Justified sequences in string diagrams: A comparison between two approaches to concurrent game semantics

We compare two approaches to concurrent game semantics, one by Tsukada and Ong for a simply-typed λ-calculus and the other by the authors and collaborators for CCS and the π-calculus. The two approaches are obviously related, as they both define strategies as sheaves for the Grothendieck topology induced by embedding ‘views’ into ‘plays’. However, despite this superficial similarity, the notions of views and plays differ significantly: the former is based on standard justified sequences, the latter uses string diagrams. In this paper, we relate both approaches at the level of plays. Specifically, we design a notion of play (resp. view) for the simply-typed λ-calculus, based on string diagrams as in our previous work, into which we fully embed Tsukada and Ong's plays (resp. views). We further provide a categorical explanation of why both notions yield essentially the same model, thus demonstrating that the difference is a matter of presentation. In passing, we introduce an abstract framework for producing sheaf models based on string diagrams, which unifies our present and previous models

Justified Sequences in String Diagrams: a Comparison Between Two Approaches to Concurrent Game Semantics

Recent developments of game semantics have given rise to new models of concurrent languages. On the one hand, an approach based on string diagrams has given models of CCS and the pi-calculus, and on the other hand, Tsukada and Ong have designed a games model for a non-deterministic lambda-calculus. There is an obvious, shallow relationship between the two approaches, as they both define innocent strategies as sheaves for a Grothendieck topology embedding "views" into "plays". However, the notions of views and plays differ greatly between the approaches: Tsukada and Ong use notions from standard game semantics, while the authors of this paper use string diagrams. We here aim to bridge this gap by showing that even though the notions of plays, views, and innocent strategies differ, it is mostly a matter of presentation

An intensionally fully-abstract sheaf model for π (expanded version)

International audienceFollowing previous work on CCS, we propose a compositional model for the π-calculus in which processes are interpreted as sheaves on certain simple sites. Such sheaves are a concurrent form of innocent strategies, in the sense of Hyland-Ong/Nickau game semantics. We define an analogue of fair testing equivalence in the model and show that our interpretation is intensionally fully abstract for it. That is, the interpretation preserves and reflects fair testing equivalence; and furthermore, any innocent strategy is fair testing equivalent to the interpretation of some process. The central part of our work is the construction of our sites, relying on a combinatorial presentation of π-calculus traces in the spirit of string diagrams

Formal Verification of Safety Architectures for Automated Driving

Safety architectures play a crucial role in the safety assurance of automated driving vehicles (ADVs). They can be used as safety envelopes of black-box ADV controllers, and for graceful degradation from one ODD to another. Building on our previous work on the formalization of responsibility-sensitive safety (RSS), we introduce a novel program logic that accommodates assume-guarantee reasoning and fallback-like constructs. This allows us to formally define and prove the safety of existing and novel safety architectures. We apply the logic to a pull over scenario and experimentally evaluate the resulting safety architecture.Comment: In proceedings of 2023 IEEE Intelligent Vehicles Symposium (IV), 8 pages, 5 figure

Compositional Probabilistic Model Checking with String Diagrams of MDPs

We present a compositional model checking algorithm for Markov decision processes, in which they are composed in the categorical graphical language of string diagrams. The algorithm computes optimal expected rewards. Our theoretical development of the algorithm is supported by category theory, while what we call decomposition equalities for expected rewards act as a key enabler. Experimental evaluation demonstrates its performance advantages.Comment: 32 pages, Extended version of a paper in CAV 202

Formal Verification of Intersection Safety for Automated Driving

We build on our recent work on formalization of responsibility-sensitive safety (RSS) and present the first formal framework that enables mathematical proofs of the safety of control strategies in intersection scenarios. Intersection scenarios are challenging due to the complex interaction between vehicles; to cope with it, we extend the program logic dFHL in the previous work and introduce a novel formalism of hybrid control flow graphs on which our algorithm can automatically discover an RSS condition that ensures safety. An RSS condition thus discovered is experimentally evaluated; we observe that it is safe (as our safety proof says) and is not overly conservative.Comment: To appear in ITSC 2023. With appendices. 9 pages, 5 figures, 1 tabl