K05 assurance architecture

Timing integrity loss

Direct answer

Evaluate path-delay anomaly detection, clock-health scoring, holdover, safe process behavior, and trusted-time restoration.

Evidence boundary. These records describe architecture, control relationships, test requirements, and legal-source status. They do not certify a facility, authorize a mission, prove deployment, or replace current facility-specific engineering and legal review.

Objective

Evaluate path-delay anomaly detection, clock-health scoring, holdover, safe process behavior, and trusted-time restoration.

Abstract injected condition

controlled timing offset, jitter, source loss, or authentication failure

Required observations

  • protected-function state
  • policy decision and confidence
  • authority and configuration state
  • timing and identity health
  • incident chronology
  • rollback or safe-state result

Pass evidence

protection functions reject unsafe time-dependent decisions and remain in approved state

Safety envelope

  • isolated range or approved hardware-in-the-loop environment
  • no production plant or public-network target
  • synthetic or authorized data and identities
  • effects-disabled or non-damaging test substitutes
  • independent stop authority
  • complete artifact removal and reset evidence

Excluded public detail

  • exploit or payload instructions
  • credential theft procedure
  • persistence or evasion recipe
  • targeting or engagement thresholds
  • weapon construction
  • real-world unauthorized access

Assurance claims evaluated

AC-K05-C07

Machine-readable scenario