Enum DesignAssuranceLevel 

pub enum DesignAssuranceLevel {
    A,
    B,
    C,
    D,
    E,
}

Design Assurance Level per DO-178C.

Runtime vs Compile-Time

Three enforcement layers operate simultaneously:

1. Compile-time (conditional compilation): The dal feature gate controls whether apply_safety_overrides applies hard limits at all. Without the feature, overrides are a passthrough — no safety constraints are enforced in PID computation. This is the coarse control.

2. Runtime (this enum): EscalationPolicy.dal gates the output-side escalation decisions (decide_from_detection, decide_with_pressure) regardless of the compile-time feature. Setting DAL E means “proceed always” even if dal feature is active. This is the fine control.

3. Static check (design review): DAL A/B paths are traceable in the MC/DC matrix. Every path from detection to decision must have independent condition coverage. See invariants.toml §4.

The runtime DAL gates decisions AFTER PID computation. The compile-time feature gates safety overrides DURING PID computation. Both must pass for a Halt decision to reach the actuator.

Variants

A

Catastrophic — halt failure → system compromise.

B

Hazardous — missed escalation → degraded safety.

C

Major — false warn → user burden.

D

Minor — informational only.

E

No effect — proceed path.

Trait Implementations

impl Clone for DesignAssuranceLevel

fn clone(&self) -> DesignAssuranceLevel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for DesignAssuranceLevel

impl Debug for DesignAssuranceLevel

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for DesignAssuranceLevel

impl PartialEq for DesignAssuranceLevel

fn eq(&self, other: &DesignAssuranceLevel) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for DesignAssuranceLevel