29-EFT.WP.TBN.Measurement v1.0 | Chapter 12 | Contracts & Strategy Cards (Quality / Integrity / Security)

Home ／ Docs-Technical WhitePaper ／ 29-EFT.WP.TBN.Measurement v1.0

Chapter 12 | Contracts & Strategy Cards (Quality / Integrity / Security)

• One-line objective: With dual-form handling, dimensional compliance, and RefCond traceability as non-negotiable prerequisites, define the three classes of TBN metrology contracts—Quality, Integrity, and Security—under the C50-* family, together with an executable “strategy card” disposition flow, forming a closed loop of detect → act → verify → rollback, co-published with the dual-form T_arr.
• I. Scope & Objects
• Inputs
• Measured artifacts: y(t), S_phi/S_y, sigma_y(τ), T_arr^{form1/form2}, T_arr*, lat_*, corr_env, ΔT_map, ΔT_obs.
• Reference inputs: RefCond (hash/age/coverage), time-sync offset/skew/J, anchors & replay (Chs. 8–10).
• Uncertainty & gates: u/U (Ch. 11), thresholds & SLOs, dashboard window W and RBW/ENBW.
• Outputs
• Contract evaluation & disposition: contracts.report (per C50-*), strategy-card triggers & execution records, rollback pointer.
• Manifest: manifest.tbn.contracts.* (rules, results, thresholds, evidence URIs).
• Boundary
• This chapter introduces no new estimators/corrections; it constrains publication behavior and runtime governance.
• II. Terms & Variables
• Dual-form gap: delta_form = |T_arr^{form1} - T_arr^{form2}|; alignment gap: ΔT_obs = |T_arr* - t̂_cont|.
• Spectral/statistical residuals: resid_Sy(f) = S_y,meas - S_y,pred, resid_sigma_y(τ) = sigma_y,meas - sigma_y,pred.
• Source freshness & coverage: age(source), coverage.
• Security & integrity signals: Spec_anom, Timing_anom = ΔT_obs/T_sym, signature/script-hash consistency Sig_ok.
• Dimensions: unit(z)=1, unit(T)=[T], unit(age)=[T], unit(coverage)=1.
• III. Postulates P512-*
• P512-1 (Dual-form hard gate): Every published window must include T_arr^{form1/form2} and delta_form. If absent or over threshold → reject/downgrade.
• P512-2 (Same window/bandwidth/units): Analytics vs observation must be compared under the same W/RBW/ENBW/units; otherwise recompute first.
• P512-3 (Dimensions & provenance): All metrics pass check_dim( y - f(x) ); bind RefCond.hash and source hashes.
• P512-4 (Fail-Closed): Critical contract failures default to Fail-Closed (bypass/rollback/downgrade) and persist strategy card + evidence URIs.
• P512-5 (Reproducibility): Every disposition must be reproducible via replay.core (Ch. 10).
• IV. Minimal Equations S512-* (Core Contract Metrics)
• Quality (Q)
• S512-1: delta_form_p95 = quantile(delta_form,0.95); ΔT_obs_p95 = quantile(ΔT_obs,0.95).
• S512-2: resid_sigma_y,p95 = quantile(|sigma_y,meas - sigma_y,pred|,0.95).
• S512-3: In-band spectral gate (band B)
  ∥resid_Sy∥_{B} = ( ∫_B |resid_Sy(f)| df ) / ∫_B S_y,pred(f) df.
• Integrity (Int)
• S512-4: age(source) ≤ Δt_max, coverage ≥ cov_min; Sig_ok = 1_{signature/manifest/hash verified}.
• S512-5: Mapping consistency: ΔT_map_p95 ≤ tol_map; E_balance = 1_{conventions/window/bandwidth consistent}.
• Security (Sec)
• S512-6: Spectral anomaly:
  Spec_anom = 1_{ACLR<ACLR_min ∨ OBB>OBB_max ∨ D_spec>τ_spec} (per Ch. 9 definitions).
• S512-7: Timing integrity: Timing_anom = ΔT_obs/T_sym (same window).
• V. Metrology Flow M50-12 (Detect → Act → Verify → Rollback)
• Detect: Within window W, compute S512-* metrics with u/U; execute threshold gates (see §VI).
• Act (trigger strategy cards):
• Mild breach: adjust RBW/ENBW/window or shrink W and recompute; increase guardband.
• Moderate: model write-back (path/environment/instrument); unify on form2 for publication.
• Severe: bypass / rollback to prior manifest; freeze publication and assemble replay bundle.
• Verify: Recompute metrics; evaluate strategy-card verify conditions; persist residual curves and evidence URIs.
• Rollback: Invoke version rollback; persist rollback_to and impact scope.
• Persist:
  manifest.tbn.contracts = {rules, window, thresholds, metrics:{Q,Int,Sec}, decisions:{cards,actions,verify}, RefCond.hash, evidence_uri[], signature}.
• VI. Contracts & Assertions C50-12x (Suggested thresholds)
• Quality
• C50-1201 Dual-form: delta_form_p95 ≤ tol_Tarr (suggest 1e-3·T_arr or link-specific).
• C50-1202 Alignment ΔT_obs: ΔT_obs_p95 ≤ tol_align (suggest 0.02·T_sym or 1e-3·T_f).
• C50-1203 Allan consistency: resid_sigma_y,p95 ≤ tol_sigma.
• C50-1204 Spectral gate: ∥resid_Sy∥_{B} ≤ τ_Sy (in-band relative error).
• Integrity
• C50-1211 Freshness/coverage: age(source) ≤ Δt_max, coverage ≥ cov_min.
• C50-1212 Mapping: ΔT_map_p95 ≤ tol_map, and publish u(ΔT_map).
• C50-1213 Manifests & signatures: Sig_ok = 1; missing/failed signature → reject.
• Security
• C50-1221 Spectral anomaly rate: Spec_anom = 0 or anomaly rate ≤ τ_spec_rate.
• C50-1222 Timing integrity: Timing_anom_p95 ≤ τ_T.
• Dimensions / Traceability
• C50-1231 Units/dimensions: all published fields pass check_dim.
• C50-1232 Provenance: RefCond.hash/models.hash/scripts.hash are traceable.
• VII. Strategy Cards (Executable YAML Template & Typical Cards)
• Template
• card_id: <string>
• triggers: [C50-xxxx, ...]
• sev: blocker|high|medium|low
• decide:
• if: "<metric> comparator <threshold>"
• act:
• - api: I50-xx
• params: {...}
• verify:
• metric: <name>
• window: "W=5min,p95"
• rollback:
• plan: "<bypass|lower_order|rollback_version>"
• notes: "<why/impact/evidence_uri>"
• Typical cards
• card.twoform_guard (dual-form gap over limit)
• triggers: C50-1201
• act: I50-66 twoform_consistency recompute → unify on form2 + I50-116 design_guardband
• verify: delta_form_p95 passes gate.
• card.align_fix (alignment gap over limit)
• triggers: C50-1202
• act: update offset/skew/J (I50-112), shrink window & recompute
• verify: ΔT_obs_p95 meets tol_align.
• card.spectrum_recompute (spectral gate breach)
• triggers: C50-1204
• act: recompute RBW/ENBW/window_fn (I50-33) or write back models
• verify: ∥resid_Sy∥_{B} meets τ_Sy.
• card.mapping_dualpub (mapping error)
• triggers: C50-1212
• act: dual publish (phase/group), widen tol_map guardband
• verify: ΔT_map_p95 passes.
• card.source_refresh (stale/low coverage)
• triggers: C50-1211
• act: switch sources / shrink window / backfill; I50-103 update interpolation policy
• verify: age/coverage meet targets.
• card.security_failclosed (spectral/timing anomaly)
• triggers: C50-1221/1222
• act: bypass/rollback, rate-limit;
• verify: anomaly rate recedes; persist evidence.
• VIII. Implementation Bindings I50-12* (Interface prototypes, I/O, invariants)
• I50-121 evaluate_quality(ds, rules) -> {metrics.Q, report, pass}
• I50-122 evaluate_integrity(ds, rules) -> {metrics.Int, report, pass}
• I50-123 evaluate_security(ds, rules) -> {metrics.Sec, report, pass}
• I50-124 plan_guardband(metrics, u, risk) -> {gb_updates, policy}
• I50-125 run_strategy_cards(cards, context) -> {actions[], verify}
• I50-126 assert_tbn_contracts(reports, rules) -> {pass, summary}
• I50-127 emit_contract_manifest(results, policy) -> {uri, status}
• Invariants: two_forms_present=true; same window/bandwidth/units; RefCond.hash traceable; strategy-card execution replayable.
• IX. Cross-References
• Ch. 2 (dual forms / measures / units); Chs. 3–5 (acquisition & estimators/statistics); Chs. 6–7 (links / environmental corrections); Chs. 8–10 (instruments / anchors / replay); Ch. 11 (u/U & guardbands); Chs. 13–14 (operations / security); Appendices A/B/C/D/E (interfaces / contracts / manifests / metrics / uncertainties).
• Summary
• This chapter systematizes TBN metrology’s Quality / Integrity / Security rules and the strategy-card workflow, with rigid requirements for dual-form, dimensions, and traceability.
• With M50-12 / C50-12x / I50-12* and manifest.tbn.contracts, TBN achieves a closed loop of detect → act → verify → rollback, supporting operational governance in Chs. 13–15.