c-ECO INSTITUTESYSTEMIC INTELLIGENCE LIBRARY · INF

c-ECO SYSTEM / DOMAIN LIBRARY

INF · Domain knowledge

Infrastructure & Heavy Construction

Risks · Response · Governance · Calibration
Scenarios · Recovery · Sources

c-ECO Institute crest

A domain library connecting systemic risks, monitoring, governance and recovery. Explore nine parts and 35 sections with mechanisms, observations, evidence matrices and documented cases.

English research and learning edition · Scientific references, domain cases and reproducible exercises. Methodological notes →

READING AND EVIDENCE

How to use this library

The library combines domain research, a c-ECO analytical teaching structure and original exercises. References identify mechanisms, methods and documented cases; inclusion does not validate a complete TFP application.

N1 · Analytical and simulated material
The risk–TFP associations, candidate observations, scenario designs and exercise parameters organize inquiry. They are not measured local results, approved operational thresholds or estimates of event frequency. The case must define its function, observations and criteria.
N2 · Reproducible laboratory
Section 20 specifies a synthetic model, assumptions, dependence and random seed. Its Q output is a pedagogical index, separate from SPS. Numerical summaries describe only that declared experiment.
N3 · Sources and scope
Research papers, official documents and case records have distinct roles. This is a curated teaching library, not an exhaustive systematic review. Dynamic sources require a cited version or extraction date; applicability of a legal or technical instrument depends on the actual jurisdiction and activity.
N4 · Governance and learning
The library establishes no statutory power, quorum, emergency command, provider certification, partnership or institutional endorsement. A learning case may be real or simulated. Completion, optional credentialing, permission to submit and licensing remain distinct. Projects and data contributions to the SIL require an associated fellow and applicable review.

PART I

Domain intelligence profile

SECTION 01

Domain overview and system boundary

Begin with the function enabled by infrastructure: a safe crossing, stable excavation, protected reservoir or accessible transport corridor. Draw the physical load path and the service network separately. An undamaged bridge may be unusable because its approach road failed; a standing structure may be unsafe because a critical connection has degraded. Define the construction stage and service users before selecting indicators. This boundary helps prevent an asset-condition score from becoming an unsupported claim about community resilience. Compare a bridge inspection boundary with the boundary needed to assess access to the nearest hospital after the bridge closes. [INF01] [INF07]

Infrastructure combines structures, geotechnical systems, corridors, construction operations and the services these assets enable. The unit of analysis can be a bridge connection, a tunnel, a dam spillway, a transport corridor or a regional network. Heavy construction also creates temporary states whose load paths, access arrangements and supervision differ from the completed asset. A project can satisfy a final-design concept yet remain vulnerable during erection, excavation or temporary support removal. [INF07] [INF08]

An asset condition grade describes only part of service risk. Network alternatives, load restrictions, repair access and the location of hospitals or food distribution routes determine consequences. Direct physical damage, travel disruption and lost access must be assessed separately to prevent double counting. Global hazard screening identifies candidate exposure; local engineering evidence establishes failure mechanisms and defensible operating restrictions. [INF10] [INF11]

This library connects anticipatory monitoring to structural assessment, geotechnical observation, dependency analysis and recovery sequencing. It does not substitute a learning score for a competent engineering judgment. Proposed P and velocity measures are derived from identified limit states and observed deterioration processes, while restoration capacity describes actual crews, materials, access, temporary works and inspection arrangements. [INF03] [INF09]

A domain label is not yet a case boundary. Separate the condition of a resource or asset from the function delivered to users. A nominally available installation may fail to deliver usable service, and a system-wide average can conceal localized loss. Preserve the original physical or institutional unit alongside any normalized representation. The boundary should make it possible to ask what enters, what changes, what leaves and who experiences the consequences.

Case-analysis method
Case fieldRecord
FunctionDescribe the outcome delivered, affected users and the minimum useful unit of service.
BoundaryRecord spatial, technical, organizational and temporal boundaries, including excluded processes.
Reference conditionState what counts as functional performance and which evidence defines that condition.
Exposure and distributionIdentify which groups, assets and ecological functions can be affected differently.
DependenciesIdentify prerequisites, substitutes and common points of failure.
ObservationConnect each important claim to a source, method, scale and update interval.

Section readings [INF01; INF07]

SECTION 02

Historical development and changing conditions

Infrastructure safety has evolved through material standards, analytical design, independent checking, condition inspection and performance-based assessment. Historical failures often expose a gap between these layers rather than a complete absence of technical knowledge. Added dead load, modified operating conditions and maintenance decisions can change an old structure’s actual risk. Use case histories to examine which assumption persisted after its evidentiary basis changed, and what institutional process could have detected that change. Trace the life of a connection from original design through modifications, inspections and corrective work rather than examining only the failure day. [INF14] [INF16]

A historical baseline must be examined for changes in exposure, technology, operating practice and observation. Compare episodes using their mechanisms and evidence, rather than treating all events with a similar label as exchangeable observations. A reconstruction should show what was known at each time; later explanations should not be presented as information available to the original decision maker. Recovery and long-term change may require a separate timeline from the initiating incident.

Historical comparison: documented records for further study
Case and periodMechanism to examineComparison questionSource
I-35W bridge, Minneapolis, August 2007Gusset plate capacity was inadequate under combined bridge modifications, traffic and construction loadingInspect connections and reconcile current loads rather than assuming original design calculations remain sufficient[INF14]
FIU pedestrian bridge, Miami, March 2018Design calculation errors affected a critical nodal region during constructionConnect design review, observed cracking, construction sequence and decisions about public exposure[INF15]
Fern Hollow Bridge, Pittsburgh, January 2022Corrosion and section loss progressed while repeated maintenance recommendations remained unaddressedTreat inspection-to-action performance as part of safety rather than counting inspections alone[INF16]
Oroville spillway incident, California, February 2017Structural, geological, design and organizational factors contributed to spillway damage and emergency operationEvaluate failure modes of ancillary structures and challenge assumptions accumulated over an asset life[INF17]

Section readings [INF14; INF16]

SECTION 03

Actors, institutions and decision responsibilities

Owners, designers, contractors, inspectors, public authorities and users control different parts of infrastructure risk. During construction, temporary works and public access may involve responsibilities separate from final-design approval. Map who can order an inspection, stop a task, close a route, approve a repair and authorize reopening. Record how technical concerns reach that person and how unresolved disagreements are documented. A responsibility matrix is useful only when it corresponds to real authority, information and action deadlines. Identify the actor able to suspend an unsafe construction stage and the evidence needed to trigger that decision. [INF15] [INF16]

Map actors by the function they perform and the responsibility they actually hold in the case. The same organization may observe a condition, supply a service and participate in a decision; those roles should remain distinguishable. Examine information access, resources, expertise, affected users and accountability together. A list of institution names is not an operating governance arrangement. Record the evidence for each responsibility and the process for resolving a disagreement or correcting a record.

Case-analysis method
FunctionActors to identifyReviewable output
ObserveOperators, observation networks, laboratories and affected usersTimestamped records and methods.
InterpretAnalysts and relevant subject specialistsMechanism hypotheses, alternatives and uncertainty.
ReviewQualified reviewers with declared interestsDocumented assessment and unresolved disagreements.
Decide and executeThe actor with the applicable mandateReasons, authorized action and verifiable completion.
CommunicateResponsible institutions and accessible public channelsMessage, receipt, corrections and feedback.
UpdateData custodians and the review functionVersion, new evidence and conditions for revision.

Section readings [INF15; INF16; C07]

PART II

Systemic risk intelligence

SECTION 04

Primary systemic risks

Describe each risk as a mechanism with a limit state and consequence. Corrosion, scour, fatigue and nodal overload require different observations and cannot be represented by a single generic deterioration trend. Include local failures that may control the entire structure, and distinguish structural safety from service disruption. For each proposed indicator, explain what increase or decrease would mean, what other explanations remain possible and which direct investigation would test them. Compare a crack-width measurement with a connection capacity calculation and explain why neither alone establishes the same safety conclusion. [INF10] [INF14]

The inventory is a structured set of research hypotheses. It separates a threatening condition from the mechanism of loss and from its consequences. The proposed TFP association indicates which question to investigate; it is not evidence that a particular indicator predicts the event. Risk importance depends on the defined function, exposure, duration and usable alternatives. Do not infer frequency, severity or priority from the position of a row in the table.

Thirty domain-specific risk hypotheses
#Risk or threatening conditionMechanism to examineProposed TFP inquiry
1Connection failureLocal connection demand exceeds available resistanceP: connection reserve; σ: as-built uncertainty
2Progressive collapseLocal loss transfers load to insufficient alternative pathsP: robustness; ΔV: propagation
3Fatigue crackingRepeated stress cycles propagate flawsP: crack condition; ΔV: crack growth
4Corrosion section lossChemical/environmental attack reduces structural capacityP: remaining section; ΔV: deterioration
5Prestressing degradationTendon damage or corrosion reduces intended forceP: residual prestress; σ: inspection coverage
6Foundation scourFlow removes supporting sediment near foundationsP: embedment; ΔV: scour development
7Differential settlementUnequal ground movement redistributes structural demandsP: displacement; ΔV: settlement
8Slope instabilityPore pressure and geometry reduce shear resistanceP: stability condition; ΔV: movement
9LiquefactionCyclic loading reduces effective soil strengthP: susceptibility; σ: site characterization
10Excavation instabilityTemporary support or groundwater control becomes inadequateP: support demand; ΔV: deformation
11Falsework collapseTemporary load paths lack capacity or bracingP: construction-stage reserve
12Crane failureLifting demand, wind or ground support exceeds safe envelopeP: lift condition; ΔV: wind/load change
13Construction-stage overstressErection sequence creates an unverified force stateP: staged limit state; σ: sequence assumptions
14Tunnel lining distressGround pressure, water or deterioration damages liningP: lining condition; ΔV: convergence
15Tunnel attachment failureCorrosion or adhesive creep releases overhead elementsP: anchorage condition; ΔV: degradation
16Bridge vehicle impactOversize loads strike structural membersP: clearance; σ: routing controls
17Vessel collisionNavigation error or drift transfers impact to bridge supportsP: impact exposure; Lr: channel alternatives
18Overtopping erosionFlow erodes embankment or unprotected terrainP: freeboard; ΔV: erosion
19Spillway upliftWater pressure beneath slabs exceeds resistanceP: uplift margin; σ: drainage condition
20Drainage blockageDebris creates ponding, pressure or corrosion exposureP: drainage functionality; ΔV: accumulation
21Fire-induced strength lossHeating changes material strength and load pathsP: thermal exposure; ΔV: heating
22Seismic damageGround motion causes structural and nonstructural failureP: fragility; σ: hazard/model uncertainty
23Flooded road disruptionWater depth and current reduce safe traffic capacityP: accessibility; ΔV: water rise
24Heat deformationThermal expansion or material softening restricts serviceP: thermal condition; ΔV: temperature change
25Utility strikeExcavation damages co-located servicesP: mapping confidence; σ: buried-asset location
26Material nonconformanceDelivered properties differ from design assumptionsP: verified resistance; σ: quality evidence
27Hidden load additionsModifications increase dead or operational demandP: updated demand/capacity
28Inspection-to-action failureDocumented defects persist without correctionΔV: unresolved exposure; Lr: action capacity
29Single-route isolationLoss of a bottleneck removes access to essential servicesP: network accessibility; Lr: alternatives
30Recovery access failureDamaged routes prevent inspection, stabilization and repairLr: feasible access and task sequence

Section readings [INF10; INF14]

SECTION 05

Amplification mechanisms and secondary risks

A modest defect can become consequential when load paths are nonredundant, drainage remains blocked, loads increase or corrective work is deferred. Amplification often operates across organizational and physical processes: an inaccurate inventory can exclude a critical member from inspection, allowing deterioration to continue. Describe the chain rather than adding unweighted vulnerability factors. Identify interventions that break the chain, including record correction, access restriction, drainage repair or task-specific structural strengthening. Explain how drainage maintenance can alter a structural deterioration pathway without changing the nominal design load. [INF16] [INF21]

An amplifier changes the consequences of an initiating condition without necessarily causing the initiating event. Useful counterfactuals hold the threat constant and vary concentration, maintenance, access, information or response capacity. Document the mechanism and the observation that would distinguish it from an alternative explanation. Several amplifiers may share the same upstream cause; counting each one as independent evidence exaggerates confidence.

Amplification mechanisms
AmplifierPropagation mechanismEvidence or TFP inquiry
Nonredundant load pathA local defect controls global stabilityDemonstrate alternative load paths
Unrecorded modificationActual loads differ from analytical assumptionsReconcile as-built and maintenance records
Blocked drainageWater sustains corrosion or destabilizes groundInspect drainage as a structural dependency
Construction under trafficPublic exposure continues during uncertain stagesVerify closure and hold-point procedures
Co-located utilitiesOne structural failure disrupts several servicesMap shared geographic exposure
Deferred corrective workKnown defects continue to deteriorateTrack inspection-to-action closure
Constrained detoursAlternative routes cannot carry affected demandUse capacity and vehicle restrictions
Regional repair scarcityMany assets need the same crews and componentsModel concurrent restoration demand

Section readings [INF16; INF21]

SECTION 06

Emerging risks and research horizons

Changing climate conditions, new materials, retrofits and digital monitoring alter both exposure and uncertainty. A sensor-rich digital model can still omit inaccessible connections or erroneous as-built geometry. Low-carbon additions can change loads or fire conditions, while recycled or innovative materials require evidence appropriate to their application. Treat emerging risk as a question about mechanisms and data needs, not a reason to reject innovation. Compare new designs with the risks and maintenance burdens of the existing alternative. Identify a decision for which additional modeling cannot substitute for opening up an inaccessible component or verifying material properties. [INF09] [INF20]

A research horizon is tied to the time needed to investigate, prepare or change a system. It is not a date at which an emerging threat is predicted to occur. Record the reason for concern, the strength of evidence, the exposed function and the observation that would change the priority. Distinguish a newly observed mechanism from a known mechanism whose exposure, scale or institutional context is changing.

Emerging research agenda
Research topicMechanism or knowledge gapObservation or horizon question
Nonstationary climate loadingHeat, floods and compound events alter design assumptionsScenario-based reassessment
Digital twin overconfidenceUnvalidated models obscure missing as-built informationModel validation and uncertainty ledger
New materials and jointsLimited long-term evidence complicates deterioration estimatesTask-specific tests and monitoring
Connected construction equipmentDigital dependencies introduce safety and availability interfacesSeparate control integrity from structural assessment
Aging coupled networksSeveral services depend on deteriorating shared assetsJoint condition and dependency mapping
Low-carbon retrofit interactionsAdded equipment or changed loads affect existing structuresUpdate structural demand and fire analysis

Section readings [INF09; INF20]

SECTION 07

Cascades and cross-domain dependencies

Infrastructure cascades can propagate through load redistribution, blocked access, co-located utility failure or economic disruption. Distinguish these paths from several assets damaged independently by the same flood. A network model must include capacity and user demand where service matters: a theoretical detour may be unsuitable for ambulances, heavy trucks or displaced residents. Specify onset time, endurance and substitution options for each dependency, and revisit the map during recovery when access requirements change. Map how one bridge closure affects water repair access, emergency travel and freight, identifying which effects require local traffic evidence. [INF01] [INF11] Transport vulnerability research distinguishes topological connectivity from performance under actual demand; this distinction is central when evaluating detours. [INF23]

Loads move through connections, members, foundations and ground. A local connection can control system performance even where most members retain capacity. Redundancy must be demonstrated for the relevant failure mode; a visually complex structure is not necessarily structurally redundant. [INF07] [INF14]

Deterioration changes effective section, bond, confinement, permeability or soil support. The rate may accelerate with water ingress, deicing salts, drainage blockage and repeated loading. Inspection frequency alone cannot establish safety when observations do not trigger corrective work. [INF16]

Construction sequences temporarily redistribute forces and constraints. Post-tensioning, falsework removal, staged concreting and excavation require explicit hold points and verified as-built conditions. A calculation for the completed structure is not automatically valid in an incomplete stage. [INF15]

For each directed dependency, specify the function supplied, the destination, the propagation time and the substitute. Shared-cause failure, interacting threats and cascading propagation are different structures. A directed arrow becomes an explanatory claim only when the timing and mechanism are supported. Test apparent redundancy by removing the common access route, platform, energy supply or specialist on which both alternatives depend.

Directed dependency hypotheses
DependencyMechanism and directionVerification or TFP inquiry
EnergyConstruction, pumping, tunnels and signals require powerRecord backup and safe shutdown
WaterGroundwater, drainage and scour affect stabilityLink hydraulic and geotechnical observations
TransportInspection and heavy repair need viable routesCheck axle loads, clearances and detours
TelecommunicationsMonitoring and incident coordination need communicationsRetain offline inspection procedures
Public healthAccess to hospitals depends on routes and bridgesMeasure service accessibility
HousingFailures displace residents and isolate settlementsDisaggregate access consequences
Chemicals/materialsConcrete, steel and specialty components constrain repairVerify specification and supply lead time
EnvironmentSediment, habitats and land cover alter hazardsAssess intervention side effects
Emergency responseEvacuation and rescue depend on safe corridorsCoordinate closure and access priorities
GovernanceInspection findings need accountable action and authorizationTrack decision ownership and closure evidence

Section readings [INF01; INF11; INF23; C01; C02]

PART III

Systemic response intelligence

SECTION 08

Readiness and response protocols

Response protocols translate observations into safe, feasible action: restricted loading, closure, evacuation, temporary stabilization or emergency investigation. Define the authority, communication route and verification for each action. Engineering judgment is especially important when deterioration is rapid or the structure differs from the assumed model. Do not create automatic universal crack or displacement thresholds from a teaching example. A protocol should identify when uncertainty itself justifies a precautionary assessment or temporary restriction. Test a protocol against rapidly developing cracking during construction, including who verifies the next stage can safely proceed. [INF15] [INF16]

Preparedness connects a signal to a responsible actor, an available measure and a condition of completion. This learning architecture does not grant emergency command or operational authority to the c-ECO Institute or a course participant. A useful protocol distinguishes checking the signal, protecting exposed functions and verifying recovery. A paper plan contributes to usable capacity only when its relevant assumptions have been tested.

Case-analysis method
StageAction to prepareEvidence
PrepareDefine critical functions, contacts, alternatives and observation coverage.A tested readiness record.
VerifyCheck the signal, the instrument and plausible alternative explanations.A traceable observation and uncertainty statement.
ProtectSelect and implement measures within the responsible actor’s authority.Coverage of priority functions and evidence of execution.
RecoverVerify usable performance before treating the function as restored.Recorded return criteria, monitoring and decision owner.

Section readings [INF15; INF16]

SECTION 09

Scientific review and decision records

Escalation should preserve the distinction between a measurement, an interpretation and an authorization. A contractor’s explanation of a crack is not equivalent to independently verified capacity. Record the design assumptions challenged, the responsible decision-maker, the time available and the disposition of each concern. A review process must operate fast enough to influence work, while maintaining an auditable record of dissent. Teaching libraries can describe this process without claiming authority to direct real construction or emergency operations. Write an escalation entry that makes an unresolved calculation issue visible before a lifting, stressing or falsework-removal operation. [INF15] [INF14]

A review record separates observation, inference and decision. Record the data version, methods, alternative explanations, relevant expertise, conflicts of interest and unresolved disagreement. Review should be matched to the question and its consequences. Scientific analysis can inform a competent actor without replacing that actor’s mandate. No membership size, quorum or institutional power is established by this teaching library.

Case-analysis method
Review itemQuestion and record
QuestionWhat specific claim is being evaluated?
EvidenceWhich observations, sources and transformations support it?
AlternativesWhat other process could explain the same observation?
IndependenceWhich interests or shared data origins affect review?
DecisionWho can act, on what basis and with which constraints?
RevisionWhat new observation or failure of an assumption reopens the analysis?

Section readings [INF15; INF14; C05; C07]

SECTION 10

Communication and observation continuity

Public messages need clear route restrictions, affected services, alternatives and update times. Technical communications require location-specific defect descriptions, load restrictions and task hold points. Avoid describing an asset as safe solely because no new movement has been detected: sensor coverage and failure mode matter. Test whether signage, mobile alerts and detours reach road users, people with disabilities and non-digital audiences. Reopening information should describe remaining restrictions and the evidence supporting them. Prepare a closure notice and a technical inspection request from the same evidence, preserving their different purposes and levels of detail. [INF18] [INF16]

Continuity of observation should be tested alongside continuity of the function itself. Losing data may increase uncertainty before the physical process visibly changes. Redundancy must be demonstrated against common causes, including power, location, communications, credentials and specialist availability. During disconnected operation, preserve the last reliable observation, record the uncertainty that follows and reconcile timestamps and authorship when information paths return.

Case-analysis method
Continuity capabilityTest
Observation pathTest sensor availability, power, timing and independent confirmation.
Alternative communicationTest actual reach, autonomy and the ability to contact responsible people.
Degraded operationSpecify what can remain usable safely under loss of information or connectivity.
Offline recordKeep controlled copies of essential maps, contacts, definitions and procedures.
Accessible messagesCheck language, disability access, delivery and routes for correction.
ReconciliationPreserve timestamps and authorship when disconnected records are merged.

Section readings [INF18; INF16; C01]

PART IV

Governance and legal architecture

SECTION 11

International instruments and technical references

International resilience and climate assessments support risk management but do not automatically establish a binding local engineering requirement. Design standards, procurement obligations and safety duties vary by jurisdiction and asset type. Classify documents by legal status, technical purpose and applicability. A global hazard map is a screening input; it cannot establish site-specific resistance or certify a structure. Use international literature to identify mechanisms and methods, then document the local evidence and competent review needed for an actual decision. Separate a scientific climate projection, a technical design standard and a statutory inspection duty in the evidence register. [INF20] [INF10]

Classify each instrument before using it. A scholarly article supports an inference, a technical guide describes a method, a standard has a defined scope, and a legal instrument may create obligations only where applicable. The case record should identify the specific provision or method, its version and the activity to which it relates. A source’s institutional reputation cannot by itself establish applicability or demonstrate compliance.

Technical and institutional documents: identify their actual function
ReferenceDocumentUse and scope
[INF14]Collapse of I-35W Highway Bridge, Minneapolis, Minnesota, August 1, 2007Primary findings on gusset plate capacity, added loads, design checking and inspection.
[INF15]Pedestrian Bridge Collapse Over SW 8th Street, Miami, Florida, March 15, 2018Primary findings on nodal design calculations and responses to cracking during construction.
[INF16]Collapse of the Fern Hollow Bridge, Pittsburgh, Pennsylvania, January 28, 2022Primary findings on corrosion, section loss, maintenance recommendations and oversight.
[INF17]Independent Forensic Team Report: Oroville Dam Spillway IncidentIndependent report commissioned after the 2017 incident; separates structural, geologic and organizational contributors.
[INF18]Bridge Collapses and Other Infrastructure FailuresOfficial case synthesis covering I-90 tunnel ceiling, Skagit bridge and other investigated infrastructure failures.
[INF19]Final Report on the Collapse of the World Trade Center Towers: NIST NCSTAR 1Primary reconstruction of impact damage, fire and building response; extraordinary event rather than generic design threshold.
[INF20]Climate Change 2022: Impacts, Adaptation and Vulnerability, Chapter 6Assessed climate risks to cities and key infrastructure.

Section readings [INF20; INF10]

SECTION 12

Jurisdiction-specific responsibilities and requirements

Engineering requirements can differ for new structures, existing assets, temporary works, bridges, tunnels and dams. Verify the governing edition, amendments and owner-specific provisions. A structure’s historical compliance does not establish current capacity after modifications, deterioration or changed use. Record the assumptions needed to compare assessment findings with an applicable requirement, including loading, materials and inspection methods. Where a technical gap exists, identify the responsible authority and the evidence required to resolve it. Compare an original design requirement with an assessment of the same bridge after resurfacing and added utility loads. [INF14] [INF21]

The register should cover the actual activity and location, including interfaces between organizations and jurisdictions. Separate responsibility for observing, supervising, deciding and executing. Retain the official source, version consulted and evidence needed to assess a condition. Conflicting definitions and overlapping mandates are analytical findings to investigate. A general library cannot create a universal legal threshold for all settings.

Case-analysis method
Register fieldInformation to preserve
Instrument and versionOfficial title, scope, jurisdiction and date consulted.
Actor and functionThe competent authority, operator, owner or custodian for the relevant activity.
ConditionThe requirement, decision trigger or performance obligation actually applicable.
EvidenceThe observation or document needed to evaluate that condition.
InterfaceOverlaps, conflicts, shared duties and coordination procedures.
ReviewHow changes in the instrument, activity or evidence affect applicability.

Section readings [INF14; INF21]

SECTION 13

Causation, accountability and cascading consequences

An accountability analysis reconstructs who knew what, what duty applied and which actions were practicable. Distinguish a probable-cause finding from a legal determination of liability. Repeated recommendations without verified completion reveal an action pathway that deserves analysis even before a failure occurs. Preserve inspection versions, work orders, calculations and decision records. Avoid retrospective certainty: evaluate decisions against information available at the time while identifying whether missing information resulted from a preventable governance failure. Describe how an inspection contractor, owner and oversight authority may contribute differently to an unresolved critical defect. [INF16] [INF15]

A technical chain of consequences is not automatically a legal allocation of liability. Separate evidence of causation from the duties, control and decisions relevant to each actor. A case may contain direct damage, dependent service interruption and persistent environmental or social consequences on different timescales. The analysis should show which links are documented and which need further investigation, without presuming an institutional restoration fund, mandatory levy or insurance mechanism.

Case-analysis method
LayerAnalytical question
Technical sequenceSeparate the initiating condition, failure mechanism, propagation and consequence.
Duty and controlIdentify the applicable responsibility and the actor able to influence the relevant process.
ExposureTrace the connection between a change of state and an affected function or population.
Alternative explanationsIdentify concurrent conditions and missing evidence relevant to attribution.
Recovery resourcesIdentify documented resources and their access conditions, without assuming an institutional fund or levy.

Section readings [INF16; INF15]

SECTION 14

Cross-boundary coordination

Corridors frequently cross municipal, regional or national boundaries while service consequences extend beyond the asset owner. A bridge closure can divert traffic into another jurisdiction with lower capacity or different load restrictions. Identify agreements for incident notification, detours, inspection records and mutual assistance. Common hazard assumptions and geospatial references make joint analysis possible, but local authorities retain their respective responsibilities. The same corridor can require different engineering and emergency actions on either side of a boundary. Assess a detour crossing three jurisdictions and identify the data and authority required to establish that it is a viable alternative. [INF01] [INF13]

Processes and dependencies often cross administrative, organizational or national boundaries. Coordination requires compatible definitions, useful timing, authorized exchange and an identifiable decision interface. Sharing data does not by itself resolve disagreements over objectives, risk allocation or resources. An exercise should expose which decision can be coordinated under existing arrangements and which would require an additional agreement or competent determination.

Coordination across functional boundaries
Boundary / dependencyMechanism to coordinateCase record
EnergyConstruction, pumping, tunnels and signals require powerIdentify the actors, notification time, information definition and decision interface for this boundary.
WaterGroundwater, drainage and scour affect stabilityIdentify the actors, notification time, information definition and decision interface for this boundary.
TransportInspection and heavy repair need viable routesIdentify the actors, notification time, information definition and decision interface for this boundary.
TelecommunicationsMonitoring and incident coordination need communicationsIdentify the actors, notification time, information definition and decision interface for this boundary.
Public healthAccess to hospitals depends on routes and bridgesIdentify the actors, notification time, information definition and decision interface for this boundary.
HousingFailures displace residents and isolate settlementsIdentify the actors, notification time, information definition and decision interface for this boundary.

Section readings [INF01; INF13; C07]

PART V

TFP calibration intelligence

SECTION 15

Position (P): candidate observations

Proximity should refer to a defined engineering or service limit: connection resistance, allowable deformation, scour exposure or minimum access. Preserve the raw measurement and the calculation that relates it to consequence. Different limit states cannot be averaged without explaining the lost meaning. A proposed P transformation should show scaling, direction, uncertainty and the governing failure mechanism. When resistance is uncertain, a precise demand measurement does not create a precise margin; both sides of the comparison require evidence. Construct a demand/resistance comparison and explain which uncertainties affect the demand, the resistance and the selected consequence threshold. [INF07] [INF14]

P represents position relative to a specified loss of function. The raw observation, reference condition, direction of deterioration and boundary of failure must remain explicit. A candidate monotone transformation can help compare states within a defined case, but it does not establish the threshold or validate an aggregate index. Capacity, delivered performance and exposure may require different indicators even when they concern the same installation.

Thirty candidate observations for P and related case questions
#Candidate observationUnit or definitionInterpretation and data requirement
1Demand/capacity ratiodimensionlessUse the applicable limit state and current as-built loads.
2Measured strainmicrostrainRetain sensor orientation, temperature compensation and calibration.
3DeflectionmmCompare loading, reference geometry and measurement uncertainty.
4Crack widthmmRecord location, orientation, loading and repeatable measurement method.
5Crack growthmm/timeUse comparable observations and distinguish thermal movement.
6Remaining steel thicknessmmMap localized loss rather than relying only on mean thickness.
7Corrosion potentialmV reference electrodeInterpret with method, moisture and supporting evidence.
8Tendon conditiondefect count / condition classIdentify inaccessible regions and detection limits.
9Bearing displacementmmRelate movement to temperature, restraint and intended behavior.
10Joint openingmmDistinguish seasonal movement from permanent change.
11Foundation scour depthmReference a surveyed datum and footing geometry.
12Bed elevationm datumRecord spatial coverage and timing relative to flood peaks.
13Pore pressurekPaTrack instrument installation and groundwater response lag.
14Ground displacementmmUse stable references and geotechnical context.
15Slope movement ratemm/dayCheck sensor drift, rainfall and subsurface observations.
16Tunnel convergencemmRetain construction stage, geometry and support changes.
17Excavation wall deflectionmmCompare with adjacent assets and staged loading.
18Support loadkNVerify load-cell calibration and load redistribution.
19Prestressing forcekNDocument stressing sequence and losses.
20Concrete strength evidenceMPaState specimen method, age and correspondence with in-place material.
21Anchor test performancekN and displacementUse acceptance criteria appropriate to the attachment.
22Water level headroommRelate to surveyed asset elevations and operating consequences.
23Drainage availability% verified clear capacityInclude blockage, outfall condition and maintenance history.
24Road flood depthmCombine with velocity, vehicle type and closure policy.
25Traffic capacity retainedvehicles/hourInclude detours and congestion rather than binary connectivity.
26Essential-service travel timeminutesDisaggregate locations and travel modes.
27Network isolationpeople or facilities without viable routeDefine safe route capacity and vehicle needs.
28Critical defect backlognumber by severity / ageTrack action ownership and verified completion.
29Repair lead timedaysInclude fabrication, approvals, access and commissioning.
30Inspection coverage% relevant components examinedIdentify inaccessible components and method detection limits.

A didactic monotone transformation for an indicator that worsens as it rises is p = clip[(x − x_ref)/(x_failure − x_ref), 0, 1]. Reverse the direction for a reserve that deteriorates as it falls. The expression makes the reference points visible; it does not choose those points, prove comparability or establish an operational aggregate. Retain x in its original unit and justify the function separately for each case.

Section readings [INF07; INF14]

SECTION 16

Velocity (ΔV): rates and trajectory

Changes in crack width, settlement, corrosion or scour depend on measurement method and environmental context. Apparent acceleration can reflect temperature, datum movement or a changed loading pattern. Use comparable observations and report detection limits. The decision question is whether the remaining response time is sufficient for inspection, closure or stabilization. Do not extrapolate a smooth deterioration model through a sudden change in drainage, flood loading or construction sequence. Compare a seasonal movement series with irreversible settlement and specify the additional measurements needed to distinguish them. [INF16] [INF11]

ΔV describes direction and rate of change over a declared interval. Two systems at the same apparent position may have different reaction times because their trajectories differ. Compare rates using consistent units, observation windows and reference systems. Check seasonality, missing periods, reporting changes and process acceleration before extrapolating. A time-to-boundary calculation is conditional on its trajectory assumption; it is not a general forecast.

Ten families of rate-of-change observations
ProcessRate / unitInterpretation
Crack propagationmm/month or per cycleRetain measurement precision and loading changes.
Corrosion lossmm/yearDistinguish uniform from localized attack.
Settlementmm/dayCompare with pore pressure and construction activity.
Slope accelerationmm/day2Test filtering and avoid interpreting noisy derivatives as failure certainty.
Pore-pressure risekPa/hourRelate to rainfall, drainage and soil response.
Scour developmentm/hourUse local hydraulic conditions and foundation geometry.
Flood risem/hourCompare with closure, evacuation and access lead times.
Tunnel convergencemm/dayTrack support installation and excavation stage.
Backlog accumulationcritical defects/monthSeparate newly detected from newly created defects.
Service recoveryessential trips or capacity restored/dayTrack partial access, setbacks and geographic distribution.

Section readings [INF16; INF11]

SECTION 17

Uncertainty (σ): evidence and model limits

Separate material variability, measurement error, incomplete drawings, hidden defects, uncertain loading and model-form assumptions. These uncertainties are not interchangeable. A larger simulation sample cannot repair an incorrect load path or missing tendon information. Prioritize investigation according to its effect on a decision: opening an inaccessible connection may be more valuable than refining a regional hazard model. Present intervals and alternative models where justified, and identify unresolved mechanisms that cannot yet be assigned defensible probability distributions. Create an uncertainty ledger for an aging bridge and identify the next investigation that could change a closure or strengthening decision. [INF03] [INF22]

Uncertainty should be recorded by object and source. Measurement uncertainty, sampling limitations, parameter uncertainty, model structure, future scenarios and institutional ambiguity cannot be replaced by one unsupported percentage. More simulation samples can reduce numerical sampling error without resolving a missing mechanism. Identify which uncertainty changes the decision and which further observation, comparison or test could reduce it.

Case-analysis method
Source of uncertaintyObject affectedTreatment
MeasurementInstrument error, drift, reference system and quality controls.Calibration, cross-check and traceable metadata.
SamplingSpatial, temporal or population coverage.A design matched to the decision and exposed groups.
ParametersValues weakly identified by available observations.Estimation, sensitivity and alternatives.
Model structureProcesses excluded or represented inadequately.Competing models and tests outside the fitting conditions.
ScenarioUncertain future demand, environment or operating practice.A declared set of plausible trajectories.
DependenceCorrelated conditions or failures treated as independent.Joint analysis and explicit common-cause hypotheses.
InstitutionsUnverified duties, access or resource availability.Documentary checks and mobilization tests.
Unknown mechanismsA plausible process with insufficient evidence.A research question and decisions robust to the unresolved gap.

Section readings [INF03; INF22; C06]

SECTION 18

Reversibility liquidity (Lr): usable recovery resources

Restoration capacity depends on safe access, technical assessment, stabilization, specialty components and competent construction supervision. Equipment availability is conditional on transport, ground support and operator skill. Some tasks must precede others, and an unsafe remaining structure can prevent debris removal. Define the service target and acceptable temporary configuration before assigning resources. A fast physical repair may still leave a service bottleneck elsewhere in the network or transfer an unacceptable load to another asset. Translate a list of crews and machinery into a feasible task sequence for restoring one essential crossing after flood damage. [INF08] [INF09] A service-based resilience analysis compares available supply with demand after disruption, when both may change rather than assuming pre-event demand is fixed. [INF25]

Lr examines resources that can preserve, contain or recover the defined function within the relevant time. A resource listed in an inventory is different from a resource that is accessible, compatible, staffed and mobilizable. Record capacity, useful arrival time, duration, dependencies and evidence of testing. Avoid averaging away an essential bottleneck. Recovery of a service does not necessarily restore ecological condition, accumulated losses or public trust.

Recovery resources to verify in the case
Recovery resourceAvailability or mobilization questionVerification or dependency
Structural assessment teamRelevant failure-mode competenceDocument inspection scope and acceptance authority
Geotechnical investigationGroundwater, soils and foundation evidenceResolve subsurface uncertainty
Temporary worksEngineered shoring, bracing and falseworkVerify stage-specific load paths
Heavy access routeVehicle capacity, geometry and permitsConfirm route after hazard
Specialty fabricationCompatible bearings, connections and tendonsTrack quality and lead time
Debris removalSafe exclusion zones and disposal routesAvoid destabilizing remaining structure
Survey and monitoringStable datums and calibrated instrumentsRetain before/after records
Utility isolation supportCoordinated energy, water and telecom controlVerify safe work conditions
Independent technical reviewTask-specific checking and challengeDocument disposition of findings
Reopening testsDemonstrated safe service capacityRecord restrictions and follow-up monitoring

Section readings [INF08; INF09; INF25]

PART VI

Scenario and simulation intelligence

SECTION 19

Stress scenarios and comparative strategies

Construct scenarios around coherent combinations of hazard, condition, loading, construction stage and network demand. Include a baseline, a credible degraded state and a compound disruption. Compare alternatives under the same assumptions. A flood scenario should specify depth, velocity, duration and access conditions where they affect the mechanism. A construction scenario should specify the exact stage and temporary supports. A stress test explores conditional consequences and does not automatically establish how often that scenario will occur. Compare the same bridge under normal service, concentrated construction loading and a flood that affects both foundations and approaches. [INF10] [INF12]

A stress scenario states the initiating condition, prior state, time sequence, exposed function, shared dependencies and feasible responses. Its purpose is to reveal when a strategy loses usefulness and why. Compare alternatives across several conditions, including absent substitutes and simultaneous demand. Scenarios should lead to observations, tests and resource questions; assigning a precise event probability requires a separate justified model and evidence.

Five domain-anchored stress-test designs · N1
ScenarioInitiating mechanismObservation designStrategy comparison
A · Connection failureLocal connection demand exceeds available resistanceCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
B · Corrosion section lossChemical/environmental attack reduces structural capacityCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
C · Excavation instabilityTemporary support or groundwater control becomes inadequateCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
D · Overtopping erosionFlow erodes embankment or unprotected terrainCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
E · Utility strikeExcavation damages co-located servicesCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.

Section readings [INF10; INF12]

SECTION 20

Reproducible simulation and sensitivity analysis

Monte Carlo analysis can propagate uncertain material properties, hazard intensities, deterioration and repair durations, provided the model represents the relevant mechanisms. Record distributions, correlations, data sources and convergence criteria. Conditional failure probabilities depend on the chosen model and cannot compensate for omitted failure modes. Sensitivity analysis should reveal whether a decision is robust to plausible alternatives. Keep a reproducible distinction between sampled synthetic inputs, measured observations and parameters derived from literature. Test whether an assumed correlation among several damaged assets changes expected network recovery more than uncertainty in any single repair duration. [INF03] [INF22]

Simulation is an explicit transformation of assumptions. Input distributions, dependencies, parameter estimation, output definition and testing must be documented. Numerical convergence does not establish model validity. Examine sensitivity to the function used, the weights selected, dependence assumptions and conditions outside the fitting data. The reproducible laboratory below is a synthetic exercise, separated from SPS and from any claim about real-event frequency.

Reproducible synthetic laboratory · N2
ElementSpecification
Samples and seed10,000 samples; Python Random; seed 3918688452.
Reference centersP = 0.72; ΔV = 0.62; σ = 0.40; Lr = 0.38.
Latent dispersion0.40, 0.45, 0.30, 0.40, respectively.
Common-factor loading0.65, 0.55, 0.35, −0.45, respectively.
Dependence constructionz_j = a_j g + √(1 − a_j²) ε_j; g and ε_j are independent standard normal draws.
Bounded transformationx_j = logistic[logit(m_j) + s_j z_j].
Learning outputQ = 0.35P + 0.25ΔV + 0.15σ + 0.25(1 − Lr).
Comparison conditionQ ≥ 0.70, selected only for this synthetic laboratory.
Calculated outputs under the declared assumptions
StatisticValue
Mean0.618
5th percentile0.516
Median0.620
95th percentile0.710
Fraction with Q ≥ 0.707.71%

The factor loadings define association on the latent scale. Correlations after the nonlinear transform should be estimated from the simulated samples. Q is a teaching index and is not SPS. Its exceedance fraction concerns the generated sample under these assumptions; it is not the probability of a real event or a forecast over a stated number of years. A temporal forecast would require a separately specified process and observation model.

Reproduce the calculation in Python
from random import Random
from math import log, exp, sqrt
from statistics import mean
rng = Random(3918688452)
m = [.72, .62, .40, .38]
s = [.40, .45, .30, .40]
a = [.65, .55, .35, -.45]
q = []
for _ in range(10000):
    g = rng.gauss(0, 1)
    x = []
    for mj, sj, aj in zip(m, s, a):
        z = aj*g + sqrt(1-aj*aj)*rng.gauss(0, 1)
        x.append(1/(1+exp(-(log(mj/(1-mj))+sj*z))))
    p, v, u, lr = x
    q.append(.35*p+.25*v+.15*u+.25*(1-lr))
q.sort()
print(mean(q), q[499], (q[4999]+q[5000])/2, q[9499])
print(sum(x >= .70 for x in q)/len(q))

Sensitivity exercise: remove the common factor, vary one dispersion, change the weight of recovery resources, and compare the ranking of the selected strategies. Then state which domain observations would be needed to replace each illustrative assumption. Use a suitable estimator when inputs are dependent; the common-factor experiment is a dependence check, not a claim that a particular Sobol estimator applies unchanged.

Section readings [INF03; INF22; C03; C06]

SECTION 21

Restoration and performance verification

Represent recovery as tasks with durations, resource constraints and precedence: inspection, stabilization, utility isolation, debris clearance, fabrication, installation and acceptance. Track partial service and geographic accessibility throughout the sequence. A network may regain much of its capacity before the final asset is repaired, or remain isolated despite several completed works. Compare recovery priorities using explicit service criteria, including emergency access and unequal burdens. Record temporary risks and the conditions for moving from restricted to normal operation. Compare prioritizing the largest repair with prioritizing the task that first reopens access for emergency vehicles. [INF08] [INF09] Bridge-network restoration research explicitly examines intervention scheduling and competing objectives, providing a useful comparison with simple largest-damage-first rules. [INF24]

Restoration follows prerequisites and verification conditions rather than a universal fixed clock. Tasks may proceed in parallel only where they do not compete for the same people, access, equipment or information. Protect essential functions while the critical path is addressed. Define what is measured before returning service, who can make that determination and which effects require continued observation after a technical restart.

Case-analysis method
StageAction and prerequisiteEvidence of usable progress
Protect essential usersProvide a feasible interim function while restoration proceeds.Coverage and actual receipt.
Restore prerequisitesRecover access, inputs, energy, information and competent personnel.Verified availability for the next task.
Restore the processRepair and operate the affected function within its relevant constraints.Technical tests matched to the failure mechanism.
Verify performanceMeasure the delivered outcome and remaining exposure.A predeclared verification record.
Authorize and communicateRecord who can declare the relevant return condition.Clear status, limitations and notification.
Follow upMonitor persistent effects and resolve causal and monitoring gaps.A review record and tracked corrective actions.

Section readings [INF08; INF09; INF24]

PART VII

Restoration and recovery architecture

SECTION 22

Recovery provider capability

Provider evaluation should match the work: underwater scour inspection, post-tensioning, geotechnical stabilization and structural checking require different competence. Review methods, equipment, relevant experience, availability and quality controls. General accreditation or a training certificate does not demonstrate suitability for every task. Define acceptance evidence, inspection responsibility and management of deviations. External support should strengthen rather than obscure accountability for design decisions, construction supervision and authorization to reopen the asset. Create a qualification checklist for a critical connection repair and distinguish personnel competence from material conformity. [INF15] [INF21]

Capability assessment must be specific to the task, place and stress conditions. A training certificate cannot demonstrate that a team can mobilize and deliver the required function. Inspect competence, safety, compatibility, relevant experience and actual availability. Define the verification method and limits of recognition. This teaching library does not establish a c-ECO provider certification scheme or substitute for professional or regulatory requirements.

Case-analysis method
CapabilityVerification
Technical capabilityEvidence relevant to the specific task, process and failure mechanism.
MobilizationA demonstrated route, team, equipment and useful arrival time.
CompatibilityProof that resources can work with the installation, data and local constraints.
Safety and responsibilitiesRelevant professional duties, safe work and accountable supervision.
VerificationPerformance tests, records and independent review proportionate to the task.
ContinuitySubstitutes and supplies under simultaneous demand or extended interruption.

Section readings [INF15; INF21]

SECTION 23

Recovery sequencing and time constraints

Recovery stages should contain explicit entry and exit evidence. Stabilization is different from permanent repair; reopening under a load restriction is different from unrestricted service. Mark hold points for engineering review, material testing and utility coordination. Changing the construction method can introduce a new load path requiring reassessment. Keep the affected public informed about actual service milestones rather than construction percentages alone, and preserve documentation of temporary configurations for follow-up maintenance. Specify what must be verified before removing temporary shoring and before allowing heavy vehicles onto a repaired bridge. [INF17] [INF16]

A recovery time objective is a decision criterion to test against real capacity. Distinguish mobilization, work, verification and decision time, and identify dependencies between tasks. Shared resources can prevent apparently parallel activities from proceeding together. Repeating the sequence with unavailable access, a specialist or a verification service reveals where a target relies on an untested assumption.

Case-analysis method
Sequencing itemCase requirement
Task and functionDefine the outcome, prerequisites and critical users.
Time componentsSeparate mobilization, execution, verification and decision time.
Shared resourcesIdentify people, equipment, access and systems needed by more than one task.
Parallel workDemonstrate that tasks can proceed together without competing for the same bottleneck.
Completion conditionSpecify the observation that permits the next task or return of the function.
SensitivityRepeat with unavailable resources or longer lead times to expose the critical path.

Section readings [INF17; INF16]

SECTION 24

Equipment, inputs and replenishment

Useful inventories include specification, location, condition, test status, ownership, availability and compatibility. Specialty bearings, steel sections, anchors and tendons may not be interchangeable. Heavy plant also needs safe working platforms and transport access. Record resources already committed to other projects or emergency responses, and distinguish purchase lead time from installation readiness. Review inventory assumptions against the proposed restoration sequence so that a large nominal stock does not conceal a critical missing item. Audit a restoration inventory for one item whose compatibility, transport or acceptance testing determines the overall completion date. [INF04] [INF09]

Inventory analysis connects each item to a protected function. Use condition, compatibility, accessibility and consumption under stress rather than a nominal stock count alone. Replenishment time must include procurement, transport, installation and verification where relevant. A substitute that depends on the same supplier or platform may disappear in the same event. Keep the last inspection date and the evidence supporting usable availability.

Case-analysis method
Inventory fieldVerification
SpecificationIdentity, quantity, condition, compatibility and installation requirements.
AvailabilityLocation, access rights, expiry where relevant and verification date.
Stress consumptionUseful stock under the conditions studied, including losses and surge demand.
ReplenishmentSupplier, lead time, transport constraints and alternatives.
Common dependenceOther stocks or substitutes that share a supplier, access route, platform or energy source.
TestEvidence from inspection, deployment or a representative mobilization exercise.

Section readings [INF04; INF09]

SECTION 25

Mutual aid and cooperation arrangements

Infrastructure assistance can provide equipment and expertise, but integration requires clear technical supervision, safety procedures and local knowledge. A visiting inspection team needs access to drawings, hazards and owner decisions. Regional events create competition for cranes, fabrication and geotechnical services. Agreements should cover mobilization, quality assurance, records and handover. Model assistance as conditional capacity, not a guaranteed multiplier, and test whether the receiving organization can manage simultaneous external work safely. Compare the support available after one isolated bridge failure with support after a flood damaging several regional crossings. [INF01] [INF12]

Cooperation contributes to recovery when its scope, activation, resources and practical availability are demonstrated. Record who requests support, who authorizes it, the useful arrival time, responsibility for the work and conditions of return. Consider simultaneous demand across participants. A reference to an organization or network in the literature does not imply that c-ECO or a case partner has joined it or secured a deployment commitment.

Case-analysis method
Agreement elementQuestion
ActivationWho can request and authorize support, and on what documented basis?
ResourceWhat can actually be supplied, at what capacity and for how long?
DeliveryWhich access, transport, compatibility, information and safety conditions apply?
SimultaneityWhat happens when several participants need the resource at the same time?
ResponsibilityWhich actor controls the task and its records, verification and constraints?
ReviewHow are performance, remaining gaps and revised arrangements recorded?

Section readings [INF01; INF12]

PART VIII

Research and source library

SECTION 26

Source classification and evidence quality

Separate engineering measurements, inspection reports, design calculations, incident investigations, geospatial datasets, research and legal requirements. A source’s category does not determine the validity of every claim it contains. Global research can identify a mechanism while a site survey establishes geometry; neither replaces the other. Record whether evidence describes the current asset, a historical state or a transferable model. Keep evidence status and technical review distinct from institutional authorship. Choose the appropriate source for a buried foundation depth, a traffic detour estimate and a claim about historical design practice. [INF04] [INF10]

Source classes organize origin and function; they do not form an automatic hierarchy of evidential strength. An official statistic, an operational record and a causal study answer different questions. Classify the product, not only the organization. Detect shared data origins so that a dashboard, article and secondary report based on one observation are not counted as three independent confirmations.

Case-analysis method
Source classContributionQuality criterion
A · Institutional / officialOfficial statistics, instruments, technical guidance and investigation records.Mandate, method, version, scope and actual applicability.
B · Operational / technicalMeasurements, process records, assets, inventories and delivered performance.Traceability, coverage, quality controls and usable access.
C · Academic / independentResearch designs, mechanism studies, models and independent observations.Methods, inference, reproducibility and fit to the question.

Section readings [INF04; INF10; C04; C05]

SECTION 27

Institutional, regulatory and technical sources

Public investigations provide documented findings and recommendations, but readers must distinguish preliminary information, final reports and later implementation records. An investigation may identify probable causes without resolving every legal or technical question. Agency guidance can translate lessons into inspection practice; check whether the guidance applies to the asset concerned. Preserve report dates and versions so that an old recommendation is not mistaken for evidence that corrective work has been completed. Trace one case finding into a technical advisory and identify the further evidence needed to show implementation on a particular bridge. [INF14] [INF21]

Institutional sources should be selected by product, method and scale. Record whether the source defines a requirement, observes a condition, reports an investigation or synthesizes a literature. A current portal may contain several editions and methods; cite the actual version used. Public access does not establish accuracy for a different question, and a restricted source can still be used only under its authorized conditions.

Institutional and technical source register
IDProduct / documentWhy it matters
[INF14]Collapse of I-35W Highway Bridge, Minneapolis, Minnesota, August 1, 2007Primary findings on gusset plate capacity, added loads, design checking and inspection.
[INF15]Pedestrian Bridge Collapse Over SW 8th Street, Miami, Florida, March 15, 2018Primary findings on nodal design calculations and responses to cracking during construction.
[INF16]Collapse of the Fern Hollow Bridge, Pittsburgh, Pennsylvania, January 28, 2022Primary findings on corrosion, section loss, maintenance recommendations and oversight.
[INF17]Independent Forensic Team Report: Oroville Dam Spillway IncidentIndependent report commissioned after the 2017 incident; separates structural, geologic and organizational contributors.
[INF18]Bridge Collapses and Other Infrastructure FailuresOfficial case synthesis covering I-90 tunnel ceiling, Skagit bridge and other investigated infrastructure failures.
[INF19]Final Report on the Collapse of the World Trade Center Towers: NIST NCSTAR 1Primary reconstruction of impact damage, fire and building response; extraordinary event rather than generic design threshold.
[INF20]Climate Change 2022: Impacts, Adaptation and Vulnerability, Chapter 6Assessed climate risks to cities and key infrastructure.
[INF21]Inspection of Gusset Plates Using Non-Destructive Evaluation TechnologiesTechnical advisory linking failure lessons to inspection and rating practices.
[INF22]Evaluation of measurement data — Supplement 1 to the GUM — Propagation of distributions using a Monte Carlo methodSupports transparent uncertainty propagation in engineering measurements.

Section readings [INF14; INF21]

SECTION 28

Operational observations and monitoring products

As-built drawings, inspection photos, survey records, material tests, construction logs and maintenance work orders support complementary claims. Reconcile identifiers and datums before combining them. A drawing can be authoritative yet inaccurate after undocumented modifications; a photograph may show a defect without measuring remaining capacity. Record original observations and transformations separately, including omitted or inaccessible components. Link measurements to the construction stage or service condition in which they were obtained. Reconcile a design drawing, field survey and maintenance record that disagree about the current geometry or loading of a connection. [INF16] [INF15]

Operational observations should show what the system delivered, not merely that an asset was declared available. Inspect the acquisition process, sensor or reporting changes, gaps, coverage and quality controls. Compare records with independent observations where feasible. Aggregated performance, a status dashboard and user experience can diverge because they concern different units, locations, periods or definitions of availability.

Observation products to obtain for the case
ObservationUnitInterpretationProvenance record
Demand/capacity ratiodimensionlessUse the applicable limit state and current as-built loads.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Measured strainmicrostrainRetain sensor orientation, temperature compensation and calibration.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
DeflectionmmCompare loading, reference geometry and measurement uncertainty.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Crack widthmmRecord location, orientation, loading and repeatable measurement method.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Crack growthmm/timeUse comparable observations and distinguish thermal movement.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Remaining steel thicknessmmMap localized loss rather than relying only on mean thickness.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Corrosion potentialmV reference electrodeInterpret with method, moisture and supporting evidence.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Tendon conditiondefect count / condition classIdentify inaccessible regions and detection limits.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Bearing displacementmmRelate movement to temperature, restraint and intended behavior.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Joint openingmmDistinguish seasonal movement from permanent change.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Foundation scour depthmReference a surveyed datum and footing geometry.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Bed elevationm datumRecord spatial coverage and timing relative to flood peaks.Record acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.

Section readings [INF16; INF15]

SECTION 29

Academic research and independent evidence

Academic work helps select failure models, network methods and uncertainty treatments. Community observations can reveal repeated flooding, inaccessible detours or service needs absent from asset databases. Evaluate transferability, sampling and measurement quality rather than accepting or rejecting evidence by source prestige alone. People affected by closure may identify practical access constraints that an engineering network graph omits. Ethical participation requires clear purpose, attribution and protection of personal information. Combine a transport model with local accessibility observations and identify which model assumptions become testable through that comparison. [INF05] [INF11]

Read the research design before transferring a conclusion. Identify the question, unit of analysis, method, comparison, result, limitations and conditions that matter for the case. Foundational concepts, empirical studies, critical replications and technical syntheses serve different functions. A literature-supported mechanism may justify a hypothesis without validating a local threshold, forecasting performance or a complete TFP application.

Academic reading map: mechanisms and methods
IDResearch workContribution and limit
[INF01]Identifying, understanding, and analyzing critical infrastructure interdependenciesDistinguishes physical, cyber, geographic and logical dependencies; a foundation for dependency registers.
[INF02]Understanding Compound, Interconnected, Interacting, and Cascading Risks: A Holistic FrameworkClarifies cascading mechanisms and why an initiating hazard alone is an inadequate explanation.
[INF03]Variance based sensitivity analysis of model output. Design and estimator for the total sensitivity indexSupports sensitivity analysis of uncertain models; indices depend on assumptions about input distributions.
[INF04]The FAIR Guiding Principles for scientific data management and stewardshipProvides principles for reusable evidence and machine-readable metadata; FAIR does not require unrestricted disclosure.
[INF05]A general framework for analyzing sustainability of social-ecological systemsHelps distinguish actors, resources, governance arrangements and contextual interactions.
[INF06]Early-warning signals for critical transitionsIntroduces candidate indicators of changing system dynamics; these are not universal operational alarm rules.
[INF07]A Framework to Quantitatively Assess and Enhance the Seismic Resilience of CommunitiesFoundational distinction between robustness, redundancy, resourcefulness and rapidity.
[INF08]Framework for analytical quantification of disaster resilienceConnects performance loss and recovery trajectories under uncertainty.
[INF09]Resilience and Sustainability of Civil Infrastructure: Toward a Unified ApproachCompares life-cycle sustainability with disruption and recovery analysis.
[INF10]A global multi-hazard risk analysis of road and railway infrastructure assetsProvides global exposure and direct-damage assessment; indirect losses need separate analysis.
[INF11]The impact of flooding on road transport: A depth-disruption functionShows why partial traffic disruption can be more realistic than binary road closure assumptions.
[INF12]Review on modeling and simulation of interdependent critical infrastructure systemsCompares empirical, agent, network, system-dynamics and economic modeling approaches.
[INF13]Multi-hazard risk to global port infrastructure and resulting trade and logistics lossesSeparates operational disruption, physical damage and logistics consequences at ports.
[INF23]Vulnerability and resilience of transport systems — A discussion of recent researchCompares topological and demand-based analyses; helps avoid treating a connected detour as adequate service.
[INF24]Restoration of Bridge Networks after an Earthquake: Multicriteria Intervention OptimizationStudies network recovery scheduling with multiple objectives rather than ranking repairs solely by visible damage.
[INF25]A compositional demand/supply framework to quantify the resilience of civil infrastructure systems (Re-CoDeS)Connects component states, delivered service and changing post-event demand.
[INF26]Measuring the Performance of Transportation Infrastructure Systems in Disasters: A Comprehensive ReviewCompares performance concepts and measures used to assess damaged transport systems.

Section readings [INF05; INF11]

PART IX

Evidence matrices and historical intelligence

SECTION 30

Source–variable correspondence

Each variable needs a unit, location, datum, time, method, quality flag and provenance. Crack widths must refer to the same feature and loading condition; scour depth must refer to a surveyed foundation and bed elevation. Traffic service requires demand and capacity rather than connectivity alone. Document transformations into analytical indicators and retain raw measurements. A source does not directly measure a generalized TFP parameter: the mapping must state the model and assumptions that connect observation to interpretation. Create lineage for a scour-margin indicator, showing how survey data, foundation geometry and hydraulic assumptions contribute. [INF04] [INF22] Performance reviews show that reliability, vulnerability and resilience metrics answer different questions; select the measure to match the service decision. [INF26]

The source–variable matrix exposes the path from an observation to an analytical representation. Preserve the raw unit, time, location, method, transformation and uncertainty. Multiple derived variables may share one observation and therefore share its limitations. Record the code or reproducible procedure, authorized access and version. A score should remain inspectable through its originating evidence rather than replacing that evidence.

Source–variable design matrix
ObservationUnitSource requirementCandidate analytical questionTransformation and limit
Demand/capacity ratiodimensionlessUse the applicable limit state and current as-built loads.P / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Measured strainmicrostrainRetain sensor orientation, temperature compensation and calibration.P and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
DeflectionmmCompare loading, reference geometry and measurement uncertainty.σ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Crack widthmmRecord location, orientation, loading and repeatable measurement method.Lr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Crack growthmm/timeUse comparable observations and distinguish thermal movement.P / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Remaining steel thicknessmmMap localized loss rather than relying only on mean thickness.P and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Corrosion potentialmV reference electrodeInterpret with method, moisture and supporting evidence.σ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Tendon conditiondefect count / condition classIdentify inaccessible regions and detection limits.Lr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Bearing displacementmmRelate movement to temperature, restraint and intended behavior.P / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Joint openingmmDistinguish seasonal movement from permanent change.P and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Foundation scour depthmReference a surveyed datum and footing geometry.σ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Bed elevationm datumRecord spatial coverage and timing relative to flood peaks.Lr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.

Section readings [INF04; INF22; INF26; C04; C05]

SECTION 31

Source–risk correspondence

Map evidence to claims about a failure pathway. A corrosion photograph supports the presence of deterioration but not necessarily the current load rating. A reported crack may support several hypotheses until loading and material evidence discriminate among them. Include contradictory evidence and unresolved gaps. This mapping makes risk arguments reviewable and prevents a long bibliography from concealing weak local support. Define which additional evidence would change a preventive action or engineering conclusion. For a suspected connection failure, distinguish evidence of damage, evidence of demand and evidence that the damage controls overall structural capacity. [INF14] [INF16]

A source–risk matrix should cover the threat, the observed state, the mechanism and the consequences separately. Evidence that an event occurred does not alone show why a function failed or who was affected. Use a chronology and alternative explanations to test the chain. A citation becomes useful when the specific part of the claim it supports and its limits are visible.

Source–risk evidence matrix
RiskProposed mechanismEvidence chainInvestigation requirement
Connection failureLocal connection demand exceeds available resistanceThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Progressive collapseLocal loss transfers load to insufficient alternative pathsThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Fatigue crackingRepeated stress cycles propagate flawsThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Corrosion section lossChemical/environmental attack reduces structural capacityThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Prestressing degradationTendon damage or corrosion reduces intended forceThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Foundation scourFlow removes supporting sediment near foundationsThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Differential settlementUnequal ground movement redistributes structural demandsThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Slope instabilityPore pressure and geometry reduce shear resistanceThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
LiquefactionCyclic loading reduces effective soil strengthThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Excavation instabilityTemporary support or groundwater control becomes inadequateThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.

Section readings [INF14; INF16]

SECTION 32

Monitoring gaps and research priorities

Identify gaps by potential decision failure: uninspected critical members, uncertain foundation depth, incomplete modification records or inaccessible detour needs. Sensor quantity is a poor proxy for coverage of consequential mechanisms. Compare the timing of available evidence with the lead time needed for closure, stabilization or repair. Some gaps require inspection, some require revised responsibility, and others require corrected records. Prioritize the intervention that improves the safety decision rather than the one that merely produces more data. Select a critical blind spot and compare the value of installing a sensor, conducting an intrusive inspection and enforcing a maintenance action. [INF16] [INF21]

Prioritize a gap by its consequence for the decision. The next observation may be a targeted measurement, an independent comparison, a capability test or a correction of incompatible definitions. More data of the same kind may not resolve structural uncertainty. Specify the question, required observation, responsible custodian, time of collection and condition under which the gap is considered sufficiently addressed.

Case-analysis method
Monitoring gapDecision consequenceInvestigation
Spatial coverageExposed locations, groups or assets are not represented.Targeted observations matched to exposure.
Temporal resolutionA change occurs faster than the collection interval.A sampling interval fitted to the process and useful decision time.
Missing periodA critical part of the trajectory is absent.Independent backup and transparent missing-data handling.
Changing methodA sensor, reference or reporting practice changes.Overlap, comparison and version metadata.
Unmeasured mechanismImportant inputs or consequences are not observed.A mechanism-specific investigation and appropriate measurement.
Unverified resourcesA listed capacity has not been mobilized.Inspection and a representative deployment test.
Incompatible definitionsDatasets describe different populations, units or conditions.A documented harmonization and retained original values.
Access restrictionEvidence cannot be inspected or reused under current conditions.An authorized access and review arrangement.
Unequal representationSome users or effects disappear in aggregates.Disaggregated observation and a suitable participatory protocol.
Post-event follow-upReturn of service masks persistent effects.A monitoring period appropriate to the mechanism and affected function.

Section readings [INF16; INF21; C03]

SECTION 33

Dependency matrix and propagation tests

Specify which service each infrastructure element requires or supplies, with direction, timing, capacity and substitutes. A tunnel may need power continuously for safe operation; a bridge may need energy mainly during repair. Detours can be physically connected but functionally inadequate for heavy equipment. Shared geographic exposure should be recorded separately from causal dependence. Reassess dependencies during recovery, when construction access and material delivery can dominate the schedule. Build a three-stage dependency matrix for normal service, immediate disruption and reconstruction, highlighting relationships that change between stages. [INF01] [INF12] A viable alternative route must meet demand and capacity requirements, not merely exist as an edge in a graph. [INF23]

Flooding affects infrastructure through scour, buoyancy, erosion, hydrostatic pressure, debris impact and loss of access. Water depth is useful for transport disruption but insufficient to describe foundation failure, where duration, velocity, sediment and geometry also matter. [INF10] [INF11]

Infrastructure networks redistribute demand when a link fails. Alternative routes can absorb some flow but become congested or inaccessible to heavy vehicles. Binary connected/disconnected models may overestimate practical service if they omit capacity and travel-time constraints. [INF11] [INF13]

Co-located infrastructure shares geographic hazards: a bridge can carry roads, telecom and utilities, while a single excavation can disrupt several services. Dependency analysis must distinguish a shared hazard from a causal failure transmitted between systems. [INF01] [INF02]

A dependency matrix should be directional and time-specific. Record the supplying function, receiving function, mechanism, useful delay, substitute and evidence. Test the destination when the origin becomes unavailable for different periods. Then remove a common prerequisite of the substitute. The resulting structure describes the case; it does not establish all connections in a global architecture or validate an edge weight.

Dependency matrix for case testing
DependencyMechanism and directionVerification or TFP inquiry
EnergyConstruction, pumping, tunnels and signals require powerRecord backup and safe shutdown
WaterGroundwater, drainage and scour affect stabilityLink hydraulic and geotechnical observations
TransportInspection and heavy repair need viable routesCheck axle loads, clearances and detours
TelecommunicationsMonitoring and incident coordination need communicationsRetain offline inspection procedures
Public healthAccess to hospitals depends on routes and bridgesMeasure service accessibility
HousingFailures displace residents and isolate settlementsDisaggregate access consequences
Chemicals/materialsConcrete, steel and specialty components constrain repairVerify specification and supply lead time
EnvironmentSediment, habitats and land cover alter hazardsAssess intervention side effects
Emergency responseEvacuation and rescue depend on safe corridorsCoordinate closure and access priorities
GovernanceInspection findings need accountable action and authorizationTrack decision ownership and closure evidence

For each relationship, add the measured delay, duration of tolerable interruption, substitute and observation supporting the directed edge. Repeat the test for short, intermediate and extended unavailability. A generic list of linked sectors is not an estimated network, and no edge weight is validated by inclusion in this table.

Section readings [INF01; INF12; INF23; C01; C02]

SECTION 34

Documented cases, near misses and recovery

Case records should preserve event date, asset state, initiating conditions, failure mechanism, response and primary source. Avoid turning different appearances of the same event into independent evidence. Compare mechanisms, not just dramatic outcomes. The I-35W connection problem differs from Fern Hollow corrosion and from FIU construction-stage design issues. Record what transfers to a new case and what requires local verification, including design details, legal duties and inspection access. Compare the three bridge cases using one common evidence template and identify the distinct preventive intervention suggested by each. [INF14] [INF15] [INF16]

Historical analysis distinguishes observed loss, protective response, near miss and recovery. Several records can concern one event without becoming independent events. Preserve what the source actually investigated and avoid adding unsupported casualty, cost or restoration-time estimates. Compare cases by mechanism and evidence quality; the fact that one response was associated with an outcome does not alone establish a general causal effect.

Documented cases and comparative learning
Case / periodDocumented mechanism or study objectLearning and transfer questionSource
I-35W bridge, Minneapolis, August 2007Gusset plate capacity was inadequate under combined bridge modifications, traffic and construction loadingInspect connections and reconcile current loads rather than assuming original design calculations remain sufficient[INF14]
FIU pedestrian bridge, Miami, March 2018Design calculation errors affected a critical nodal region during constructionConnect design review, observed cracking, construction sequence and decisions about public exposure[INF15]
Fern Hollow Bridge, Pittsburgh, January 2022Corrosion and section loss progressed while repeated maintenance recommendations remained unaddressedTreat inspection-to-action performance as part of safety rather than counting inspections alone[INF16]
Oroville spillway incident, California, February 2017Structural, geological, design and organizational factors contributed to spillway damage and emergency operationEvaluate failure modes of ancillary structures and challenge assumptions accumulated over an asset life[INF17]
I-90 tunnel ceiling collapse, Boston, July 2006The investigated attachment system involved inadequate understanding of adhesive behavior under sustained tensionEvaluate long-term material behavior and nonstructural overhead hazards, including testing and inspection[INF18]
Skagit River bridge collapse, Washington, May 2013An oversize vehicle struck bridge members, exposing routing and clearance-control weaknessesIntegrate physical clearance, permits, escort communication and nonredundant structural consequences[INF18]
World Trade Center towers, New York, September 2001Aircraft impact damage and ensuing fires produced the investigated structural collapse sequenceStudy coupled impact, fire, evacuation and emergency communication while retaining the extraordinary event context[INF19]

Section readings [INF14; INF15; INF16]

SECTION 35

Integrated review, transfer and learning portfolio

Infrastructure consequences often cross energy, water, health, environment and emergency systems. Integrate records using shared locations, timestamps and event identifiers while preserving distinct expertise. A road closure can delay a power repair without directly causing the original outage; a spillway incident can require both engineering and evacuation analysis. Establish the causal pathway before aggregating outcomes, and avoid counting the same lost service multiple times merely because it appears in several domain assessments. Specify the evidence needed to connect a damaged crossing to delayed water restoration and to distinguish that delay from an unrelated repair bottleneck. [INF01] [INF02]

The integrated portfolio should allow a reviewer to move from the question to observations, transformations, mechanism tests, scenarios and proposed monitoring. Make the strongest competing explanation and the most consequential unresolved gap visible. Transfer requires checking mechanisms, exposure and recovery resources in the new setting. Formation, optional credentialing, submission permission and licensing remain distinct processes; no case or data contribution enters the SIL without an associated fellow and applicable review.

Case-analysis method
Review stepEvidence requirement
SpecifyState the function, claim, exposed group, location and period.
TraceIdentify original observations, shared origins and transformations.
HarmonizeCompare units, reference systems, sampling and versions.
ChallengeTest alternative explanations and seek counter-evidence.
Evaluate uncertaintyIdentify which assumptions change the conclusion or recommended action.
Test transferCheck equivalence of mechanisms, exposure and recovery resources in another setting.
Record and updatePreserve reasons, limits, responsibility and the next review condition.

Section readings [INF01; INF02; C04; C05]

RESEARCH AND READING PATHS

Annotated scientific and technical bibliography

The section citations connect domain mechanisms, methods and cases to the underlying sources. Read each reference for its question, design, findings and limits. Technical guides, case investigations and scholarly articles do not provide interchangeable forms of evidence.

  1. INF01 · peer-reviewed

    Rinaldi, S. M.; Peerenboom, J. P.; Kelly, T. K. (2001). Identifying, understanding, and analyzing critical infrastructure interdependencies. IEEE Control Systems Magazine 21(6), 11–25.

    Original publication / source ↗

    Distinguishes physical, cyber, geographic and logical dependencies; a foundation for dependency registers.

  2. INF02 · peer-reviewed

    Pescaroli, G.; Alexander, D. (2018). Understanding Compound, Interconnected, Interacting, and Cascading Risks: A Holistic Framework. Risk Analysis 38, 2245–2257.

    Original publication / source ↗

    Clarifies cascading mechanisms and why an initiating hazard alone is an inadequate explanation.

  3. INF03 · peer-reviewed

    Saltelli, A. et al. (2010). Variance based sensitivity analysis of model output. Design and estimator for the total sensitivity index. Computer Physics Communications 181, 259–270.

    Original publication / source ↗

    Supports sensitivity analysis of uncertain models; indices depend on assumptions about input distributions.

  4. INF04 · peer-reviewed

    Wilkinson, M. D. et al. (2016). The FAIR Guiding Principles for scientific data management and stewardship. Scientific Data 3, 160018.

    Original publication / source ↗

    Provides principles for reusable evidence and machine-readable metadata; FAIR does not require unrestricted disclosure.

  5. INF05 · peer-reviewed

    Ostrom, E. (2009). A general framework for analyzing sustainability of social-ecological systems. Science 325, 419–422.

    Original publication / source ↗

    Helps distinguish actors, resources, governance arrangements and contextual interactions.

  6. INF06 · peer-reviewed

    Scheffer, M. et al. (2009). Early-warning signals for critical transitions. Nature 461, 53–59.

    Original publication / source ↗

    Introduces candidate indicators of changing system dynamics; these are not universal operational alarm rules.

  7. INF07 · peer-reviewed

    Bruneau, M. et al. (2003). A Framework to Quantitatively Assess and Enhance the Seismic Resilience of Communities. Earthquake Spectra 19(4), 733–752.

    Original publication / source ↗

    Foundational distinction between robustness, redundancy, resourcefulness and rapidity.

  8. INF08 · peer-reviewed

    Cimellaro, G. P.; Reinhorn, A. M.; Bruneau, M. (2010). Framework for analytical quantification of disaster resilience. Engineering Structures 32(11), 3639–3649.

    Original publication / source ↗

    Connects performance loss and recovery trajectories under uncertainty.

  9. INF09 · peer-reviewed

    Bocchini, P.; Frangopol, D. M.; Ummenhofer, T.; Zinke, T. (2014). Resilience and Sustainability of Civil Infrastructure: Toward a Unified Approach. Journal of Infrastructure Systems 20(2), 04014004.

    Original publication / source ↗

    Compares life-cycle sustainability with disruption and recovery analysis.

  10. INF10 · peer-reviewed

    Koks, E. E. et al. (2019). A global multi-hazard risk analysis of road and railway infrastructure assets. Nature Communications 10, 2677.

    Original publication / source ↗

    Provides global exposure and direct-damage assessment; indirect losses need separate analysis.

  11. INF11 · peer-reviewed

    Pregnolato, M.; Ford, A.; Wilkinson, S. M.; Dawson, R. J. (2017). The impact of flooding on road transport: A depth-disruption function. Transportation Research Part D 55, 67–81.

    Original publication / source ↗

    Shows why partial traffic disruption can be more realistic than binary road closure assumptions.

  12. INF12 · peer-reviewed

    Ouyang, M. (2014). Review on modeling and simulation of interdependent critical infrastructure systems. Reliability Engineering & System Safety 121, 43–60.

    Original publication / source ↗

    Compares empirical, agent, network, system-dynamics and economic modeling approaches.

  13. INF13 · peer-reviewed

    Verschuur, J.; Koks, E. E.; Li, S.; Hall, J. W. (2023). Multi-hazard risk to global port infrastructure and resulting trade and logistics losses. Communications Earth & Environment 4, 5.

    Original publication / source ↗

    Separates operational disruption, physical damage and logistics consequences at ports.

  14. INF14 · official

    NTSB (2008). Collapse of I-35W Highway Bridge, Minneapolis, Minnesota, August 1, 2007. Official technical publication / investigation.

    Original publication / source ↗

    Primary findings on gusset plate capacity, added loads, design checking and inspection.

  15. INF15 · official

    NTSB (2019). Pedestrian Bridge Collapse Over SW 8th Street, Miami, Florida, March 15, 2018. Official technical publication / investigation.

    Original publication / source ↗

    Primary findings on nodal design calculations and responses to cracking during construction.

  16. INF16 · official

    NTSB (2024). Collapse of the Fern Hollow Bridge, Pittsburgh, Pennsylvania, January 28, 2022. Official technical publication / investigation.

    Original publication / source ↗

    Primary findings on corrosion, section loss, maintenance recommendations and oversight.

  17. INF17 · official

    Independent Forensic Team (2018). Independent Forensic Team Report: Oroville Dam Spillway Incident. Official technical publication / investigation.

    Original publication / source ↗

    Independent report commissioned after the 2017 incident; separates structural, geologic and organizational contributors.

  18. INF18 · official

    NTSB (n.d.). Bridge Collapses and Other Infrastructure Failures. Official technical publication / investigation.

    Original publication / source ↗

    Official case synthesis covering I-90 tunnel ceiling, Skagit bridge and other investigated infrastructure failures.

  19. INF19 · official

    NIST (2005). Final Report on the Collapse of the World Trade Center Towers: NIST NCSTAR 1. Official technical publication / investigation.

    Original publication / source ↗

    Primary reconstruction of impact damage, fire and building response; extraordinary event rather than generic design threshold.

  20. INF20 · official

    IPCC (2022). Climate Change 2022: Impacts, Adaptation and Vulnerability, Chapter 6. Official technical publication / investigation.

    Original publication / source ↗

    Assessed climate risks to cities and key infrastructure.

  21. INF21 · official

    FHWA (2009). Inspection of Gusset Plates Using Non-Destructive Evaluation Technologies. Official technical publication / investigation.

    Original publication / source ↗

    Technical advisory linking failure lessons to inspection and rating practices.

  22. INF22 · official

    JCGM (2008). Evaluation of measurement data — Supplement 1 to the GUM — Propagation of distributions using a Monte Carlo method. Official technical publication / investigation.

    Original publication / source ↗

    Supports transparent uncertainty propagation in engineering measurements.

  23. INF23 · peer-reviewed

    Mattsson, L.-G.; Jenelius, E. (2015). Vulnerability and resilience of transport systems — A discussion of recent research. Transportation Research Part A 81, 16–34.

    Original publication / source ↗

    Compares topological and demand-based analyses; helps avoid treating a connected detour as adequate service.

  24. INF24 · peer-reviewed

    Bocchini, P.; Frangopol, D. M. (2012). Restoration of Bridge Networks after an Earthquake: Multicriteria Intervention Optimization. Earthquake Spectra 28(2), 427–455.

    Original publication / source ↗

    Studies network recovery scheduling with multiple objectives rather than ranking repairs solely by visible damage.

  25. INF25 · peer-reviewed

    Didier, M.; Broccardo, M.; Esposito, S.; Stojadinovic, B. (2018). A compositional demand/supply framework to quantify the resilience of civil infrastructure systems (Re-CoDeS). Sustainable and Resilient Infrastructure 3(2), 86–102.

    Original publication / source ↗

    Connects component states, delivered service and changing post-event demand.

  26. INF26 · peer-reviewed

    Faturechi, R.; Miller-Hooks, E. (2015). Measuring the Performance of Transportation Infrastructure Systems in Disasters: A Comprehensive Review. Journal of Infrastructure Systems 21(1), 04014025.

    Original publication / source ↗

    Compares performance concepts and measures used to assess damaged transport systems.

  27. C05 · standard

    W3C (2013). PROV-DM: The PROV Data Model. W3C Recommendation, 30 April 2013.

    Original publication / source ↗

    Represents provenance through entities, activities and agents; useful for connecting a result to its transformations and responsible contributors.

External sources are cited for research and learning. Their inclusion implies no partnership, certification or institutional endorsement.