23-EFT.WP.Metrology.PathCorrection v1.0 | Appendix B — Contract Library & Policy Cards (C80 Collection)

Home ／ Docs-Technical WhitePaper ／ 23-EFT.WP.Metrology.PathCorrection v1.0

Appendix B — Contract Library & Policy Cards (C80 Collection)

One-Sentence Goal
Provide a unified set of C80-* contract assertions and configurable policy cards so that path corrections are verifiable, degradable, and auditable across modeling, computation, and publication stages.

I. Notes and Scope

• Covered domains: geometry; dual-form integration; troposphere; ionosphere; fiber; multipath; ray tracing; environmental fusion; instrument chain; uncertainty; runtime; and use-case level contracts.
• Outputs: the contract entries C80-* (expressions, thresholds, actions), policy-card templates and examples, plus mappings to logs and dashboard fields.
• Execution points: assert_path_contracts, assert_uncertainty_contracts, and runtime gates (see Chapters 10, 13, 14, 15).

II. Unified Fields and Severity

• Decision result: pass ∈ { true, false }; action ∈ { allow, degrade, fallback, block }.
• Severity level: sev ∈ { S1(audit), S2(degrade), S3(fallback), S4(block) }.
• Time / dimensions: all expressions must pass check_dim(...); time unit="s", frequency unit="Hz", length unit="m".
• Freshness & coverage: age(src) = ts_now - ts_src; cov(gamma) = |{ ell: data_valid }| / |{ ell: all }|.

III. Contract Library (C80- catalog with suggested thresholds)*

1. Geometry & Coordinates (Ch. 3) — C80-31x
   • C80-311 Path monotonicity: non_decreasing(ell) → allow / S4.
   • C80-312 Path length: 0 < L_gamma ≤ L_max (engineering bound) → else block / S4.
   • C80-313 Frame consistency: frame ∈ {"ECEF","ENU"} and round-trip transform error < eps_geom → else degrade / S2.
2. Dual Forms & Integration (Ch. 10) — C80-101x
   • C80-1011 Dual-form difference: delta_form ≤ tol_Tarr (suggest 1e-12 … 1e-11 s, link-tiered) → else fallback / S3.
   • C80-1012 Numerical floor: u_num ≥ u_floor and adaptive-step convergence = true → else densify grid or fallback / S3.
   • C80-1013 Dimensional check: check_dim(T_arr) = "[T]" → else block / S4.
3. Troposphere (Ch. 5) — C80-51x
   • C80-511 Sensor freshness: age(met) ≤ Delta_t_met (typ. 10–30 min) → else fallback / S3.
   • C80-512 Mapping coherence: mapping.ver matches zenith-delay model version → else degrade / S2.
   • C80-513 Coverage: cov(gamma_met) ≥ cov_min_met (suggest ≥ 0.9) → else fallback / S3.
4. Ionosphere (Ch. 6) — C80-61x
   • C80-611 TEC freshness: age(TEC) ≤ Delta_t_TEC (typ. ≤ 30 min) → else fallback / S3.
   • C80-612 Dispersion shape: within band, verify residual to T_iono ∝ 1/f^2 < eps_fdisp → else degrade / S2.
   • C80-613 Mapping–geometry coherence: chosen mapping consistent with geometry → else degrade / S2.
5. Multipath (Ch. 7) — C80-71x
   • C80-711 Specular cluster count: specular_k ≤ K_max (suggest ≤ 3) → else degrade / S2.
   • C80-712 Residual gate: post-suppression residual_p95 ≤ thr_res (business-defined) → else fallback / S3.
   • C80-713 Method convergence: estimate_multipath.converged = true → else fallback / S3.
6. Fiber/Cable (Ch. 8) — C80-81x
   • C80-811 Thermal coefficient: deviation of measured ∂T_env/∂T from spec < eps_kT → else degrade / S2.
   • C80-812 Asymmetry bound: |Δasym| ≤ asym_max → else fallback / S3.
   • C80-813 Loopback traceability: T_fixed version current and valid → else degrade / S2.
7. Ray Tracing (Ch. 9) — C80-91x
   • C80-911 Convergence: solve_ray.status="converged" and energy-conservation error < eps_energy → else fallback / S3.
   • C80-912 Boundary conditions: incidence/exit angles satisfy bc tolerances → else degrade / S2.
8. Environmental Fusion (Ch. 11) — C80-111x
   • C80-1111 Freshness gate: max(age(src)) ≤ Delta_t → else fallback / S3.
   • C80-1112 Coverage: cov(gamma) ≥ cov_min → else degrade / S2.
   • C80-1113 Declared invertibility domain for corrections is complete → else block / S4.
9. Instrument & Processing Chain (Ch. 12) — C80-121x
   • C80-1211 Model coherence: training vs. publish conventions aligned → else degrade / S2.
   • C80-1212 Interconnect/loopback bias in control: |bias_loop| ≤ thr_loop → else fallback / S3.
10. Uncertainty & Guardband (Ch. 13) — C80-13xx
    • C80-1301 Combination route: u_c = sqrt(J V_x J^T + u_num^2) or MC with full quantiles reported → else block / S4.
    • C80-1302 Coverage factor: U = k * u_c consistent with declared confidence (GUM or MC) → else degrade / S2.
    • C80-1303 Numerical terms booked: fields u_form, u_q, etc., present → else degrade / S2.
11. Runtime (Ch. 14) — C80-141x
    • C80-1411 End-to-end latency: L_rt ≤ SLO_latency and p99(L_rt) ≤ SLO_latency_p99 → else degrade / S2.
    • C80-1412 Cache hits: hit_total ≥ hit_min (suggest ≥ 0.95) → else pre-warm or degrade / S2.
    • C80-1413 Online dual forms: delta_form within gate across N_w consecutive windows → else fallback / S3.
    • C80-1414 Traceability minimum: manifest.path.rt includes { wm, lateness, cache, fallback } → else block / S4.
12. Use-Case Level (Ch. 15) — C80-150x
    • C80-1501 GNSS: age(TEC) ≤ Δt_TEC, age(met) ≤ Δt_met, p95(|map_residual|) ≤ thr_map.
    • C80-1502 WR/Fiber: p95(|T_one_error|) ≤ thr_wr, tau_ripple_p2p ≤ thr_tau.
    • C80-1503 NLOS: specular_k ≤ K_max, residual_p95 ≤ thr_res.

IV. Policy Card Template
Purpose: externally configurable cards drive thresholds, actions, and alarms—no code changes required.

policy_card:

scope: "free-space|fiber|nlos|global"

thresholds:

tol_Tarr: 1.0e-12

Delta_t_met: 1800

Delta_t_TEC: 1800

cov_min: 0.9

hit_min: 0.95

rules:

- id: C80-1011

expr: "delta_form <= tol_Tarr"

on_fail: {action: "fallback", sev: "S3", alarm: "alarm.form"}

- id: C80-1111

expr: "max_age <= Delta_t"

on_fail: {action: "fallback", sev: "S3", alarm: "alarm.freshness"}

fallback_matrix:

- from: "live" to: "model" alpha_r: 0.2

- from: "model" to: "climatology" alpha_r: 0.5

- from: "climatology" to: "RefCond0" alpha_r: 1.0

audit:

emit_fields: ["trace_id","ts","scope","rules_failed","alpha_r","action"]

V. Policy Card Examples (excerpts)

• GNSS / Free Space (scope="free-space")
  tol_Tarr = 5e-12; Delta_t_met = 1800 s; Delta_t_TEC = 1800 s; cov_min = 0.9; hit_min = 0.95.
  Failure actions: C80-611 / 511 trigger fallback → model, alpha_r = 0.3, alarm alarm.freshness.
• White Rabbit / Fiber (scope="fiber")
  asym_max = 5e-10 s; u_floor = 5e-13 s; eps_kT = 20%; tol_Tarr = 1e-12.
  Failure actions: C80-812 triggers fallback → last_good_cal, alpha_r = 0.5, tag tags.degraded.asym.
• Metro NLOS Microwave (scope="nlos")
  K_max = 3; thr_res = 2e-9 s; tol_Tarr = 1e-11 s.
  Failure actions: C80-712 triggers degrade (down-weight & widen window); if failed 3 consecutive windows, escalate to fallback.

VI. Assertion Execution & Recording

1. Order of execution: geometry → environmental freshness/coverage → ray/integration dual forms → part composition → uncertainty → runtime gates.
2. Persistence:
   • contracts.pass, contracts.failed = [C80-...].
   • contracts.actions = [{ id, action, sev, ts }].
   • contracts.thresholds.ver and policy-card hash.
3. Dashboard mapping: delta_form_p99, age_max, cov, hit_total, p99(L_rt), U synchronized with rule statuses.

VII. Change & Bounds Governance

• Change control: policy version policy.ver and canary field pct_traffic.
• Bounds learning: offline replays estimate suggested ranges for thr_* and tol_Tarr at p95 / p99; production uses dual guardrails (soft gate S2, hard gates S3 / S4).
• Rollback: if any S4 anomaly recurs more than N_w windows, automatically roll back to the previous policy card.

VIII. Cross-References

• Dual forms & numerical integration: Chapter 10.
• Uncertainty & guardband: Chapter 13.
• Runtime gating & streaming: Chapter 14.
• Time base / sync & timestamps: EFT.WP.Metrology.TimeBase v1.0, …Sync v1.0.
• Cleaning & tagging: EFT.WP.Methods.Cleaning v1.0.

IX. Audit & Replay

• Audit keys: trace_id, rules_failed, fallback_level, alpha_r, policy.hash, inputs.hash, wm/lateness.
• Replay capability: re-run by trace_id and policy version; compare contracts.diff and output deltas (see Chapter 14).

Summary
This appendix delivers the full C80-* contract set and deployable policy-card templates/examples, spanning modeling → computation → publication → runtime.
Minimal publication keys (aligned with Appendix C):
contracts = { pass, failed[], actions[], thresholds, policy:{ ver, hash, scope }, audit.* }.
Together with Chapters 10 / 13 / 14, it forms a closed loop: online monitoring → contract decisions → degrade/fallback → audit traceability.