{
  "argument": "Consequence-driven engineering focuses scarce assurance effort on outcomes that can defeat safety, continuity, or mission objectives even after perimeter compromise.",
  "canonicalUrl": "https://xn--mwe.com/assurance-case/claims/high-consequence-events-are-bounded/",
  "claim": "The facility identifies the cyber-enabled physical and mission consequences that must be prevented, their initiating pathways, critical functions, and independent protections.",
  "defeaters": [
    "unmodeled dependency",
    "unknown external service",
    "new plant configuration",
    "hidden network bridge",
    "protection sharing a common failure mode"
  ],
  "evidenceRequirements": [
    "HCE register",
    "system-of-systems dependency model",
    "critical-function list",
    "attack-path abstractions",
    "independent protection inventory",
    "hazard acceptance records"
  ],
  "hazards": [
    "radiological consequence",
    "loss of heat removal",
    "unsafe load rejection",
    "cooling loss",
    "loss of essential compute",
    "corrupted restoration"
  ],
  "id": "AC-K05-C02",
  "name": "High-consequence events are identified and bounded",
  "recoveryObjectives": [
    "prevent HCE progression",
    "reach approved safe state",
    "retain essential telemetry",
    "recover critical function within site target"
  ],
  "releaseId": "K12-2026-08-16",
  "siteTailoring": [
    "reactor design",
    "electrical one-line",
    "cooling architecture",
    "compute mission priorities",
    "fuel and logistics"
  ],
  "slug": "high-consequence-events-are-bounded",
  "sourceIds": [
    "SRC-INL-CCE",
    "SRC-NIST-800-82R3"
  ]
}