Monitor-Centric Mission Definition With Sophrosyne

The operations of Cyber-Physical Systems - such as Unmanned Aircrafts - are drastically evolving. Worked up legislations are enabling new kinds of tasks in complex environments, inducing a change of policy in mission definition. Handling the consequent risks not only calls for verification of both the system and its mission, but it also requires to keep watch on the gap between the real world and the models that were used to get these guarantees. Furthermore, fallback missions ought to be specified to mitigate the occurence of undesired events.We introduce Sophrosyne, a Domain-Specific Language for CPS operation that integrates monitors and alternative behaviours definition as part of the specification of missions. A simple geofence-related case study showcases how Sophrosyne eases the management of tangled fallbacks.