Design method, fail-stop safety model, and embedded application

The paper presents a design method aimed at embedded distributed systems using a dispenser control development based on fail-stop safety model as a running example. The method meets not only design errors elimination but also operational errors management from the beginning of design cycle. The techniques used stem from local time concept (omitting global clocks) and configurations (domain knowledge representation). However, the role of designer is considered dominant and not replaceable by any automated design tools.