PHASE 6A — INTEGRATED SIMULATION EVIDENCE CAMPAIGN Rev.1

LIVE_READ nominal — authorized source returns current object and version.

Preconditions: Synthetic Q4 adapter declared LIVE_READ with owner-confirmed participation fixture.

Synthetic inputs: JobCard JC-TT01-M01, Q4 object version v7, retrieved 2026-08-30T09:00Z.

Authority: SourceOwner = SYNTHETIC_CONFIRMED

Source: AVAILABLE / CURRENT

Location: TT01 resolved

Concurrent work: None

Expected decision: Object accepted as source projection; version pinned to evaluation.

Expected failure behaviour: n/a

Actual observed decision: Accepted as projection; ObjectVersion v7 pinned; no local mastership created.

Side effect: NONE

Evidence produced: Decision pin with sourceSystem, objectId, version, retrievalTimestamp.

Invariant checked: Source of truth remains the owning system; readiness layer holds projections only.

Operational evidence still required: BC-01 remains OPEN — real Q4 owner confirmation of LIVE_READ participation and API capability.

CONTROLLED_SNAPSHOT nominal within governed validity.

Preconditions: Snapshot fixture with owner, timestamp, version and validity window.

Synthetic inputs: P6 lookahead snapshot v2026-08-29, validity 7 days.

Authority: SnapshotApprover = SYNTHETIC_CONFIRMED

Source: SNAPSHOT / IN_VALIDITY

Location: TT01

Concurrent work: None

Expected decision: Participation allowed only where DecisionDependencyRule permits snapshot participation.

Expected failure behaviour: Where rule demands LIVE_READ, snapshot must be refused.

Actual observed decision: Snapshot accepted for forecast dimension; refused for authorization-critical dimension per dependency rule.

Side effect: NONE

Evidence produced: Snapshot provenance record + dependency-rule citation.

Invariant checked: Snapshot participation is rule-scoped, never global.

Operational evidence still required: BC-01 remains OPEN — real snapshot governance approval and validity policy per object.

CONTROLLED_MANUAL_FEDERATION with attributable evidence.

Preconditions: Manual federation fixture with named actor, evidence reference and scope limit.

Synthetic inputs: Client Release certificate manually federated for WP-CV07-A.

Authority: Federating actor authorized within declared scope

Source: MANUAL / EVIDENCE_ATTACHED

Location: TT01

Concurrent work: None

Expected decision: Accepted only within governed scope; outside scope refused.

Expected failure behaviour: Scope overflow → refused, no silent widening.

Actual observed decision: Accepted for the declared object/scope only; second object refused.

Side effect: NONE

Evidence produced: Manual federation record (actor, timestamp, evidence ref, scope).

Invariant checked: Manual federation never becomes an implicit interface.

Operational evidence still required: BC-01 remains OPEN — governed manual-federation procedure signed by source owners.

Mandatory source unavailable, no governed fallback.

Preconditions: Q4 adapter forced unavailable.

Synthetic inputs: Readiness evaluation requiring Q4 permit state.

Authority: Valid

Source: UNAVAILABLE

Location: TT01

Concurrent work: None

Expected decision: UNVERIFIABLE → HOLD.

Expected failure behaviour: Fail-closed; no assumed state, no last-known-good promotion.

Actual observed decision: Dimension = UNVERIFIABLE; integrated verdict HOLD with attributed blocker.

Side effect: NONE

Evidence produced: Unverifiable dimension record naming source and owner.

Invariant checked: Absence of evidence is never treated as compliance.

Operational evidence still required: BC-01 remains OPEN — real availability/SLA statements per mandatory source.

Stale snapshot outside governed validity.

Preconditions: Snapshot age 21 days vs 7-day validity.

Synthetic inputs: P6 snapshot v2026-08-09.

Authority: Valid

Source: SNAPSHOT / EXPIRED

Location: TT01

Concurrent work: None

Expected decision: Rejected → HOLD.

Expected failure behaviour: No grace extension inferred by the readiness layer.

Actual observed decision: Snapshot rejected as expired; dimension UNVERIFIABLE; verdict HOLD.

Side effect: NONE

Evidence produced: Validity breach record.

Invariant checked: Validity windows are enforced, not advisory.

Operational evidence still required: BC-01 remains OPEN — owner-approved validity windows per snapshot object.

Source version differs from pinned decision version.

Preconditions: Decision D-101 pinned at doc rev C; source now rev D.

Synthetic inputs: Aconex document TT01-ISO-014 rev D.

Authority: Valid

Source: AVAILABLE / NEWER_VERSION

Location: TT01

Concurrent work: None

Expected decision: Historical decision preserved; new evaluation created.

Expected failure behaviour: No retro-editing of D-101.

Actual observed decision: D-101 immutable at rev C; D-102 raised against rev D; affected dimension reassessed only.

Side effect: NONE

Evidence produced: Two decision records with distinct pinned versions.

Invariant checked: Decision pinning + immutability of history.

Operational evidence still required: BC-01 remains OPEN — real Aconex revision-event feed confirmation.

Source object exists but participation mechanism is not owner-confirmed.

Preconditions: Fixture exposes object with participationMechanism = UNCONFIRMED.

Synthetic inputs: Forwood critical-control object.

Authority: n/a

Source: PRESENT / MECHANISM_UNCONFIRMED

Location: TT01

Concurrent work: None

Expected decision: NOT_AUTHORIZED_FOR_ACCEPTANCE.

Expected failure behaviour: Object visible for design analysis only, never consumed by IRDE.

Actual observed decision: Object refused for decision consumption; flagged NOT_AUTHORIZED_FOR_ACCEPTANCE.

Side effect: NONE

Evidence produced: Participation refusal record.

Invariant checked: System capability ≠ authorized participation.

Operational evidence still required: BC-01 remains OPEN — written owner confirmation of participation mechanism per object.

No owner evidence of API — capability must not be inferred.

Preconditions: Vendor marketing claim only, no owner statement.

Synthetic inputs: Assumed REST endpoint for third-party competency system.

Authority: n/a

Source: CAPABILITY_UNKNOWN

Location: n/a

Concurrent work: n/a

Expected decision: API not inferred; interface remains UNCONFIRMED.

Expected failure behaviour: No adapter is scheduled or assumed feasible.

Actual observed decision: Capability recorded UNKNOWN; no adapter modelled; dependent readiness held.

Side effect: NONE

Evidence produced: Capability-unknown register entry.

Invariant checked: No invented source authority or capability.

Operational evidence still required: BC-01 remains OPEN — owner API/interface capability statements.

Valid real-role-equivalent synthetic identity resolves to permitted role/scope.

Preconditions: Synthetic identity SIM-USR-001 = Area Authority, TT01, mechanical scope.

Synthetic inputs: Confirm preventive package for JC-TT01-M01.

Authority: RESOLVED (synthetic)

Source: n/a

Location: TT01 in scope

Concurrent work: None

Expected decision: Action technically permitted in simulation.

Expected failure behaviour: n/a

Actual observed decision: Permitted; confirmation recorded with actor, role, scope, timestamp.

Side effect: SIMULATED_CONFIRMATION_RECORD

Evidence produced: Attributable HUMAN_CONFIRMED record (synthetic).

Invariant checked: Authority is scope-bound and attributable.

Operational evidence still required: BC-02 remains OPEN — real IAM role/scope model and provisioned identities.

Unknown identity attempts a governed action.

Preconditions: No identity record.

Synthetic inputs: Anonymous confirmation attempt.

Authority: UNRESOLVED

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Denied.

Expected failure behaviour: sideEffect = NONE; no partial write.

Actual observed decision: Denied; DISABLED_SAFE control; no state change.

Side effect: NONE

Evidence produced: Denial record.

Invariant checked: Fail-closed on unresolved identity.

Operational evidence still required: BC-02 remains OPEN — real identity resolution service confirmation.

Valid identity, wrong area.

Preconditions: SIM-USR-002 scoped to TT02.

Synthetic inputs: Attempt authorization in TT01.

Authority: RESOLVED / OUT_OF_AREA_SCOPE

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Denied.

Expected failure behaviour: No area inheritance.

Actual observed decision: Denied with explicit scope-mismatch reason.

Side effect: NONE

Evidence produced: Scope denial record.

Invariant checked: Inherit context — never inherit authorization.

Operational evidence still required: BC-02 remains OPEN — real area-scope attributes in enterprise IAM.

Valid identity, wrong activity / risk scope.

Preconditions: SIM-USR-003 authorized for low-risk mechanical only.

Synthetic inputs: Attempt to authorize high-risk energised electrical activity.

Authority: RESOLVED / OUT_OF_RISK_SCOPE

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Denied.

Expected failure behaviour: Risk class is a hard boundary.

Actual observed decision: Denied; escalation to competent authority proposed, not auto-granted.

Side effect: NONE

Evidence produced: Risk-scope denial record.

Invariant checked: Authority is risk-class bound.

Operational evidence still required: BC-02 remains OPEN — risk-class authority matrix ratified by the organization.

Expired / revoked authority.

Preconditions: Authority validTo = yesterday.

Synthetic inputs: Authorization attempt today.

Authority: EXPIRED

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Denied.

Expected failure behaviour: No grace period.

Actual observed decision: Denied; prior decisions remain valid at their pinned time.

Side effect: NONE

Evidence produced: Expiry denial record.

Invariant checked: Temporal validity of authority.

Operational evidence still required: BC-02 remains OPEN — authority lifecycle (grant/revoke) evidence from IAM owner.

Authority unavailable and no valid delegate.

Preconditions: Role vacant, delegation register empty.

Synthetic inputs: Decision requiring that authority.

Authority: VACANT / NO_DELEGATE

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: HOLD / DISABLED_SAFE.

Expected failure behaviour: Control disabled, not silently reassigned.

Actual observed decision: Action DISABLED_SAFE; verdict HOLD; vacancy escalated to stewardship owner.

Side effect: NONE

Evidence produced: Vacancy hold record.

Invariant checked: Vacancy fails closed (G-01 behaviour).

Operational evidence still required: BC-02 remains OPEN — named authorities and delegation register from the organization.

Same user, shift change — authority valid Shift A, invalid Shift B.

Preconditions: Shift-bound authority window 06:00–18:00.

Synthetic inputs: Authorization attempt 19:10.

Authority: OUT_OF_SHIFT_WINDOW

Source: n/a

Location: TT01

Concurrent work: Night crew active

Expected decision: Denied — no authority inheritance across shift.

Expected failure behaviour: Shift A decisions retained; new shift requires its own authority.

Actual observed decision: Denied; Shift A pinned decisions unchanged; handover record required.

Side effect: NONE

Evidence produced: Shift-boundary denial + handover requirement.

Invariant checked: Authority does not persist across shift boundaries.

Operational evidence still required: BC-02 remains OPEN — real shift roster / authority-window integration.

Technical click permission but no decision right.

Preconditions: UI reachable, authority model denies.

Synthetic inputs: Forced submit bypassing disabled control.

Authority: NO_DECISION_RIGHT

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Rejected by authority model, not by UI alone.

Expected failure behaviour: Server-side/domain refusal, sideEffect NONE.

Actual observed decision: Domain layer rejected; no state mutation; refusal logged.

Side effect: NONE

Evidence produced: Domain-level rejection record.

Invariant checked: UI gating is never the control of record.

Operational evidence still required: BC-02 remains OPEN — enforcement evidence in the real IAM/authorization tier.

Valid transition PLANNED → PREPARING by authorized lifecycle owner.

Preconditions: Lifecycle owner resolved.

Synthetic inputs: JC-TT01-M01.

Authority: RESOLVED

Source: Q4 available

Location: TT01

Concurrent work: None

Expected decision: Transition accepted and recorded.

Expected failure behaviour: n/a

Actual observed decision: Accepted; transition record with actor, from/to state, timestamp.

Side effect: SIMULATED_LIFECYCLE_TRANSITION

Evidence produced: Lifecycle transition record.

Invariant checked: Transitions are authority-bound and attributable.

Operational evidence still required: BC-03 remains OPEN — ratified lifecycle owner matrix per object.

PLANNED → AUTHORIZED attempted by unauthorized actor.

Preconditions: Actor lacks authorization right.

Synthetic inputs: JC-TT01-E01.

Authority: NOT_PERMITTED

Source: Available

Location: TT01

Concurrent work: None

Expected decision: Denied.

Expected failure behaviour: sideEffect NONE.

Actual observed decision: Denied; JobCard remains PLANNED.

Side effect: NONE

Evidence produced: Denial record.

Invariant checked: Lifecycle authority separation.

Operational evidence still required: BC-03 remains OPEN — organizational confirmation of who may authorize.

Invalid state jump skipping mandatory lifecycle state.

Preconditions: State machine frozen per Phase 5.

Synthetic inputs: PLANNED → EXECUTING.

Authority: Valid

Source: Available

Location: TT01

Concurrent work: None

Expected decision: Rejected.

Expected failure behaviour: No auto-fill of skipped states.

Actual observed decision: Rejected as illegal transition; state unchanged.

Side effect: NONE

Evidence produced: Illegal transition record.

Invariant checked: Deterministic state machine integrity.

Operational evidence still required: BC-03 remains OPEN — confirmed enterprise lifecycle mapping to Q4 states.

Lifecycle owner unavailable, no valid delegate.

Preconditions: Owner vacancy.

Synthetic inputs: Transition request.

Authority: VACANT

Source: Available

Location: TT01

Concurrent work: None

Expected decision: DISABLED_SAFE.

Expected failure behaviour: No fallback to any available user.

Actual observed decision: Control disabled; escalation raised; no transition.

Side effect: NONE

Evidence produced: Vacancy record.

Invariant checked: No silent reassignment.

Operational evidence still required: BC-03 remains OPEN — delegation rules ratified by competent authority.

Attempt to modify completed JobCard history.

Preconditions: JC closed with pinned evidence.

Synthetic inputs: Edit request on closed lifecycle record.

Authority: Valid actor

Source: Available

Location: TT01

Concurrent work: None

Expected decision: Immutable history preserved.

Expected failure behaviour: Correction only as new appended record with provenance.

Actual observed decision: Edit refused; correction recorded as new event referencing the original.

Side effect: NONE

Evidence produced: Original + correction provenance chain.

Invariant checked: No retrospective rewriting of evidence.

Operational evidence still required: BC-03 remains OPEN — records-retention and correction procedure approval.

Temporary Modification proposed without ratified authority.

Preconditions: TempMod authority chain unratified (controlled-open dependency).

Synthetic inputs: TempMod TM-014 on isolation boundary.

Authority: UNRATIFIED

Source: Available

Location: TT01

Concurrent work: Two adjacent JobCards

Expected decision: No activation.

Expected failure behaviour: Proposal retained as SEMANTIC_PROPOSAL, never consumed by IRDE.

Actual observed decision: TempMod remained PROPOSED; readiness unaffected; dependent work HOLD.

Side effect: NONE

Evidence produced: Proposal record with non-consumption flag.

Invariant checked: SEMANTIC_PROPOSAL is never decision input.

Operational evidence still required: BC-03 remains OPEN — ratified Temporary Modification authority chain (controlled-open).

Steward available — valid canonical mapping decision.

Preconditions: Mapping Steward resolved (synthetic).

Synthetic inputs: P6 WBS 1.4.2 → canonical Location TT01.

Authority: RESOLVED

Source: P6 + canonical register available

Location: TT01

Concurrent work: None

Expected decision: Mapping accepted and attributed.

Expected failure behaviour: n/a

Actual observed decision: Mapping recorded with steward, rationale, timestamp, version.

Side effect: SIMULATED_MAPPING_RECORD

Evidence produced: Mapping decision record.

Invariant checked: ADR-14 Option C federated canonical Location register.

Operational evidence still required: BC-04 remains OPEN — named, accepted Mapping Steward with mandate and capacity.

Steward vacancy with no delegate.

Preconditions: Stewardship role vacant.

Synthetic inputs: New mapping request.

Authority: VACANT

Source: Available

Location: Unmapped

Concurrent work: None

Expected decision: DISABLED_SAFE.

Expected failure behaviour: Mapping queued, never auto-resolved.

Actual observed decision: Control disabled; dependent readiness HOLD; escalation raised.

Side effect: NONE

Evidence produced: Vacancy + queued mapping record.

Invariant checked: Stewardship vacancy fails closed.

Operational evidence still required: BC-04 remains OPEN — stewardship staffing decision (ADR-14 stewardship, controlled-open).

Valid delegate, explicit delegation valid for scope and time.

Preconditions: Delegation D-77, TT01, 2026-08-30..09-05.

Synthetic inputs: Mapping decision within window.

Authority: DELEGATED_VALID

Source: Available

Location: TT01

Concurrent work: None

Expected decision: Decision permitted, attributed to delegate + delegating authority.

Expected failure behaviour: Outside window → denied.

Actual observed decision: Permitted in window; denied on a second attempt dated outside window.

Side effect: SIMULATED_MAPPING_RECORD

Evidence produced: Delegation-attributed decision record.

Invariant checked: Delegation is explicit, scoped and time-bound.

Operational evidence still required: BC-04 remains OPEN — real delegation register maintained by the organization.

Silent reassignment attempt by another available user.

Preconditions: No delegation exists.

Synthetic inputs: Alternate user attempts stewardship decision.

Authority: NOT_DELEGATED

Source: Available

Location: TT01

Concurrent work: None

Expected decision: Denied.

Expected failure behaviour: Availability is not authority.

Actual observed decision: Denied; escalation path offered; no mapping change.

Side effect: NONE

Evidence produced: Denial record.

Invariant checked: Named role ≠ competent authority; availability ≠ mandate.

Operational evidence still required: BC-04 remains OPEN — organizational acceptance of stewardship boundaries.

Mapping conflict — P6 and Q4 point to different canonical Locations.

Preconditions: Conflicting identifiers in fixtures.

Synthetic inputs: P6 → TT01; Q4 → TT01-B.

Authority: Steward required

Source: Both available

Location: CONFLICT

Concurrent work: None

Expected decision: MAPPING_CONFLICT; no automatic remap.

Expected failure behaviour: Dependent readiness HOLD until steward resolves.

Actual observed decision: Conflict raised, both candidates retained, readiness HOLD, no silent selection.

Side effect: NONE

Evidence produced: Conflict record with both source claims.

Invariant checked: No silent mapping.

Operational evidence still required: BC-04 remains OPEN — steward-resolved canonical mapping for real project data.

Segregation-of-duties conflict — same actor proposes, configures and approves a material rule.

Preconditions: SoD rule active.

Synthetic inputs: Rule R-CC-02 change by single actor.

Authority: SoD_VIOLATION

Source: n/a

Location: n/a

Concurrent work: n/a

Expected decision: Governance hold.

Expected failure behaviour: Rule not activated; change parked.

Actual observed decision: Rule change held; second competent approver required; no activation.

Side effect: NONE

Evidence produced: SoD hold record.

Invariant checked: Rule governance separation (ADR-16).

Operational evidence still required: BC-04 remains OPEN — ratified SoD matrix and rule-approval body.

Minimum competency fact — CompetencyValid = YES without full training record.

Preconditions: Minimisation contract active.

Synthetic inputs: Decision fact only.

Authority: Valid

Source: Competency source available

Location: TT01

Concurrent work: None

Expected decision: Decision fact sufficient where governed.

Expected failure behaviour: n/a

Actual observed decision: Readiness evaluated on boolean fact + validity date; no personal records ingested.

Side effect: NONE

Evidence produced: Minimised decision fact with provenance pointer.

Invariant checked: Data minimisation by decision necessity.

Operational evidence still required: BC-05 remains OPEN — data-protection/classification approval for the minimised contract.

Excess HR data attempts to flow downstream.

Preconditions: Fixture emits full personnel record.

Synthetic inputs: Payload with medical, salary, address fields.

Authority: n/a

Source: Available

Location: TT01

Concurrent work: None

Expected decision: Unnecessary fields excluded at the boundary.

Expected failure behaviour: Excess fields never persisted, not merely hidden.

Actual observed decision: Boundary filter dropped non-decision fields; only CompetencyValid retained.

Side effect: NONE

Evidence produced: Field-exclusion record.

Invariant checked: Minimisation is enforced at ingestion, not presentation.

Operational evidence still required: BC-05 remains OPEN — HR/data-owner confirmation of permitted attributes.

Fitness decision pin — only the governed readiness fact retained.

Preconditions: Fitness-for-duty source declared.

Synthetic inputs: FitnessValid = YES, validTo.

Authority: Valid

Source: Available

Location: TT01

Concurrent work: None

Expected decision: Pin fact only; medical detail excluded.

Expected failure behaviour: n/a

Actual observed decision: Decision pin holds fact + source + timestamp; reconstruction possible without medical data.

Side effect: NONE

Evidence produced: Pinned readiness fact.

Invariant checked: Reconstruction without over-retention.

Operational evidence still required: BC-05 remains OPEN — occupational-health data governance approval.

Material data class not decided.

Preconditions: Classification = UNRESOLVED for object X.

Synthetic inputs: Attempt to persist/release object X.

Authority: n/a

Source: Available

Location: n/a

Concurrent work: n/a

Expected decision: Dependent persistence/release blocked.

Expected failure behaviour: Fail-closed on unresolved classification.

Actual observed decision: Persistence blocked; readiness dimension UNVERIFIABLE; escalation to data owner.

Side effect: NONE

Evidence produced: Classification-block record.

Invariant checked: Unclassified material data is never released.

Operational evidence still required: BC-05 remains OPEN — completed data classification decisions per object.

Retention expiration — record outside approved retention.

Preconditions: RC-RET-01 v1.1 (simulation configuration): retention configured PER EVIDENCE CLASS — SourcePayloadProjection 90d, DecisionPin/Provenance RETAIN_UNTIL_RECONSTRUCTION_OBLIGATION_ENDS, AuthorityRecord RETAIN_FULL_LIFECYCLE. SimulationConfigurationApproval = DESIGN_AUTHORIZED_FOR_TEST_ONLY.

Synthetic inputs: Record aged 120 days.

Authority: n/a

Source: Available

Location: n/a

Concurrent work: n/a

Expected decision: Governed retention behaviour applied.

Expected failure behaviour: Decision reconstruction must remain possible via retained pins.

Actual observed decision: Class-resolved retention applied: expired SourcePayloadProjection withdrawn at 90d; DecisionPin, provenance and authority record retained under their own class; reconstruction succeeded with explicit payload-withdrawn marker. No unclassified record encountered (unclassified → RETAIN_AND_HOLD, fail-closed).

Side effect: NONE

Evidence produced: Retention action record with evidence class, configured period and retained-pin reference.

Invariant checked: Retention vs reconstructability coexist; retention is resolved per evidence class, never by a single flat period.

Operational evidence still required: BC-05 remains OPEN — approved retention schedule per evidence class.

Unauthorized evidence access attempt.

Preconditions: Actor without evidence-read right.

Synthetic inputs: Request for pinned evidence bundle.

Authority: NOT_PERMITTED

Source: n/a

Location: n/a

Concurrent work: n/a

Expected decision: Denied.

Expected failure behaviour: Denial logged; no partial disclosure.

Actual observed decision: Denied; access attempt logged with actor and object.

Side effect: NONE

Evidence produced: Access denial record.

Invariant checked: Evidence access is authority-bound.

Operational evidence still required: BC-05 remains OPEN — evidence-access policy and custodian confirmation.

Path A simulated source available — Critical Control VERIFIED.

Preconditions: Synthetic critical-control source (Path A analogue). Path A is NOT elected operationally.

Synthetic inputs: CC-01 verified, CC-02 verified, CC-03 verified.

Authority: Verifier authority synthetic

Source: SIMULATED_AVAILABLE

Location: TT01

Concurrent work: None

Expected decision: Usable as simulation only.

Expected failure behaviour: Never treated as real critical-control verification.

Actual observed decision: Dimension VERIFIED (SIMULATED); readiness candidate READY marked SIMULATION_ONLY.

Side effect: NONE

Evidence produced: Simulated verification record flagged NON_ACCEPTANCE_EVIDENCE.

Invariant checked: Simulated verification cannot become operational verification.

Operational evidence still required: BC-06 remains OPEN — Path A real critical-control source, or a formal Path B rescope.

Critical Control UNKNOWN.

Preconditions: No verification state available.

Synthetic inputs: CC-02 unknown.

Authority: Valid

Source: UNKNOWN

Location: TT01

Concurrent work: None

Expected decision: HOLD.

Expected failure behaviour: Unknown ≠ compliant.

Actual observed decision: Verdict HOLD; blocker attributed to critical control dimension.

Side effect: NONE

Evidence produced: Unknown-state hold record.

Invariant checked: Fail-closed on unknown mandatory control.

Operational evidence still required: BC-06 remains OPEN — authoritative critical-control verification source.

One mandatory control missing, others verified — no compensation.

Preconditions: CC-01/CC-03 verified, CC-02 missing.

Synthetic inputs: Integrated evaluation.

Authority: Valid

Source: Partial

Location: TT01

Concurrent work: None

Expected decision: HOLD; no averaging.

Expected failure behaviour: Score/percentage never overrides a mandatory failure.

Actual observed decision: HOLD with single attributed blocker; other dimensions displayed but non-compensating.

Side effect: NONE

Evidence produced: No-compensation evaluation trace.

Invariant checked: Non-compensable mandatory conditions.

Operational evidence still required: BC-06 remains OPEN — confirmed mandatory critical-control set for the Pilot scope.

Critical Control fails after READY.

Preconditions: Decision D-210 READY (simulated).

Synthetic inputs: CC-01 fails at T+2h.

Authority: Valid

Source: Available

Location: TT01

Concurrent work: Work in progress

Expected decision: Reassessment → HOLD/STOP as governed.

Expected failure behaviour: Historical READY preserved; new decision supersedes.

Actual observed decision: New decision D-211 = STOP; D-210 retained immutable; awareness notification raised.

Side effect: NONE

Evidence produced: Change-event decision chain.

Invariant checked: Change assurance + immutability.

Operational evidence still required: BC-06 remains OPEN — real change-event feed from the critical-control source.

Path B formal-rescope simulation.

Preconditions: Simulated approved rescope artefact — no operational election of Path B.

Synthetic inputs: Rescope artefact RS-01 (synthetic) with DecisionAuthority, Reason, PilotEvidenceLost, ResidualRisk, Phase7Impact.

Authority: Synthetic decision authority

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Critical Control omitted only within explicitly rescoped Pilot evidence scope.

Expected failure behaviour: Outside the rescoped scope, HOLD persists.

Actual observed decision: Within rescoped scope evaluation proceeded without CC; outside scope HOLD retained; Phase 7 impact recorded as evidence loss.

Side effect: NONE

Evidence produced: SIMULATED_ONLY / NON_ACCEPTANCE_EVIDENCE rescope trace.

Invariant checked: Path B is never chosen to facilitate closure; both paths remain open.

Operational evidence still required: BC-06 remains OPEN — an explicit Path A / Path B decision by competent authority.

User / access issue with DesignTeamPresent = NO.

Preconditions: Design team withdrawn; support model simulated only.

Synthetic inputs: Synthetic ticket for: User / access issue.

Authority: Support roles synthetic

Source: n/a

Location: n/a

Concurrent work: n/a

Expected decision: Governed escalation path exists and terminates at a competent owner: L1 → IAM owner.

Expected failure behaviour: No path may terminate at the design team or at an undefined owner.

Actual observed decision: Path resolved end-to-end: L1 → IAM owner; no design-team dependency in the chain.

Side effect: NONE

Evidence produced: Escalation path trace (DesignEvidence).

Invariant checked: Support model is independent of the design team.

Operational evidence still required: BC-07 remains OPEN — real L1/L2/L3 staffing, SLAs and an executed operational support drill (this is not drill evidence).

Mapping conflict with DesignTeamPresent = NO.

Preconditions: Design team withdrawn; support model simulated only.

Synthetic inputs: Synthetic ticket for: Mapping conflict.

Authority: Support roles synthetic

Source: n/a

Location: n/a

Concurrent work: n/a

Expected decision: Governed escalation path exists and terminates at a competent owner: L1 → L2 → Mapping Steward.

Expected failure behaviour: No path may terminate at the design team or at an undefined owner.

Actual observed decision: Path resolved end-to-end: L1 → L2 → Mapping Steward; no design-team dependency in the chain.

Side effect: NONE

Evidence produced: Escalation path trace (DesignEvidence).

Invariant checked: Support model is independent of the design team.

Operational evidence still required: BC-07 remains OPEN — real L1/L2/L3 staffing, SLAs and an executed operational support drill (this is not drill evidence).

Rule question with DesignTeamPresent = NO.

Preconditions: Design team withdrawn; support model simulated only.

Synthetic inputs: Synthetic ticket for: Rule question.

Authority: Support roles synthetic

Source: n/a

Location: n/a

Concurrent work: n/a

Expected decision: Governed escalation path exists and terminates at a competent owner: L1 → Rule Owner.

Expected failure behaviour: No path may terminate at the design team or at an undefined owner.

Actual observed decision: Path resolved end-to-end: L1 → Rule Owner; no design-team dependency in the chain.

Side effect: NONE

Evidence produced: Escalation path trace (DesignEvidence).

Invariant checked: Support model is independent of the design team.

Operational evidence still required: BC-07 remains OPEN — real L1/L2/L3 staffing, SLAs and an executed operational support drill (this is not drill evidence).

Interface failure with DesignTeamPresent = NO.

Preconditions: Design team withdrawn; support model simulated only.

Synthetic inputs: Synthetic ticket for: Interface failure.

Authority: Support roles synthetic

Source: n/a

Location: n/a

Concurrent work: n/a

Expected decision: Governed escalation path exists and terminates at a competent owner: L1 → L2 → L3 / System Owner.

Expected failure behaviour: No path may terminate at the design team or at an undefined owner.

Actual observed decision: Path resolved end-to-end: L1 → L2 → L3 / System Owner; no design-team dependency in the chain.

Side effect: NONE

Evidence produced: Escalation path trace (DesignEvidence).

Invariant checked: Support model is independent of the design team.

Operational evidence still required: BC-07 remains OPEN — real L1/L2/L3 staffing, SLAs and an executed operational support drill (this is not drill evidence).

Authority issue with DesignTeamPresent = NO.

Preconditions: Design team withdrawn; support model simulated only.

Synthetic inputs: Synthetic ticket for: Authority issue.

Authority: Support roles synthetic

Source: n/a

Location: n/a

Concurrent work: n/a

Expected decision: Governed escalation path exists and terminates at a competent owner: L1 → competent authority.

Expected failure behaviour: No path may terminate at the design team or at an undefined owner.

Actual observed decision: Path resolved end-to-end: L1 → competent authority; no design-team dependency in the chain.

Side effect: NONE

Evidence produced: Escalation path trace (DesignEvidence).

Invariant checked: Support model is independent of the design team.

Operational evidence still required: BC-07 remains OPEN — real L1/L2/L3 staffing, SLAs and an executed operational support drill (this is not drill evidence).

Evidence reconstruction with DesignTeamPresent = NO.

Preconditions: Design team withdrawn; support model simulated only.

Synthetic inputs: Synthetic ticket for: Evidence reconstruction.

Authority: Support roles synthetic

Source: n/a

Location: n/a

Concurrent work: n/a

Expected decision: Governed escalation path exists and terminates at a competent owner: Assurance → evidence custodian / source.

Expected failure behaviour: No path may terminate at the design team or at an undefined owner.

Actual observed decision: Path resolved end-to-end: Assurance → evidence custodian / source; no design-team dependency in the chain.

Side effect: NONE

Evidence produced: Escalation path trace (DesignEvidence).

Invariant checked: Support model is independent of the design team.

Operational evidence still required: BC-07 remains OPEN — real L1/L2/L3 staffing, SLAs and an executed operational support drill (this is not drill evidence).

All prerequisites available.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: Field prerequisite model can reach a READY candidate.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: READY candidate reached, flagged SIMULATION_ONLY; no operational authorization issued.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: Positive path is reachable and attributable.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

Engineering missing.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: HOLD.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: HOLD; blocker attributed to engineering dimension.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: Single mandatory gap holds the whole decision.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

Materials unavailable.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: HOLD.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: HOLD; materials blocker attributed with owner.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: No compensation by other dimensions.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

Equipment unavailable.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: HOLD.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: HOLD; equipment blocker attributed.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: Deterministic blocker attribution.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

Workforce competency expired.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: HOLD.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: HOLD; competency expiry attributed with expiry date.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: Temporal validity enforced.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

Client release absent.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: HOLD.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: HOLD; client release blocker attributed.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: External release is mandatory and non-compensable.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

Environmental restriction (wind breach).

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: Governed HOLD/STOP for applicable activities only.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: Lifting JobCard STOP; non-exposed mechanical JobCard unaffected.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: Environmental applicability is activity-scoped, not blanket.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

Work Location unresolved.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: No readiness authorization.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: Evaluation refused; verdict HOLD; mapping escalation raised.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: No readiness without canonical Location.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

JobCard cancelled.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: Dependent readiness cancelled; no stale READY.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: Dependent readiness invalidated immediately; prior decisions retained as history only.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: No stale authorization survives cancellation.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

Execution window changes.

Preconditions: Synthetic CV-07 workfront data only; no real project data.

Synthetic inputs: CV-07 workfront, JobCards JC-CV07-01..03.

Authority: Synthetic field authorities

Source: Synthetic prerequisite sources

Location: CV-07 / TT01 resolved unless stated

Concurrent work: As declared per scenario

Expected decision: Time-dependent conditions revalidated.

Expected failure behaviour: Fail-closed; missing prerequisite is never compensated.

Actual observed decision: Competency/permit/environmental validity re-evaluated against the new window; two conditions flipped to HOLD.

Side effect: NONE

Evidence produced: Field readiness evaluation trace with attributed blockers.

Invariant checked: Time-bounded conditions are revalidated on window change.

Operational evidence still required: BC-08 remains OPEN — real workfront prerequisite data and field-owner confirmation.

12 metrics defined.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: DEFINED, not COLLECTING.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: All 12 metrics DEFINED; collection state NOT_STARTED; no progress implied.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Definition ≠ collection.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Sources confirmed synthetically.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: Simulation status only.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Source confirmations flagged SIMULATED; no owner confirmation claimed.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Synthetic confirmation ≠ owner confirmation.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Missing timestamp on an event.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: Metric not collection-ready.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Event rejected for baseline use; metric marked NOT_COLLECTION_READY.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Timestamp integrity is mandatory.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Missing data.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: Apply governed missing-data rule.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Missing-data rule applied; no imputation; metric reported with explicit gap.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: No invented data.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Corrected event.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: Preserve original + correction provenance.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Original retained; correction appended with actor, reason, timestamp.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: No overwrite of measurement history.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Concurrent constraints.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: Avoid double counting.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Single delay attributed once; concurrent constraints linked, not summed.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: No double counting.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Shared causation.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: SHARED_CAUSATION.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Event classified SHARED_CAUSATION; no single-owner attribution forced.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Honest attribution semantics.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Attribution impossible.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: UNATTRIBUTED.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Event classified UNATTRIBUTED and excluded from causal claims.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Unattributed data never becomes benefit evidence.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Pilot exposure before baseline.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: PROHIBITED.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Exposure request refused; BC09Protection held; no ways-of-working change permitted.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Time-irreversible baseline protection.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Simulated detected contamination event.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: BC09_CONTAMINATION_EVENT; no retrospective repair.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Contamination flagged, scope quarantined, affected metrics marked non-recoverable; no repair attempted.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Contamination is recorded, never repaired.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Historical reconstruction attempt as BEFORE baseline.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: Historical data is reference only, not prospective BEFORE.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Historical dataset accepted as REFERENCE_ONLY; refused as BEFORE baseline.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Prospective-only baseline rule.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Baseline insufficient at review point.

Preconditions: Synthetic data only. BC09Protection ACTIVE. PilotExposure PROHIBITED. No real baseline started.

Synthetic inputs: 12 frozen metric definitions, synthetic events.

Authority: Measurement owner synthetic

Source: Synthetic

Location: CV-07 / TT01

Concurrent work: Synthetic

Expected decision: Collection continues; no invented duration.

Expected failure behaviour: No retrospective baseline construction; no invented values.

Actual observed decision: Sufficiency test FAILED; collection extended; no statistical claim made.

Side effect: NONE

Evidence produced: Measurement simulation trace (no baseline data created).

Invariant checked: Sufficiency is evidenced, not asserted.

Operational evidence still required: BC-09 remains OPEN — prospective BEFORE collection formally started with real timestamped sources.

Single JobCard, no concurrent interaction.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: Location evaluation PASS.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: PASS; no SIMOPS interaction recorded.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Baseline non-interaction case.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Two compatible JobCards.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: Pairwise PASS and Location PASS.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: Both pairwise and cumulative evaluation PASS.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Compatible concurrency permitted.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Three JobCards, pairwise PASS, cumulative FAIL.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: LocationConcurrentWorkSet = STOP/HOLD.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: Cumulative CUM-3 breach → LOCATION VERDICT = STOP. Subordinate pairwise checks PASS but are non-determinative. PAIRWISE PASS ≠ LOCATION PASS.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Cumulative SIMOPS supremacy over pairwise results.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Energy + isolation interaction.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: Conflict surfaced.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: Isolation boundary vs energisation conflict raised; both JobCards HOLD.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Energy conflicts are surfaced, not netted.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Access / exclusion-zone overlap.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: Conflict surfaced.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: Exclusion zone overlap detected; lower-priority activity HOLD.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Spatial exclusion is a hard constraint.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Environmental interaction affects only applicable jobs.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: Wind restriction applies selectively.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: Lifting HOLD; welding inside enclosure unaffected.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Applicability check before restriction propagation.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Equipment relocated between Locations.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: Location context updated; historical evidence preserved.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: New context applied forward; prior decisions retain their original Location pin.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Context change is prospective, never retrospective.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Location parent condition propagation.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: DOWNWARD_WITH_APPLICABILITY_CHECK.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: Parent restriction propagated to applicable children only; non-applicable child unaffected.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Downward propagation is applicability-filtered.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Authorization inheritance attempt from parent Location.

Preconditions: Synthetic Location TT01 with child work areas; CUM-1…CUM-7 cumulative rules active.

Synthetic inputs: Synthetic JobCard sets and Location context.

Authority: Scenario-specific

Source: Synthetic

Location: TT01 hierarchy

Concurrent work: Scenario-specific

Expected decision: Prohibited.

Expected failure behaviour: Cumulative interaction is evaluated at Location level, never by pairwise summary.

Actual observed decision: Inherited context accepted; inherited authorization refused. INHERIT CONTEXT — NEVER INHERIT AUTHORIZATION confirmed.

Side effect: NONE

Evidence produced: Location concurrent work set evaluation trace.

Invariant checked: Authorization is never inherited.

Operational evidence still required: BC-04 / BC-08 remains OPEN — real Location register, SIMOPS rules and field validation.

Continue — context remains valid.

Preconditions: Synthetic Location continuity register.

Synthetic inputs: Location TT01 continuity events.

Authority: Scenario-specific

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Continuity CONTINUE; no re-authorization required.

Expected failure behaviour: Continuity state never grants or extends authorization.

Actual observed decision: Continuity CONTINUE; no re-authorization required.

Side effect: NONE

Evidence produced: Location continuity record.

Invariant checked: Continuity does not manufacture authority.

Operational evidence still required: BC-08 remains OPEN — real Location continuity governance in the field.

Renew — time validity expires.

Preconditions: Synthetic Location continuity register.

Synthetic inputs: Location TT01 continuity events.

Authority: Scenario-specific

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Continuity RENEW; time-bound conditions revalidated.

Expected failure behaviour: Continuity state never grants or extends authorization.

Actual observed decision: Continuity RENEW; time-bound conditions revalidated.

Side effect: NONE

Evidence produced: Location continuity record.

Invariant checked: Temporal revalidation.

Operational evidence still required: BC-08 remains OPEN — real Location continuity governance in the field.

Reassess — context materially changes.

Preconditions: Synthetic Location continuity register.

Synthetic inputs: Location TT01 continuity events.

Authority: Scenario-specific

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Continuity REASSESS; affected dimensions re-evaluated.

Expected failure behaviour: Continuity state never grants or extends authorization.

Actual observed decision: Continuity REASSESS; affected dimensions re-evaluated.

Side effect: NONE

Evidence produced: Location continuity record.

Invariant checked: Material change triggers bounded reassessment.

Operational evidence still required: BC-08 remains OPEN — real Location continuity governance in the field.

Close — Location work context ends.

Preconditions: Synthetic Location continuity register.

Synthetic inputs: Location TT01 continuity events.

Authority: Scenario-specific

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Continuity CLOSE; open dependent readiness invalidated.

Expected failure behaviour: Continuity state never grants or extends authorization.

Actual observed decision: Continuity CLOSE; open dependent readiness invalidated.

Side effect: NONE

Evidence produced: Location continuity record.

Invariant checked: No orphan READY after closure.

Operational evidence still required: BC-08 remains OPEN — real Location continuity governance in the field.

New discipline enters the Location.

Preconditions: Synthetic Location continuity register.

Synthetic inputs: Location TT01 continuity events.

Authority: Scenario-specific

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Context inherited where applicable; authorization not inherited.

Expected failure behaviour: Continuity state never grants or extends authorization.

Actual observed decision: Context inherited where applicable; authorization not inherited.

Side effect: NONE

Evidence produced: Location continuity record.

Invariant checked: Inherit context — never inherit authorization.

Operational evidence still required: BC-08 remains OPEN — real Location continuity governance in the field.

Current READY / future HOLD — competency expires before execution window.

Preconditions: Synthetic forecast horizon with time-bound conditions.

Synthetic inputs: Execution window T+3d..T+10d.

Authority: Valid

Source: Synthetic P6 + validity registers

Location: TT01

Concurrent work: Mixed

Expected decision: Forecast readiness distinguishes current state from state at execution time.

Expected failure behaviour: Current READY must never imply future READY.

Actual observed decision: Now READY; at window HOLD with named expiring competency.

Side effect: NONE

Evidence produced: Forecast readiness trace with expiry attribution.

Invariant checked: Time-forward evaluation of validity.

Operational evidence still required: BC-01 / BC-08 remains OPEN — real schedule and validity feeds.

Equipment certificate expires before execution.

Preconditions: Synthetic forecast horizon with time-bound conditions.

Synthetic inputs: Execution window T+3d..T+10d.

Authority: Valid

Source: Synthetic P6 + validity registers

Location: TT01

Concurrent work: Mixed

Expected decision: Forecast readiness distinguishes current state from state at execution time.

Expected failure behaviour: Current READY must never imply future READY.

Actual observed decision: Forecast HOLD attributed to certificate expiry date.

Side effect: NONE

Evidence produced: Forecast readiness trace with expiry attribution.

Invariant checked: Time-forward evaluation of validity.

Operational evidence still required: BC-01 / BC-08 remains OPEN — real schedule and validity feeds.

Permit validity ends before work.

Preconditions: Synthetic forecast horizon with time-bound conditions.

Synthetic inputs: Execution window T+3d..T+10d.

Authority: Valid

Source: Synthetic P6 + validity registers

Location: TT01

Concurrent work: Mixed

Expected decision: Forecast readiness distinguishes current state from state at execution time.

Expected failure behaviour: Current READY must never imply future READY.

Actual observed decision: Forecast HOLD; renewal action owner identified.

Side effect: NONE

Evidence produced: Forecast readiness trace with expiry attribution.

Invariant checked: Time-forward evaluation of validity.

Operational evidence still required: BC-01 / BC-08 remains OPEN — real schedule and validity feeds.

Environmental validity expires.

Preconditions: Synthetic forecast horizon with time-bound conditions.

Synthetic inputs: Execution window T+3d..T+10d.

Authority: Valid

Source: Synthetic P6 + validity registers

Location: TT01

Concurrent work: Mixed

Expected decision: Forecast readiness distinguishes current state from state at execution time.

Expected failure behaviour: Current READY must never imply future READY.

Actual observed decision: Forecast conditional; re-evaluation scheduled at window.

Side effect: NONE

Evidence produced: Forecast readiness trace with expiry attribution.

Invariant checked: Time-forward evaluation of validity.

Operational evidence still required: BC-01 / BC-08 remains OPEN — real schedule and validity feeds.

Schedule moves earlier.

Preconditions: Synthetic forecast horizon with time-bound conditions.

Synthetic inputs: Execution window T+3d..T+10d.

Authority: Valid

Source: Synthetic P6 + validity registers

Location: TT01

Concurrent work: Mixed

Expected decision: Forecast readiness distinguishes current state from state at execution time.

Expected failure behaviour: Current READY must never imply future READY.

Actual observed decision: Conditions re-evaluated against earlier window; one condition not yet valid → HOLD.

Side effect: NONE

Evidence produced: Forecast readiness trace with expiry attribution.

Invariant checked: Time-forward evaluation of validity.

Operational evidence still required: BC-01 / BC-08 remains OPEN — real schedule and validity feeds.

Schedule moves later.

Preconditions: Synthetic forecast horizon with time-bound conditions.

Synthetic inputs: Execution window T+3d..T+10d.

Authority: Valid

Source: Synthetic P6 + validity registers

Location: TT01

Concurrent work: Mixed

Expected decision: Forecast readiness distinguishes current state from state at execution time.

Expected failure behaviour: Current READY must never imply future READY.

Actual observed decision: Validity re-evaluated; two conditions expire → HOLD.

Side effect: NONE

Evidence produced: Forecast readiness trace with expiry attribution.

Invariant checked: Time-forward evaluation of validity.

Operational evidence still required: BC-01 / BC-08 remains OPEN — real schedule and validity feeds.

Document revision.

Preconditions: Baseline decision set established (synthetic).

Synthetic inputs: Single change event.

Authority: Valid

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Reassess affected dependencies only.

Expected failure behaviour: Bounded change must not trigger blanket reassessment.

Actual observed decision: 2 of 11 dimensions reassessed; 9 untouched and retained with original pins.

Side effect: NONE

Evidence produced: Selective change-impact trace (dimensions touched vs untouched).

Invariant checked: Selective change impact — bounded reassessment.

Operational evidence still required: BC-03 / BC-08 remains OPEN — real change-event feeds and impact rules ratified.

Crew change.

Preconditions: Baseline decision set established (synthetic).

Synthetic inputs: Single change event.

Authority: Valid

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Reassess workforce/competency only where bounded.

Expected failure behaviour: Bounded change must not trigger blanket reassessment.

Actual observed decision: Workforce dimension reassessed; engineering/materials untouched.

Side effect: NONE

Evidence produced: Selective change-impact trace (dimensions touched vs untouched).

Invariant checked: Selective change impact — bounded reassessment.

Operational evidence still required: BC-03 / BC-08 remains OPEN — real change-event feeds and impact rules ratified.

Equipment change.

Preconditions: Baseline decision set established (synthetic).

Synthetic inputs: Single change event.

Authority: Valid

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Reassess equipment + related controls.

Expected failure behaviour: Bounded change must not trigger blanket reassessment.

Actual observed decision: Equipment and 2 linked controls reassessed; unrelated dimensions untouched.

Side effect: NONE

Evidence produced: Selective change-impact trace (dimensions touched vs untouched).

Invariant checked: Selective change impact — bounded reassessment.

Operational evidence still required: BC-03 / BC-08 remains OPEN — real change-event feeds and impact rules ratified.

Location change.

Preconditions: Baseline decision set established (synthetic).

Synthetic inputs: Single change event.

Authority: Valid

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Broader reassessment.

Expected failure behaviour: Bounded change must not trigger blanket reassessment.

Actual observed decision: Location change triggered full Location-scoped reassessment including SIMOPS set — correctly broad.

Side effect: NONE

Evidence produced: Selective change-impact trace (dimensions touched vs untouched).

Invariant checked: Selective change impact — bounded reassessment.

Operational evidence still required: BC-03 / BC-08 remains OPEN — real change-event feeds and impact rules ratified.

New simultaneous activity.

Preconditions: Baseline decision set established (synthetic).

Synthetic inputs: Single change event.

Authority: Valid

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Reassess SIMOPS.

Expected failure behaviour: Bounded change must not trigger blanket reassessment.

Actual observed decision: Cumulative Location set re-evaluated; one JobCard moved READY → HOLD.

Side effect: NONE

Evidence produced: Selective change-impact trace (dimensions touched vs untouched).

Invariant checked: Selective change impact — bounded reassessment.

Operational evidence still required: BC-03 / BC-08 remains OPEN — real change-event feeds and impact rules ratified.

Critical risk introduced.

Preconditions: Baseline decision set established (synthetic).

Synthetic inputs: Single change event.

Authority: Valid

Source: Synthetic

Location: TT01

Concurrent work: Mixed

Expected decision: Reassess affected preventive readiness.

Expected failure behaviour: Bounded change must not trigger blanket reassessment.

Actual observed decision: Preventive package recomputed as SYSTEM_PROPOSED; human confirmation required before use.

Side effect: NONE

Evidence produced: Selective change-impact trace (dimensions touched vs untouched).

Invariant checked: Selective change impact — bounded reassessment.

Operational evidence still required: BC-03 / BC-08 remains OPEN — real change-event feeds and impact rules ratified.

9 dimensions valid, 1 mandatory condition invalid.

Preconditions: Non-compensable classification configured for mandatory conditions.

Synthetic inputs: Synthetic multi-dimension evaluation.

Authority: Valid unless stated

Source: Synthetic

Location: TT01

Concurrent work: None

Expected decision: HOLD — mandatory failure cannot be offset.

Expected failure behaviour: No score, average, weighting or strength may offset a mandatory condition.

Actual observed decision: HOLD; single attributed blocker; no aggregate score displayed as verdict.

Side effect: NONE

Evidence produced: No-compensation evaluation trace.

Invariant checked: No-compensation logic.

Operational evidence still required: Non-compensable classification must be confirmed per real condition by competent authority.

High-performing Engineering cannot compensate missing Critical Control.

Preconditions: Non-compensable classification configured for mandatory conditions.

Synthetic inputs: Synthetic multi-dimension evaluation.

Authority: Valid unless stated

Source: Synthetic

Location: TT01

Concurrent work: None

Expected decision: HOLD — mandatory failure cannot be offset.

Expected failure behaviour: No score, average, weighting or strength may offset a mandatory condition.

Actual observed decision: HOLD; engineering strength recorded but non-compensating.

Side effect: NONE

Evidence produced: No-compensation evaluation trace.

Invariant checked: No-compensation logic.

Operational evidence still required: Non-compensable classification must be confirmed per real condition by competent authority.

Valid ES&H package cannot compensate absent Client Release.

Preconditions: Non-compensable classification configured for mandatory conditions.

Synthetic inputs: Synthetic multi-dimension evaluation.

Authority: Valid unless stated

Source: Synthetic

Location: TT01

Concurrent work: None

Expected decision: HOLD — mandatory failure cannot be offset.

Expected failure behaviour: No score, average, weighting or strength may offset a mandatory condition.

Actual observed decision: HOLD; client release blocker retained.

Side effect: NONE

Evidence produced: No-compensation evaluation trace.

Invariant checked: No-compensation logic.

Operational evidence still required: Non-compensable classification must be confirmed per real condition by competent authority.

Valid field readiness cannot compensate unresolved identity.

Preconditions: Non-compensable classification configured for mandatory conditions.

Synthetic inputs: Synthetic multi-dimension evaluation.

Authority: Valid unless stated

Source: Synthetic

Location: TT01

Concurrent work: None

Expected decision: HOLD — mandatory failure cannot be offset.

Expected failure behaviour: No score, average, weighting or strength may offset a mandatory condition.

Actual observed decision: HOLD; authority dimension UNRESOLVED dominates.

Side effect: NONE

Evidence produced: No-compensation evaluation trace.

Invariant checked: No-compensation logic.

Operational evidence still required: Non-compensable classification must be confirmed per real condition by competent authority.

Valid support model cannot compensate lifecycle authority.

Preconditions: Non-compensable classification configured for mandatory conditions.

Synthetic inputs: Synthetic multi-dimension evaluation.

Authority: Valid unless stated

Source: Synthetic

Location: TT01

Concurrent work: None

Expected decision: HOLD — mandatory failure cannot be offset.

Expected failure behaviour: No score, average, weighting or strength may offset a mandatory condition.

Actual observed decision: HOLD; lifecycle authority blocker retained.

Side effect: NONE

Evidence produced: No-compensation evaluation trace.

Invariant checked: No-compensation logic.

Operational evidence still required: Non-compensable classification must be confirmed per real condition by competent authority.

Q4 unavailable — mandatory object missing.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: Decision per governed dependency rule.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Dimension UNVERIFIABLE → HOLD; no last-known-good promotion.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: Fail-closed on mandatory source loss.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

P6 unavailable — forecast unavailable.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: No fabricated schedule.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Forecast dimension reported UNAVAILABLE; current-state decision still computable where governed.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: No invented schedule data.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Aconex unavailable — controlled document verification unavailable.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: HOLD where document verification is mandatory.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Document dimension UNVERIFIABLE → HOLD; pinned prior decisions unaffected.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: Document verification is non-compensable.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Critical Control source unavailable.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: UNVERIFIABLE → HOLD where mandatory.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: HOLD; blocker attributed to critical control source availability.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: Mandatory control verification cannot degrade silently.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Network loss during capture.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: SYNC_PENDING; no authorization from unsynchronized state.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Capture queued SYNC_PENDING; authorization control DISABLED_SAFE.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: Unsynchronized state cannot authorize.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Recovery with conflict.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: Reconciliation required; no last-write-wins.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Conflict raised for human reconciliation; both versions retained; no automatic merge.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: No last-write-wins.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Offline capture into local encrypted queue.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: Capture allowed; authorization not.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Captured to encrypted local queue with device/actor metadata; state SYNC_PENDING.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: Capture ≠ authorization.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Offline authorization attempt.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: Denied — offline authorization is not accepted operationally.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Denied; control DISABLED_SAFE. Journey classified NOT_EXECUTABLE_IN_CURRENT_PILOT; no future architecture assumed.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: Offline authorization prohibited unless explicitly governed in a future architecture decision.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Reconnect — compare → reconcile → conflict check → verified.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: Deterministic reconciliation sequence.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Sequence executed in order; verified state only after conflict check passed.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: Deterministic reconciliation.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Source changed while offline.

Preconditions: Synthetic adapters with controllable availability.

Synthetic inputs: Forced degradation / disconnection.

Authority: Valid

Source: Degraded per scenario

Location: TT01

Concurrent work: Mixed

Expected decision: Stale base version detected.

Expected failure behaviour: Degradation is declared, never hidden; no fabricated state.

Actual observed decision: Stale base version detected; capture held for reconciliation; no overwrite.

Side effect: NONE

Evidence produced: Degradation / reconciliation trace.

Invariant checked: Version-aware reconciliation.

Operational evidence still required: BC-01 remains OPEN — real availability, sync and reconciliation behaviour with source owners.

Reconstruct a READY decision.

Preconditions: Independent synthetic reviewer with evidence-read authority only.

Synthetic inputs: Pinned decision records.

Authority: Reviewer read-only

Source: Changed after decision where stated

Location: TT01

Concurrent work: Historic

Expected decision: Decision reconstructable from pinned states alone.

Expected failure behaviour: Reconstruction must not depend on current source state.

Actual observed decision: Reviewer reproduced the identical verdict from pinned states only.

Side effect: NONE

Evidence produced: Reconstruction report (inputs, versions, rule version, actor, timestamp).

Invariant checked: Deterministic reconstruction.

Operational evidence still required: BC-05 / BC-07 remains OPEN — evidence custodianship and assurance access in the real organization.

Reconstruct a HOLD decision.

Preconditions: Independent synthetic reviewer with evidence-read authority only.

Synthetic inputs: Pinned decision records.

Authority: Reviewer read-only

Source: Changed after decision where stated

Location: TT01

Concurrent work: Historic

Expected decision: Decision reconstructable from pinned states alone.

Expected failure behaviour: Reconstruction must not depend on current source state.

Actual observed decision: Reviewer reproduced HOLD with the same attributed blocker.

Side effect: NONE

Evidence produced: Reconstruction report (inputs, versions, rule version, actor, timestamp).

Invariant checked: Blocker attribution is reconstructable.

Operational evidence still required: BC-05 / BC-07 remains OPEN — evidence custodianship and assurance access in the real organization.

Source changed after the decision.

Preconditions: Independent synthetic reviewer with evidence-read authority only.

Synthetic inputs: Pinned decision records.

Authority: Reviewer read-only

Source: Changed after decision where stated

Location: TT01

Concurrent work: Historic

Expected decision: Decision reconstructable from pinned states alone.

Expected failure behaviour: Reconstruction must not depend on current source state.

Actual observed decision: Historical decision unchanged; current source difference shown separately.

Side effect: NONE

Evidence produced: Reconstruction report (inputs, versions, rule version, actor, timestamp).

Invariant checked: Immutability of historical decisions.

Operational evidence still required: BC-05 / BC-07 remains OPEN — evidence custodianship and assurance access in the real organization.

Rule version changed after the decision.

Preconditions: Independent synthetic reviewer with evidence-read authority only.

Synthetic inputs: Pinned decision records.

Authority: Reviewer read-only

Source: Changed after decision where stated

Location: TT01

Concurrent work: Historic

Expected decision: Decision reconstructable from pinned states alone.

Expected failure behaviour: Reconstruction must not depend on current source state.

Actual observed decision: Historical rule version preserved and applied in reconstruction.

Side effect: NONE

Evidence produced: Reconstruction report (inputs, versions, rule version, actor, timestamp).

Invariant checked: Rule-version pinning (ADR-16).

Operational evidence still required: BC-05 / BC-07 remains OPEN — evidence custodianship and assurance access in the real organization.

Human confirmation record.

Preconditions: Independent synthetic reviewer with evidence-read authority only.

Synthetic inputs: Pinned decision records.

Authority: Reviewer read-only

Source: Changed after decision where stated

Location: TT01

Concurrent work: Historic

Expected decision: Decision reconstructable from pinned states alone.

Expected failure behaviour: Reconstruction must not depend on current source state.

Actual observed decision: Actor, role, scope, timestamp and decision preserved and displayed.

Side effect: NONE

Evidence produced: Reconstruction report (inputs, versions, rule version, actor, timestamp).

Invariant checked: Attributable human-in-the-loop confirmation.

Operational evidence still required: BC-05 / BC-07 remains OPEN — evidence custodianship and assurance access in the real organization.

AI proposes a hazard; human confirms.

Preconditions: AI operates as SEMANTIC_PROPOSAL producer only.

Synthetic inputs: Synthetic AI suggestions.

Authority: AI has no authority

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Proposal becomes HUMAN_CONFIRMED with actor and timestamp.

Expected failure behaviour: AI output never reaches IRDE without human confirmation.

Actual observed decision: Confirmed by synthetic competent actor; provenance retained as AI_PROPOSED/HUMAN_CONFIRMED.

Side effect: NONE

Evidence produced: Proposal/confirmation trace with provenance.

Invariant checked: Human-in-the-loop confirmation.

Operational evidence still required: AI assistance governance approval (not required for Pilot entry).

AI proposes a wrong requirement; human rejects.

Preconditions: AI operates as SEMANTIC_PROPOSAL producer only.

Synthetic inputs: Synthetic AI suggestions.

Authority: AI has no authority

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Rejected; deterministic core unaffected.

Expected failure behaviour: AI output never reaches IRDE without human confirmation.

Actual observed decision: Rejection recorded with reason; readiness verdict unchanged.

Side effect: NONE

Evidence produced: Proposal/confirmation trace with provenance.

Invariant checked: Deterministic core independence.

Operational evidence still required: AI assistance governance approval (not required for Pilot entry).

AI unavailable.

Preconditions: AI operates as SEMANTIC_PROPOSAL producer only.

Synthetic inputs: Synthetic AI suggestions.

Authority: AI has no authority

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Core readiness remains functional.

Expected failure behaviour: AI output never reaches IRDE without human confirmation.

Actual observed decision: All deterministic evaluations completed with AI adapter offline.

Side effect: NONE

Evidence produced: Proposal/confirmation trace with provenance.

Invariant checked: AI is non-essential to decisions.

Operational evidence still required: AI assistance governance approval (not required for Pilot entry).

AI attempts an authority decision.

Preconditions: AI operates as SEMANTIC_PROPOSAL producer only.

Synthetic inputs: Synthetic AI suggestions.

Authority: AI has no authority

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Prohibited.

Expected failure behaviour: AI output never reaches IRDE without human confirmation.

Actual observed decision: Attempt refused at the authority boundary; sideEffect NONE.

Side effect: NONE

Evidence produced: Proposal/confirmation trace with provenance.

Invariant checked: AI can never hold authority.

Operational evidence still required: AI assistance governance approval (not required for Pilot entry).

AI suggestion with missing provenance.

Preconditions: AI operates as SEMANTIC_PROPOSAL producer only.

Synthetic inputs: Synthetic AI suggestions.

Authority: AI has no authority

Source: n/a

Location: TT01

Concurrent work: None

Expected decision: Not accepted into governed evidence.

Expected failure behaviour: AI output never reaches IRDE without human confirmation.

Actual observed decision: Suggestion refused for evidence use; retained as unattributed proposal only.

Side effect: NONE

Evidence produced: Proposal/confirmation trace with provenance.

Invariant checked: Provenance is mandatory for evidence.

Operational evidence still required: AI assistance governance approval (not required for Pilot entry).

Setup: Valid synthetic demand. · Valid canonical Location. · Valid engineering, materials and workforce. · One mandatory Critical Control = UNKNOWN.

Expected: HOLD; then unauthorized override attempt DENIED with sideEffect = NONE.

Observed: IRDE verdict HOLD, blocker attributed to CC-02 UNKNOWN. Unauthorized user override attempt DENIED at the domain authority boundary; no state mutation; attempt logged with actor and target.

Invariants: No false READY · No authority bypass · No compensation · Denial produces no side effect

Simultaneous failures: IAM unresolved (BC-02) · Critical Control unknown (BC-06) · P6 unavailable (BC-01) · Location mapping conflict (BC-04) · Competency expiring (BC-08)

PASS Deterministic blocker attribution — 5 distinct blockers attributed to 5 distinct owners; no merged or generic blocker.

PASS No false READY — Verdict HOLD; no dimension promoted.

PASS No double-counting — Competency expiry counted once despite appearing in forecast and current evaluation.

PASS No authority bypass — All authority-gated controls DISABLED_SAFE.

PASS Clear owners — Each blocker carries a named owner role and escalation path.

PASS Evidence reconstructable — Reviewer reproduced the composite HOLD from pins alone.

Mesa 1 IAM unresolved + Mesa 2 steward ready.

Preconditions: Mesa 1/2/3 baselines consumed unchanged.

Synthetic inputs: Synthetic cross-Mesa state combinations.

Authority: Synthetic

Source: Synthetic

Location: TT01 / CV-07

Concurrent work: Mixed

Expected decision: Organization can be ready but execution dependency held.

Expected failure behaviour: No cross-Mesa averaging; no aggregate readiness from partial readiness.

Actual observed decision: Mesa 2 dimension ready; execution HELD by BC-02 dependency; no aggregate readiness declared.

Side effect: NONE

Evidence produced: Cross-Mesa dependency trace.

Invariant checked: Simulation never upgrades governance state.

Operational evidence still required: All nine blockers still require OperationalClosureEvidence via the IEW.

Mesa 1 interfaces ready + Mesa 2 support unavailable.

Preconditions: Mesa 1/2/3 baselines consumed unchanged.

Synthetic inputs: Synthetic cross-Mesa state combinations.

Authority: Synthetic

Source: Synthetic

Location: TT01 / CV-07

Concurrent work: Mixed

Expected decision: Pilot not authorized.

Expected failure behaviour: No cross-Mesa averaging; no aggregate readiness from partial readiness.

Actual observed decision: Pilot authorization refused; BC-07 dependency dominant.

Side effect: NONE

Evidence produced: Cross-Mesa dependency trace.

Invariant checked: Simulation never upgrades governance state.

Operational evidence still required: All nine blockers still require OperationalClosureEvidence via the IEW.

Mesa 1/2 ready + Mesa 3 BEFORE not started.

Preconditions: Mesa 1/2/3 baselines consumed unchanged.

Synthetic inputs: Synthetic cross-Mesa state combinations.

Authority: Synthetic

Source: Synthetic

Location: TT01 / CV-07

Concurrent work: Mixed

Expected decision: PilotExposure prohibited.

Expected failure behaviour: No cross-Mesa averaging; no aggregate readiness from partial readiness.

Actual observed decision: Exposure refused; BC09Protection ACTIVE; time-irreversibility enforced.

Side effect: NONE

Evidence produced: Cross-Mesa dependency trace.

Invariant checked: Simulation never upgrades governance state.

Operational evidence still required: All nine blockers still require OperationalClosureEvidence via the IEW.

Mesa 3 field ready but BC-06 unresolved.

Preconditions: Mesa 1/2/3 baselines consumed unchanged.

Synthetic inputs: Synthetic cross-Mesa state combinations.

Authority: Synthetic

Source: Synthetic

Location: TT01 / CV-07

Concurrent work: Mixed

Expected decision: Field condition dependency-held.

Expected failure behaviour: No cross-Mesa averaging; no aggregate readiness from partial readiness.

Actual observed decision: Field readiness held by unresolved critical control; no partial authorization.

Side effect: NONE

Evidence produced: Cross-Mesa dependency trace.

Invariant checked: Simulation never upgrades governance state.

Operational evidence still required: All nine blockers still require OperationalClosureEvidence via the IEW.

All simulated blockers pass (MANDATORY SCENARIO).

Preconditions: Mesa 1/2/3 baselines consumed unchanged.

Synthetic inputs: Synthetic cross-Mesa state combinations.

Authority: Synthetic

Source: Synthetic

Location: TT01 / CV-07

Concurrent work: Mixed

Expected decision: Phase 6A remains HOLD operationally.

Expected failure behaviour: No cross-Mesa averaging; no aggregate readiness from partial readiness.

Actual observed decision: Every scenario PASS; Phase6A HOLD retained, Phase6B NOT_AUTHORIZED, Phase7 NO_GO. Simulation does not constitute OperationalClosureEvidence and closed nothing.

Side effect: NONE

Evidence produced: Cross-Mesa dependency trace.

Invariant checked: Simulation never upgrades governance state.

Operational evidence still required: All nine blockers still require OperationalClosureEvidence via the IEW.

Support escalation paths are structurally complete but exist as design artefacts only; no operational drill has been executed with the design team withdrawn.

Disposition: Remains open under BC-07 in the IEW. Not an architecture defect.

Architecture impact: NONE

Status note: Governed dependency tied to real OperationalClosureEvidence — not correctable by simulation.

Offline authorization is denied by design. The offline journey therefore remains NOT_EXECUTABLE_IN_CURRENT_PILOT rather than PASS/FAIL.

Disposition: Confirmed correct behaviour. Any change requires an explicit architecture decision, not configuration.

Architecture impact: NONE (change would be ARCHITECTURE_IMPACT)

Status note: Governed dependency — preserved unmodified; offline authorization change would be ARCHITECTURE_IMPACT.

Temporary Modification authority chain is unratified; simulation can only prove non-activation.

Disposition: Remains open under BC-03. Ratification is organizational evidence, not design work.

Architecture impact: NONE

Status note: Governed dependency tied to real OperationalClosureEvidence — not correctable by simulation.

Pairwise PASS results are visually adjacent to the cumulative STOP verdict and could be misread as partial approval.

Disposition: CLOSED by targeted presentation correction: the Location cumulative verdict is rendered as the dominant governing element and subordinate pairwise results carry an explicit NON_DETERMINATIVE qualifier. BehaviorChanged = NO, RuleChanged = NO.

Architecture impact: NONE

Status note: PRESENTATION_ONLY. LOC-S03 retested PASS, sideEffect NONE; IV-12 and RG-11 remain PASS.

Retention expiry withdrew the payload correctly, but the retention period for pinned decision evidence is not yet configured per evidence class.

Disposition: CLOSED by smallest governed configuration correction to RC-RET-01 (v1.0 flat 90d → v1.1 per-evidence-class, unclassified → RETAIN_AND_HOLD). Rule logic was already correct; only configuration was wrong, so classification is retained as RULE_CONFIGURATION_DEFECT. SimulationConfigurationApproval = DESIGN_AUTHORIZED_FOR_TEST_ONLY.

Architecture impact: NONE

Status note: CONFIGURATION_ONLY (simulation configuration). BC-05 remains OPEN — the approved enterprise retention schedule is still required as OperationalClosureEvidence.

Both Path A and Path B behave correctly in simulation; no path may be elected on simulation evidence, so BC-06 cannot converge here.

Disposition: Decision reserved to competent authority with the mandated decision record fields.

Architecture impact: NONE

Status note: Governed dependency — Path A and Path B both preserved; no election on simulation evidence.

Simulation proved: Participation mechanisms, fallback, staleness, version conflict and unknown capability behave fail-closed.

Still required (operational): Owner-signed system participation matrix, interface/API capability statements, snapshot validity policy and availability commitments.

Simulation proved: Identity, scope, risk-class, expiry, delegation and shift-boundary gating are enforced in the domain layer.

Still required (operational): Real IAM role/scope model, provisioned identities, enforcement evidence and authority lifecycle records.

Simulation proved: Lifecycle transitions are authority-bound, jump-proof, immutable and TempMod-safe.

Still required (operational): Ratified lifecycle owner matrix, Q4 state mapping confirmation and TempMod authority chain ratification.

Simulation proved: Stewardship, delegation, mapping conflict and SoD controls fail closed.

Still required (operational): Named accepted stewards with mandate and capacity, delegation register and ratified SoD matrix.

Simulation proved: Minimisation, classification blocking, retention and evidence-access control behave as designed.

Still required (operational): Approved data classification decisions, retention schedule per evidence class and evidence-access policy.

Simulation proved: Unknown/missing critical control holds; Path A and Path B both behave correctly in simulation.

Still required (operational): An explicit Path A / Path B decision by competent authority with the mandated decision record; a real critical-control verification source if Path A.

Simulation proved: Every escalation path terminates at a competent owner without design-team dependency.

Still required (operational): Staffed L1/L2/L3 with SLAs and an executed operational support drill with the design team withdrawn.

Simulation proved: Field prerequisite model reaches READY only when all mandatory prerequisites hold; all gaps fail closed.

Still required (operational): Real CV-07 workfront prerequisite data, field-owner confirmation and validated field execution readiness.

Simulation proved: Metric definitions, missing-data, attribution, contamination and prospective-only rules behave correctly.

Still required (operational): Formally started prospective BEFORE collection with real timestamped sources — time-irreversible and non-reconstructable.