Phase 1 prototype · Phase 2A corrective verification · SYNTHETIC DEMONSTRATION DATA

Integrated Preventive Readiness

Hold point — Phase 3 not authorized

Acting role — demonstration device only, not an authorization mechanism

Superintendent: What will be ready across my area, and what must be resequenced?

Phase 2A · targeted corrective & coverage verification

Authority & Evidence console

IDENTITY RESOLVED

Acting position

Area Superintendent — Concentrator

Person reference

PSN-2210

Recorded attempts

Evidence-grade confirmations

With identity unresolved, no confirmation or authorization may be recorded and nothing renders as evidence-grade.

F-05 — Behavioural authority gating

2A-03 · denials carry AuthorityDenied, RequiredAuthority and DecisionReason with no side effect

PETAR authorization

PETAR-4410 · JC-7701

SIMOPS condition

STOP is non-compensable; HOLD may be dispositioned by competent authority

Location stewardship

canonical / federated mapping state

G-01 — Vacant mandatory stewardship (3100-CONC-CV08-TT02)

2A-04 · ADR-14 governance consumed unchanged

Stewardship state

mandatory vacancy fails closed

DISABLED SAFEAUTHORITY UNRESOLVED

BUSINESS_OWNER — Concentrator Area Manager · MANDATORYASSIGNED
DATA_STEWARD — Federation Data Steward · MANDATORYASSIGNED
WRITE_AUTHORITY — Location Governance Board · MANDATORYVACANT
SIMOPS_COORDINATOR — Shift SIMOPS Coordinator · MANDATORYASSIGNED
ISOLATION_AUTHORITY — Authorized Isolation Officer · MANDATORYVACANT
INHERITANCE_POLICY_OWNER — Readiness Governance LeadASSIGNED
CONFLICT_ARBITER — Integration Conflict ArbiterASSIGNED

Disabled capabilities and assertions

DISABLED SAFECanonical mapping creation / modification
WRITE_AUTHORITY vacant
DISABLED SAFEIsolation boundary registration
ISOLATION_AUTHORITY vacant
DISABLED SAFEInheritance requiring authoritative identity
AuthorityResolutionState = UNRESOLVED

G01-A1 — No alternate actor silently assumes the vacant authority · HELD
G01-A2 — No mapping is promoted while authority is unresolved · HELD
G01-A3 — No inheritance requiring authoritative identity occurs · HELD
G01-A4 — Unrelated Job Cards in 3100-CONC-CV07-TT01 remain unaffected (safely separable) · HELD

Pending mapping remains UNRESOLVED.

G-02 — Cumulative SIMOPS coverage (CUM-2 / CUM-5 / CUM-7)

2A-05 · WS-2026-09-03-TT01-COVERAGE · rule semantics unchanged

Rule	Input work set	Triggered condition	Affected job cards	Consequence	Non-compensable	Owner	Evidence	Result
CUM-2	WS-2026-09-03-TT01-COVERAGE	Isolation boundary ISO-CV07-A shared by 3 concurrent job cards	JC-7811, JC-7812, JC-7813	STOP	NON_COMPENSABLE	Authorized Isolation Officer	EV-2A-CUM2-0001	EXECUTED — TRIGGERED
CUM-5	WS-2026-09-03-TT01-COVERAGE	2 concurrent lifting/intervention activities within one governed location	JC-7811, JC-7812	STOP	NON_COMPENSABLE	Shift SIMOPS Coordinator	EV-2A-CUM5-0001	EXECUTED — TRIGGERED
CUM-7	WS-2026-09-03-TT01-COVERAGE	Concurrent-work interaction cannot be deterministically resolved (UNMAPPED_STATE lifecycle) — fail closed	JC-7814	STOP	NON_COMPENSABLE	Governance Administrator	EV-2A-CUM7-0001	EXECUTED — TRIGGERED

Coverage work set

evaluated 2026-09-03 05:00

JC-7811CV-07 drive coupling alignmentMechanical · 07:00–15:00 · ISO-CV07-A · LIFTINGPREPARING
JC-7812Chute liner panel replacementStructural · 08:00–16:00 · ISO-CV07-A · LIFTINGPREPARING
JC-7813Take-up unit hydraulic serviceMechanical · 09:00–14:00 · ISO-CV07-APREPARING
JC-7814Belt scale re-rangingInstrumentation · 10:00–18:00 · no isolation boundaryUNMAPPED STATE

Pairwise vs location verdict

JC-7811 ↔ JC-7813PASS
JC-7812 ↔ JC-7813PASS
JC-7813 ↔ JC-7814PASS
JC-7811 ↔ JC-7812CONFLICTSimultaneous lifting in overlapping windows

Three of four pairwise evaluations PASS; the location verdict remains STOP. Pairwise PASS never implies location-level PASS.

F-01 — Confirmation evidence history

2A-01 · confirmation history is reconstructable and role-consistent

No evidence-grade confirmation recorded in this session. Confirm a preventive package item on a Job Card as an authorized role to populate this register.

Authority attempt log

every attempt — granted or denied — is retained as assurance evidence

No attempt recorded yet in this session.

Closure verification register

original Phase 2 results are preserved; corrections are subsequent evidence

2A-01

F-01 — Human confirmation evidence

PASSCLOSED

Original condition

In-session confirmation rendered HUMAN_CONFIRMED without ConfirmedBy, ConfirmedRole, ConfirmedAt, context, object version or evidence reference.

Authorized correction

Confirmation now writes a ConfirmationEvidence record (ConfirmedBy, ConfirmedRole, ConfirmedAt, ConfirmationContext, ObjectVersion, EvidenceRef). Identity or timestamp unavailable → object is not rendered as evidence-grade HUMAN_CONFIRMED.

Verification scenario

Authorized confirmation (Supervisor/ES&H); unauthorized attempt (Superintendent, Project Controls); identity-unresolved condition; reconstruction of confirmation history.

Expected behaviour

Attributable, reconstructable, role-consistent confirmation; SYSTEM_PROPOSED distinction preserved.

Actual behaviour

Authorized confirmation records full attribution and appears in the confirmation history. Unauthorized attempt denied (AuthorityDenied) with no state change. Identity UNRESOLVED denies confirmation and the item remains SYSTEM_PROPOSED.

Authority check

CONFIRM_PREVENTIVE_ITEM → PREVENTIVE_PACKAGE_CONFIRMING_AUTHORITY

Side-effect assertion

Denied attempts: sideEffect = NONE. No identity or timestamp is fabricated.

Evidence

Authority & Evidence console — confirmation history + attempt log

Residual risk

LOW — person identity remains position-scoped pending ADR-13 / CA-01.

2A-02

F-02 — Location blocker attribution

PASSCLOSED

Original condition

Location Operational Context did not surface per-Job-Card critical blockers, owners or required actions.

Authorized correction

Location context extended with a blocker attribution table exposing JobCard_ID, Discipline, Blocker_ID, BlockerType, DecisionConsequence, Owner, RequiredAction, RequiredBy and EvidenceRef, plus a Location↔JobCard consistency assertion.

Verification scenario

Location Context → Job Card → DecisionExplanation traversal for JC-7701/7702/7703.

Expected behaviour

The user can determine what blocks which job, why, and who must act; no contradictory blocker state.

Actual behaviour

All blockers attributed to their Job Card with owner and required-by. Location-derived consequence equals each Job Card readiness verdict; no contradiction detected.

Authority check

Not an authority surface — presentation only.

Side-effect assertion

Control ownership remains with the Job Card (controlOwnedBy = JOB_CARD); Location gains no ownership.

Evidence

Location Context — Blocker attribution + consistency assertion

Residual risk

LOW — attribution is derived from the synthetic scenario only.

2A-03

F-05 — Behavioural authority gating

PASSCLOSED

Original condition

Only preventive-package confirmation was behaviourally gated; PETAR, SIMOPS and stewardship restrictions were asserted, not demonstrable.

Authorized correction

Capability-scoped authority evaluation for AUTHORIZE_PETAR, RESOLVE_SIMOPS_CONDITION and MODIFY_LOCATION_MAPPING; every attempt (granted or denied) recorded as assurance evidence.

Verification scenario

PETAR authorization with authorized and unauthorized roles; SIMOPS resolution with competent and non-competent roles against HOLD and STOP; location mapping change with and without stewardship authority, including GPS SEMANTIC_PROPOSAL promotion.

Expected behaviour

Unauthorized attempts denied with AuthorityDenied + RequiredAuthority + DecisionReason and no side effect; STOP never convertible to executable state; canonical mapping unmodified by unauthorized actors.

Actual behaviour

Denials produced with all three fields and sideEffect = NONE. STOP denied even for competent SIMOPS authority (NonCompensableStop). GPS mapping promotion denied (SemanticProposalNotPromotable). All attempts appear in the attempt log.

Authority check

Capability matrix enforced in the decision path, not by hiding controls.

Side-effect assertion

No denied attempt mutated confirmation, authorization or mapping state.

Evidence

Authority & Evidence console — authority attempt log

Residual risk

LOW — prototype role selection remains a demonstration device, not authentication.

2A-04

G-01 — Vacant stewardship scenario

PASSCLOSED

Original condition

Vacant mandatory stewardship path was never exercised by the accepted scenario.

Authorized correction

Synthetic location LOC-3100-CONC-CV08 added with WRITE_AUTHORITY and ISOLATION_AUTHORITY vacant. ADR-14 governance unchanged.

Verification scenario

Attempt governed mapping change and inheritance under vacant mandatory stewardship.

Expected behaviour

AuthorityResolutionState = UNRESOLVED; affected capabilities DISABLED_SAFE.

Actual behaviour

Location renders DISABLED_SAFE; mapping attempt denied with DisabledSafe; pending Q4 mapping remains UNRESOLVED; no alternate actor assumed authority; JC-7701/02/03 in the unrelated location remain unaffected.

Authority check

MODIFY_LOCATION_MAPPING denied for every role while mandatory stewardship is vacant.

Side-effect assertion

No mapping promoted; no inheritance requiring authoritative identity performed.

Evidence

Authority & Evidence console — G-01 panel and assertions G01-A1…A4

Residual risk

LOW

2A-05

G-02 — CUM-2 / CUM-5 / CUM-7 coverage

PASSCLOSED

Original condition

CUM-2, CUM-5 and CUM-7 were implemented but not exercised by the accepted scenario.

Authorized correction

Coverage work set WS-2026-09-03-TT01-COVERAGE added (shared isolation boundary across three cards, two concurrent lifts, one UNMAPPED_STATE lifecycle). Rule semantics unmodified.

Verification scenario

Evaluate the coverage work set against the cumulative rule set.

Expected behaviour

CUM-2, CUM-5 and CUM-7 each trigger with non-compensable consequence; pairwise PASS never implies location PASS.

Actual behaviour

All three rules triggered STOP with recorded inputs, affected job cards, owners and evidence. Three of four pairwise evaluations PASS while the location verdict remains STOP.

Authority check

No authority path can compensate the triggered STOP.

Side-effect assertion

Rule thresholds and semantics unchanged; no rule was relaxed to obtain a PASS.

Evidence

Authority & Evidence console — G-02 coverage register

Residual risk

LOW — CUM-2/5/7 exercised on a synthetic coverage set only.

2A-06

E-01 — Environment defect

PASSCLOSED

Original condition

Stale dev-server module graph blocked /p1 during Phase 2 execution.

Authorized correction

Documented as an environment/tooling issue; no product change.

Verification scenario

Post-recovery re-execution of the Phase 2 journeys.

Expected behaviour

No accepted prototype behaviour changes as a result of the recovery.

Actual behaviour

Identical verdicts, blockers and states observed post-recovery.

Authority check

Not applicable.

Side-effect assertion

No source file modified for recovery.

Evidence

E-01 record

Residual risk

LOW — tooling only.

Traceability

Original Test → Finding → Corrective Action → Retest → Final Disposition

Original Phase 2 result	Finding / gap	Corrective action	Retest	Final disposition
VJ-04 PASS WITH FINDING	F-01	2A-01	Confirmation evidence journey	CLOSED
VJ-02 PASS WITH FINDING	F-02	2A-02	Location → Job Card blocker traversal	CLOSED
VJ-06 PASS (observation)	F-05	2A-03	PETAR / SIMOPS / stewardship gating attempts	CLOSED
Coverage gap	G-01	2A-04	Vacant stewardship fail-closed	CLOSED
Coverage gap	G-02	2A-05	CUM-2 / CUM-5 / CUM-7 execution	CLOSED

The original Phase 2 register (8 PASS, 2 PASS WITH FINDING, 0 FAIL) is retained unchanged. Phase 2A results are recorded as subsequent evidence, not as replacements.

Retained controlled Low findings

not expanded merely for cosmetic closure

F-03 — Retained as controlled Low — no decision-semantic, authority, evidence or blocker impact. (REMAINS OPEN (controlled Low))
F-04 — Retained as controlled Low — no frozen invariant affected. (REMAINS OPEN (controlled Low))
F-06 — Retained as controlled Low — cosmetic only; not expanded in Phase 2A. (REMAINS OPEN (controlled Low))

E-01 — environment defect

ENVIRONMENT / TOOLING

Cause

Stale Vite dev-server module graph after route-tree regeneration; the /p1 route subtree failed to resolve in the running dev process only.

Recovery action

Dev-server process restart; route tree re-generated and all /p1 routes re-served with HTTP 200.

Evidence of no behaviour change

No project source file was modified for the recovery. Post-restart journeys reproduced the identical verdicts, blockers and states recorded pre-defect.

Recurrence risk

LOW — development tooling only; no equivalent path exists in a built deployment.

Disposition

CLOSED — environment defect; not reclassified as a product architecture finding.