CONVINCE Toolchain Overview

Welcome to the CONVINCE toolchain documentation. The goal of the CONVINCE project is to provide an open source toolchain to improve robust robot deliberation with the help of planning, learning, and model checking techniques.

This is the entry-point for the CONVINCE toolchain documentation. It provides an overview of all the individual components which are part of the large toolchain. Those components can be used standalone and also linked together as required for individual use cases.

CONVINCE Toolchain Overview

The CONVINCE toolchain works as depicted above. The individual repos and documentations are linked from there.

In the following the CONVINCE toolchain components are briefly described. For more details please check out the individual repositories with their documentation and tutorial pages.

sit-aw

convince-project/sit-aw

SIT-AW is a software pipeline for robot situation awareness. It enables known and unknown anomaly detection, identification and resolution.

By the end of CONVINCE the pipeline will be made up of different software modules implementing approaches based on symbolic AI and deep learning. During robotic system operations, these modules will handle the detection and classification of unexpected situations (anomalies). Symbolic approaches rely on a knowledge base constituted by an ontology and its rules. Deep learning approaches rely on data collection, feature extraction and data fusion to be able to identify an anomaly as being known or unknown. The pipeline takes monitor alarms and sensory-data as inputs. Whenever an anomaly is classified as unknown, SIT-AW interacts with ACTIVE-PLAN to try to come up with an appropriate mitigation plan. This mitigation plan will be used in SIT-L for learning new situations models.

For a list of available software modules in the current release of the SIT-AW pipeline refer to its README file.

sit-l

SIT-L is a software module that implements techniques for the acquisition (learning) of new episodic and semantic memory from encountered unexpected situations that were not foreseen at design time (unknown anomalies). It closes the loop of robot situation awareness and increased robot autonomy. SIT-L is under development and will be release at a later stage of CONVINCE.

SIT-L represents the extraction of the new anomaly description, given the preprocessed sensory-data, monitor outputs, ontologies and from the found solution to resolve the anomaly, i.e., the output of ACTIVE-PLAN/SIMULATE-PLAN. A new pair (anomaly description, mitigation strategy) is then added to the current knowledge base, which implies learning a new situation. Indeed, if the system encounters this situation again, it will be able to identify the anomaly as known and resolve it.

coverage-plan

convince-project/coverage-plan

COVERAGE-PLAN is an online tool for lifelong area coverage in dynamic and uncertain environments.

The current release of COVERAGE-PLAN operates on discrete grid environments. COVERAGE-PLAN has two components: an online coverage planner, and a learned model of stochastic occupancy dynamics. The dynamics model captures the probability that a grid cell becomes occupied or free in the next timestep. This model is learned over the robot’s lifespan, where the model is updated after each coverage run using the robot’s latest observations. The online coverage planner uses the learned model to build and solve a partially observable Markov decision process (POMDP) for area coverage. The state-of-the-art DESPOT algorithm is used to solve POMDPs. Before deployment, the user must specify the map dimensions, the robot’s starting position, the robot’s field of view, and the time bound on coverage.

COVERAGE-PLAN can be found here and its documentation can be found here. The documentation contains a tutorial demonstrating the coverage planner.

refine-plan

convince-project/refine-plan

REFINE-PLAN is an offline tool for refining hand-designed behaviour trees (BTs) to attain robustness under uncertainty, improving performance.

Behaviour trees are input/output in the XML format defined in BehaviorTree.cpp v3.8. REFINE-PLAN extracts a state space from the hand-designed BT, and learns probabilistic options in simulation which describe the execution of each action node. This simulation is provided by the user. State space extraction and option learning are not implemented in the current release. Given the option set and extracted state space, REFINE-PLAN constructs a semi-MDP and solves it using Storm/Stormpy to synthesise a policy. This policy is then converted back to a BT using existing methods.

REFINE-PLAN can be found here and its documentation can be found here. The documentation contains a tutorial demonstrating the current functionality.

active-plan and simulate-plan

ACTIVE-PLAN and SIMULATE-PLAN are tools used for handling unknown anomalies. These tools are currently being developed. The input here is an anomalous state where the robot failed to perform an action, and the output is an anomaly-free state where the robot is now able to perform the action. Anomalies are detected using SIT-AW. Explainable AI planning is used to generate explanations about our systems, and these explanations will guide the robot to understand what went wrong and which actions need to be applied to reach an anomaly-free state. Failure Mode and Effects Analysis is used to store the unknown anomalies we have encountered, once we have recovered. This is fed into a Bayesian Network to calculate the Conditional Probability Tables using PyAgrum to infer which solution SIMULATE-PLAN can use to resolve the anomalies.

scan

convince-project/scan

SCAN (StatistiCal ANalyzer) is a statistical model checker developed to verify large concurrent systems for which standard verification techniques do not scale. The input model of SCAN is a combination of Behavior Trees (BTs) described using behaviortree.cpp XML format, and state machines (FSMs) described using SCXML (State Chart XML) format; properties are described using an XML syntax for MTL (Metric Temporal Logic) interpreted over discrete time traces. SCAN translates the combination of BTs and FSMs into a Channel System (CS) whose executions are sampled in order to find violations of the specified properties or establish that such properties are verified with some probability and within some confidence interval. The probability values and the size of the confidence intervals depend on the amount of time given to SCAN to verify the system: allowing more verification time will correspond to smaller confidence intervals. Also, if the model is probabilistic, then the final result of SCAN will depend on the probabilistic parameters of the model. In other words, if the model is just non-deterministic, the probability of satisfaction and corresponding confidence interval attached to a specific property by SCAN will only depend on the computation time allowed, whereas if probabilities are attached to transitions in the model, this will also influence the final result emitted by SCAN.

moon

convince-project/moon

MOON (MOnitoring ONline) is a runtime monitor developed for CONVINCE on top of the ROSMonitoring tool. MOON accepts the same description of SCAN and provides monitor generation for properties and models. Currently, only monitor generation for properties is implemented on top of ROSMonitoring, working for ROS2 topics and services. In perspective, the tool will include also monitoring for models, i.e., the capability of ensuring that the concrete execution of some elements of the control architecture or the environment correspond to the abstract model utilized at design-time for SCAN. MOON will notify violations of properties and models so that other tools can be invoked to amend plans or models and adapt the control architecture to new and unforeseen situations.

as2fm

convince-project/as2fm

This is a toolbox for converting all specifications of components of a robotic system under investigation into a format which can be given as input to model checkers for verifying the robustness of the system functionalities. The resulting format used for model checking is JANI.

The toolbox consist of a script to convert models describing the system and its environment together, given in the CONVINCE robotics JANI flavor as specified in the data model repository, into plain JANI accepted as input by model checkers. The second part of the toolbox centers around system specifications given in (SC)XML and how to convert them into a plain JANI file for model checking. This comprises property specification in temporal logic, currently given in JANI, a behavior tree in XML, ROS nodes and their plugins in SCXML, and an environment specification in SCXML.

model2code

convince-project/model2code

This is a tool to generate skill level code starting from an SCXML model. Starting from an SCXML model, XML file that describes the full model of the program, which includes the behavior tree, the skills and the components used in the system, and an XML file that describes the interfaces used between behavior tree and skills, and between skills and components, the program generates an header file and a source file that contains the code of the skill level. The skills generated are based on a behavior tree structure and will have a ROS2 tick service in case they are a condition a ROS2 tick and halt services in case they are an action.

smc-storm

convince-project/smc_storm

This is a statistical model checking engine for DTMC models given in JANI, which has been implemented as an extension to the famous Storm model checker. The tool and its documentation can be found in this repository.