Spanda

Chaos Engineering

Status: Experimental · Phase: Simulate, Recover · Priority: P2.1

Validate resilience by injecting controlled failures and verifying recovery, health, readiness, and post-injection safety.

CLI

spanda chaos examples/showcase/self_healing/rover.sd
spanda chaos rover.sd --inject gps-failure
spanda chaos rover.sd --inject camera-failure,connectivity-failure
spanda chaos rover.sd --json

When --inject is omitted, injections are inferred from program structure (sensors, connectivity, recovery policies).

Injection kinds

Kind Foundation
gps-failure Recovery planner + sensor faults
camera-failure Health runtime faults
lidar-failure Recovery planner + sensor faults
connectivity-failure Connectivity declarations
provider-failure Provider dispatch recovery
package-failure Package reload recovery
battery-failure Battery health checks

Verification after chaos

Each injection reports pass/fail for:

Overall experiment PASS when every injection passes all four checks.

Crate

spanda-chaos — composes spanda-assurance, spanda-readiness, and spanda-capability.

Showcase: examples/showcase/self_healing/rover.sd · smoke: scripts/chaos_smoke.sh

See self-healing.md · resilience.md · platform-maturity-roadmap.md.