Defeater Cards systematize safety assurance with structured documentation
A new card-based method exposes hidden assumptions and reasoning gaps in safety cases.
Safety assurance cases are critical for justifying that systems meet safety requirements, but they can be undermined by defeaters—arguments that challenge validity, such as overly strict claims, unreliable evidence, or reasoning gaps. Until now, defeaters have been handled ad hoc, lacking standardized documentation and making review and reuse difficult. Researchers Usman Gohar, Michael C. Hunter, Salil Purandare, Jordan J. Rios, Myra B. Cohen, and Robyn R. Lutz from Iowa State University and NASA Ames Research Center propose Defeater Cards to fill this gap. Drawing on a literature survey and thematic analysis, the cards are structured around the 5W1H framework (Who, What, When, Where, Why, How) to systematically document defeaters. This enables informed analysis, improved traceability and auditability, and reuse of defeater knowledge across product variants. The team demonstrates the cards' applicability through two cross-domain case studies, showing how they expose hidden assumptions and surface reasoning gaps that might otherwise go unnoticed.
To encourage adoption and community collaboration, the authors have released an open-source repository of defeater cards as a baseline for researchers and practitioners. This work, published on arXiv (cs.SE, 2606.11462), represents a significant step toward rigorous, repeatable management of safety assurance case defeaters. By making defeater documentation structured and interoperable, the approach promises to enhance the reliability of safety-critical systems across industries such as aerospace, autonomous vehicles, and medical devices. The cards not only improve current practice but also enable longitudinal learning—lessons from one system's defeaters can inform future designs, reducing risk and accelerating certification. As safety regulations tighten globally, tools like Defeater Cards could become essential for compliance and risk management.
- Defeater Cards use the 5W1H framework to standardize documentation of safety assurance defeaters.
- Two cross-domain case studies validated the cards' ability to expose hidden assumptions and reasoning gaps.
- An open-source repository provides a baseline for researchers and practitioners to build upon and share lessons learned.
Why It Matters
Structured defeater management improves safety case auditability and reuse, reducing risk in critical systems.