2026 年 74 巻 4 号 p. 111-121
In the first report, we reported the design of the satellite behavior based on the resilience evaluations are more adequate rather than the one based on the reliability. We also reported the Reset function effectiveness that is well-used on the small satellite. In this paper, we present rules to design satellite state transitions from the resilience point of views, and show verification results of them. Finally, we show different rules are adequate for different design objectives.