{
  "acceptanceEvidence": [
    "measured RTO/RPO",
    "clean-room proof",
    "independent observation",
    "defect closure plan"
  ],
  "acceptanceMatrix": [
    {
      "acceptanceState": "PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale",
      "assessmentMethod": "timed exercise",
      "criterion": "Measured restoration",
      "requiredResult": "RTO/RPO and safety objectives are directly observed"
    },
    {
      "acceptanceState": "PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale",
      "assessmentMethod": "independent verification",
      "criterion": "Clean state",
      "requiredResult": "Recovered artifacts match approved hashes and compromise checks"
    },
    {
      "acceptanceState": "PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale",
      "assessmentMethod": "readiness graph test",
      "criterion": "Negative result",
      "requiredResult": "Missed objectives remain recorded and propagate"
    }
  ],
  "bidEvaluationCriteria": [
    "recovery exercise leadership",
    "forensic continuity",
    "power/cooling/OT restoration experience",
    "negative-result discipline",
    "price realism and schedule credibility",
    "data-rights and evidence-delivery terms",
    "subcontractor and supply-chain transparency"
  ],
  "canonicalUrl": "https://xn--mwe.com/procurement/work-packages/recovery-exercise/",
  "dataRequirements": [
    "RTO/RPO objectives",
    "known-good artifacts",
    "backup and key inventories",
    "dependency restoration order",
    "incident command and evidence rules"
  ],
  "deliverables": [
    "exercise plan",
    "restoration chronology",
    "evidence-preservation record",
    "reinfection checks",
    "lessons and corrective actions"
  ],
  "dependencies": [
    "WP-K06-05",
    "WP-K06-06"
  ],
  "evidenceRights": [
    "The acquiring authority receives perpetual access to final reports, schemas, manifests, acceptance evidence, defects, and correction history within the negotiated data-rights regime.",
    "Contractor proprietary methods may remain protected only when they do not prevent independent replay of required results.",
    "Source artifacts, hashes, versions, tool outputs, and negative findings required for acceptance cannot be withheld merely because they are unfavorable.",
    "No clause transfers authority, licensing status, or ownership beyond the signed contract and governing law."
  ],
  "exclusions": [
    "no tabletop-only claim of operational recovery",
    "no destruction of production evidence"
  ],
  "id": "WP-K06-07",
  "inputs": [
    "recovery objectives",
    "known-good artifacts",
    "backup inventory",
    "incident command",
    "range environment"
  ],
  "k07Id": "WP-K07-07",
  "name": "Critical-function recovery exercise",
  "negativeResultClauses": [
    "A failed, partial, stale, disputed, unavailable, or superseded result must be delivered and may not be converted into a pass.",
    "Discovery of a safety, authority, evidence, or common-cause defect triggers prompt notice and preserves stop authority.",
    "Acceptance of one deliverable does not waive latent defects, falsified evidence, or later-discovered nonconformance.",
    "The final package must distinguish work completed, work not performed, evidence unavailable, and owner decisions pending."
  ],
  "objective": "Demonstrate clean restoration of minimum viable mission and safe functions under isolated, degraded, and compromise-assumed conditions.",
  "releaseId": "K12-2026-08-16",
  "slug": "recovery-exercise",
  "statementOfWork": {
    "contractorDeliverables": [
      "exercise plan",
      "restoration chronology",
      "evidence-preservation record",
      "reinfection checks",
      "lessons and corrective actions"
    ],
    "dependencies": [
      "WP-K06-05",
      "WP-K06-06"
    ],
    "exclusions": [
      "no tabletop-only claim of operational recovery",
      "no destruction of production evidence"
    ],
    "governmentOrOwnerFurnishedInformation": [
      "RTO/RPO objectives",
      "known-good artifacts",
      "backup and key inventories",
      "dependency restoration order",
      "incident command and evidence rules"
    ],
    "performanceOutcomes": [
      "measured minimum-viable mission restoration",
      "clean-room recovery evidence",
      "reinfection and integrity checks",
      "corrective-action register"
    ],
    "performanceStandards": [
      "RTO/RPO and safety objectives are directly observed",
      "Recovered artifacts match approved hashes and compromise checks",
      "Missed objectives remain recorded and propagate"
    ],
    "periodOfPerformance": "To be defined by the acquiring authority; no duration is inferred by the public pattern.",
    "purpose": "Demonstrate clean restoration of minimum viable mission and safe functions under isolated, degraded, and compromise-assumed conditions.",
    "qualitySurveillance": [
      "timed exercise",
      "independent verification",
      "readiness graph test"
    ]
  }
}