Étendue et limites de l’obligation de reclassement à l’égard des personnes présentant une inaptitude en France

Certains contentieux existent à propos de l’extension donnée par les juges à cette obligation dont les contours mériteraient d’être davantage précisés, clarifiés, sécurisés, sous peine de ne pas atteindre l’objectif initial, à savoir éviter le licenciement des salariés inaptes. Cela justifie d’effectuer tout d’abord un tour d’horizon de la jurisprudence actuelle construite autour des principes juridiques du Code du travail, notamment concernant le point de départ de cette obligation, le rôle central joué par le médecin du travail, son périmètre ainsi que la charge de la preuve et les sanctions en cas de son non-respect. Ceci afin de mieux comprendre en quoi les exigences actuelles en matière de reclassement gagneraient à plus d’objectivité et de pragmatisme.The obligation to reclassify medically disabled workers is a legal obligation in France. It is however not unlimited. Numerous lawsuits exist regarding the increased importance given by judges for to this obligation whose framework deserves to be better defined, clarified, and established. Otherwise, the initial aim, namely to avoid the unemployment of disabled workers, may not be achieved. First, the actual jurisprudence built on the legal principles of the French labour code must be surveyed, particularly regarding the starting point, the central role played by the occupational health physician, the boundaries of this obligation, as well as the burden of proof and the penalties in case of noncompliance. These need to be considered in order to better understand where the current reclassification requirements would gain more objectivity and more pragmatism.La obligación de reclasificar a los trabajadores médicamente incapacitados es una obligación legal en Francia ; sin embargo no es ilimitada. Los jueces han ampliado esta obligación a través de un conjunto de fallos jurídicos. Así, su contorno merece ser más definido, clarificado y asegurado porque de otra forma, el objetivo inicial, que es evitar el despido de los trabajadores incapacitados, podría no lograrse. Primero debe realizarse una revisión de la jurisprudencia actual construida en torno a los principios jurídicos del Código del trabajo ; especialmente en lo que respecta al punto inicial de esta obligación : el rol central que juega el médico del trabajo, su perímetro, así como el cargo de la prueba y las sanciones en caso de no respetarlos, necesitan ser considerados para entender de que forma las exigencias actuales, ganarían más objetividad y pragmatismo

Verifying Weakly-Hard Real-Time Properties of Traffic Streams in Switched Networks

In this paper, we introduce the first verification method which is able to provide weakly-hard real-time guarantees for tasks and task chains in systems with multiple resources under partitioned scheduling with fixed priorities. Existing weakly-hard real-time verification techniques are restricted today to systems with a single resource. A weakly-hard real-time guarantee specifies an upper bound on the maximum number m of deadline misses of a task in a sequence of k consecutive executions. Such a guarantee is useful if a task can experience a bounded number of deadline misses without impacting the system mission. We present our verification method in the context of switched networks with traffic streams between nodes, and demonstrate its practical applicability in an automotive case study

CertiCAN: Certifying CAN Analyses and Their Results

We present CertiCAN, a tool produced using the Coq proof assistant for the formalcertification of CAN analysis results. Result certification is a process that is lightweight and flexiblecompared to tool certification. Indeed, the certification of an industrial analyzer needs access tothe source code, requires the proof of many optimizations or implementation tricks and new proofeffort at each software update. In contrast, CertiCAN only relies on the result provided by sucha tool and remains independent of the tool itself or its updates. Furthermore, it is usually moretime efficient to check a result than to produce it. All these reasons make CertiCAN a practicalchoice for industrial purposes.CertiCAN is based on the certification and combined use of two well-known CAN analysis tech-niques completed with additional optimizations. Experiments demonstrate that CertiCAN is com-putationally efficient and faster than the underlying combined analysis. It is able to certify theresults of RTaW-Pegase, an industrial CAN analysis tool, even for large systems. This result pavesthe way for a broader acceptance of formal tools for the certification of real-time systems analysisresults.Nous présentons CertiCAN, un outil produit à l’aide de l’assistant de preuvesCoq et permettant de certifier les résultats d’analyses de bus CAN. La certification de résultatsd’analyses est un procédé moins coûteux et plus flexible que la certification des analyses elles-mêmes. En effet, la certification d’un analyseur industriel demande l’accès au code source, lapreuve d’un code souvent complexe avec de nombreuses optimisations ou astuces de mise enœuvre sans compter le besoin de nouvelles preuves à chaque mise à jour. CertiCAN, de son côté,n’a besoin que du résultat de l’analyse ; il reste indépendant de l’analyseur, de son implantationet de ses mises à jour. De plus, il est toujours plus efficace de vérifier un résultat que de leproduire. Ces caractéristiques font de CertiCAN un choix pragmatique pour une utilisationindustrielle.CertiCAN est basé sur la certification et l’utilisation combinée de deux techniques classiquesd’analyse complétée par une collection d’optimisations. Les expérimentations montrent que Cer-tiCAN est efficace et plus rapide que les analyses sous-jacentes. Il est capable de certifier lesrésultats de RTaW-Pegase, un analyseur industriel de bus CAN, et ce même pour des systèmescomplexes. Ce résultat ouvre la voie à une utilisation plus large d’outils formels pour la certifi-cation des résultats d’analyse de systèmes temps-réels

Avant-propos

D’un côté comme de l’autre de l’Atlantique, le maintien en emploi des travailleurs handicapés ou porteurs d’une incapacité fonctionnelle constitue un problème majeur dont il convient de se préoccuper. Malgré l’objectif commun aux deux pays de lutter contre la perte d’emploi de ces personnes, les voies retenues pour y parvenir divergent selon les systèmes juridiques en cause : obligation de reclassement du côté de la France, obligation d’accommodement du côté du Québec. La confrontation des so..

Avant-propos

D’un côté comme de l’autre de l’Atlantique, le maintien en emploi des travailleurs handicapés ou porteurs d’une incapacité fonctionnelle constitue un problème majeur dont il convient de se préoccuper. Malgré l’objectif commun aux deux pays de lutter contre la perte d’emploi de ces personnes, les voies retenues pour y parvenir divergent selon les systèmes juridiques en cause : obligation de reclassement du côté de la France, obligation d’accommodement du côté du Québec. La confrontation des so..

Exploiting Execution Dynamics in Timing Analysis Using Job Sequences

International audienceWorst case design as needed for critical systems usually resorts to established methods for worst case response time analysis which rely on the worst case execution time of tasks and the minimum temporal distance between task activations. The result is often very pessimistic when compared to the real worst case load. Many feasible designs are therefore rejected under such analyses. Using worst case models based on job sequences rather than single jobs leads to less pessimistic results and makes worst case design more practical. This paper outlines existing modeling and analysis techniques which are based on job sequences and refers to several examples from automotive design where great benefits were demonstrated

Budgeting Under-Specified Tasks for Weakly-Hard Real-Time Systems

In this paper, we present an extension of slack analysis for budgeting in the design of weakly-hard real-time systems. During design, it often happens that some parts of a task set are fully specified while other parameters, e.g. regarding recovery or monitoring tasks, will be available only much later. In such cases, slack analysis can help anticipate how these missing parameters can influence the behavior of the whole system so that a resource budget can be allocated to them. It is, however, sufficient in many application contexts to budget these tasks in order to preserve weakly-hard rather than hard guarantees. We thus present an extension of slack analysis for deriving task budgets for systems with hard and weakly-hard requirements. This work is motivated by and validated on a realistic case study inspired by industrial practice

A Generic Coq Proof of Typical Worst-Case Analysis

International audienceThis paper presents a generic proof of Typical Worst-Case Analysis (TWCA), an analysis technique for weakly-hard real-time uniprocessor systems. TWCA was originally introduced for systems with fixed priority preemptive (FPP) schedulers and has since been extended to fixed-priority nonpreemptive (FPNP) and earliest-deadline-first (EDF) schedulers. Our generic analysis is based on an abstract model that characterizes the exact properties needed to make TWCA applicable to any system model. Our results are formalized and checked using the Coq proof assistant along with the Prosa schedulability analysis library. Our experience with formalizing real-time systems analyses shows that this is not only a way to increase confidence in our claimed results: The discipline required to obtain machine checked proofs helps understanding the exact assumptions required by a given analysis, its key intermediate steps and how this analysis can be generalized

Work In Progress: Toward a Coq-certified Tool for the Schedulability Analysis of Tasks with Offsets

International audienceThis paper presents the first steps toward a formally proven tool for schedulability analysis of tasks with offsets. We formalize and verify the seminal response time analysis of Tindell by extending the Prosa proof library, which is based on the Coq proof assistant. Thanks to Coq’s extraction capabilities, this will allow us to easily obtain a certified analyzer. Additionally, we want to build a Coq certifier that can verify the correctness of results obtained using related (but uncertified), already existing analyzers. Our objective is to investigate the advantages and drawbacks of both approaches, namely the certified analysis and the certifier. The work described in this paper as well as its continuation is intended to enrich the Prosa library

Quantifying the Flexibility of Real-Time Systems

International audienceIn this paper we define the flexibility of a system as its capability to schedule a new task. We present an approach to quantify the flexibility of a system. More importantly, we show that it is possible under certain conditions to identify the task that will directly induce the limitations on a possible software update. If performed at design time, such a result can be used to adjust the system design by giving more slack to the limiting task. We illustrate how these results apply to a simple system