K07 · evidence-bundled critical-infrastructure assurance
Independent verification
Direct answer
Challenge the assurance argument, replay evidence, test mappings, inspect defeaters, and record disagreements without inheriting the delivery team's conclusions.
Authority and evidence boundary. K07 publishes knowledge architecture, bounded reference records, procurement structures, local validation tools, signed synthetic fixtures, and point-in-time source review. It does not certify a facility, award a contract, authorize an operation, prove truth, establish deployment, or claim current operation.
Statement of work
Challenge the assurance argument, replay evidence, test mappings, inspect defeaters, and record disagreements without inheriting the delivery team's conclusions.
| Current package ID | WP-K07-09 |
|---|---|
| Inherited stable ID | WP-K06-09 |
| Period | To be defined by the acquiring authority; no duration is inferred by the public pattern. |
| Dependencies | WP-K06-08 |
Required outcomes
- independent replay results
- mapping and evidence disputes
- residual-risk statement
- signed verification decision with limitations
Owner-furnished information
- complete evidence package
- approved range access
- acceptance criteria
- source and mapping records
- organizational independence disclosures
Contractor deliverables
- independent findings
- replay results
- mapping disputes
- residual-risk statement
- verification decision
Performance standards
- Verifier has no delivery-team decision conflict
- Selected claims and evidence can be independently reproduced
- Unresolved disputes remain in final record
Quality surveillance
- organizational review
- technical replay
- record audit
Exclusions
- no self-verification represented as independent
- no regulator impersonation
Acceptance matrix
| Criterion | Required result | Assessment | Outcome vocabulary |
|---|---|---|---|
| Independence | Verifier has no delivery-team decision conflict | organizational review | PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale |
| Replay | Selected claims and evidence can be independently reproduced | technical replay | PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale |
| Disagreement preservation | Unresolved disputes remain in final record | record audit | PASS, FAIL, PARTIAL, UNAVAILABLE, or NOT APPLICABLE with rationale |
Bid-evaluation criteria
- independence
- replay capability
- high-consequence domain expertise
- willingness to issue adverse findings
- price realism and schedule credibility
- data-rights and evidence-delivery terms
- subcontractor and supply-chain transparency
Evidence rights
- The acquiring authority receives perpetual access to final reports, schemas, manifests, acceptance evidence, defects, and correction history within the negotiated data-rights regime.
- Contractor proprietary methods may remain protected only when they do not prevent independent replay of required results.
- Source artifacts, hashes, versions, tool outputs, and negative findings required for acceptance cannot be withheld merely because they are unfavorable.
- No clause transfers authority, licensing status, or ownership beyond the signed contract and governing law.
Negative-result clauses
- A failed, partial, stale, disputed, unavailable, or superseded result must be delivered and may not be converted into a pass.
- Discovery of a safety, authority, evidence, or common-cause defect triggers prompt notice and preserves stop authority.
- Acceptance of one deliverable does not waive latent defects, falsified evidence, or later-discovered nonconformance.
- The final package must distinguish work completed, work not performed, evidence unavailable, and owner decisions pending.
Data requirements
- complete evidence package
- approved range access
- acceptance criteria
- source and mapping records
- organizational independence disclosures