one can attempt to prove the modified version by replaying and modifying the original verification. Penelope's specification language, Larch/Ada, belongs to the family of Larch interface languages. Larch/Ada scales up properly, in the sense that it is demonstrably sound to decompose a system hierarchically and reason locally about the implementation of each piece. Penelope has been applied in various demonstration projects--for specification (guidance control, distributed operating systems), verification (of off-the-shelf code), and formal development (by non-expert as well as expert users). Some features of Penelope have been embodied in Ada Wise, a lint-like non-interactive tool that warns of the potential for certain dynamic semantic errors in Ada programs.

Guaspari, David↗

NASA NTRS1996

Probabilistic Assessment of National Wind Tunnel

A preliminary probabilistic structural assessment of the critical section of National Wind Tunnel (NWT) is performed using NESSUS (Numerical Evaluation of Stochastic Structures Under Stress) computer code. Thereby, the capabilities of NESSUS code have been demonstrated to address reliability issues of the NWT. Uncertainties in the geometry, material properties, loads and stiffener location on the NWT are considered to perform the reliability assessment. Probabilistic stress, frequency, buckling, fatigue and proof load analyses are performed. These analyses cover the major global and some local design requirements. Based on the assumed uncertainties, the results reveal the assurance of minimum 0.999 reliability for the NWT. Preliminary life prediction analysis results show that the life of the NWT is governed by the fatigue of welds. Also, reliability based proof test assessment is performed.

Shah, A. R.↗

NASA NTRS1996

An Acoustic Emission and Acousto-Ultrasonic Analysis of Impact Damaged Composite Pressure Vessels

The research presented herein summarizes the development of acoustic emission (AE) and acousto-ultrasonic (AU) techniques for the nondestructive evaluation of filament wound composite pressure vessels. Vessels fabricated from both graphite and kevlar fibers with an epoxy matrix were examined prior to hydroburst using AU and during hydroburst using AE. A dead weight drop apparatus featuring both blunt and sharp impactor tips was utilized to produce a single known energy 'damage' level in each of the vessels so that the degree to which the effects of impact damage could be measured. The damage levels ranged from barely visible to obvious fiber breakage and delamination. Independent neural network burst pressure prediction models were developed from a sample of each fiber/resin material system. Here, the cumulative AE amplitude distribution data collected from low level proof test (25% of the expected burst for undamaged vessels) were used to measure the effects of the impact on the residual burst pressure of the vessels. The results of the AE/neural network model for the inert propellant filled graphite/epoxy vessels 'IM7/3501-6, IM7/977-2 and IM7/8553-45' demonstrated that burst pressures can be predicted from low level AE proof test data, yielding an average error of 5.0%. The trained network for the IM7/977-2 class vessels was also able to predict the expected burst pressure of taller vessels (three times longer hoop region length) constructed of the same material and using the same manufacturing technique, with an average error of 4.9%. To a lesser extent, the burst pressure prediction models could also measure the effects of impact damage to the kevlar/epoxy 'Kevlar 49/ DPL862' vessels. Here though, due to the higher attenuation of the material, an insufficient amount of AE amplitude information was collected to generate robust network models. Although, the worst case trial errors were less than 6%, when additional blind predictions were attempted, errors as high as 50% were produced. An acousto-ultrasonic robotic evaluation system (AURES) was developed for mapping the effects of damage on filament wound pressure vessels prior to hydroproof testing. The AURES injects a single broadband ultrasonic pulse into each vessel at preprogrammed positions and records the effects of the interaction of that pulse on the material volume with a broadband receiver. A stress wave factor in the form of the energy associated with the 750 to 1000 kHz and 1000 to 1250 kHz frequency bands were used to map the potential failure sites for each vessel. The energy map associated with the graphite/epoxy vessels was found to decrease in the region of the impact damage. The kevlar vessels showed the opposite trend, with the energy values increasing around the damage/failure sites.

Walker, James L.↗

NASA NTRS1997

Design, Modeling and Performance Optimization of a Novel Rotary Piezoelectric Motor

This work has demonstrated a proof of concept for a torsional inchworm type motor. The prototype motor has shown that piezoelectric stack actuators can be used for rotary inchworm motor. The discrete linear motion of piezoelectric stacks can be converted into rotary stepping motion. The stacks with its high force and displacement output are suitable actuators for use in piezoelectric motor. The designed motor is capable of delivering high torque and speed. Critical issues involving the design and operation of piezoelectric motors were studied. The tolerance between the contact shoes and the rotor has proved to be very critical to the performance of the motor. Based on the prototype motor, a waveform optimization scheme was proposed and implemented to improve the performance of the motor. The motor was successfully modeled in MATLAB. The model closely represents the behavior of the prototype motor. Using the motor model, the input waveforms were successfully optimized to improve the performance of the motor in term of speed, torque, power and precision. These optimized waveforms drastically improve the speed of the motor at different frequencies and loading conditions experimentally. The optimized waveforms also increase the level of precision of the motor. The use of the optimized waveform is a break-away from the traditional use of sinusoidal and square waves as the driving signals. This waveform optimization scheme can be applied to any inchworm motors to improve their performance. The prototype motor in this dissertation as a proof of concept was designed to be robust and large. Future motor can be designed much smaller and more efficient with lessons learned from the prototype motor.

Duong, Khanh A.↗

NASA NTRS1997

Space Environment Stability and Physical Properties of New Materials for Space Power and Commercial Applications

Useful and informative results were obtained on virtually all materials investigated. For example, the stability of ITO-based arc-proof transparent coatings was greatly improved by substitution of silicon oxide for magnesium fluoride as a dopant. Research on 'air-doped' ITO films has yielded new insight into their conduction mechanism which will help in further development of these coatings. Some air-doped films were found to be extremely pressure sensitive. This work may lead to improved, low-cost gas sensors and vacuum gauges. Work on another promising transparent arc-proof coating (titanium oxide) was initiated in collaboration with industry. Graphite oxide-like materials were synthesized and tested for possible use in high energy-density batteries and other applications. We also started a high-priority project to find the cause of unexpected environmental damage to the exterior of the Hubble Space Telescope (HST) discovered on a recent Shuttle mission. Materials were characterized before and after exposure to soft x-rays and other threats in ground-based simulators.

Hambourger, Paul D.↗

NASA NTRS1998

Graphite Fiber Textile Preform/Cooper Matrix Composites

The purpose of this research was to produce a finned tube constructed of a highly conductive braided graphite fiber preform infiltrated with a copper matrix. In addition, the tube was to be fabricated with an integral geometry. The preform was integral in the sense that the tube and the fin could be braided to yield one continuous part. This composite component is a candidate for situations with high heat transmitting and radiation requirements. A proof-of-concept finned tube was braided and infiltrated with a copper matrix proving that a viable process was developed to fabricate the desired component. Braiding of high conductivity carbon fibers required much trial-and-error and development of special procedures. There are many tradeoffs between braidability and fiber conductivity. To understand the properties and structure of the braided finned tube, an geometric model of the braid structure was derived. This derivation set the basis for the research because knowing the tow orientations helped decipher the thermal as well as the mechanical and conduction tendencies. Infiltration of the fibers into a copper matrix was a complex procedure, and was performed by TRA, of Salt Lake City, Utah, using a proprietary process. Several batches were fabricated with a final, high quality batch serving as a confirming proof-of-concept.

Filatovs, George J.↗

NASA NTRS1998

Optical Detection of Lightning from Space

Optical sensors have been developed to detect lightning from space during both day and night. These sensors have been fielded in two existing satellite missions and may be included on a third mission in 2002. Satellite-hosted, optically-based lightning detection offers three unique capabilities: (1) the ability to reliably detect lightning over large, often remote, spatial regions, (2) the ability to sample all (IC and CG) lightning, and (3) the ability to detect lightning with uniform (i.e., not range-dependent) sensitivity or detection efficiency. These represent significant departures from conventional RF-based detection techniques, which typically have strong range dependencies (biases) or range limitations in their detection capabilities. The atmospheric electricity team of the NASA Marshall Space Flight Center's Global Hydrology and Climate Center has implemented a three-step satellite lightning research program which includes three phases: proof-of-concept/climatology, science algorithm development, and operational application. The first instrument in the program, the Optical Transient Detector (OTD), is deployed on a low-earth orbit (LEO) satellite with near-polar inclination, yielding global coverage. The sensor has a 1300 x 1300 sq km field of view (FOV), moderate detection efficiency, moderate localization accuracy, and little data bias. The OTD is a proof-of-concept instrument and its mission is primarily a global lightning climatology. The limited spatial accuracy of this instrument makes it suboptimal for use in case studies, although significant science knowledge has been gained from the instrument as deployed.

Boccippio, Dennis J.↗

NASA NTRS1999

The Reconstruction Problem Revisited

The role of reconstruction in avoiding oscillations in upwind schemes is reexamined, with the aim of providing simple, concise proofs. In one dimension, it is shown that if the reconstruction is any arbitrary function bounded by neighboring cell averages and increasing within a cell for increasing data, the resulting scheme is monotonicity preserving, even though the reconstructed function may have overshoots and undershoots at the cell edges and is in general not a monotone function. In the special case of linear reconstruction, it is shown that merely bounding the reconstruction between neighboring cell averages is sufficient to obtain a monotonicity preservinc,y scheme. In two dimensions, it is shown that some ID TVD limiters applied in each direction result in schemes that are not positivity preserving, i.e. do not give positive updates when the data are positive. A simple proof is given to show that if the reconstruction inside the cell is bounded by the neighboring cell averages (including corner neighbors), then the scheme is positivity preserving. A new limiter that enforces this condition but is not as dissipative as the Minmod limiter is also presented.

Suresh, Ambaby↗

NASA NTRS1997

The International Space Station Assembly on Schedule

As engineers continue to prepare the International Space Station (ISS) for in-orbit assembly in the year 2002, ANSYS software has proven instrumental in resolving a structural problem in the project's two primary station modules -- Nodes 1 and 2. Proof pressure tests performed in May revealed "low temperature, post-yield creep" in some of the Nodes' gussets, which were designed to reinforce ports for loads from station keeping and reboost motion of the entire space station. An extensive effort was undertaken to characterize the creep behavior of the 2219-T851 aluminum forging material from which the gussets were made. Engineers at Sverdrup Technology, Inc. (Huntsville, AL) were responsible for conducting a combined elastic-plastic-creep analysis of the gussets to determine the amount of residual compressive stress which existed in the gussets following the proof pressure tests, and to determine the stress-strain history in the gussets while on-orbit. Boeing, NASA's Space Station prime contractor, supplied the Finite Element Analysis (FEA) model geometry and developed the creep equations from the experimental data taken by NASA's Marshall Space Flight Center and Langley Research Center. The goal of this effort was to implement the uniaxial creep equations into a three dimensional finite element program, and to determine analytically whether or not the creep was something that the space station program could live with. The objective was to show analytically that either the creep rate was at an acceptable level, or that the node module had to be modified to lower the stress levels to where creep did not occur. The elastic-plastic-creep analysis was performed using the ANSYS finite element program of ANSYS, Inc. (Houston, PA). The analysis revealed that the gussets encountered a compressive stress of approximately 30,000 pounds per square inch (psi) when unloaded. This compressive residual stress significantly lowered the maximum tension stress in the gussets which decreased the creep strain rate. The analysis also showed that the gussets would not experience a great deal of creep from future pressure tests if braces or struts proposed by Boeing were installed to redistribute stress away from them. Subsequent analysis of on-orbit station keeping and reboost loads convinced Boeing that the gussets should be removed altogether.

Source record↗

NASA NTRS1999

Intelligent Command and Control Systems for Satellite Ground Operations

This grant, Intelligent Command and Control Systems for Satellite Ground Operations, funded by NASA Goddard Space Flight Center, has spanned almost a decade. During this time, it has supported a broad range of research addressing the changing needs of NASA operations. It is important to note that many of NASA's evolving needs, for example, use of automation to drastically reduce (e.g., 70%) operations costs, are similar requirements in both government and private sectors. Initially the research addressed the appropriate use of emerging and inexpensive computational technologies, such as X Windows, graphics, and color, together with COTS (commercial-off-the-shelf) hardware and software such as standard Unix workstations to re-engineer satellite operations centers. The first phase of research supported by this grant explored the development of principled design methodologies to make effective use of emerging and inexpensive technologies. The ultimate performance measures for new designs were whether or not they increased system effectiveness while decreasing costs. GT-MOCA (The Georgia Tech Mission Operations Cooperative Associate) and GT-VITA (Georgia Tech Visual and Inspectable Tutor and Assistant), whose latter stages were supported by this research, explored model-based design of collaborative operations teams and the design of intelligent tutoring systems, respectively. Implemented in proof-of-concept form for satellite operations, empirical evaluations of both, using satellite operators for the former and personnel involved in satellite control operations for the latter, demonstrated unequivocally the feasibility and effectiveness of the proposed modeling and design strategy underlying both research efforts. The proof-of-concept implementation of GT-MOCA showed that the methodology could specify software requirements that enabled a human-computer operations team to perform without any significant performance differences from the standard two-person satellite operations team. GT-VITA, using the same underlying methodology, the operator function model (OFM), and its computational implementation, OFMspert, successfully taught satellite control knowledge required by flight operations team members. The tutor structured knowledge in three ways: declarative knowledge (e.g., What is this? What does it do?), procedural knowledge, and operational skill. Operational skill is essential in real-time operations. It combines the two former knowledge types, assisting a student to use them effectively in a dynamic, multi-tasking, real-time operations environment. A high-fidelity simulator of the operator interface to the ground control system, including an almost full replication of both the human-computer interface and human interaction with the dynamic system, was used in the GT-MOCA and GT-VITA evaluations. The GT-VITA empirical evaluation, conducted with a range of'novices' that included GSFC operations management, GSFC operations software developers, and new flight operations team members, demonstrated that GT-VITA effectively taught a wide range of knowledge in a succinct and engaging manner.

Mitchell, Christine M.↗

NASA NTRS2000

On the Origin of Monsoon

The notion that the continental-scale land-sea contrast is the main reason that monsoon circulation exists has been a long-held belief. The purpose of this paper is to point out that this notion should be substantially modified. The central idea of this notion states that in summer, radiative heating of the continent, say Asia, gives rise to a continental-scale thermal low and surrounding the thermal low in its southeast direction the low level wind flows in from south-west. This low-level inflow creates a convergence of moisture, which maintains the cumulus convection. And in winter, radiative cooling of continent gives rise to a thermal high and to its southeast the low-level wind is from northeast. The mechanism in this interpretation does undoubtedly exist. However, this mechanism, though believed to be the main driving force of monsoon, has not been tested in numerical experiments. There has been an increasing recognition in the recent years that monsoon is inextricably tied to the heating in the intertropical convergence zone (ITCZ). We propose that the main cause of monsoon is ITCZ's being substantially away from the equator. A brief qualitative explanation of why the ITCZ can be a source of monsoon circulation can be offered based on the circulation field forced by the ITCZ heating. The existence of the ITCZ's does not always have to rely on land-sea contrast on the continental scale. This is hinted in the fact that in February the ITCZ close to Australia (and its associated monsoon circulation) covers a longitudinal range several times as long as that of Australia and thus cannot possibly be caused mainly by the land-sea contrast associated with Australia. Yet, this cannot be used as a proof that the ITCZ in the Asian summer monsoon is not mainly due to land-sea contrast. One of the purposes of this work is to provide a convincing proof. In this work the role of land-sea contrast in the origin of monsoon is examined through numerical simulation with the Goddard general circulation model. The Asian and Australian monsoon circulations are obtained in a four-year integration and then the integration is repeated with Asia, the maritime continent, and Australia replaced by ocean. The sea surface temperature (SST) at each affected grid is specified as the SST at the first grid to the east that is an ocean grid in the first experiment. The latter integration shows that the monsoon circulation pattern over where south Asia and Australia were and the surrounding region has largely remained. The results discount land-sea contrast as the main cause of Asian monsoon. A third experiment is the same as the first except that the topography of Asia, the maritime continent, and Australia is reduced to zero. This experiment reveals that the difference between the first two experiments is due more to the removal of topography than to the removal of land-sea contrast. August precipitation is shown averaged over the last three years of each of the three experiments. They show that the Asian monsoon rainy region is largely intact in the second experiment and the difference between the second and the third experiment is mainly in the longitudinal location of the maximum precipitation. Additionally, in Asian and Australian winter monsoons land-sea contrast also plays only a modifying role. Although land-sea contrast plays only a modifying role in Asian and Australian (and Central American including Mexican) monsoons, it is the main reason that ITCZ (and thus monsoon) exists in Africa and South America. Thus, monsoons can be classified into two groups depending on whether land-sea contrast plays a major role.

Chao, Winston C.↗

NASA NTRS2000

Turbulence and Laminar Structures: Can They Co-Exist?

Schwarzschild first suggested that the laminar structures observed in the high Reynolds number Re = UL/nu approx. = (10(exp 12)) solar photosphere are the result of turbulence rather than a proof of its absence. He reasoned that since turbulence generates large turbulent viscosities nu(sub t) much greater than nu, the "effective" Reynolds number Re = UL/nu(sub t) approx. = O(1). Schwarzschild's argument is, however, incomplete for it assumes that the entire role of the non-linear interactions is to "enhance" viscosity. While this is not true in general, we present a proof of how and why it may occur, thus completing Schwarzschild's argument. We further discuss the fact that the same model non-local turbulence models have been shown to reproduce LES data for a variety of flows pertaining to astrophysics, geophysics and laboratory situations (at a fraction of the time).

Canuto, V. M.↗

NASA NTRS1997

Neural Network Prediction of Failure of Damaged Composite Pressure Vessels from Strain Field Data Acquired by a Computer Vision Method

This effort used a new and novel method of acquiring strains called Sub-pixel Digital Video Image Correlation (SDVIC) on impact damaged Kevlar/epoxy filament wound pressure vessels during a proof test. To predict the burst pressure, the hoop strain field distribution around the impact location from three vessels was used to train a neural network. The network was then tested on additional pressure vessels. Several variations on the network were tried. The best results were obtained using a single hidden layer. SDVIC is a fill-field non-contact computer vision technique which provides in-plane deformation and strain data over a load differential. This method was used to determine hoop and axial displacements, hoop and axial linear strains, the in-plane shear strains and rotations in the regions surrounding impact sites in filament wound pressure vessels (FWPV) during proof loading by internal pressurization. The relationship between these deformation measurement values and the remaining life of the pressure vessels, however, requires a complex theoretical model or numerical simulation. Both of these techniques are time consuming and complicated. Previous results using neural network methods had been successful in predicting the burst pressure for graphite/epoxy pressure vessels based upon acoustic emission (AE) measurements in similar tests. The neural network associates the character of the AE amplitude distribution, which depends upon the extent of impact damage, with the burst pressure. Similarly, higher amounts of impact damage are theorized to cause a higher amount of strain concentration in the damage effected zone at a given pressure and result in lower burst pressures. This relationship suggests that a neural network might be able to find an empirical relationship between the SDVIC strain field data and the burst pressure, analogous to the AE method, with greater speed and simplicity than theoretical or finite element modeling. The process of testing SDVIC neural network analysis and some encouraging preliminary results are presented in this paper. Details are given concerning the processing of SDVIC output data such that it may be used as back propagation neural network (BPNN) input data. The software written to perform this processing and the BPNN algorithm are also discussed. It will be shown that, with limited training, test results indicate an average error in burst pressure prediction of approximately six percent,

Russell, Samuel S.↗

NASA NTRS2001

MEMS Incandescent Light Source

A MEMS-based, low-power, incandescent light source is being developed. This light source is fabricated using three bonded chips. The bottom chip consists of a reflector on Silicon, the middle chip contains a Tungsten filament bonded to silicon and the top layer is a transparent window. A 25-micrometer-thick spiral filament is fabricated in Tungsten using lithography and wet-etching. A proof-of-concept device has been fabricated and tested in a vacuum chamber. Results indicate that the filament is electrically heated to approximately 2650 K. The power required to drive the proof-of-concept spiral filament to incandescence is 1.25 W. The emitted optical power is expected to be approximately 1.0 W with the spectral peak at 1.1 microns. The micromachining techniques used to fabricate this light source can be applied to other MEMS devices.

Tuma, Margaret↗

NASA NTRS2001

Certifying Domain-Specific Policies

Proof-checking code for compliance to safety policies potentially enables a product-oriented approach to certain aspects of software certification. To date, previous research has focused on generic, low-level programming-language properties such as memory type safety. In this paper we consider proof-checking higher-level domain -specific properties for compliance to safety policies. The paper first describes a framework related to abstract interpretation in which compliance to a class of certification policies can be efficiently calculated Membership equational logic is shown to provide a rich logic for carrying out such calculations, including partiality, for certification. The architecture for a domain-specific certifier is described, followed by an implemented case study. The case study considers consistency of abstract variable attributes in code that performs geometric calculations in Aerospace systems.

Lowry, Michael↗

NASA NTRS1998

Explaining Synthesized Software

Motivated by NASA's need for high-assurance software, NASA Ames' Amphion project has developed a generic program generation system based on deductive synthesis. Amphion has a number of advantages, such as the ability to develop a new synthesis system simply by writing a declarative domain theory. However, as a practical matter, the validation of the domain theory for such a system is problematic because the link between generated programs and the domain theory is complex. As a result, when generated programs do not behave as expected, it is difficult to isolate the cause, whether it be an incorrect problem specification or an error in the domain theory. This paper describes a tool we are developing that provides formal traceability between specifications and generated code for deductive synthesis systems. It is based on extensive instrumentation of the refutation-based theorem prover used to synthesize programs. It takes augmented proof structures and abstracts them to provide explanations of the relation between a specification, a domain theory, and synthesized code. In generating these explanations, the tool exploits the structure of Amphion domain theories, so the end user is not confronted with the intricacies of raw proof traces. This tool is crucial for the validation of domain theories as well as being important in everyday use of the code synthesis system. It plays an important role in validation because when generated programs exhibit incorrect behavior, it provides the links that can be traced to identify errors in specifications or domain theory. It plays an important role in the everyday use of the synthesis system by explaining to users what parts of a specification or of the domain theory contribute to what pieces of a generated program. Comments are inserted into the synthesized code that document these explanations.

VanBaalen, Jeffrey↗