Phase 6A — Blocking Condition Closure Workstream

Status: ACCEPTED FOR EVIDENCE EXECUTION

NotStatus: Not CLOSED and not READY. Frozen as a closure package; blockers inside it close only on OperationalClosureEvidence.

Status: ACCEPTED FOR EVIDENCE EXECUTION

NotStatus: Not CLOSED and not READY. Frozen as a closure package; blockers inside it close only on OperationalClosureEvidence.

Status: ACCEPTED FOR EVIDENCE EXECUTION

NotStatus: Not CLOSED and not READY. Frozen as a closure package; blockers inside it close only on OperationalClosureEvidence.

CurrentState: REMAINS_OPEN — NOT_YET_VALIDATED

BlockingReason: Required enterprise interfaces remain insufficiently validated for real Pilot participation. All nine Pilot-relevant systems are NOT_CONNECTED or SIMULATED and no system owner has issued a validation artefact.

RequiredExternalAction: Validate the actual Pilot-relevant interface mechanism for each participating system against the Pilot environment, including declared failure behaviour.

CompetentOwner: Enterprise System Owners (one per source); Integration Governance convenes and consolidates

EvidenceRequired: A completed 13-field validation record per Pilot-relevant system: Q4, Aconex, P6, Smart Completions/BCSTools, Critical Control (Forwood-equivalent), HR/RRLL, Training, Health, IAM — each with owner approval and a test log.

EvidenceSchema: System · ObjectClass · SystemOwner · AuthorityClass · ActualInterfaceMechanism · ReadAvailable · WriteAvailable · EventAvailable · AuthenticationMethod · VersionBehaviour · FailureBehaviour · TestEvidence · OwnerApproval

EvidenceReceived: NONE — 0 of 9 systems have returned a validation record; 0 owner approvals; 0 test logs.

DesignEvidence: Federation contracts, per-object authority matrix and fail-closed unavailable/stale/unmapped handling are defined in the Phase 5 baseline and exercised in FT-01.

OperationalClosureEvidence: None. No source-owner artefact exists.

ResidualGap: 9 of 9 systems unvalidated. Without ActualInterfaceMechanism and FailureBehaviour evidence, mandatory Pilot decisions would rest on unproven source behaviour and evidence reconstruction cannot be guaranteed.

ClosureCriterion: Every mandatory Pilot dependency has an evidence-backed participation mode and no required interface remains NOT_YET_VALIDATED.

Dependency: BC-02 (identity propagation for authenticated reads); BC-06 for the Critical Control source specifically.

EscalationPath: Integration Governance → Enterprise Architecture Authority → Project Sponsor

RetestTrigger: INTERFACE_EVIDENCE_COMPLETE

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

CurrentState: REMAINS_OPEN — UNRESOLVED

BlockingReason: Real identity and authority enforcement for Pilot use is not demonstrated. Only prototype-level denial behaviour exists; no enterprise identity source is connected and no authorization event is attributable to an enterprise identity.

RequiredExternalAction: Validate the enterprise identity source and role/authority resolution for the Pilot population, with positive and negative authorization tests executed server-side.

CompetentOwner: Enterprise IAM Owner; ES&H Authority co-signs safety-authority claims

EvidenceRequired: Resolved identity records for the Pilot population plus paired positive and negative authorization tests covering authorized, unauthorized, expired, delegated, unresolved and vacant-authority actors, each producing an audit record.

EvidenceSchema: UserIdentity · EnterpriseIdentityRef · Role · ProjectScope · AreaScope · ActivityScope · Delegation · AuthorityExpiry · DeniedAction · AuditRecord

EvidenceReceived: NONE — no enterprise identities provisioned; no server-side enforcement evidence; audit records unattributable.

DesignEvidence: ABAC authority model, delegation and expiry semantics are defined; FT-02 confirms the prototype denies unresolved authority rather than defaulting open.

OperationalClosureEvidence: None. No enterprise identity source participates.

ResidualGap: Authority cannot be resolved from an enterprise source, so authorization would be unattributable and evidence reconstruction would fail. UI-level gating is not enforcement.

ClosureCriterion: Real Pilot identities can be resolved and governed authority is enforced independently of UI visibility.

Dependency: BC-03 (authority claims must map to transition authority); BC-04 (steward identities must exist to be granted).

EscalationPath: IAM Owner → ES&H Authority → Enterprise Architecture Authority → Project Sponsor

RetestTrigger: IAM_AUTHORITY_EVIDENCE_COMPLETE

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

CurrentState: REMAINS_OPEN — UNRESOLVED

BlockingReason: Pilot-relevant lifecycle and transition authority remains unresolved for the CV-07 objects. The system holds fail-closed, but no named competent authority owns the transitions.

RequiredExternalAction: Obtain a competent operational governance decision covering the CV-07 objects only (Job Card, Temporary Modification and the remaining CV-07 object classes) — no wider scope is authorized.

CompetentOwner: Enterprise Work Control Authority; ES&H concurrence for Temporary Modification

EvidenceRequired: A signed determination per CV-07 object type listing every allowed transition, its transition authority, delegation rule, required evidence, invalid-transition behaviour and authority-unavailable behaviour.

EvidenceSchema: ObjectType · LifecycleOwner · StateOwner · AllowedTransition · TransitionAuthority · Delegation · EvidenceRequired · InvalidTransitionBehaviour · AuthorityUnavailableBehaviour · ApprovalRecord

EvidenceReceived: NONE — no governance decision issued; no approval record exists.

DesignEvidence: Deterministic state machine (READY / CONDITIONAL / HOLD / STOP) with fail-closed invalid-transition handling is implemented and exercised.

OperationalClosureEvidence: None. No competent authority has been named.

ResidualGap: State changes would occur without an accountable authority, and authority-unavailable behaviour would be an implementation default rather than a governed decision.

ClosureCriterion: Every Pilot-critical state transition has a named competent authority and governed failure behaviour.

Dependency: BC-02 (enforceability); BC-04 (named humans must exist to hold the authority).

EscalationPath: Work Control Authority → ES&H Authority → Project Sponsor

RetestTrigger: LIFECYCLE_AUTHORITY_APPROVED

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

CurrentState: REMAINS_OPEN — 7 of 7 mandatory roles vacant

BlockingReason: Required stewardship and organizational-change roles are unstaffed. Dependent capabilities fail closed as DISABLED_SAFE, which is correct behaviour but makes the Pilot unexecutable.

RequiredExternalAction: Assign real Pilot resources to the accepted governance roles with manager confirmation, and resource the P3-TRN-01 change-adoption load.

CompetentOwner: Project / Site Leadership (accountable); Product Ownership (register custodian)

EvidenceRequired: A completed assignment record for each of the seven mandatory roles: Location Steward, Mapping Steward, Rule Owner, Product Owner, Integration Owner, Operational Support Owner, Change/Adoption Owner — each with named delegate, committed availability and manager confirmation.

EvidenceSchema: Role · AssignedPerson · OrganizationalFunction · Authority · Availability · Delegate · Escalation · PilotResponsibility · ManagerConfirmation

EvidenceReceived: NONE — 0 of 7 roles assigned; 0 delegates; 0 manager confirmations.

DesignEvidence: ADR-14 defines the seven roles, their decision rights and the DISABLED_SAFE behaviour on vacancy; FT-03 confirms vacancy disables rather than degrades.

OperationalClosureEvidence: None. No organizational appointment has been made.

ResidualGap: Design-team dependency is structurally guaranteed while roles are vacant, so the Phase 6B stewardship sustainability test would be meaningless.

ClosureCriterion: No mandatory Pilot stewardship position is vacant and the organization accepts the assigned decision rights.

Dependency: Blocks BC-07 (support cannot be withdrawn from roles that do not exist).

EscalationPath: Site Leadership → Project Director → Project Sponsor

RetestTrigger: STEWARDSHIP_STAFFED

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

CurrentState: REMAINS_OPEN — CLASSIFICATION_UNRESOLVED

BlockingReason: Pilot-relevant classification, compensability and retention determinations remain unresolved; every evidence class currently fails closed as non-compensable with no approved authority basis.

RequiredExternalAction: Obtain a competent governance determination for the Pilot-scope requirements only.

CompetentOwner: Legal / Records Governance with ES&H Authority

EvidenceRequired: An approved determination per Pilot-material requirement, stating classification, compensability, retention requirement, authority basis, approver and effective date.

EvidenceSchema: RequirementRef · Classification · Compensability · RetentionRequirement · AuthorityBasis · ApprovedBy · EffectiveFrom · EvidenceRef

EvidenceReceived: NONE — no determination issued; all entries remain CLASSIFICATION_UNRESOLVED.

DesignEvidence: The engine treats unclassified requirements as non-compensable and fails closed; classification is never inferred by the system.

OperationalClosureEvidence: None. No competent governance determination exists.

ResidualGap: Compensability could otherwise be decided by implementation convenience, and retention obligations for reconstructed decisions are undefined.

ClosureCriterion: No material Pilot requirement remains CLASSIFICATION_UNRESOLVED.

Dependency: Constrains BC-01 evidence reconstruction scope and the Phase 7 legal certification family.

EscalationPath: Records Governance → Legal Counsel → ES&H Authority → Project Sponsor

RetestTrigger: CA04_PILOT_SCOPE_CLOSED

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

CurrentState: REMAINS_OPEN — SIMULATED, no path elected

BlockingReason: Critical Control remains simulated for the Life Critical Pilot journey and no competent authority has elected a closure path.

RequiredExternalAction: Elect and record one closure path. Path A: validate a governed Critical Control source and its Pilot participation. Path B: competent authority explicitly records SIMULATED_ONLY and NON_ACCEPTANCE_EVIDENCE.

CompetentOwner: Critical Control Functional Owner, countersigned by ES&H Authority

EvidenceRequired: Path A: a seven-field participation record per critical control object plus a validated interface under BC-01. Path B: a signed rescope decision stating that no Life-Critical acceptance evidence may be inferred from the Pilot.

EvidenceSchema: CriticalControlObject · AuthoritativeSource · ControlOwner · VerificationState · InterfaceMechanism · Evidence · FailureBehaviour · — or (Path B) — · SIMULATED_ONLY declaration · NON_ACCEPTANCE_EVIDENCE declaration · ApprovingAuthority

EvidenceReceived: NONE — neither a participation record nor a signed rescope decision has been received.

DesignEvidence: Critical-control failures are modelled as non-compensable STOP conditions and cannot be averaged away.

OperationalClosureEvidence: None. Note: Path B is closable by a competent-authority decision alone, without enterprise integration — this is the only blocker whose closure does not require an external technical artefact.

ResidualGap: Simulated control could be mistaken for real integration evidence; the Life Critical journey currently has no governed evidentiary status.

ClosureCriterion: The Life Critical journey has either real governed participation or a formally controlled non-acceptance scope.

Dependency: Path A depends on BC-01 and BC-02. Path B changes the evidentiary weight of the eventual Phase 6 acceptance.

EscalationPath: Critical Control Owner → ES&H Authority → Project Sponsor

RetestTrigger: CRITICAL_CONTROL_SCOPE_RESOLVED

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

CurrentState: REMAINS_OPEN — UNRESOLVED (dependent on BC-04)

BlockingReason: Operational sustainability without hidden design-team support has not been demonstrated. The support model is defined, but no organizational roles exist from which the design team can be withdrawn.

RequiredExternalAction: Establish and staff the Pilot support structure before execution, and rehearse it with the design team absent.

CompetentOwner: Operational Support Lead with Product Ownership

EvidenceRequired: A staffed 11-field support record plus a rehearsal log showing incident, mapping, rule, authority and evidence-request resolution without design-team involvement.

EvidenceSchema: L1Owner · L2Owner · L3Owner · EscalationPath · OperatingHours · IncidentOwner · MappingIssueOwner · RuleIssueOwner · AuthorityIssueOwner · EvidenceRequestOwner · DesignTeamExcludedActivities

EvidenceReceived: NONE — no roster, no operating hours, no rehearsal log.

DesignEvidence: The L1/L2/L3 model, escalation chain, excluded-activity list and emergency exception rule are defined.

OperationalClosureEvidence: None. No support organization exists.

ResidualGap: Any sustainability verdict drawn in Phase 6B would be predetermined by concealed design-team intervention.

ClosureCriterion: The Pilot has an executable support model independent of routine design-team intervention.

Dependency: Hard-dependent on BC-04; partially dependent on BC-01 for L3 integration incidents.

EscalationPath: Support Lead → Product Ownership → Project Director

RetestTrigger: SUPPORT_MODEL_OPERATIONAL

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

CurrentState: REMAINS_OPEN — 0 of 10 prerequisites confirmed

BlockingReason: Real field conditions required for CV-07 execution in the AREA-3100 / TT01 corridor are not confirmed by construction ownership.

RequiredExternalAction: Confirm the actual Pilot operating window for the frozen CV-07 scope, without shrinking that scope.

CompetentOwner: Site Leadership (Construction / Commissioning); ES&H for observation and interference control

EvidenceRequired: A signed 10-field field prerequisite confirmation covering the frozen locations, crews, supervision, Job Card population, lookahead horizon, execution windows, equipment context, shift plan and observation permission.

EvidenceSchema: LocationAvailability · CrewAvailability · SupervisorAvailability · JobCards · Lookahead · ExecutionWindows · EquipmentContext · ShiftPlan · ObservationPermission · Owner/ConstructionConfirmation

EvidenceReceived: NONE — 0 of 10 fields confirmed; no construction confirmation.

DesignEvidence: CV-07 scope, Location corridor, SIMOPS exposure and journey definitions are frozen and internally consistent.

OperationalClosureEvidence: None. No field confirmation received.

ResidualGap: Pilot observation could interfere with mandatory operational controls, and the frozen multi-discipline scope may not be executable in the real window.

ClosureCriterion: The defined Pilot can be executed in real conditions without disrupting mandatory operations or controls.

Dependency: BC-09 (prospective measurement must start inside the same confirmed window).

EscalationPath: Site Leadership → Construction Manager → Project Director

RetestTrigger: FIELD_WINDOW_CONFIRMED

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

CurrentState: REMAINS_OPEN — 12 of 12 metrics NOT_READY, collection not started

BlockingReason: The approved BEFORE metrics are defined but prospective collection has not begun, and no metric has an assigned data collector.

RequiredExternalAction: Start baseline measurement before any Pilot journey is executed.

CompetentOwner: Project Controls with Product Ownership

EvidenceRequired: An eight-field instrumentation record for each of the 12 frozen metrics, with a dated prospective measurement start preceding Phase 6B and an identified raw evidence location.

EvidenceSchema: Metric_ID · MeasurementStart · Source · DataCollector · CollectionMethod · RawEvidenceLocation · Exceptions · BaselinePeriod

EvidenceReceived: NONE — 0 of 12 metrics instrumented; no collectors named; no baseline period started.

DesignEvidence: The 12 metrics, their definitions and exclusion rules are frozen in the Pilot Definition Baseline.

OperationalClosureEvidence: None. Measurement has not started.

ResidualGap: Any later value claim would require retrospective baseline reconstruction, which invalidates causal attribution.

ClosureCriterion: Sufficient prospective BEFORE evidence exists to support later comparison without retrospective reconstruction.

Dependency: BC-08 (the measured population must be the confirmed field scope).

EscalationPath: Project Controls → Product Ownership → Project Director

RetestTrigger: BEFORE_BASELINE_SUFFICIENT

ReadyForRetest: NO

RetestResult: NOT_RETESTED — EVIDENCE BELOW THRESHOLD

• Signed Interface Validation Record per system (13 fields)
• Connectivity/failure test log against the Pilot environment
• Declared version and pinning behaviour for the object classes in Pilot scope

SubmissionForm: One record per system; consolidated by Integration Governance. Partial returns are logged as PARTIAL and do not trigger retest.

• Pilot identity provisioning record with role, project/area/activity scope, delegation and expiry
• Positive and negative authorization test evidence for six actor classes
• Audit record sample demonstrating attributable authorization

SubmissionForm: Server-side enforcement evidence only; UI visibility evidence is not accepted.

• Signed ADR-15 / ADR-17 lifecycle determination for CV-07 object types (10 fields per object type)

SubmissionForm: Scope restricted to CV-07 objects; wider lifecycle governance is out of workstream scope.

• Stewardship assignment record for 7 mandatory roles (9 fields each) with named delegates
• Manager confirmation of committed availability
• P3-TRN-01 resourced change-adoption plan

SubmissionForm: Vacancy in any one role keeps BC-04 open; partial staffing is PARTIAL evidence only.

• Approved classification, compensability and retention determination per Pilot-material requirement (8 fields)

SubmissionForm: Must state authority basis and effective date; undated determinations are not accepted.

• Path A: participation record per critical control object (7 fields) + validated interface under BC-01
• Path B: signed rescope recording SIMULATED_ONLY and NON_ACCEPTANCE_EVIDENCE

SubmissionForm: Exactly one path must be elected and recorded; silence is not a path.

• Staffed L1/L2/L3 support record (11 fields)
• Design-team-absent rehearsal log

SubmissionForm: Cannot be submitted before BC-04 evidence exists.

• Signed field prerequisite confirmation (10 fields) for the frozen CV-07 scope
• Approved observation protocol and interference control

SubmissionForm: Confirmation must cover the frozen scope; scope reduction is a SCOPE_CHANGE, not a closure.

• Instrumentation record for each of the 12 frozen metrics (8 fields)
• Dated evidence that prospective collection has started

SubmissionForm: Retrospective reconstruction is not accepted as BEFORE evidence.

ConsequenceIfUnclosed: Pilot decisions rest on unproven source behaviour; no journey may be treated as integration evidence.

ConsequenceIfUnclosed: Authorization is unattributable; evidence reconstruction and audit fail.

ConsequenceIfUnclosed: State transitions occur without accountable authority.

ConsequenceIfUnclosed: Dependent capabilities stay DISABLED_SAFE; sustainability cannot be tested.

ConsequenceIfUnclosed: Compensability risks being set by implementation convenience.

ConsequenceIfUnclosed: Life-Critical journey has no governed evidentiary status.

ConsequenceIfUnclosed: Sustainability verdict would be predetermined by hidden design-team support.

ConsequenceIfUnclosed: Pilot may be unexecutable or may interfere with mandatory controls.

ConsequenceIfUnclosed: No defensible baseline; all later value claims unattributable.

Reason: Stewardship staffing is the root dependency for the entire operating model: 7 of 7 roles vacant makes design-team withdrawal structurally impossible and pre-determines the Phase 6B sustainability verdict.

EscalatedTo: Project Director → Project Sponsor

DecisionRequired: Fund and appoint the seven stewardship roles with delegates, or formally accept that Option C sustainability cannot be tested in this Pilot.

Reason: No source-system owner or IAM owner has engaged. Interface and identity validation are external obligations that the project cannot discharge unilaterally, and they gate seven of the nine blockers directly or indirectly.

EscalatedTo: Enterprise Architecture Authority → Project Sponsor

DecisionRequired: Mandate source-owner participation with a committed date, or record that the Pilot cannot obtain enterprise integration evidence.

Reason: Critical Control participation has no elected path. Continued silence leaves a Life-Critical journey in an ungoverned simulated state, which is the highest-severity evidentiary risk in the workstream.

EscalatedTo: ES&H Authority → Project Sponsor

DecisionRequired: Elect Path A or Path B and record it. Path B must state SIMULATED_ONLY and NON_ACCEPTANCE_EVIDENCE explicitly.

Reason: Prospective BEFORE measurement is time-irreversible: every day the Pilot approaches without instrumentation permanently reduces the achievable baseline quality.

EscalatedTo: Project Controls → Project Director

DecisionRequired: Start instrumented collection now, independently of the other blockers, to preserve baseline defensibility.