Library prosa.analysis.abstract.restricted_supply.bounded_bi.edf
Require Export prosa.model.priority.edf.
Require Export prosa.model.task.absolute_deadline.
Require Export prosa.model.task.preemption.parameters.
Require Export prosa.analysis.definitions.request_bound_function.
Require Export prosa.analysis.abstract.restricted_supply.abstract_rta.
Require Export prosa.analysis.abstract.restricted_supply.bounded_bi.aux.
Require Export prosa.analysis.definitions.sbf.busy.
Require Export prosa.model.task.absolute_deadline.
Require Export prosa.model.task.preemption.parameters.
Require Export prosa.analysis.definitions.request_bound_function.
Require Export prosa.analysis.abstract.restricted_supply.abstract_rta.
Require Export prosa.analysis.abstract.restricted_supply.bounded_bi.aux.
Require Export prosa.analysis.definitions.sbf.busy.
Sufficient Condition for Bounded Busy Intervals for RS EDF
Consider any type of tasks ...
... and any type of jobs associated with these tasks.
Context {Job : JobType}.
Context `{JobTask Job Task}.
Context `{JobArrival Job}.
Context `{JobCost Job}.
Context `{JobTask Job Task}.
Context `{JobArrival Job}.
Context `{JobCost Job}.
For brevity, let's denote the relative deadline of a task as D.
Consider any kind of fully supply-consuming unit-supply
uniprocessor model.
Context `{PState : ProcessorState Job}.
Hypothesis H_uniprocessor_proc_model : uniprocessor_model PState.
Hypothesis H_unit_supply_proc_model : unit_supply_proc_model PState.
Hypothesis H_consumed_supply_proc_model : fully_consuming_proc_model PState.
Hypothesis H_uniprocessor_proc_model : uniprocessor_model PState.
Hypothesis H_unit_supply_proc_model : unit_supply_proc_model PState.
Hypothesis H_consumed_supply_proc_model : fully_consuming_proc_model PState.
Consider any valid arrival sequence.
Variable arr_seq : arrival_sequence Job.
Hypothesis H_valid_arrival_sequence : valid_arrival_sequence arr_seq.
Hypothesis H_valid_arrival_sequence : valid_arrival_sequence arr_seq.
Next, consider a schedule of this arrival sequence, ...
... allow for any work-bearing notion of job readiness, ...
... and assume that the schedule is valid.
Assume that jobs have bounded non-preemptive segments.
Context `{JobPreemptable Job}.
Context `{TaskMaxNonpreemptiveSegment Task}.
Hypothesis H_valid_preemption_model : valid_preemption_model arr_seq sched.
Hypothesis H_valid_model_with_bounded_nonpreemptive_segments :
valid_model_with_bounded_nonpreemptive_segments arr_seq sched.
Context `{TaskMaxNonpreemptiveSegment Task}.
Hypothesis H_valid_preemption_model : valid_preemption_model arr_seq sched.
Hypothesis H_valid_model_with_bounded_nonpreemptive_segments :
valid_model_with_bounded_nonpreemptive_segments arr_seq sched.
Furthermore, assume that the schedule respects the scheduling policy.
Recall that busy_intervals_are_bounded_by is an abstract
notion. Hence, we need to introduce interference and interfering
workload. We will use the restricted-supply instantiations.
We say that job j incurs interference at time t iff it
cannot execute due to (1) the lack of supply at time t, (2)
service inversion (i.e., a lower-priority job receiving service
at t), or a higher-or-equal-priority job receiving service.
The interfering workload, in turn, is defined as the sum of the
blackout predicate, service inversion predicate, and the
interfering workload of jobs with higher or equal priority.
#[local] Instance rs_jlfp_interfering_workload : InterferingWorkload Job :=
rs_jlfp_interfering_workload arr_seq sched.
rs_jlfp_interfering_workload arr_seq sched.
Assume that the schedule is work-conserving in the abstract sense.
Consider an arbitrary task set ts, ...
... assume that all jobs come from the task set, ...
... and that the cost of a job does not exceed its task's WCET.
Let max_arrivals be a family of valid arrival curves.
Context `{MaxArrivals Task}.
Hypothesis H_valid_arrival_curve : valid_taskset_arrival_curve ts max_arrivals.
Hypothesis H_is_arrival_curve : taskset_respects_max_arrivals arr_seq ts.
Hypothesis H_valid_arrival_curve : valid_taskset_arrival_curve ts max_arrivals.
Hypothesis H_is_arrival_curve : taskset_respects_max_arrivals arr_seq ts.
Consider a unit SBF valid in busy intervals (w.r.t. task
tsk). That is, (1) SBF 0 = 0, (2) for any duration Δ, the
supply produced during a busy-interval prefix of length Δ is
at least SBF Δ, and (3) SBF makes steps of at most one.
Context {SBF : SupplyBoundFunction}.
Hypothesis H_valid_SBF : valid_busy_sbf arr_seq sched tsk SBF.
Hypothesis H_unit_SBF : unit_supply_bound_function SBF.
Hypothesis H_valid_SBF : valid_busy_sbf arr_seq sched tsk SBF.
Hypothesis H_unit_SBF : unit_supply_bound_function SBF.
The proof of busy-interval boundedness proceeds by case analysis on
whether the cumulative service inversion of j is positive or zero. The
zero case is handled by the standard total_rbf L fixpoint argument. The
positive case, however, requires a different approach: we introduce an
auxiliary function longest_busy_interval_with_pi δ and establish here
that it is a valid upper bound on the cumulative interference in any
interval of length δ with positive service inversion.
Variable j : Job.
Hypothesis H_j_arrives : arrives_in arr_seq j.
Hypothesis H_job_of_tsk : job_of_task tsk j.
Hypothesis H_job_cost_positive : job_cost_positive j.
Hypothesis H_j_arrives : arrives_in arr_seq j.
Hypothesis H_job_of_tsk : job_of_task tsk j.
Hypothesis H_job_cost_positive : job_cost_positive j.
Let
[t1, t2) be a busy-interval prefix.
Consider an interval
[t1, t1 + Δ) ⊆ [t1, t2).
Assume that cumulative service inversion of job j in this
interval is positive.
Hypothesis H_positive_service_inversion :
cumulative_service_inversion arr_seq sched j t1 (t1 + Δ) > 0.
cumulative_service_inversion arr_seq sched j t1 (t1 + Δ) > 0.
Under the above assumptions, we define a function δ ↦
longest_busy_interval_with_pi δ as an upper bound on the cumulative
interference incurred by j in an interval
[t1, t1 + δ).
Let lp_interference tsk_lp denote the maximum service inversion
caused by a task tsk_lp.
Let hp_interference tsk_lp denote the total RBF workload of
tasks with a strictly shorter deadline than tsk_lp.
The interference on j comes from jobs jo with hep_job jo j,
i.e., job_deadline jo ≤ job_deadline j. Since the outer
condition requires D tsk_lp > D tsk (strict), we have
job_deadline j < job_deadline jlp. Therefore:
job_deadline jo ≤ job_deadline j < job_deadline jlp
No (HEP) job with job_deadline = D tsk_lp ever interferes with
j, so D tsk_hp < D tsk_lp captures precisely the right set of
tasks:
D tsk_hp ≤ D tsk < D tsk_lp
| | |
0 ─────────●──────────────●─────────────●──────→ deadline
│<──── hp_interference ─────>│
(D tsk_hp < D tsk_lp)
let hp_interference tsk_lp :=
\sum_(tsk_hp <- ts | D tsk_hp < D tsk_lp)
task_request_bound_function tsk_hp δ in
\sum_(tsk_hp <- ts | D tsk_hp < D tsk_lp)
task_request_bound_function tsk_hp δ in
Then, the amount of interfering workload incurred by a job of task
tsk is bounded by the maximum of lp_interference tsk_lp +
hp_interference tsk_lp, where tsk_lp is such that D tsk_lp > D
tsk.
\max_(tsk_lp <- ts | (D tsk_lp > D tsk) && (0 < max_arrivals tsk_lp ε))
(lp_interference tsk_lp + hp_interference tsk_lp).
(lp_interference tsk_lp + hp_interference tsk_lp).
We show that the cumulative service inversion, together with the interfering
workload and the cost of j itself in the interval
[t1, t1 + δ), does
not exceed longest_busy_interval_with_pi δ.
Lemma longest_bi_with_pi_bound_is_valid :
cumulative_service_inversion arr_seq sched j t1 (t1 + Δ)
+ (cumulative_other_hep_jobs_interfering_workload arr_seq j t1 (t1 + Δ)
+ workload_of_job arr_seq j t1 (t1 + Δ))
≤ longest_busy_interval_with_pi Δ.
End LongestBusyIntervalWithPIIsValid.
cumulative_service_inversion arr_seq sched j t1 (t1 + Δ)
+ (cumulative_other_hep_jobs_interfering_workload arr_seq j t1 (t1 + Δ)
+ workload_of_job arr_seq j t1 (t1 + Δ))
≤ longest_busy_interval_with_pi Δ.
End LongestBusyIntervalWithPIIsValid.
Let L be any positive constant satisfying the total-RBF fixpoint
condition. When there is no service inversion at the beginning of a busy
interval, one can show that there is no carry-in workload (including the
lower-priority workload). This allows us to bound the interfering workload
within a busy interval with total_RBF L without adding an extra +
blocking_bound as in the case of the general JLFP bound. For the case
when there is service inversion, we show that
longest_busy_interval_with_pi L is bounded by SBF L.
Variable L : duration.
Hypothesis H_L_positive : L > 0.
Hypothesis H_fixed_point : total_request_bound_function ts L ≤ SBF L.
Hypothesis H_L_positive : L > 0.
Hypothesis H_fixed_point : total_request_bound_function ts L ≤ SBF L.
We additionally require that the maximum non-preemptive segment
of each task in ts does not exceed its WCET.
Hypothesis H_task_max_nps_le_task_cost :
∀ tsk, tsk \in ts → task_max_nonpreemptive_segment tsk ≤ task_cost tsk.
∀ tsk, tsk \in ts → task_max_nonpreemptive_segment tsk ≤ task_cost tsk.
We establish that SBF L bounds longest_busy_interval_with_pi L. This
follows from the fixpoint condition, which dominates the higher-or-equal
priority workload component, and from H_task_max_nps_le_task_cost, which
bounds the service-inversion component.
In the following, we prove busy-interval boundedness via a case
analysis on two cases: (1) when the busy-interval prefix is at
least L time units long and (2) when the busy interval prefix
terminates earlier. In either case, we can show that the
busy-interval prefix is bounded.
Variable j : Job.
Hypothesis H_j_arrives : arrives_in arr_seq j.
Hypothesis H_job_of_tsk : job_of_task tsk j.
Hypothesis H_job_cost_positive : job_cost_positive j.
Hypothesis H_j_arrives : arrives_in arr_seq j.
Hypothesis H_job_of_tsk : job_of_task tsk j.
Hypothesis H_job_cost_positive : job_cost_positive j.
Variable t1 : instant.
Hypothesis H_arrives : t1 ≤ job_arrival j.
Hypothesis H_busy_prefix_arr : busy_interval_prefix arr_seq sched j t1 (job_arrival j).+1.
Hypothesis H_arrives : t1 ≤ job_arrival j.
Hypothesis H_busy_prefix_arr : busy_interval_prefix arr_seq sched j t1 (job_arrival j).+1.
From longest_bi_with_pi_bounded_by_sbf and H_fixed_point,
we show that j's arrival time is necessarily less than
t1 + L.
Consider a time instant t1 such that
[t1, job_arrival j]
and [t1, t1 + L) are both busy-interval prefixes of job j.
Variable t1 : instant.
Hypothesis H_busy_prefix_arr : busy_interval_prefix arr_seq sched j t1 (job_arrival j).+1.
Hypothesis H_busy_prefix_L : busy_interval_prefix arr_seq sched j t1 (t1 + L).
Hypothesis H_busy_prefix_arr : busy_interval_prefix arr_seq sched j t1 (job_arrival j).+1.
Hypothesis H_busy_prefix_L : busy_interval_prefix arr_seq sched j t1 (t1 + L).
The crucial point to note is that the sum of the job's cost
(represented as workload_of_job) and the interfering
workload in the interval
[t1, t1 + L) is bounded by L
due to longest_bi_with_pi_bounded_by_sbf and
H_fixed_point.
Local Lemma workload_is_bounded :
workload_of_job arr_seq j t1 (t1 + L) + cumulative_interfering_workload j t1 (t1 + L) ≤ L.
workload_of_job arr_seq j t1 (t1 + L) + cumulative_interfering_workload j t1 (t1 + L) ≤ L.
It follows that t1 + L is a quiet time, which means that
the busy prefix ends (i.e., it is bounded).
Local Lemma busy_prefix_is_bounded_case1 :
∃ t2,
job_arrival j < t2
∧ t2 ≤ t1 + L
∧ busy_interval arr_seq sched j t1 t2.
End Case1.
∃ t2,
job_arrival j < t2
∧ t2 ≤ t1 + L
∧ busy_interval arr_seq sched j t1 t2.
End Case1.
Next, we consider the case when the interval
[t1, t1 + L)
is not a busy-interval prefix.
Consider a time instant t1 such that
[t1, job_arrival j]
is a busy-interval prefix of j and [t1, t1 + L) is not.
Variable t1 : instant.
Hypothesis H_arrives : t1 ≤ job_arrival j.
Hypothesis H_busy_prefix_arr : busy_interval_prefix arr_seq sched j t1 (job_arrival j).+1.
Hypothesis H_no_busy_prefix_L : ¬ busy_interval_prefix arr_seq sched j t1 (t1 + L).
Hypothesis H_arrives : t1 ≤ job_arrival j.
Hypothesis H_busy_prefix_arr : busy_interval_prefix arr_seq sched j t1 (job_arrival j).+1.
Hypothesis H_no_busy_prefix_L : ¬ busy_interval_prefix arr_seq sched j t1 (t1 + L).
Lemma job_arrival_is_bounded implies that the
busy-interval prefix starts at time t1, continues until
job_arrival j + 1, and then terminates before t1 + L.
Or, in other words, there is point in time t2 such that
(1) j's arrival is bounded by t2, (2) t2 is bounded by
t1 + L, and (3)
[t1, t2) is busy interval of job
j.
Local Lemma busy_prefix_is_bounded_case2 :
∃ t2,
job_arrival j < t2
∧ t2 ≤ t1 + L
∧ busy_interval arr_seq sched j t1 t2.
End Case2.
End StepByStepProof.
∃ t2,
job_arrival j < t2
∧ t2 ≤ t1 + L
∧ busy_interval arr_seq sched j t1 t2.
End Case2.
End StepByStepProof.