Scopeable capability groups
AutoBuild your programEmbedded software · integration blueprint
Build with Device Lifecycle & OTA Agent.
Signed edge runtime, versioned IPC/C ABI, target adapters, content/configuration and diagnostic contracts. This page defines the public integration shape; exact endpoints, artifacts, signals, electronics, entitlement and release versions are program-specific.
Integration boundary
Start with authority, context and capability.
The runtime owns its bounded edge state; vehicle ECUs, BMS, hardware security and cloud control planes retain their declared authority.
Adjacent integration domains
Program-selectable forms
Evidence boundaries
Contract families
Interfaces a production program must own.
Names describe the contract boundary. Current Mappls documentation and the signed OEM interface schedule remain authoritative for exact methods and formats.
Runtime API
C/C++/Rust ABI or IPC with schema/version negotiation, rate, backpressure and failure state.
Platform adapter
Target OS, hardware, sensor, vehicle bus, network, storage, clock, watchdog and power integration.
Artifact lifecycle
Signed runtime, content and configuration manifests with compatibility, activation, health and rollback.
Diagnostics
Bounded health, counters, reset reason, versions and policy-controlled replay evidence.
Delivery journey
From scope to supported release.
Target
Freeze hardware/OS/compiler/resource/interface and vehicle/program compatibility envelope.
Simulate
Use deterministic adapters, golden inputs, replay and fault injection before vehicle access.
Integrate
Connect privileged platform sources through least-privilege adapters and negotiated IPC.
Qualify
Complete static, fuzz, timing/resource, SIL/HIL/vehicle, update/rollback and applicable process evidence.
Canonical state pattern
Carry the evidence with the value.
The example is illustrative and intentionally product-neutral. It demonstrates version, freshness, quality and correlation behavior that remains stable across Mappls Auto domains.
- ✓Secure boot/root of trust and platform update engine
- ✓Artifact/signing/provenance and campaign cloud
- ✓TCU, tracker, camera, IVI, cluster and rider devices
- ✓OEM CSMS/SUMS, support, manufacturing and warranty systems
consumer_contract.hpp
struct ObservedState {
uint64_t monotonic_time_ns;
Freshness freshness;
Quality quality;
Version source_version;
std::optional<Value> value;
};
// Consumers must handle unavailable, stale and invalid explicitly.
Result<ObservedState, RuntimeError> read_state();Use source-controlled contracts and generated clients for the selected release.
Capability mapping
Turn scope into traceable interfaces.
Each enabled module receives a requirement, owner, contract, test environment, operational measure and lifecycle decision.
Provisioning
Establish unique product/device identity and bind program/vehicle securely.
Inventory & health
Report hardware, boot, OS, firmware, app, content, config and trust state.
Campaigns
Target rings/cohorts with prerequisites, windows, telemetry gates, pause and rollback.
Recoverable update
Download, stage, activate, health-check, commit or restore last known good.
Diagnostics
Collect bounded evidence and broker authorized support sessions.
Service lifecycle
Replace, rebind, revoke, wipe and decommission with audit.
Release evidence
Validate the failure path—not only the first success.
Production readiness is attached to the chosen platform, territory, data, vehicle, deployment and lifecycle.
- ✓ABI/schema and cross-platform conformance
- ✓Deterministic replay and golden truth sets
- ✓CPU, memory, storage, power and timing bounds
- ✓Sensor/bus/network/time/power fault injection
- ✓Secure boot, signed config/update and debug policy
- ✓Target HIL/vehicle and long-duration soak
OEM program workshop
Move Device Lifecycle & OTA Agent from blueprint to integration plan.
Confirm the vehicle, users, territory, source systems, contracts, deployment, lifecycle and evidence. The result becomes a focused technical workshop.