Qualification path
What exists today, and the NASA and ECSS software standards it relates to. No qualification evidence exists yet. Mru makes no compliance claim.
Standards
This page maps Mru to four software standards, two from NASA and two from ECSS:
| Number | Title |
|---|---|
| NPR 7150.2 | NASA Software Engineering Requirements |
| NASA-STD-8739.8 | Software Assurance and Software Safety Standard |
| ECSS-E-ST-40C | Space engineering: Software |
| ECSS-Q-ST-80C | Space product assurance: Software product assurance |
The tables below map by topic, not by clause. No clause of any standard has been checked against Mru.
What exists
These activities run today. They are engineering evidence, not qualification evidence: none was planned, reviewed or recorded under a standard.
| Activity | What exists | Related standards |
|---|---|---|
| Unit tests | Unit tests of the core and the C interface, run in CI on every change. See the quorum crate. | NPR 7150.2, ECSS-E-ST-40C |
| Formal proofs | Nine Kani proofs, four on the core and five on the C interface, run in CI on every change. Each has a stated scope. See Kani proofs. | NPR 7150.2, NASA-STD-8739.8, ECSS-E-ST-40C, ECSS-Q-ST-80C |
| Continuous integration | Build and test on Linux x86_64, Linux ARM64 and macOS, plus static ARM Linux binaries tested under emulation and a bare-metal ARM Cortex-M build. | NPR 7150.2, ECSS-E-ST-40C |
| Scenario tests | scripts/scenarios.sh runs the demo program and checks its output: faults, limits, resets and the comparison with fixed TMR. | NPR 7150.2, ECSS-E-ST-40C |
| Bench | 300 runs per host with injected faults on three general-purpose processors. Not radiation testing, not target hardware. See Bench. | NPR 7150.2, ECSS-E-ST-40C |
| F´ unit tests and system test | 37 unit tests of the F´ components, and a 60-case system test against the demo's counts. Not run on flight hardware. See F´ components. | NPR 7150.2, ECSS-E-ST-40C |
Not started
| Activity | Status | Related standards |
|---|---|---|
| Software classification and criticality | Not started | NPR 7150.2, NASA-STD-8739.8, ECSS-Q-ST-80C |
| Requirements traceability | Not started | NPR 7150.2, ECSS-E-ST-40C |
| Independent verification and validation | Not started | NPR 7150.2, NASA-STD-8739.8, ECSS-E-ST-40C |
| Tool qualification (compiler, Kani, test tools) | Not started | NPR 7150.2, ECSS-Q-ST-80C |
| Rust toolchain qualification plan: TODO | Not started | NPR 7150.2, ECSS-Q-ST-80C |
| Coding standard compliance | Not started | NPR 7150.2, ECSS-Q-ST-80C |
| MC/DC structural coverage | Not started | NPR 7150.2, ECSS-E-ST-40C |
| Software development and assurance plans | Not started | NPR 7150.2, NASA-STD-8739.8, ECSS-E-ST-40C, ECSS-Q-ST-80C |
Status as of 11 Oct 2026, flight v0.2.0. The F´ components and the C interface have numbered requirements, each with a verification method, but no trace to mission or standard requirements.
Related
- Architecture status: what is built, layer by layer
- Shrinking quorum: what is proved and what is tested
Updated 11 Oct 2026 · Edit on GitHub · Questions? Get in touch