Title: Reuse and Legacy Software Safety | ISO 26262 Academy URL: https://iso26262.academy/features/concepts/reuse-legacy-software Description: How to argue safety for what you did not develop this time: reuse routes, delta and impact analysis, carryover of unchanged elements, ISO/PAS 8926 qualification, wrappers, assumptions of use, and the rules for reusing verification evidence honestly. --- Concept guide · ISO 26262-8 §12 + proven-in-use · 12 chapters # Reuse and Legacy Software Safety Learn the argument routes ISO 26262 offers for carryover, modified, and pre-existing software - and how to pick the one whose evidence you can actually produce. 12 Chapters 6 Reuse scenarios routed 6 Delta analysis steps 1 Decision guide Included in Expert [Start learning](https://iso26262.academy/register?plan=free&from=%2Fconcepts%2Freuse-legacy-software&utm_source=website&utm_medium=cta&utm_campaign=features_concepts) See the chapters Inside the course 1. 01 **The Carryover Reality** 2. 02 **Vocabulary and Reuse Types** 3. 03 **Choosing the Argument Route** 4. 04 **Delta Analysis in Depth** 5. 05 **Carryover of Unchanged Elements** The short version ## Quick answers What does ISO 26262 say about reusing legacy software? ISO 26262 does not forbid reuse - it demands an explicit argument for it. Part 8 offers dedicated routes: Clause 12 covers qualification of software components, Clause 14 covers proven-in-use arguments built on field data, and ISO/PAS 8926 extends these for pre-existing software developed outside ISO 26262. For modified elements, change management and impact analysis decide which existing evidence remains valid. The core principle is that safety is a property of an element in its context, not of the element alone: unchanged code in a new context still needs a new argument, even when no line of source was touched. What is the difference between carryover, modified reuse, and legacy software? Two questions classify every case: did the element change, and did its context change. Carryover is an unchanged element in an essentially unchanged context - old evidence can carry if the new use stays inside the envelope it covers. Modified reuse means the element or its context changed, which triggers delta and impact analysis to determine what must be re-verified. Legacy software is code with thin or missing safety evidence, typically developed before or outside ISO 26262 - here the question is not what changed but whether the evidence state can be brought to an arguable level at all. Keep going, free - [Article · 7 min read The Hidden Risks of Legacy Software Reuse in ISO 26262](https://iso26262.academy/blog/iso-26262-risks-legacy-software-reuse) - [Demo exam · no account Test yourself with 7 exam-style questions](https://iso26262.academy/demo-exam) Why this course · ISO 26262, Part 8, Clause 12 ## Why it pays for itself ### Stop arguing reuse by hope The six-scenario route map replaces wishful stacking of half-arguments with one deliberate choice: evidence reuse, delta analysis, proven in use, or ISO/PAS 8926 - each with its real evidence bill. ### A delta analysis that holds up The six-step method separates observed changes from impact judgments and checks completeness where most delta analyses silently fail, producing a contract the rest of the program can build on. ### Know when to stop reusing The sunk evidence fallacy and the failure smells give you decidable exit criteria, so a doomed reuse argument is abandoned early instead of collapsing in the functional safety assessment. After the course ## What you’ll be able to do ### Classify Any Reuse Case Use the element-change and context-change questions to place carryover, modified, pre-existing, and legacy software into the right category before arguing anything. ### Pick a Defensible Argument Route Choose between evidence reuse, delta analysis plus development, proven in use, and ISO/PAS 8926 qualification based on the evidence you can actually produce. ### Run a Complete Delta Analysis Execute all six steps from baseline identification to the program contract, separating observed deltas from impact judgments. ### Contain What You Cannot Qualify Design wrapper and containment architectures with a clear-eyed view of what they catch, what they miss, and what evidence they still require. ### Write Reuse Contracts That Hold Turn assumptions of use into scoped, verifiable contracts across supplier boundaries instead of implicit expectations that fail in integration. ### Reuse Evidence Without Fooling Yourself Apply the evidence-transfers-arguments-rebuild rule and avoid the sunk evidence fallacy when old test results look tempting. The curriculum · 12 chapters ## Chapter by chapter 1. 01 **The Carryover Reality** Why most automotive software is reused rather than newly developed, and why safety is not a property of an element in isolation but of an element in context. - Carryover economics - Context dependence - Reading map 2. 02 **Vocabulary and Reuse Types** Sort the terminology - carryover, modified reuse, pre-existing, legacy - and learn the two questions that classify every case: did the element change, and did its context change. - Reuse taxonomy - Element vs context - Origin matters 3. 03 **Choosing the Argument Route** Map six starting scenarios to their argument routes: direct evidence reuse, gap analysis, impact analysis plus development, proven in use per Clause 14, or ISO/PAS 8926 qualification. - Six scenarios - Route selection - No wishful stacking 4. 04 **Delta Analysis in Depth** A six-step delta analysis that separates observation from judgment, checks completeness where most analyses already fail, and ends in a contract with the rest of the program. - Six steps - Observation vs judgment - Completeness 5. 05 **Carryover of Unchanged Elements** When an element and its context are truly unchanged, old evidence can carry - if you prove the new use stays inside the envelope the old evidence covers. - Evidence envelope - Unchanged proof - Boring defense 6. 06 **The Legacy Software Problem** Legacy code with thin or missing evidence: assess the real evidence state, compare the cost profiles of each option, and see where each choice bites later. - Evidence gaps - Option cost profiles - Main risks 7. 07 **Qualifying Pre-Existing Software** Qualification of pre-existing software architectural elements: the ISO 26262-8 Clause 12 baseline, the ISO/PAS 8926 route, and building executable evidence that respects what already exists. - Clause 12 - ISO/PAS 8926 - Executable evidence 8. 08 **Wrappers and Containment** Containment architectures around software you cannot fully trust: what a wrapper catches, what it structurally misses, and when detection and reaction outside the element suffice. - Catches vs misses - Containment patterns - External mechanisms 9. 09 **Assumptions and Reuse Contracts** Assumptions of use and conditions of use as the reuse contract: how to scope them, the supplier boundary, and the asymmetry between weak and strong contracts. - Assumptions of use - Supplier boundary - Scoped contracts 10. 10 **Evidence Reuse Rules** The rules for carrying verification evidence forward: evidence can transfer but arguments must be rebuilt, plus the classic traps in cross-standard evidence reuse. - Evidence vs argument - Cross-standard reuse - Classic traps 11. 11 **Building the Reuse Argument** Assemble the pieces into a modular per-element argument with explicit reasoning and residual risks stated openly instead of buried in appendices. - Modular arguments - Explicit residuals - Assembly order 12. 12 **Pitfalls and Decision Guide** The failure smells of reuse programs - including the sunk evidence fallacy - and a decision guide that makes the exit from a doomed reuse argument decidable. - Sunk evidence fallacy - Failure smells - Decidable exits Built for ## Who this guide is for - Software leads inheriting a legacy codebase that must enter an ASIL project - Safety engineers writing delta and impact analyses for carryover elements - Suppliers qualifying pre-existing software components for multiple customers - Anyone deciding between proven in use, ISO/PAS 8926, and redevelopment ## Frequently Asked Questions Common questions about Reuse and Legacy Software Safety Proven in use per ISO 26262-8 Clause 14 needs field data that survives statistical scrutiny for the same element in a sufficiently similar context - a bar that real programs rarely clear, especially at higher ASILs. ISO/PAS 8926 is the route designed for pre-existing software architectural elements: it accepts that the code was not developed under ISO 26262 and builds a qualification argument from analysis, targeted verification, and executable evidence instead of pure field statistics. In practice the two are often combined, with field experience supporting but not carrying the argument. Only partially, and only when the containment claim is honest. A wrapper or containment architecture can detect and react to dangerous failures at the element boundary - but it catches only the failure modes that are observable there, and it structurally misses failures that corrupt shared resources or produce plausible-but-wrong outputs. The course treats wrappers as one tool in a route, not a route by themselves: you still owe an argument for what the wrapper misses, and assumptions of use still have to bound what the legacy element is allowed to do. The course has 12 chapters: the carryover reality, reuse vocabulary, choosing among argument routes for six starting scenarios, a six-step delta analysis, carryover of unchanged elements, the legacy software problem, qualifying pre-existing software with Clause 12 and ISO/PAS 8926, wrappers and containment, assumptions of use as reuse contracts, evidence reuse rules, building the modular reuse argument, and a pitfalls chapter with a decision guide. ## Start the course today A free account unlocks one full concept guide, 3 work product templates, 1 guided process, the Markov simulator, and 5 practice exams per month. The Pro and Expert plans unlock more of the 78-guide library. No credit card required. [Start learning](https://iso26262.academy/register?plan=free&from=%2Fconcepts%2Freuse-legacy-software&utm_source=website&utm_medium=cta&utm_campaign=features_concepts) [View Pricing Plans](https://iso26262.academy/pricing)