K07 · evidence-bundled critical-infrastructure assurance
Existing nuclear-plant colocation digital-twin evidence contract
Direct answer
Support bounded design, consequence, control, autonomy, timing, recovery, and evidence testing without exposing or commanding a live facility.
Authority and evidence boundary. K07 publishes knowledge architecture, bounded reference records, procurement structures, local validation tools, signed synthetic fixtures, and point-in-time source review. It does not certify a facility, award a contract, authorize an operation, prove truth, establish deployment, or claim current operation.
Purpose and facility pattern
Support bounded design, consequence, control, autonomy, timing, recovery, and evidence testing without exposing or commanding a live facility.
Facility pattern: FP-K06-001.
Required model facts
- declared system boundary
- model version and hash
- represented and omitted functions
- physical assumptions and validity range
- time resolution and uncertainty
- sensor and actuator abstractions
- failure and degraded modes
- calibration source
- data provenance
- known divergence from site
Safe synthetic-data rules
- use synthetic identifiers and non-routable addresses
- remove site coordinates, credentials, keys, serial numbers and real protection settings
- preserve physical relationships only at the fidelity needed for the named test
- label generated, transformed, sampled and withheld fields
- prevent synthetic records from being imported as operating evidence
Allowed uses
- architecture trade study
- contained fault injection
- recovery sequence test
- control and evidence schema validation
- model and agent assurance
Prohibited uses
- target development
- production command
- real facility access
- weapon or destructive-procedure development
- claiming site fidelity beyond validated range
- certification without competent authority
Acceptance evidence
- model manifest
- calibration record
- validation cases
- known-limit register
- fidelity statement by function
- independent challenge
- reset and artifact-removal test
Invalidators
- unrecorded site change
- unknown calibration source
- hidden production connection
- real credential or key material
- unsafe command path
- unbounded model extrapolation
Source relationships
- NIST IR 8356 — Security and Trust Considerations for Digital Twin Technology — National Institute of Standards and Technology; NIST IR 8356; FINAL. Exact claim-support entries: 1. Revalidated 2026-08-15T23:30:00Z.
- NIST SP 800-82 Revision 3 — K07 Official Review Record — National Institute of Standards and Technology; Revision 3; FINAL; REVISION 4 PRE-DRAFT PROCESS OPENED 2026. Exact claim-support entries: 1. Revalidated 2026-08-15T23:30:00Z.
- DOE Cyber-Informed Engineering — U.S. Department of Energy, CESER; Official program page reviewed 2026-08-15; OFFICIAL PROGRAM GUIDANCE. Exact claim-support entries: 1. Revalidated 2026-08-15T23:30:00Z.