Applies to: Safety-related parts of machinery control systems
ISO 13849 is the machinery world's analog to automotive's ISO 26262. It defines Performance Levels (PLa lowest through PLe highest) for safety functions in machinery control systems. Robotics teams typically derive PLd or PLe requirements for emergency-stop, protective-stop, and collaborative-operation safety functions.
Audit-readiness, not certified. Roboticks is not itself a certified verification tool. Conformity assessment is the manufacturer's responsibility (with notified-body involvement where required). We assemble the verification evidence your assessor reads.
Required PL is determined from severity of injury (S1/S2), frequency of exposure (F1/F2), and possibility of avoidance (P1/P2). Categories (B, 1, 2, 3, 4) define architectural patterns: single-channel, single-channel with testing, dual-channel without diagnostics, dual-channel with diagnostics.
Quantitative: MTTFd, DCavg, CCF score. Qualitative: V-model verification of the SRP/CS, fault analysis, validation testing. Roboticks helps with the validation testing side — linking pytest/launch_testing/gtest suites to the safety-function requirements derived from the PL determination.
PL determination, MTTFd computation, and the quantitative side typically live in a dedicated tool (SISTEMA from IFA is common). Roboticks complements: ingest the qualitative requirements as a Requirement document; @confirms on the integration tests that exercise the safety functions; matrix surfaces gaps by PL.
These are example requirements you could derive from ISO 13849 and link to verifying tests via the @confirms decorator. Not exhaustive and not a substitute for a domain-expert risk assessment.
ISO13849-EM-STOP-PLEEmergency stop must work under any single fault and the fault must be detected at the next demand. Verifiable via fault-injection tests on the safety bus, dual-channel implementation, and end-to-end response-time tests.
ISO13849-PROT-STOP-PLDProtective stop must work under any single fault; fault detection at next demand or by automatic test. Verifiable via fault-injection on each channel; assert the stop occurs even with the simulated single fault.
Ingest ISO 13849 as a ReqIF export from your requirements tool, or as a PDF for the LLM extractor. Link tests via @confirms. Watch the matrix turn green as PRs land.