K05 assurance architecture

Evaluation Range Scenarios

Direct answer

The K05 range covers representative IT, OT, firmware, identity, model-data, sensor, timing, communications, UAS, electromagnetic, power, cooling, recovery, and evidence failures in isolated or otherwise authorized test environments.

Evidence boundary. These records describe architecture, control relationships, test requirements, and legal-source status. They do not certify a facility, authorize a mission, prove deployment, or replace current facility-specific engineering and legal review.

Bounded scenarios

RNG-01

IT-to-OT boundary pressure

Validate that an assumed-compromised enterprise zone cannot command or silently reconfigure protected OT and safety functions.

Safety envelope: 6 controls · assurance links: 2

RNG-02

BMC and firmware trust failure

Evaluate detection, isolation, key revocation, signed recovery, and fleet blast-radius control when management-plane trust is withdrawn.

Safety envelope: 6 controls · assurance links: 1

RNG-03

Workload identity compromise

Evaluate short-lived identity revocation, session termination, lateral-movement containment, and service continuity.

Safety envelope: 6 controls · assurance links: 2

RNG-04

Model and data poisoning

Evaluate provenance checks, disagreement detection, drift thresholds, action suspension, and clean model/data restoration.

Safety envelope: 6 controls · assurance links: 2

RNG-05

Sensor conflict and adversarial input

Evaluate multi-modal disagreement, sensor-health weighting, classification uncertainty, and non-destructive degraded response.

Safety envelope: 6 controls · assurance links: 1

RNG-06

Timing integrity loss

Evaluate path-delay anomaly detection, clock-health scoring, holdover, safe process behavior, and trusted-time restoration.

Safety envelope: 6 controls · assurance links: 1

RNG-07

Communications denial and partition

Evaluate decentralized safe operation, local authority, stale-command rejection, reconciliation, and evidence continuity during network partition.

Safety envelope: 6 controls · assurance links: 3

RNG-08

UAS intrusion awareness

Evaluate detection, tracking, classification uncertainty, airspace-restriction data, authorized responder routing, and authority separation.

Safety envelope: 6 controls · assurance links: 1

RNG-09

Electromagnetic disruption

Evaluate degradation of sensors, communications, timing, edge compute, and restoration assets under approved non-damaging interference simulation.

Safety envelope: 6 controls · assurance links: 2

RNG-10

Power load rejection and islanding

Evaluate grid separation, load shedding, reactor or generation response models, UPS/storage behavior, essential cooling, and resynchronization.

Safety envelope: 6 controls · assurance links: 1

RNG-11

Cooling telemetry corruption

Evaluate physics-aware detection and independent protective behavior when supervisory cooling data is wrong or unavailable.

Safety envelope: 6 controls · assurance links: 1

RNG-12

Clean-room recovery and reinfection resistance

Evaluate dependency-aware restoration, credential rotation, evidence preservation, artifact attestation, and return-to-service gates.

Safety envelope: 6 controls · assurance links: 2

RNG-13

Evidence ledger integrity

Evaluate detection and recovery when decision receipts, logs, hashes, or incident records are missing, reordered, stale, or contradicted.

Safety envelope: 6 controls · assurance links: 1

RNG-14

Authority package failure

Evaluate automatic stop, minimization, notification, and evidence preservation when mission authority expires, target scope conflicts, or critical-outcome risk emerges.

Safety envelope: 6 controls · assurance links: 2

Public-detail boundary

No scenario publishes exploit, payload, persistence, evasion, credential-theft, target-selection, engagement, destructive-procedure, or weapon-construction instructions.

Complete machine-readable range