Formal Modeling and Analysis of a Planetary Rover Under Abnormal Scenarios with Quint
摘要
We present a partial formal analysis of the ABZ 2026 planetary rover case study, focusing on abnormal scenarios and failure-handling behavior. From a space-systems engineering perspective, we first identified representative abnormal scenarios through what-if analysis and then formalized the relevant interactions among goal reasoning, planning, map validation, communication, and recovery-related components in Quint as a shared-state transition system. We analyzed this model through simulation and bounded verification, which revealed several specification issues and ambiguities, including a gap in the interruption semantics of safe-location instructions and underspecified decision criteria in failure handling. We also explored a focused Event-B model of the FailureMode component as a complementary analysis. The study shows how lightweight formal modeling can help domain engineers clarify abnormal behavior in an autonomous space-system specification.