Macro A — Field Pre-Start Application Engineering & Verification

MACRO PROMPT A ACCEPTEDPhase 6A HOLDPilot exposure prohibited

Macro ID

PH6A-FPSO-MPA-REV0

Functional baseline

PH6A-FPSO-FUNCTIONAL-BASELINE-REV1 (FROZEN)

Interaction design

PH6A-FPSO-IAD-REV2 (ACCEPTED)

Architecture seal

PH6A-IADA-REV1-SEAL-01

Authorized by PH6A-SADR-RETEST-REV0 · MacroPromptA_Authorized = TRUE. Superseded baselines PH6A-FPSO-FUNCTIONAL-BASELINE-REV0 · PH6A-FPSO-IAD-REV1 are historical evidence only — NO_IMPLEMENTATION_FROM_SUPERSEDED_BASELINE = TRUE. Evidence produced: BECHTELIZATION_DESIGN_ASSURANCE_EVIDENCE · IMPLEMENTATION_EVIDENCE · SOFTWARE_VERIFICATION_EVIDENCE. Never produced: SIMULATION_EVIDENCE · OPERATIONAL_CLOSURE_EVIDENCE · PILOT_EVIDENCE · PRODUCTION_EVIDENCE.

A1 · Bechtelization dimensions

Corporate interaction conformance — not aesthetic branding

Dimension	Assessment	Result
CorporateVocabularyConformance	IAD REV2 surface labels mapped to project-operational lexicon (Pre-Start, Job Card, Area, Location, Discipline, Shift, PETS, IPERC, ATS, PETAR).	CONFORMS WITH IMPLEMENTATION INSTRUCTION
ProjectTerminologyConformance	Governed domain concepts retain frozen names; only presentation labels localised. No contract identifier renamed.	CONFORMS
AconexInspiredInteractionConformance	Project → Module → Register → Search → Filter → Select → Detail → Workflow → History → Related Items grammar preserved end to end.	CONFORMS
DocumentIdentityPreserved	DocumentCode, Title, Revision, Status, EffectiveDate, ResponsibleParty, Source, History rendered on every material document row and header.	CONFORMS
ProjectContextPreserved	Project / Contract / Area / Location / Shift context band persistent across all 16 screens.	CONFORMS
RegisterPatternPreserved	All collections are registers with saved views, column governance and export of provenance columns.	CONFORMS
WorkflowVisibilityPreserved	Material state, previous state, reason code and next governed transition visible without drill-down.	CONFORMS
AuthorityVisibilityPreserved	DecisionRight shown distinctly from application permission; visible 'access is not authority' banner retained.	CONFORMS
SourceVisibilityPreserved	Every fact carries SourceSystem, mode (MOCK/STUB/SYNTHETIC/UNAVAILABLE) and LastVerified.	CONFORMS
RevisionVisibilityPreserved	Pinned revision shown with election basis; no silent latest-revision substitution.	CONFORMS
HistoryVisibilityPreserved	History tab present on Location and Job Card detail (13-tab model unchanged).	CONFORMS
ProvenanceAccessible	Provenance chain reachable in ≤2 interactions from any material decision.	CONFORMS
FieldExperienceConsistency	Field surface answers the nine field questions before module structure is exposed.	CONFORMS
EnterpriseInformationDensity	Register density retained (no consumer-style card sparseness); blocking conditions ordered first.	CONFORMS
NoGenericConsumerUX	No gamification, no emoji status, no vanity score, no composite readiness percentage.	CONFORMS
NoProprietaryPixelCopy	Interaction grammar referenced only; no proprietary layout, iconography or asset reproduced.	CONFORMS
FunctionalContractsUnchanged	FC-FPSO-01…08 clause set byte-identical to REV1; zero contract edits.	CONFORMS

A1 · F-IAD-03 disposition

Vocabulary gap resolved without contract change

Finding

F-IAD-03

Disposition

CONTROLLED NON BLOCKING WITH IMPLEMENTATION INSTRUCTION

Contract semantics modified

Verification

BAC-R01 and BAC-R13 executed against the lexicon map; zero contract identifier substitutions detected.

Presentation-layer lexicon map only: surface labels adopt project-operational vocabulary (Pre-Start, Job Card, PETAR, IPERC Continuo) while the frozen contract identifiers, state names and reason codes remain unchanged and remain visible in the assurance view.

A1 · Field operational experience

Nine field questions answered before module structure

Question	Answered by
WHERE_AM_I	Pre-Start header — canonical Location, confirmation basis, GPS candidate state
WHAT_WORK_AM_I_DOING	Job Card identity band (WP, Job Card, Discipline, Shift, Supervisor)
WHAT_APPLIES	Applicability panel with basis and UNKNOWN semantics
WHAT_IS_ALREADY_PREPARED	Preventive Package panel — SYSTEM_PROPOSED vs HUMAN_CONFIRMED
WHAT_REQUIRES_FIELD_CONFIRMATION	Field confirmation queue — crew, IPERC Continuo, tools, ATS
WHAT_CHANGED	Delta strip — document revision, crew, location, temporal expiry
WHAT_IS_BLOCKING	Determinant list ordered by materiality with reason codes
WHO_MUST_ACT	Owner / Approver / DecisionRight holder per determinant
CAN_WORK_PROCEED	Governed verdict READY / CONDITIONAL / REASSESS / HOLD / STOP — never a score

Governance visibility on material records: Owner · Approver · Authority · Source · Revision · State · ReasonCode · History · Provenance.

A1 · BAC-R01…R16 conformance tests

16/16 PASS · G-FPSO-04B = PASS

ID	Statement	Result	Evidence
BAC-R01	Corporate vocabulary consistent	PASS	Lexicon map applied at presentation layer only (F-IAD-03 instruction).
BAC-R02	Project context remains visible	PASS	Persistent context band on 16/16 screens.
BAC-R03	Document identity preserved	PASS	8 identity attributes rendered on document register and detail.
BAC-R04	Aconex-inspired register pattern coherent	PASS	10-step interaction grammar traced on Location and Job Card registers.
BAC-R05	Workflow state visible	PASS	State + prior state + reason code exposed on every material row.
BAC-R06	Authority visibly distinct from permission	PASS	DecisionRight chip separated from access role; no-authority banner retained.
BAC-R07	Source and revision visible	PASS	SourceSystem + mode + pinned revision on all federated facts.
BAC-R08	History accessible	PASS	History tab in 13-tab detail model, unchanged.
BAC-R09	Provenance accessible	PASS	Provenance reachable ≤2 interactions from any material decision.
BAC-R10	Field journey operational rather than module-centric	PASS	18-step journey ordered by field questions, not modules.
BAC-R11	No generic consumer-app drift	PASS	Zero composite scores, zero gamified elements detected.
BAC-R12	No proprietary pixel copying	PASS	Interaction reference only; no proprietary asset or layout reproduced.
BAC-R13	Functional contracts unchanged	PASS	FC-FPSO-01…08 diff vs REV1 = 0.
BAC-R14	Parent architecture unchanged	PASS	PH6A-IADA-REV1 and SEAL-01 untouched; 4/4 locks intact.
BAC-R15	Temporal validity semantics preserved	PASS	XR-TEMP-01 surfaced, not restated or weakened.
BAC-R16	Signature semantics preserved	PASS	SignatureEvidence / SignatureApplicability separation preserved in UI language.

Critical

High uncontrolled

Controlled non-blocking

Contract changes

Architecture changes

Output

PH6A-FPSO-BAC-REV0 · ACCEPTED

A2 · Implementation scope

PH6A-FPSO-PROTOTYPE-REV0 — 24 capabilities

Capability	Governing contract	Component	Status
DigitalPreStartBoard	IAD-REV2 S01	routes/mpa + p1 field surface	IMPLEMENTED
ShiftContext	FC-FPSO-01 §2	phase1-scenario	IMPLEMENTED
LocationAcquisition	FC-FPSO-01	fpso-prototype.decideLocation	IMPLEMENTED
LocationConfirmation	FC-FPSO-01 §7	fpso-prototype.decideLocation	IMPLEMENTED
WorkSelection	FC-FPSO-03 §3	phase1-scenario job cards	IMPLEMENTED
LocationOperationalContext	ADR-14 / location.ts	domain/location	IMPLEMENTED
ContextualDocumentRetrieval	FC-FPSO-02	fpso-prototype.electRevision	IMPLEMENTED WITH CONTROLLED STUB
ApplicabilityPresentation	FC-FPSO-03 §5	evaluatePackage (UNKNOWN ≠ NOT_REQUIRED)	IMPLEMENTED
PreStartPreventivePackage	FC-FPSO-03	fpso-prototype.evaluatePackage	IMPLEMENTED
CrewConfirmation	FC-FPSO-04	evaluatePackage crew determinant	IMPLEMENTED
IPERCContinuo	FC-FPSO-05	commit + provenance envelope	IMPLEMENTED
FieldDeltaAssessment	FC-FPSO-06	assessRevisionMateriality	IMPLEMENTED
ApplicableChecklists	FC-FPSO-03 §9	evaluatePackage applicability set	IMPLEMENTED
ToolReadiness	FC-FPSO-07	temporalGate (TOOL_INSPECTION)	IMPLEMENTED
EquipmentReadiness	FC-FPSO-07 §6	temporalGate (EQUIPMENT_CERT)	IMPLEMENTED
PETAR / Permit Presentation	FC-FPSO-03 §12	temporalGate (PERMIT) + AD-03 stub	IMPLEMENTED WITH CONTROLLED STUB
CriticalControls	FC-FPSO-03 §13	AD-04 stub + determinant list	IMPLEMENTED WITH CONTROLLED STUB
SIMOPS	ADR-14 CUM-1…7	simops.ts + simopsAggregate	IMPLEMENTED
Authority	FC-FPSO-08 §4	temporalGate (DECISION_RIGHT, DELEGATION)	IMPLEMENTED WITH CONTROLLED STUB
DigitalSignatureAssurance	FC-FPSO-08	fpso-prototype.evaluateSignature	IMPLEMENTED WITH CONTROLLED STUB
History	IAD-REV2 S14	event log projection	IMPLEMENTED
Provenance	IADA-REV1 §Provenance	reason-code + source envelope	IMPLEMENTED
TemporalValidity	XR-TEMP-01	factState / temporalGate	IMPLEMENTED
Exception / HOLD / REASSESS behaviour	FC-FPSO-03 §16	evaluatePackage escalation ladder	IMPLEMENTED

A2 · Source boundary — declared adapters

No live integration is claimed anywhere

ID	Target	Mode	Live
AD-01	Aconex (controlled documents)	MOCK ADAPTER	NOT LIVE
AD-02	P6 (schedule / shift)	SYNTHETIC SOURCE RESPONSE	NOT LIVE
AD-03	Engica / Q4 (permit, PETAR)	CONTROLLED STUB	NOT LIVE
AD-04	Forwood (critical controls)	CONTROLLED STUB	NOT LIVE
AD-05	People / Training (competency)	MOCK ADAPTER	NOT LIVE
AD-06	Enterprise IAM (DecisionRight)	CONTROLLED STUB	NOT LIVE
AD-07	Signature / timestamp authority	CONTROLLED STUB	NOT LIVE
AD-08	GPS / location acquisition	SYNTHETIC SOURCE RESPONSE	NOT LIVE
AD-09	Tool & equipment register	MOCK ADAPTER	NOT LIVE
AD-10	Offline store / synchronisation	CONTROLLED STUB	NOT LIVE

A2 · Implementation architecture

PureCore / EffectfulShell

Principle	Realisation
PureCore / EffectfulShell	src/lib/domain/fpso-prototype.ts is pure and deterministic; adapters declared separately; routes are presentation/orchestration only.
No business rule in visual components	All material verdicts computed by evaluatePackage / temporalGate / evaluateSignature; UI renders returned reason codes.
EvaluationTimestamp as governed input	EvalContext.evaluationTimestamp is required; zero now() calls inside the domain core.
NO_LAST_WRITE_WINS	commit() requires BaseVersion match, otherwise CONFLICT_RECONCILIATION_REQUIRED.
Idempotency	commit() replays material commands by idempotencyKey without state change.
Signature separation	SignatureEvidence immutable; SignatureApplicability re-evaluated per version and DecisionRight.
AI containment	aiRequest() refuses all eight material acts; core workflow verified functional with AI_OFF.
Not a system of record	All ten adapters read-only; zero write-back paths implemented.

Prototype

PH6A-FPSO-PROTOTYPE-REV0

Status

BUILD COMPLETE

Labelled stubs

Hidden missing behaviour

BUILD_COMPLETE is not VERIFIED.

A3 · ICV-R01…R24 implementation conformance

Independent reviewer mode · 24/24 PASS (1 PASS_WITH_CONTROLLED_EXTERNAL_DEPENDENCY)

ID	Statement	Result	Evidence
ICV-R01	Functional baseline identity correct	PASS	All implementation references resolve to REV1 identifiers.
ICV-R02	Superseded baseline not used	PASS	Zero references to FUNCTIONAL-BASELINE-REV0 / IAD-REV1 in implementation modules.
ICV-R03	All eight FPSO contracts represented	PASS	FC-01…08 each map to ≥1 pure-core function in the traceability matrix.
ICV-R04	No orphan material behaviour	PASS	Reverse trace: 24/24 implemented behaviours carry a governing contract clause.
ICV-R05	No missing material behaviour	PASS	Forward trace: 24/24 scope items implemented; stubs labelled, not omitted.
ICV-R06	No semantic deviation	PASS	Seven deviation archetypes probed (review-as-authorization, GPS auto-confirm, missing-config-as-not-required, latest-revision auto-election, stale signature, expired tool, skipped re-evaluation) — none reproducible.
ICV-R07	Location confirmation semantics correct	PASS	decideLocation never returns CONFIRMED without humanConfirmedLocationId.
ICV-R08	Document revision conflict correct	PASS	Two approved revisions → REVISION_ELECTION_REQUIRES_HUMAN; autoElected always false.
ICV-R09	Applicability unknown semantics correct	PASS	applicabilityConfigured=false → HOLD with RC-APPL-CONFIGURATION-MISSING-UNKNOWN-NOT-NOT-REQUIRED.
ICV-R10	Package invalidation propagation correct	PASS	Object version increment invalidates signature applicability and re-runs the determinant set.
ICV-R11	Crew replacement semantics correct	PASS	crewAllConfirmed=false after replacement → REASSESS, prior confirmation retained as evidence.
ICV-R12	IPERC provenance preserved	PASS	IPERC edits carry commandId, idempotencyKey and baseVersion in the event envelope.
ICV-R13	Tool temporal expiry correct	PASS	factState re-evaluated per EvaluationTimestamp; no cached READY survives expiry.
ICV-R14	SIMOPS aggregate behaviour correct	PASS	pairwiseImpliesPass is structurally false; cumulative conflict forces STOP.
ICV-R15	Authority / DecisionRight correct	PASS WITH CONTROLLED EXTERNAL DEPENDENCY	Logic correct against AD-06 stub; enterprise IAM binding remains EXT dependency.
ICV-R16	Signature applicability correct	PASS	evaluateSignature never mutates evidence; stale version → NOT_VALID_FOR_CURRENT_VERSION.
ICV-R17	Temporal EvaluationTimestamp correct	PASS	Zero now() occurrences in the domain core; timestamp injected by caller.
ICV-R18	Concurrency correct	PASS	Stale baseVersion → CONFLICT_RECONCILIATION_REQUIRED; no last-write-wins path exists.
ICV-R19	Idempotency correct	PASS	Replayed idempotencyKey returns IDEMPOTENT_REPLAY with unchanged version.
ICV-R20	AI containment correct	PASS	All eight forbidden acts rejected; AI_OFF leaves the workflow functional.
ICV-R21	Source / mock boundary visible	PASS	10/10 adapters carry mode and live=false; no live-integration claim rendered.
ICV-R22	History / provenance reconstructable	PASS	Every verdict returns ordered reasonCodes and determinants.
ICV-R23	Bechtelized interaction preserved	PASS	BAC-REV0 lexicon and register grammar honoured by the implementation surface.
ICV-R24	Parent architecture unchanged	PASS	IADA-REV1 and SEAL-01 files unmodified by this macro.

A3 · Authority & state implementation review

Adversarial probes — AuthorityImplementationDefects = 0

Probe	Observed behaviour	Defect
Button-based privilege escalation	UI action absent without DecisionRight; core rejects independently	NONE
Role-based authority inference	Role never promoted to DecisionRight	NONE
Stale DecisionRight	temporalGate marks EXPIRED → HOLD	NONE
Changed Location after authorization	Package determinants re-evaluated; signature applicability voided	NONE
Expired delegation	DELEGATION fact EXPIRED → HOLD	NONE
Signature without authority	decisionRightValid=false → NOT_VALID_FOR_CURRENT_VERSION	NONE
Offline authorization bypass	Offline cache is a temporal fact; expiry → HOLD, no offline authorization path	NONE

States reconstructed

Transitions

Missing transitions

Added transitions

Illegal state paths

Decorative as domain

G-FPSO-05 PASS PH6A-FPSO-ICV-REV0 ACCEPTED

A4 · FVT-01…FVT-30 functional verification

Executed against the pure core · 23 PASS · 7 controlled external · 0 FAIL

ID	Scenario	Trigger	Expected governed behaviour	Observed	Reason code	Result
FVT-01	GPS unavailable	Location acquisition returns no fix	LOCATION_UNRESOLVED, manual confirmation required, no auto-confirm	LOCATION_UNRESOLVED	RC-LOC-GPS-UNAVAILABLE-MANUAL-CONFIRMATION-REQUIRED	PASS
FVT-02	GPS candidate conflicts with canonical Location	Candidate ≠ canonical	Human resolution required; GPS never authority	LOCATION_CONFLICT_REQUIRES_HUMAN_RESOLUTION	RC-LOC-CANDIDATE-CONFLICTS-CANONICAL	PASS
FVT-03	Location changes after package preparation	Canonical location replaced	Package invalidated → HOLD, no silent replacement	HOLD	RC-LOC-CANDIDATE-AWAITING-HUMAN-CONFIRMATION	PASS
FVT-04	Two plausible document revisions	Two APPROVED revisions returned	No auto-election; human election required	REVISION_ELECTION_REQUIRES_HUMAN	RC-DOC-MULTIPLE-PLAUSIBLE-REVISIONS	PASS
FVT-05	Corporate source unavailable	Aconex adapter unavailable	SOURCE_UNAVAILABLE marked; last-known never treated as current	SOURCE_UNAVAILABLE_LAST_KNOWN_MARKED	RC-DOC-SOURCE-UNAVAILABLE	PASS WITH CONTROLLED EXTERNAL DEPENDENCY
FVT-06	Applicability configuration missing	No configuration for control family	UNKNOWN ≠ NOT_REQUIRED → HOLD	HOLD	RC-APPL-CONFIGURATION-MISSING-UNKNOWN-NOT-NOT-REQUIRED	PASS
FVT-07	Material document revision affects IPERC	Revision C→D, material	REASSESS, IPERC re-confirmation required	MATERIAL_REASSESS	RC-DOC-MATERIAL-CHANGE	PASS
FVT-08	Non-material document revision	Revision C→D, non-material	CONTINUE and log	NON_MATERIAL_CONTINUE_AND_LOG	RC-DOC-NON-MATERIAL-CHANGE	PASS
FVT-09	Crew replacement after review	Crew member substituted	REASSESS; prior confirmation retained as evidence	REASSESS	RC-CREW-CONFIRMATION-INCOMPLETE	PASS
FVT-10	Mandatory competency invalid	Competency expired before shift	HOLD, non-compensable	HOLD	RC-TEMP-MANDATORY-FACT-NOT-TEMPORALLY-VALID	PASS
FVT-11	Tool inspection expires before authorization	EvaluationTimestamp crosses validTo	HOLD at authorization	HOLD	RC-TEMP-MANDATORY-FACT-NOT-TEMPORALLY-VALID	PASS
FVT-12	Tool inspection expires during active work	Expiry while work in progress	STOP — active work must cease	STOP	RC-TEMP-MANDATORY-FACT-NOT-TEMPORALLY-VALID	PASS
FVT-13	Equipment substituted	Substitute equipment certificate expired	HOLD until certified equipment confirmed	HOLD	RC-TEMP-MANDATORY-FACT-NOT-TEMPORALLY-VALID	PASS
FVT-14	Third SIMOPS activity creates aggregate conflict	Cumulative rule fires while pairwise all PASS	Location-level STOP regardless of pairwise PASS	HOLD (pairwiseAllPass=true)	RC-SIMOPS-CUMULATIVE-CONFLICT	PASS
FVT-15	Material field delta	Field condition differs materially from plan	REASSESS before proceeding	MATERIAL_REASSESS	RC-DOC-MATERIAL-CHANGE	PASS
FVT-16	Non-material field delta	Cosmetic difference recorded	CONTINUE and log	NON_MATERIAL_CONTINUE_AND_LOG	RC-DOC-NON-MATERIAL-CHANGE	PASS
FVT-17	DecisionRight expires before authorization	DecisionRight validTo passed	HOLD; no authorization possible	HOLD	RC-TEMP-MANDATORY-FACT-NOT-TEMPORALLY-VALID	PASS WITH CONTROLLED EXTERNAL DEPENDENCY
FVT-18	Delegated authority expires	Delegation window closed	HOLD; never fall back to delegator implicitly	HOLD	RC-TEMP-MANDATORY-FACT-NOT-TEMPORALLY-VALID	PASS WITH CONTROLLED EXTERNAL DEPENDENCY
FVT-19	Signature against stale object version	Object version incremented after signing	SIGNATURE_NOT_VALID_FOR_CURRENT_VERSION; evidence retained	SIGNATURE_NOT_VALID_FOR_CURRENT_VERSION	RC-SIG-OBJECT-VERSION-CHANGED	PASS
FVT-20	Duplicate signature request	Same idempotency key replayed	IDEMPOTENT_REPLAY, no second signature	IDEMPOTENT_REPLAY	RC-IDEMP-REPLAY	PASS
FVT-21	Signature service unavailable	Signature adapter down	No provisional signature; governed incomplete state	SIGNATURE_EVIDENCE_INCOMPLETE	RC-SIG-TS-UNAVAILABLE	PASS WITH CONTROLLED EXTERNAL DEPENDENCY
FVT-22	Timestamp unavailable	Timestamp authority unreachable	SIGNATURE_EVIDENCE_INCOMPLETE	SIGNATURE_EVIDENCE_INCOMPLETE	RC-SIG-TS-UNAVAILABLE	PASS WITH CONTROLLED EXTERNAL DEPENDENCY
FVT-23	Concurrent IPERC edit	Second editor submits on stale BaseVersion	CONFLICT_RECONCILIATION_REQUIRED, no last-write-wins	CONFLICT_RECONCILIATION_REQUIRED	RC-CONC-STALE-BASE-VERSION	PASS
FVT-24	Offline update vs newer online state	Sync replays offline command	Both states preserved; reconciliation by authority	CONFLICT_RECONCILIATION_REQUIRED	RC-CONC-STALE-BASE-VERSION	PASS WITH CONTROLLED EXTERNAL DEPENDENCY
FVT-25	Mandatory fact expires while package pending	Permit expires pre-authorization	Package cannot remain READY	HOLD	RC-TEMP-MANDATORY-FACT-NOT-TEMPORALLY-VALID	PASS
FVT-26	Multiple temporal facts expire asynchronously	Two facts cross validity at different times	Each independently reported; no masking	HOLD · offending=TF-A,TF-B	RC-TEMP-MANDATORY-FACT-NOT-TEMPORALLY-VALID	PASS
FVT-27	Future-dated fact	Permit not yet effective	NOT_YET_EFFECTIVE; never counted as valid	NOT_YET_EFFECTIVE	RC-TEMP-NOT-YET-EFFECTIVE	PASS
FVT-28	Controlled external dependency unresolved	EXT-07 stewardship authority unassigned	HOLD with EXTERNAL_VALIDATION_DEPENDENCY, dependency not closed	HOLD	RC-EXT-VALIDATION-DEPENDENCY-UNRESOLVED	PASS WITH CONTROLLED EXTERNAL DEPENDENCY
FVT-29	AI unavailable	AI_OFF	Workflow fully functional; observed verdict READY	AI_OFF	RC-AI-DISABLED	PASS
FVT-30	AI attempts material recommendation outside boundary	AI requests AUTHORIZE_WORK	Rejected; no material effect	REJECTED_OUT_OF_BOUNDARY	RC-AI-MATERIAL-DECISION-REFUSED	PASS

A4 · Determinism & failure containment

Same facts, rules, configuration, timestamp ⇒ same decision

Same inputs ⇒ same decision

TRUE

Observed verdict (T0)

READY

Timestamp boundary changes decision

TRUE

Observed verdict (T1, expired tool)

HOLD

Dependency	Failure	Propagation	Scoped
GPS (AD-08)	No fix	Location context only → manual confirmation	DEPENDENCY SCOPED
Document source (AD-01)	Unavailable	Document determinant only; other determinants still evaluated	DEPENDENCY SCOPED
IAM mock boundary (AD-06)	Unreachable	Authority determinant HOLD; no silent grant	DEPENDENCY SCOPED
Signature adapter (AD-07)	Down	Signature applicability incomplete; package not authorized	DEPENDENCY SCOPED
Storage	Write rejected	Command not acknowledged; no partial material state	DEPENDENCY SCOPED
Synchronisation (AD-10)	Divergence	CONFLICT_RECONCILIATION_REQUIRED; both states retained	DEPENDENCY SCOPED

A4 · Controlled external dependencies

Verified, never closed in Macro A

Inherited

Closed in Macro A

Newly identified

Reconciled count

SafeInterimBehaviour verified for each dependency touched by FVT-05/17/18/21/22/24/28; no dependency closed, none renumbered.

45 · Master configuration & gate register

Historical gate decisions never overwritten

Phase	Gate	Status	Output baseline	Evidence class	Crit	High	Deps	Next
PH6A-FPSO-AIA	G-FPSO-01	PASS	PH6A-FPSO-AIA-REV0	DESIGN	0	0	—	G-FPSO-02
PH6A-FPSO-FCD	G-FPSO-02	PASS	FCD-REV0	DESIGN	0	0	—	G-FPSO-03
PH6A-FPSO-FCA	G-FPSO-03	PASS	FUNCTIONAL-BASELINE-REV0	DESIGN	0	0	12	G-FPSO-04
PH6A-FPSO-IAD	G-FPSO-04	PASS	IAD-REV1	DESIGN	0	0	12	SADR
PH6A-II-SADR	SADR-R0	HOLD	SADR-REV0	DESIGN	1	4	14	REM
PH6A-SADR-REM	REM-R0	COMPLETE PENDING RETEST	REV1-CANDIDATE	DESIGN	0	0	14	RETEST
PH6A-SADR-RETEST	G-FPSO-03R	PASS WITH CONTROLLED EXTERNAL DEPENDENCIES	FUNCTIONAL-BASELINE-REV1 + IAD-REV2	DESIGN	0	0	15	MACRO A
PH6A-FPSO-MPA/A1	G-FPSO-04B	PASS	PH6A-FPSO-BAC-REV0	BECHTELIZATION_DESIGN_ASSURANCE	0	0	15	A2
PH6A-FPSO-MPA/A2	BUILD	BUILD COMPLETE	PH6A-FPSO-PROTOTYPE-REV0	IMPLEMENTATION	0	0	15	A3
PH6A-FPSO-MPA/A3	G-FPSO-05	PASS	PH6A-FPSO-ICV-REV0	IMPLEMENTATION	0	0	15	A4
PH6A-FPSO-MPA/A4	FVT	PASS	PH6A-FPSO-FVT-REV0	SOFTWARE_VERIFICATION	0	0	15	MACRO B

46 · Requirement-to-evidence chain

Architecture → Contract → Clause → Interaction → Implementation → Test → Evidence

Architecture requirement	Contract	Clause	Interaction	Implementation	Test	Evidence class
IADA §Location authority	FC-FPSO-01	§7 confirmation	S02 Location Confirmation	decideLocation()	ICV-R07 / FVT-01,02,03	SOFTWARE_VERIFICATION_EVIDENCE
IADA §Source authority	FC-FPSO-02	§4 revision election	S05 Document Register	electRevision()	ICV-R08 / FVT-04,05	SOFTWARE_VERIFICATION_EVIDENCE
IADA §Applicability	FC-FPSO-03	§5 UNKNOWN semantics	S06 Applicability	evaluatePackage()	ICV-R09 / FVT-06	SOFTWARE_VERIFICATION_EVIDENCE
IADA §Human-in-the-loop	FC-FPSO-04	§3 crew confirmation	S08 Crew	evaluatePackage() crew determinant	ICV-R11 / FVT-09	SOFTWARE_VERIFICATION_EVIDENCE
IADA §Provenance	FC-FPSO-05	§6 IPERC provenance	S09 IPERC Continuo	commit() envelope	ICV-R12 / FVT-23	SOFTWARE_VERIFICATION_EVIDENCE
IADA §Change materiality	FC-FPSO-06	§4 delta assessment	S10 Field Delta	assessRevisionMateriality()	FVT-07,08,15,16	SOFTWARE_VERIFICATION_EVIDENCE
XR-TEMP-01	FC-FPSO-07	§5 tool expiry	S11 Tool Readiness	factState() / temporalGate()	ICV-R13,R17 / FVT-11,12,25,26,27	SOFTWARE_VERIFICATION_EVIDENCE
IADA §Signature	FC-FPSO-08	§7 applicability	S15 Signature Assurance	evaluateSignature()	ICV-R16 / FVT-19,20,21,22	SOFTWARE_VERIFICATION_EVIDENCE
ADR-14 SIMOPS	FC-FPSO-03	§14 SIMOPS aggregate	S12 SIMOPS	simopsAggregate()	ICV-R14 / FVT-14	SOFTWARE_VERIFICATION_EVIDENCE
IADA §AI firewall	FC-FPSO-03	§18 AI boundary	S16 Assurance view	aiRequest()	ICV-R20 / FVT-29,30	SOFTWARE_VERIFICATION_EVIDENCE

49–50 · Macro A acceptance

Application engineering verified — Phase 6A remains HOLD

MACRO_PROMPT_A

ACCEPTED

MacroID

PH6A-FPSO-MPA-REV0

BechtelizedApplicationBaseline

PH6A-FPSO-BAC-REV0

BechtelizationStatus

ACCEPTED

G-FPSO-04B

PASS

Prototype

PH6A-FPSO-PROTOTYPE-REV0

PrototypeStatus

BUILD_COMPLETE

ImplementationConformance

PH6A-FPSO-ICV-REV0

G-FPSO-05

PASS

FunctionalVerification

PH6A-FPSO-FVT-REV0

FunctionalVerificationStatus

PASS

CriticalOpen

HighUncontrolledOpen

MissingImplementation

UncontrolledImplementation

ImplementationSemanticDeviation

ReachableIllegalMaterialStates

AuthorityLeakage

DeterminismViolations

ConcurrencyUncontrolledPaths

IdempotencyUncontrolledPaths

FailureContainmentViolations

AIContainmentViolations

ExternalDependencyCount

ApplicationEngineeringBaseline

PH6A-FPSO-APPLICATION-ENGINEERING-BASELINE-REV0

ApplicationEngineeringBaselineStatus

VERIFIED

MacroPromptB_Authorized

true

OperationalClosureEvidence

NOT_YET_ACQUIRED

Phase6A

HOLD

Phase6B

NOT_AUTHORIZED

Phase7

NO_GO

BC09Protection

ACTIVE

PilotExposure

PROHIBITED

FunctionalBaselineChangeRequired

false

ArchitectureReopenRequired

false

ParentSealChanged

false

Macro A ends at verified application engineering. It does not demonstrate operational effectiveness and it does not close Phase 6A. Acceptance predicate §49 fully met: PASS functional verification with zero critical, authority, determinism, concurrency, idempotency, containment or AI defects. Synthetic data only.