Defending Event-Triggered Systems against Out-of-Envelope Environments
Abstract
The design of real-time systems is based on assumptions about environmental conditions in which they will operate. We call this their safe operational envelope. Violation of these assumptions, i.e., out-of-envelope environments, can jeopardize timeliness and safety of real-time systems, e.g., by overwhelming them with interrupt storms. A long-lasting debate has been going on over which design paradigm, the time- or event-triggered, is more robust against such behavior. In this work, we investigate the claim that time-triggered systems are immune against out-of-envelope behavior and how event-triggered systems can be constructed to defend against being overwhelmed by interrupt showers. We introduce importance (independently of priority and criticality) as a means to express which tasks should still be scheduled in case environmental design assumptions cease to hold, draw parallels to mixed-criticality scheduling, and demonstrate how event-triggered systems can defend against out-of-envelope behavior.
Keywords
Cite
@article{arxiv.2512.06331,
title = {Defending Event-Triggered Systems against Out-of-Envelope Environments},
author = {Marcus Völp and Mohammad Ibrahim Alkoudsi and Azin Bayrami Asl and Kristin Krüger and Julio Rodrigues Mendonca da Neto and Gerhard Fohler},
journal= {arXiv preprint arXiv:2512.06331},
year = {2025}
}
Comments
Published at the RTAutoSec Workshop, which was co-located to ECRTS 2025