Robot and software
RecordTurtleBot3 model, hardware revision, OpenCR and SBC firmware, ROS 2 distribution, package commits, sensor serials and battery condition.
Reject whenDo not test a mixed or undocumented ROS/hardware configuration.
Level-six engineering validation protocol · 03
A sixth-level acceptance route that connects an exact TurtleBot3 build, ROS 2 environment, map, transforms and recovery behaviour to one declared indoor operating zone.
Protocol scope
For supervised TurtleBot3 navigation in one mapped indoor test zone with controlled lighting, floor, obstacles and access. It evaluates a declared configuration and route set; it excludes stairs, roads, lifts, crowds and unsupervised service.
Configuration baseline
TurtleBot3 model, hardware revision, OpenCR and SBC firmware, ROS 2 distribution, package commits, sensor serials and battery condition.
Reject whenDo not test a mixed or undocumented ROS/hardware configuration.
Map hash and date, map/odom/base transforms, footprint, sensor frames, inflation parameters and declared keep-out zones.
Reject whenReject stale, distorted or frame-inconsistent maps.
Operating hours, floor condition, doorway widths, dynamic-obstacle policy, supervisor position, stop control and route list.
Reject whenNo run when the site differs materially from the declared contract.
Staged verification
With wheels raised or motion disabled, verify power, diagnostics, topic rates, timestamps, transforms, sensor orientation and command timeout.
Launch manifest, diagnostics snapshot, topic/TF record and software baseline.
Required data are fresh, correctly framed and stable for the declared observation period.
Stale sensors, TF discontinuity, clock mismatch, undervoltage or command persisting beyond timeout.
In a clear zone, teleoperate straight, reverse and rotate at capped speed; test stop, communications loss and obstacle clearance.
Command/odometry trace, stopping distance, clearance photos, event and intervention log.
Direction, footprint, odometry and stop response match the declared configuration.
Unexpected direction, wheel slip outside assumptions, collision, delayed stop or unstable power.
Localise from multiple declared start poses and compare pose stability, scan alignment and recovery after a bounded perturbation.
Map hash, start-pose matrix, localisation traces, screenshots and failed initialisations.
Localisation stays within the predeclared tolerance for every accepted start zone.
Pose jumps, persistent scan mismatch, unbounded recovery or ambiguous floor geometry.
Run each declared route in both directions across representative static and supervised dynamic-obstacle cases; include blocked-path and no-path trials.
Route matrix, planner/controller configuration, success definition, recovery sequence, near misses and interventions.
Acceptance thresholds are met without changing criteria after observing results.
Contact, entry into keep-out space, repeated oscillation, unsafe recovery or sensor-source timeout.
Repeat a smaller golden route set after restart, battery change and representative environmental variation; record a release or rejection decision.
Golden-route results, environment record, battery data, regressions, release signature and retest triggers.
Release only this configuration, map, route set and supervised site contract.
Any material change to map, footprint, sensor, firmware, site layout or operating mode triggers reassessment.
Acceptance claims
A predeclared route matrix records attempts, success, time, interventions, near misses and failure categories.
Claim boundaryResults apply only to the declared site and configuration.
Blocked path, localisation loss, sensor timeout, communication loss and stop input lead to documented bounded outcomes.
Claim boundaryCollision-monitoring software does not replace an independently designed safety system.
Robot, software, map, parameters, site contract and golden routes are versioned as one release record.
Claim boundaryA change outside the record invalidates the acceptance claim until retested.
Evidence pack & boundaries
FUURAA analysis
A mobile robot is not accepted because it reaches one goal. It is accepted only when configuration, map, site, route distribution, interventions and failures form one reviewable contract—and when any material change clearly triggers reassessment.
Primary sources