Guideline summary

Follow these guidelines:

Specification: Specify the operational scenarios (operator's perspective) and situations (machine's perspective)
Validation: Make sure that the underlying modes and states are compatible
Operator's activity: Define the means (controls) for mode setting
Machine's activity: Define the means (sensors and algorithms) for state recognition
Verification: Define the way the modes comply with the corresponding states
Notification: Define the way the alarm Unit notifies the operators about mode-state mismatch.