Aseguramiento / Técnico
Integrated Acceptance Gate
Consumes the accepted Phase 1 Prototype, Phase 2 Verification and Phase 2A Closure evidence. No redesign performed. Reviewer challenges are recorded as findings and routed to the competent design authority; no accepted baseline is reopened. No platform, product or application is selected at this gate.
ACCEPT WITH CONTROLLED ACTIONS
The capability is operationally credible, governable, supportable in principle, compatible with the enterprise landscape as a bounded decision layer, and usable in field execution for the intended decision. It is suitable to proceed to an enterprise solution decision. Progression is conditioned on the six High controlled actions, none of which reopens an accepted baseline.
- · P3-EA-01 — staff ADR-14 stewardship roles to funded enterprise positions
- · P3-EA-02 — close ADR-03 and CA-03 object-level authority at the option decision
- · P3-ESH-01 / P3-IT-02 — close ADR-13 / CA-01 identity and IAM binding before any real authorization is recorded
- · P3-IT-01 — demonstrate offline capture with fail-closed stale-context handling and deterministic reconciliation
- · P3-TRN-01 — fund the organizational change workstream
Next hold point — Integrated Acceptance Gate → Enterprise Business / Architecture Option Decision
NOT TAKEN. No platform, product or application (Q4, Smart Completions, new build or otherwise) is selected or implied at this gate.
B — Domain-by-domain acceptance register
Would a Superintendent trust this model to understand why work can or cannot start?
YES, with controlled actions. Workface readiness, Job Card preparation, lookahead, multi-discipline coordination, SIMOPS, blocker attribution and location continuity are all demonstrated with causal explanation rather than status colour. The Superintendent sees which condition blocks which Job Card, who owns it and by when — not an aggregated score.
- · /p1/shift — 24/48/72 h lookahead over JC-7701/7702/7703
- · /p1/location — LOC-3100-CONC-CV07-TT01 concurrent work set + blocker attribution (F-02 closure)
- · /p1/jobcard/JC-7701 — DecisionExplanation and determinant list
- · Phase 2 VJ-01…VJ-04; Phase 2A 2A-02 closure
Administrative friction reduction is asserted through the prototype's prepopulation model but has not been measured against the current manual preparation cycle (no baseline time-on-task).
- Required action
- Establish a preparation-cycle baseline (time to prepare and authorize a Job Card today vs with the capability) before enterprise business case sign-off.
- Competent owner
- Construction Manager with Project Controls
- Architecture impact
- None — measurement only.
- Operational impact
- Adoption argument remains qualitative until measured; does not affect decision correctness.
- Residual risk
- MEDIUM / CONTROLLED
Reassessment scope after change is demonstrated on a bounded change; the unbounded-change path routes to broader reassessment but the field re-preparation workload of that path is untested at crew scale.
- Required action
- Run a field trial of the unbounded-change reassessment path across a full shift population before deployment.
- Competent owner
- Construction Manager with ES&H
- Architecture impact
- None — selective vs broad reassessment semantics remain as accepted.
- Operational impact
- Potential shift-start congestion if broad reassessment triggers frequently.
- Residual risk
- MEDIUM / CONTROLLED
Cross-functional challenge scenarios walked with reviewers
| ID | Scenario | Evidence | Observed behaviour | Verdict | Findings |
|---|---|---|---|---|---|
| CS-01 | Clean READY Job Card | JC-7703 preparation path with all preventive items HUMAN_CONFIRMED | READY is reached only after every applicable item is confirmed with attributable evidence; readiness is never asserted from source-system status alone. | CREDIBLE | — |
| CS-02 | Critical-control HOLD | JC-7702 critical control with UNVERIFIABLE verification state | HOLD with the specific control named, owner attributed and required action stated; no compensation from other satisfied dimensions. | CREDIBLE | — |
| CS-03 | Cumulative SIMOPS STOP | WS-2026-09-03-TT01 (CUM-4) and coverage set WS-…-COVERAGE (CUM-2/5/7) | Pairwise PASS with location STOP; competent SIMOPS authority attempt denied with NonCompensableStop and sideEffect NONE. | CREDIBLE | — |
| CS-04 | Competency expiry inside the planned window | Crew competency expiring mid-window on the electrical Job Card | CurrentReadiness and ForecastReadiness diverge; the forecast degradation is explained by the expiring credential and its owner, not by a generic risk score. | CREDIBLE | P3-PC-01 |
| CS-05 | Location continuity between disciplines | LOC-3100-CONC-CV07-TT01 conditions inherited to discipline work contexts | Context inherits with applicability revalidation and provenance; authorization never inherits — the hard non-inheritable list holds. | CREDIBLE | — |
| CS-06 | Q4 unknown / unmapped state | Unmapped Q4 safety-document state in the interaction set | Fails closed to UNVERIFIABLE / STOP via CUM-7 rather than being inferred to a nearest known state. | CREDIBLE WITH FINDING | P3-EA-02 |
| CS-07 | Unavailable stewardship authority | LOC-3100-CONC-CV08 with WRITE_AUTHORITY and ISOLATION_AUTHORITY vacant | AuthorityResolutionState UNRESOLVED, capabilities DISABLED_SAFE, no alternate actor assumes authority, unrelated Job Cards unaffected. | CREDIBLE WITH FINDING | P3-EA-01 |
| CS-08 | Selective reassessment after change | Bounded change to a single preventive determinant | Only affected confirmations are invalidated; unaffected confirmations retain their evidence and version pin. | CREDIBLE | — |
| CS-09 | Unbounded change requiring broader reassessment | Location context version increment affecting multiple disciplines | Broad reassessment is triggered and prior confirmations are demoted to SYSTEM_PROPOSED rather than silently carried forward. | CREDIBLE WITH FINDING | P3-CON-02 |
| CS-10 | Concurrent mechanical / electrical / instrumentation work in one Location | JC-7701 (MECH) / JC-7702 (ELEC) / JC-7703 (INST) in TT01 | One governed operational context with three discipline work contexts; blockers attributed per Job Card; control ownership stays with the Job Card. | CREDIBLE | P3-FLD-01 |
C — Cross-functional conflict register
Positions are not averaged. No voting or weighted score may override a mandatory control or authority boundary.
- Underlying decision right
- Mandatory control integrity (no-compensation rule)
- Competent authority
- ES&H Authority — mandatory control boundary
- Evidence required
- None. The rule is an accepted invariant, not an open question.
Disposition — POSITION B UPHELD. No averaging. Cumulative STOP remains non-compensable. Construction's operational concern is redirected to earlier planning: the STOP must be designed out in the lookahead, not dispositioned at the workface. Recorded as P3-CON-02 planning action, not as a rule change.
- Underlying decision right
- Canonical representation and lifecycle ownership
- Competent authority
- Enterprise Architecture with the Location Governance Authority
- Evidence required
- Object-level capability comparison of candidate enterprise registers against ADR-14 Option C requirements.
Disposition — DEFERRED TO THE NEXT GATE. ADR-14 Option C stands as accepted for the capability; the platform/mastering decision belongs to the Enterprise Business / Architecture Option Decision, not to this acceptance review. Recorded as P3-EA-01.
- Underlying decision right
- Authority and evidence integrity under degraded connectivity
- Competent authority
- ES&H Authority with IT/IM (design authority for offline semantics)
- Evidence required
- Demonstrated offline journey with stale-context detection and deterministic reconnect reconciliation.
Disposition — NOT RESOLVED AT THIS GATE — routed as P3-IT-01 (High). Interim rule preserved: offline may capture, offline may never authorize against unverifiable context. No voting override permitted.
- Underlying decision right
- Recorded state semantics vs presentation
- Competent authority
- Design authority (presentation layer) — state semantics unchanged
- Evidence required
- Field comprehension test of the proposed lexicon.
Disposition — BOTH POSITIONS SATISFIED WITHOUT COMPROMISE OF THE INVARIANT: recorded state names remain canonical; a presentation lexicon is authorized as a controlled action (P3-FLD-01). This is not averaging — the invariant is untouched.
- Underlying decision right
- Schedule authority
- Competent authority
- Project Controls — schedule remains sole schedule authority
- Evidence required
- Forecast labelling bound to the consumed schedule version.
Disposition — POSITION A UPHELD ON AUTHORITY, POSITION B PRESERVED ON FUNCTION: forecast readiness continues, explicitly labelled as a readiness projection against a named schedule version, never as a date. Recorded as P3-PC-01.
Acceptance criteria assessment
| Criterion | Status | Basis |
|---|---|---|
| No unresolved Critical finding exists | MET | Zero Critical findings raised across the eight review domains. |
| No unresolved High finding undermines a structural invariant | MET | Six High findings (P3-ESH-01, P3-EA-01, P3-EA-02, P3-IT-01, P3-IT-02, P3-TRN-01). Each is a deployment or enterprise-decision precondition; none contradicts a frozen invariant, and each maps to an already-visible controlled-open ADR or a funded-action requirement. |
| No review domain identifies an uncontrolled parallel system of record | MET | P3-EA-03 confirms no write-back, no date origination, no permit issuance, no progress claim. The single canonical asset (Location) is deliberately governed under ADR-14 Option C. |
| Authority remains defensible | MET | Behavioural gating demonstrated with zero unauthorized side effects; enterprise identity binding routed to ADR-13 / CA-01 as a precondition of real authorization. |
| No-compensation remains intact | MET | CF-01 upheld without averaging; NonCompensableStop denials recorded for competent authority attempts. |
| Location / SIMOPS behaviour remains operationally credible | MET | CS-03, CS-05, CS-07, CS-10 judged credible; cumulative rules CUM-2/4/5/6/7 exercised; pairwise PASS never implies location PASS. |
| Field usability is adequate for the intended decision | MET | Decision clarity, blocker identification and proposal-vs-confirmation distinction adequate; two Medium usability actions (P3-FLD-01, P3-FLD-02) carried. |
| Enterprise implementation appears technically feasible | MET | Read-oriented federation, pinned decisions and append-only evidence are industrializable; offline and IAM carried as High preconditions, not as feasibility blockers. |
| Controlled Open ADRs remain explicitly visible | MET | ADR-03, ADR-13/CA-01, ADR-15, ADR-16, ADR-17…ADR-24, CA-03, CA-04 remain open and surfaced; none silently resolved during acceptance. |