Scopeable capability groups
AutoBuild your programEmbedded software · integration blueprint
Build with Content & Map Update Manager.
Signed edge runtime, versioned IPC/C ABI, target adapters, content/configuration and diagnostic contracts. This page defines the public integration shape; exact endpoints, artifacts, signals, electronics, entitlement and release versions are program-specific.
Integration boundary
Start with authority, context and capability.
The runtime owns its bounded edge state; vehicle ECUs, BMS, hardware security and cloud control planes retain their declared authority.
Adjacent integration domains
Program-selectable forms
Evidence boundaries
Contract families
Interfaces a production program must own.
Names describe the contract boundary. Current Mappls documentation and the signed OEM interface schedule remain authoritative for exact methods and formats.
Runtime API
C/C++/Rust ABI or IPC with schema/version negotiation, rate, backpressure and failure state.
Platform adapter
Target OS, hardware, sensor, vehicle bus, network, storage, clock, watchdog and power integration.
Artifact lifecycle
Signed runtime, content and configuration manifests with compatibility, activation, health and rollback.
Diagnostics
Bounded health, counters, reset reason, versions and policy-controlled replay evidence.
Delivery journey
From scope to supported release.
Target
Freeze hardware/OS/compiler/resource/interface and vehicle/program compatibility envelope.
Simulate
Use deterministic adapters, golden inputs, replay and fault injection before vehicle access.
Integrate
Connect privileged platform sources through least-privilege adapters and negotiated IPC.
Qualify
Complete static, fuzz, timing/resource, SIL/HIL/vehicle, update/rollback and applicable process evidence.
Canonical state pattern
Carry the evidence with the value.
The example is illustrative and intentionally product-neutral. It demonstrates version, freshness, quality and correlation behavior that remains stable across Mappls Auto domains.
- ✓Map & Content Cloud/CDN
- ✓Navigation and eHorizon runtimes
- ✓Device identity, storage and lifecycle agent
- ✓OEM release, telemetry and support systems
consumer_contract.hpp
struct ObservedState {
uint64_t monotonic_time_ns;
Freshness freshness;
Quality quality;
Version source_version;
std::optional<Value> value;
};
// Consumers must handle unavailable, stale and invalid explicitly.
Result<ObservedState, RuntimeError> read_state();Use source-controlled contracts and generated clients for the selected release.
Capability mapping
Turn scope into traceable interfaces.
Each enabled module receives a requirement, owner, contract, test environment, operational measure and lifecycle decision.
Manifest & entitlement
Resolve vehicle/program/territory/layer/version rights.
Compatibility
Check runtime, platform, storage, dependency and model-year requirements.
Resumable delivery
Download full/delta packages with chunk integrity and network policy.
Staging & activation
Keep active content untouched until the new set is verified and complete.
Rollback
Return deterministically to a compatible last-known-good set.
Evidence
Report package lineage, progress, failure, adoption and active population.
Release evidence
Validate the failure path—not only the first success.
Production readiness is attached to the chosen platform, territory, data, vehicle, deployment and lifecycle.
- ✓ABI/schema and cross-platform conformance
- ✓Deterministic replay and golden truth sets
- ✓CPU, memory, storage, power and timing bounds
- ✓Sensor/bus/network/time/power fault injection
- ✓Secure boot, signed config/update and debug policy
- ✓Target HIL/vehicle and long-duration soak
OEM program workshop
Move Content & Map Update Manager from blueprint to integration plan.
Confirm the vehicle, users, territory, source systems, contracts, deployment, lifecycle and evidence. The result becomes a focused technical workshop.