c-ECO INSTITUTESYSTEMIC INTELLIGENCE LIBRARY · SOVK

c-ECO SYSTEM / DOMAIN LIBRARY

SOVK · Domain knowledge

Scientific Observation, Verification & Knowledge Systems

Risks · Response · Governance · Calibration
Scenarios · Recovery · Sources

c-ECO Institute crest

A domain library connecting systemic risks, monitoring, governance and recovery. Explore nine parts and 35 sections with mechanisms, observations, evidence matrices and documented cases.

English research and learning edition · Scientific references, domain cases and reproducible exercises. Methodological notes →

READING AND EVIDENCE

How to use this library

The library combines domain research, a c-ECO analytical teaching structure and original exercises. References identify mechanisms, methods and documented cases; inclusion does not validate a complete TFP application.

N1 · Analytical and simulated material
The risk–TFP associations, candidate observations, scenario designs and exercise parameters organize inquiry. They are not measured local results, approved operational thresholds or estimates of event frequency. The case must define its function, observations and criteria.
N2 · Reproducible laboratory
Section 20 specifies a synthetic model, assumptions, dependence and random seed. Its Q output is a pedagogical index, separate from SPS. Numerical summaries describe only that declared experiment.
N3 · Sources and scope
Research papers, official documents and case records have distinct roles. This is a curated teaching library, not an exhaustive systematic review. Dynamic sources require a cited version or extraction date; applicability of a legal or technical instrument depends on the actual jurisdiction and activity.
N4 · Governance and learning
The library establishes no statutory power, quorum, emergency command, provider certification, partnership or institutional endorsement. A learning case may be real or simulated. Completion, optional credentialing, permission to submit and licensing remain distinct. Projects and data contributions to the SIL require an associated fellow and applicable review.

PART I

Domain intelligence profile

SECTION 01

Domain overview and system boundary

The observation system begins before data collection, with a question, a population and a definition of the quantity to be measured. Distinguish the phenomenon from its proxy: reported incidents reflect both underlying events and reporting behavior. A complete profile identifies instruments, sampling rules, custodians, transformations and intended decisions. It also records who or what is systematically excluded. This framing prevents the volume of available data from determining the scientific question after the fact. [S14] For the case, explain which part of the phenomenon is directly observed and which part must be inferred.

This domain examines how observations become defensible knowledge and how knowledge remains inspectable as instruments, models and institutions change. It covers sampling, calibration, measurement uncertainty, computational workflows, replication, evidence synthesis and the science-policy interface. The object is the evidentiary chain, not only the final dataset or paper. The same chain may combine sensors, administrative records, local observations and analytical models with different limitations. [S01] [S14]

A case should distinguish the phenomenon of interest, the observable quantity and the inference connecting them. A water-level sensor records an instrument response; calibration and georeferencing turn it into an estimate of a physical quantity; a flood model connects that estimate to exposure. Each transformation can introduce uncertainty or bias. Verification tests whether an implementation behaves as specified; validation examines fitness for the intended use under relevant conditions. Neither guarantees truth outside its tested scope. [S16]

The educational aim is an auditable evidence package: a clearly framed claim, source register, measurement model, analysis plan, reproducible workflow and reasoned assessment of uncertainty. Access may require restrictions to protect people, communities or sensitive infrastructure. Responsible openness documents those restrictions and provides a lawful inspection route where possible. A polished dashboard, large dataset or prestigious publication is insufficient on its own to establish a claim. [S04] [S17]

A domain label is not yet a case boundary. Separate the condition of a resource or asset from the function delivered to users. A nominally available installation may fail to deliver usable service, and a system-wide average can conceal localized loss. Preserve the original physical or institutional unit alongside any normalized representation. The boundary should make it possible to ask what enters, what changes, what leaves and who experiences the consequences.

Case-analysis method
Case fieldRecord
FunctionDescribe the outcome delivered, affected users and the minimum useful unit of service.
BoundaryRecord spatial, technical, organizational and temporal boundaries, including excluded processes.
Reference conditionState what counts as functional performance and which evidence defines that condition.
Exposure and distributionIdentify which groups, assets and ecological functions can be affected differently.
DependenciesIdentify prerequisites, substitutes and common points of failure.
ObservationConnect each important claim to a source, method, scale and update interval.

Section readings [S14]

SECTION 02

Historical development and changing conditions

Scientific observation has developed through increasingly standardized instruments, statistical inference, shared archives and computational analysis. Digital scale adds opportunities for inspection but also dependencies on software and metadata. Reproducibility and replication address different questions: rerunning an analysis checks its computational chain, while collecting new evidence examines the finding under specified conditions. Neither replaces conceptual validity or appropriate sampling. Read historical failures and successful discoveries as evidence about methods, interfaces and correction, rather than as a simple story of technological progress. [S05] Identify a historical change that improved measurement while introducing a new source of dependency.

A historical baseline must be examined for changes in exposure, technology, operating practice and observation. Compare episodes using their mechanisms and evidence, rather than treating all events with a similar label as exchangeable observations. A reconstruction should show what was known at each time; later explanations should not be presented as information available to the original decision maker. Recovery and long-term change may require a separate timeline from the initiating incident.

Historical comparison: documented records for further study
Case and periodMechanism to examineComparison questionSource
Mars Climate Orbiter, 1999Inconsistent unit conventions and interface verification failures affected navigationTest units, dimensions and end-to-end interfaces rather than code components alone[S18]
Space Shuttle Columbia, 2003Evidence interpretation and organizational pathways shaped a critical safety decisionDistinguish absence of decisive measurement from evidence of absence[S19]
Psychological science replication project, 2015A coordinated study assessed replication using multiple criteriaCompare effect sizes, intervals and context rather than a binary slogan[S10]
Preclinical cancer biology replication project, 2021Replication outcomes were constrained by available methods and materialsTreat transparency and material access as part of scientific inspectability[S11]

Section readings [S05]

SECTION 03

Actors, institutions and decision responsibilities

Knowledge systems distribute responsibility among field observers, laboratories, data stewards, software developers, reviewers and decision users. Their contributions should be connected through explicit interfaces. A custodian may preserve data without endorsing a downstream interpretation; a reviewer may assess methods without controlling access. Map who can correct an error and notify affected users. This institutional structure matters because a technically detectable problem can persist when no participant owns the transition from detection to correction. [S15] Trace responsibility for a single observation from acquisition to a public claim and identify a missing handoff.

Map actors by the function they perform and the responsibility they actually hold in the case. The same organization may observe a condition, supply a service and participate in a decision; those roles should remain distinguishable. Examine information access, resources, expertise, affected users and accountability together. A list of institution names is not an operating governance arrangement. Record the evidence for each responsibility and the process for resolving a disagreement or correcting a record.

Case-analysis method
FunctionActors to identifyReviewable output
ObserveOperators, observation networks, laboratories and affected usersTimestamped records and methods.
InterpretAnalysts and relevant subject specialistsMechanism hypotheses, alternatives and uncertainty.
ReviewQualified reviewers with declared interestsDocumented assessment and unresolved disagreements.
Decide and executeThe actor with the applicable mandateReasons, authorized action and verifiable completion.
CommunicateResponsible institutions and accessible public channelsMessage, receipt, corrections and feedback.
UpdateData custodians and the review functionVersion, new evidence and conditions for revision.

Section readings [S15; C07]

PART II

Systemic risk intelligence

SECTION 04

Primary systemic risks

Primary risks concern failure of the evidentiary chain: biased selection, erroneous measurement, invalid transformation or unsupported inference. They are distinct from an unfavorable real-world condition detected correctly. A rising flood level is a hazard observation; sensor saturation that hides the rise is an observation-system failure. The risk inventory should retain this distinction so monitoring quality is not confused with environmental safety. Attach the failure mechanism to a testable observation and an appropriate corrective capability. [S16] Compare a true extreme measurement with an extreme value caused by an instrument fault.

The inventory is a structured set of research hypotheses. It separates a threatening condition from the mechanism of loss and from its consequences. The proposed TFP association indicates which question to investigate; it is not evidence that a particular indicator predicts the event. Risk importance depends on the defined function, exposure, duration and usable alternatives. Do not infer frequency, severity or priority from the position of a row in the table.

Thirty domain-specific risk hypotheses
#Risk or threatening conditionMechanism to examineProposed TFP inquiry
1Sampling biasObserved cases systematically differ from the target populationσ: biased inference
2Instrument driftResponse changes between reference checksP; σ: misplaced margin
3Reference mismatchCalibration reference does not represent operating conditionsσ: invalid transfer
4Unit inconsistencyEquivalent quantities are encoded on incompatible scalesP: erroneous transformation
5Timestamp misalignmentMeasurements from different processes are paired incorrectlyΔV; σ: false sequence
6Geolocation errorObservation is assigned to the wrong place or assetσ: exposure misclassification
7Sensor saturationExtreme values exceed measurable rangeP: hidden exceedance
8Missing-not-at-random dataFailure or exclusion is related to the phenomenon measuredσ: biased missingness
9Provenance lossInput origin and transformations cannot be reconstructedσ; Lr: impaired correction
10Version confusionAnalyses mix incompatible releasesσ: inconsistent evidence
11Selective reportingOnly favorable outcomes enter the recordσ: distorted evidentiary balance
12Undisclosed analytical flexibilityPost hoc choices appear confirmatoryσ: false-positive inflation
13Data leakageEvaluation information enters model developmentP; σ: overstated performance
14Nonstationary measurementDefinitions or instruments change across timeΔV: spurious trend
15Model structural errorImportant processes are absent or misspecifiedσ: incomplete explanation
16OverfittingA model learns sample idiosyncrasies rather than transferable structureσ: weak external validity
17Uncalibrated prediction intervalsReported intervals do not attain intended coverageσ: false precision
18Dependent corroborationMany products share the same underlying evidenceσ: overstated independence
19Irreproducible computationResults depend on unavailable context or undocumented stepsLr: knowledge reconstruction barrier
20Uncontrolled data correctionEdits overwrite the original record without lineageσ: lost auditability
21Broken persistent identifiersReferenced materials become unavailable or ambiguousLr: evidence loss
22Unlicensed reuseData or material is used beyond permitted conditionsP: rights and reproducibility risk
23Privacy reidentificationCombined data reveal protected identitiesP: irreversible disclosure
24Community knowledge appropriationKnowledge is used without appropriate consent or attributionP; Lr: harm and loss of cooperation
25Automation hallucinationGenerated claims lack supporting evidenceσ: false knowledge entry
26Publication biasAvailable literature omits null or unfavorable findingsσ: unbalanced synthesis
27Calibration gapCritical measurements lack a current reference linkσ: unknown measurement validity
28Unrecognized correctionDownstream users retain a superseded claimΔV: error propagation
29Observation outageCritical processes continue while monitoring is absentP; ΔV: unobserved approach
30Knowledge concentrationEssential interpretation depends on one person or institutionLr: capability fragility

Section readings [S16]

SECTION 05

Amplification mechanisms and secondary risks

Secondary risks arise when several evidentiary weaknesses reinforce one another. Sparse calibration references can make instrument drift appear to be a regional trend; an opaque pipeline can then reproduce the same error across many products. Agreement between products is weak corroboration if their sources and transformations are shared. Map common inputs and processing steps before counting independent observations. Preserve enough intermediate data to locate where disagreement begins rather than treating the final dashboard as the smallest auditable object. [S06] Identify two apparently separate sources that depend on the same underlying measurement or software.

An amplifier changes the consequences of an initiating condition without necessarily causing the initiating event. Useful counterfactuals hold the threat constant and vary concentration, maintenance, access, information or response capacity. Document the mechanism and the observation that would distinguish it from an alternative explanation. Several amplifiers may share the same upstream cause; counting each one as independent evidence exaggerates confidence.

Amplification mechanisms
AmplifierPropagation mechanismEvidence or TFP inquiry
Common processing pipelineIndependent sensors inherit the same software errorTest genuinely independent transformations
Sparse reference networkDrift cannot be distinguished from environmental changePrioritize independent calibration checks
Emergency time pressureReview shrinks as consequence growsPredefine minimum evidence and review steps
Prestige effectsInstitutional reputation substitutes for inspectionEvaluate claim-level evidence and methods
Opaque aggregationAverages hide extreme or missing observationsPreserve disaggregated records and missingness
Incentive pressureNovel positive findings crowd out null resultsRecord protocols, deviations and complete outcomes
Vendor dependenceProprietary tools prevent independent reconstructionPreserve exportable inputs and transformation specifications
Unclear custodianshipNo actor owns long-term data preservationAssign stewardship and test retrieval

Section readings [S06]

SECTION 06

Emerging risks and research horizons

Emerging observation risks often involve a mismatch between increased production and verification capacity. Generative systems can produce plausible summaries and code faster than reviewers can inspect their premises. Sensor expansion can increase coverage while making calibration and schema consistency harder to maintain. Evaluate each new method against a defined scientific purpose and a realistic error-detection pathway. New capability becomes reliable through validation, provenance and correction procedures, rather than through novelty or output volume. [S02] Specify the evidence needed to establish that a new observation method improves the intended decision.

A research horizon is tied to the time needed to investigate, prepare or change a system. It is not a date at which an emerging threat is predicted to occur. Record the reason for concern, the strength of evidence, the exposed function and the observation that would change the priority. Distinguish a newly observed mechanism from a known mechanism whose exposure, scale or institutional context is changing.

Emerging research agenda
Research topicMechanism or knowledge gapObservation or horizon question
Synthetic training data feedbackGenerated content is reused as independent evidenceTrack origin and separate measured from generated records
Foundation-model scientific assistantsPlausible citations and code can conceal unsupported stepsVerify sources and independently inspect critical analysis
Sensor-network scale growthMore devices increase heterogeneity and correlated faultsUse explicit calibration and schema governance
Privacy-preserving analysisProtected access changes inspectability and uncertaintyDocument guarantees, limits and replication routes
Automated literature synthesisRetrieval and ranking biases shape evidence selectionPublish search scope and screening decisions
Digital twins for public decisionsContinuous updating can obscure which model supported a decisionPreserve time-specific versions and validation scope

Section readings [S02]

SECTION 07

Cascades and cross-domain dependencies

Evidence cascades occur when one observation influences many derivative claims. A corrected sensor record may require recalculating a model, revising an exposure estimate and updating several public products. The dependency graph should identify transformations and versions, not only hyperlinks between documents. Propagation can also be social: a claim repeated through many reports can appear independently confirmed. Track whether each source supplies new evidence or merely restates an earlier conclusion. [S15] Follow one corrected input through three derived products and identify who must notify their users.

Sampling determines which parts of the world enter the evidence system. Convenience samples, missing observations and changing inclusion rules can distort an apparent trend even when each recorded value is accurate. Specify the target population and how selection differs from it before estimating uncertainty.

Calibration links an instrument response to a reference through a measurement model. Drift, environmental interference and maintenance history can change that link. Preserve calibration records and check whether the uncertainty is fit for the decision, rather than assuming a recently purchased instrument is accurate. [S16]

Provenance records the entities, activities and responsible agents connecting an output to its inputs. It supports reconstruction and attribution but does not itself prove that the input was true or the method appropriate. Provenance should accompany transformations, corrections and derivative outputs. [S15]

For each directed dependency, specify the function supplied, the destination, the propagation time and the substitute. Shared-cause failure, interacting threats and cascading propagation are different structures. A directed arrow becomes an explanatory claim only when the timing and mechanism are supported. Test apparent redundancy by removing the common access route, platform, energy supply or specialist on which both alternatives depend.

Directed dependency hypotheses
DependencyMechanism and directionVerification or TFP inquiry
Water and sanitationMonitoring quality determines whether deterioration is visibleLink measurement uncertainty to decision margins
EnergyPower and environmental control sustain instruments and storageTest acquisition continuity and safe shutdown
Digital infrastructureData processing depends on software, networks and repositoriesPreserve recoverable and inspectable workflows
Public healthSurveillance definitions affect apparent incidence trendsSeparate reporting changes from real changes
GovernanceAuthorities define access, consent and use in public decisionsDocument lawful purpose and review responsibility
EducationTraining sustains calibration and interpretation skillsAssess demonstrated competence
IndustryStandards and supplier information affect measurement comparabilityInspect shared dependencies and commercial restrictions
EnvironmentField conditions change instrument response and sampling accessRecord operating context
Strategic resilienceContinuity planning relies on trustworthy shared observationsMaintain proportionate access and civilian safeguards
FinanceResource stability affects long-term observation recordsRecord capability interruption without exposing internal business planning

Section readings [S15; C01; C02]

PART III

Systemic response intelligence

SECTION 08

Readiness and response protocols

Observation response protocols should separate a suspect reading, a confirmed instrument fault and a credible hazard signal. Preserving raw records allows later examination even when a temporary operational filter is necessary. Define diagnostic checks, independent comparison, responsible review and the conditions for releasing a correction. A missing or invalid reading should remain distinguishable from a normal value. Timely escalation matters when uncertainty could conceal a rapidly narrowing action window. [S16] Design a response to a sensor anomaly that preserves evidence while supporting a practical near-term decision.

Preparedness connects a signal to a responsible actor, an available measure and a condition of completion. This learning architecture does not grant emergency command or operational authority to the c-ECO Institute or a course participant. A useful protocol distinguishes checking the signal, protecting exposed functions and verifying recovery. A paper plan contributes to usable capacity only when its relevant assumptions have been tested.

Case-analysis method
StageAction to prepareEvidence
PrepareDefine critical functions, contacts, alternatives and observation coverage.A tested readiness record.
VerifyCheck the signal, the instrument and plausible alternative explanations.A traceable observation and uncertainty statement.
ProtectSelect and implement measures within the responsible actor’s authority.Coverage of priority functions and evidence of execution.
RecoverVerify usable performance before treating the function as restored.Recorded return criteria, monitoring and decision owner.

Section readings [S16]

SECTION 09

Scientific review and decision records

Technical review should assess the claim, data and intended use together. Statistical expertise alone may miss a field sampling problem; domain expertise alone may miss a software dependency. Assemble appropriate complementary skills and disclose material conflicts. Review questions include whether the measurement model is coherent, the validation set is relevant and the conclusion exceeds the evidence. A disagreement log can reveal alternative explanations needing further investigation without forcing premature consensus. [S14] Select reviewers for one claim and explain what each can independently examine and what remains outside their competence.

A review record separates observation, inference and decision. Record the data version, methods, alternative explanations, relevant expertise, conflicts of interest and unresolved disagreement. Review should be matched to the question and its consequences. Scientific analysis can inform a competent actor without replacing that actor’s mandate. No membership size, quorum or institutional power is established by this teaching library.

Case-analysis method
Review itemQuestion and record
QuestionWhat specific claim is being evaluated?
EvidenceWhich observations, sources and transformations support it?
AlternativesWhat other process could explain the same observation?
IndependenceWhich interests or shared data origins affect review?
DecisionWho can act, on what basis and with which constraints?
RevisionWhat new observation or failure of an assumption reopens the analysis?

Section readings [S14; C05; C07]

SECTION 10

Communication and observation continuity

Uncertainty communication should identify the source of uncertainty and its consequence for action. A confidence interval, a missing region and a contested causal model convey different limitations. Avoid reducing all three to a single confidence label. Explain what additional observation could change the conclusion and whether the proposed decision remains appropriate across plausible interpretations. Public correction notices should state what changed and link affected outputs without exposing protected data. [S07] Write a short explanation of a result for a decision user, retaining its most consequential limitation.

Continuity of observation should be tested alongside continuity of the function itself. Losing data may increase uncertainty before the physical process visibly changes. Redundancy must be demonstrated against common causes, including power, location, communications, credentials and specialist availability. During disconnected operation, preserve the last reliable observation, record the uncertainty that follows and reconcile timestamps and authorship when information paths return.

Case-analysis method
Continuity capabilityTest
Observation pathTest sensor availability, power, timing and independent confirmation.
Alternative communicationTest actual reach, autonomy and the ability to contact responsible people.
Degraded operationSpecify what can remain usable safely under loss of information or connectivity.
Offline recordKeep controlled copies of essential maps, contacts, definitions and procedures.
Accessible messagesCheck language, disability access, delivery and routes for correction.
ReconciliationPreserve timestamps and authorship when disconnected records are merged.

Section readings [S07; C01]

PART IV

Governance and legal architecture

SECTION 11

International instruments and technical references

International guidance supports comparability and responsible access but must be interpreted according to its status. Metrology guidance addresses measurement uncertainty; open-science recommendations address participation and access; technical provenance models define interoperable representations. They solve related but different problems. Applying one does not establish compliance with all ethical or legal duties. A project should document which provisions it uses, why they fit the question and what additional local requirements govern data collection and reuse. [S17] Distinguish a technical recommendation, an ethical commitment and a binding obligation relevant to the case.

Classify each instrument before using it. A scholarly article supports an inference, a technical guide describes a method, a standard has a defined scope, and a legal instrument may create obligations only where applicable. The case record should identify the specific provision or method, its version and the activity to which it relates. A source’s institutional reputation cannot by itself establish applicability or demonstrate compliance.

Technical and institutional documents: identify their actual function
ReferenceDocumentUse and scope
[S14]Reproducibility and Replicability in ScienceTerminology and recommendations across disciplines; context matters for replication.
[S15]PROV-DM: The PROV Data ModelEntities, activities and agents for interoperable provenance representation.
[S16]Evaluation of measurement data — Supplement 1 to the GUM — Propagation of distributions using a Monte Carlo methodPropagation of input uncertainty through a specified measurement model.
[S17]Recommendation on Open ScienceEquitable access, responsible openness and knowledge-system participation.
[S18]Mars Climate Orbiter Mishap Investigation Board — Phase I ReportInterface and verification failures involving inconsistent units.
[S19]Columbia Accident Investigation Board Report, Volume IEvidence interpretation, organizational conditions and management decision pathways.
[S20]Retraction Note: Stimulus-triggered fate conversion of somatic cells into pluripotencyA retraction record, used as evidence about correction of the literature, not evidence for the withdrawn biological claim.

Section readings [S17]

SECTION 12

Jurisdiction-specific responsibilities and requirements

Observation activities operate within jurisdiction-specific rules on personal information, research ethics, environmental monitoring and access to public records. The relevant question is not whether data are generally available but whether the proposed collection, linkage and use are authorized and appropriate. Data minimization can support both privacy and scientific clarity by identifying what is necessary for the claim. Restrictions should be documented in metadata with an inspection route where lawful and feasible. [S01] Explain how an independent reviewer could examine a sensitive analysis without receiving unnecessary identifiable records.

The register should cover the actual activity and location, including interfaces between organizations and jurisdictions. Separate responsibility for observing, supervising, deciding and executing. Retain the official source, version consulted and evidence needed to assess a condition. Conflicting definitions and overlapping mandates are analytical findings to investigate. A general library cannot create a universal legal threshold for all settings.

Case-analysis method
Register fieldInformation to preserve
Instrument and versionOfficial title, scope, jurisdiction and date consulted.
Actor and functionThe competent authority, operator, owner or custodian for the relevant activity.
ConditionThe requirement, decision trigger or performance obligation actually applicable.
EvidenceThe observation or document needed to evaluate that condition.
InterfaceOverlaps, conflicts, shared duties and coordination procedures.
ReviewHow changes in the instrument, activity or evidence affect applicability.

Section readings [S01]

SECTION 13

Causation, accountability and cascading consequences

Responsibility for a scientific claim should remain identifiable across collaboration and automated processing. Record who designed the study, collected observations, performed transformations and approved public interpretations. Authorship does not automatically establish custodianship, and possession does not establish permission for reuse. Errors may require both a technical correction and a separate review of conduct; those processes should not be confused. Preserve fair procedures and an auditable account of the evidence supporting any conclusion about what occurred. [S04] Identify the responsible role for correcting a derived figure when its source dataset changes.

A technical chain of consequences is not automatically a legal allocation of liability. Separate evidence of causation from the duties, control and decisions relevant to each actor. A case may contain direct damage, dependent service interruption and persistent environmental or social consequences on different timescales. The analysis should show which links are documented and which need further investigation, without presuming an institutional restoration fund, mandatory levy or insurance mechanism.

Case-analysis method
LayerAnalytical question
Technical sequenceSeparate the initiating condition, failure mechanism, propagation and consequence.
Duty and controlIdentify the applicable responsibility and the actor able to influence the relevant process.
ExposureTrace the connection between a change of state and an affected function or population.
Alternative explanationsIdentify concurrent conditions and missing evidence relevant to attribution.
Recovery resourcesIdentify documented resources and their access conditions, without assuming an institutional fund or levy.

Section readings [S04]

SECTION 14

Cross-boundary coordination

Cross-border and cross-community knowledge work requires attention to consent, purpose and interpretive authority. A dataset can be technically interoperable while its reuse violates agreed conditions or misrepresents local knowledge. Record permitted purposes, attribution, access restrictions and procedures for future requests. Compare the scale at which observations are collected with the scale of the inference. A local record may inform a wider hypothesis without supporting an immediate claim about all populations or regions. [S17] Specify which aspects of a local observation can be transferred and which require new evidence in another setting.

Processes and dependencies often cross administrative, organizational or national boundaries. Coordination requires compatible definitions, useful timing, authorized exchange and an identifiable decision interface. Sharing data does not by itself resolve disagreements over objectives, risk allocation or resources. An exercise should expose which decision can be coordinated under existing arrangements and which would require an additional agreement or competent determination.

Coordination across functional boundaries
Boundary / dependencyMechanism to coordinateCase record
Water and sanitationMonitoring quality determines whether deterioration is visibleIdentify the actors, notification time, information definition and decision interface for this boundary.
EnergyPower and environmental control sustain instruments and storageIdentify the actors, notification time, information definition and decision interface for this boundary.
Digital infrastructureData processing depends on software, networks and repositoriesIdentify the actors, notification time, information definition and decision interface for this boundary.
Public healthSurveillance definitions affect apparent incidence trendsIdentify the actors, notification time, information definition and decision interface for this boundary.
GovernanceAuthorities define access, consent and use in public decisionsIdentify the actors, notification time, information definition and decision interface for this boundary.
EducationTraining sustains calibration and interpretation skillsIdentify the actors, notification time, information definition and decision interface for this boundary.

Section readings [S17; C07]

PART V

TFP calibration intelligence

SECTION 15

Position (P): candidate observations

P in an observation system can describe the margin between evidence quality and the minimum needed for a consequential decision. Examples include remaining instrument range before saturation or the uncertainty relative to a decision threshold. These are operational quantities with units and assumptions; they should not be replaced by an unexplained quality score. A wide uncertainty interval can span both acceptable and unacceptable conditions. The appropriate response may be additional observation, a robust interim choice or explicit postponement of an unsupported conclusion. [S16] Compare the decision margin with measurement uncertainty and explain whether the observation can distinguish the relevant states.

P represents position relative to a specified loss of function. The raw observation, reference condition, direction of deterioration and boundary of failure must remain explicit. A candidate monotone transformation can help compare states within a defined case, but it does not establish the threshold or validate an aggregate index. Capacity, delivered performance and exposure may require different indicators even when they concern the same installation.

Thirty candidate observations for P and related case questions
#Candidate observationUnit or definitionInterpretation and data requirement
1Sampling frame coverage% target population representedDescribe unreachable and excluded units explicitly
2Missing observation rate% expected recordsStratify by place, instrument and operating condition
3Calibration agedays since valid checkRelate interval to drift evidence and operating demands
4Reference traceability coverage% critical measurementsRetain reference, procedure and uncertainty chain
5Instrument range exceedancecount and durationDistinguish saturation from true plateau
6Duplicate measurement disagreementquantity-specific unitsCompare paired observations under matched conditions
7Expanded measurement uncertaintyunit of measurandState coverage factor or interval interpretation
8Timestamp offsetsecondsRecord clock source and synchronization checks
9Geolocation uncertaintymeters or defined areaPreserve coordinate reference system
10Unit-schema compliance% valid recordsValidate dimensions and conversion rules
11Provenance completeness% records with required lineageCheck entities, transformations and responsibility
12Version identification coverage% artifactsRequire immutable release identifiers for critical inputs
13Independent rerun success% prescribed workflowsDefine acceptable numerical tolerance
14Computational environment completeness% required dependencies pinnedInclude system libraries and execution instructions
15Prespecified analysis coverage% confirmatory outcomesDistinguish exploratory analyses transparently
16Protocol deviation countcount by consequenceRecord timing, reason and impact on inference
17Out-of-sample performancetask-specific metricUse genuinely held-out settings relevant to use
18Prediction interval coverage% observations within intervalEvaluate by relevant subpopulation and horizon
19Residual dependencespecified autocorrelation statisticChoose lag and uncertainty explicitly
20Uncertainty decomposition coverage% critical outputsSeparate measurement, parameter and structural sources
21Evidence independence coverage% major claims with independent supportTrace shared datasets and models
22Correction propagation timehours or daysTrack release of correction through downstream products
23Data-access reproducibility coverage% inspectable inputsInclude lawful controlled-access routes
24License metadata completeness% datasetsCheck permitted uses, attribution and restrictions
25Privacy risk assessment coverage% sensitive releasesAssess linkage and small-cell disclosure risk
26Community consent condition compliance% relevant usesRetain purpose, restrictions and attribution agreements
27Persistent identifier resolution% references resolvingCheck content identity as well as a live URL
28Retracted-source flagging% relevant references checkedRecord correction and retraction status with date
29Independent verification backlogitems and agePrioritize by decision consequence
30Critical observer redundancynumber of independent routesAssess common instruments, staff and processing failure modes

A didactic monotone transformation for an indicator that worsens as it rises is p = clip[(x − x_ref)/(x_failure − x_ref), 0, 1]. Reverse the direction for a reserve that deteriorates as it falls. The expression makes the reference points visible; it does not choose those points, prove comparability or establish an operational aggregate. Retain x in its original unit and justify the function separately for each case.

Section readings [S16]

SECTION 16

Velocity (ΔV): rates and trajectory

ΔV concerns change in the observation system or the phenomenon it observes, and the two must be separated. A rising missing-data rate can reduce the ability to estimate environmental velocity; sensor drift can generate a false trend. Track instrument response, reporting completeness and processing delay alongside physical measurements. Derivatives magnify noise, so choose a justified window and report sensitivity to smoothing. Abrupt changes in instrumentation or definitions should be marked before interpreting a discontinuity as a real process change. [S16] Estimate one trend under two plausible processing windows and explain the difference in interpretation.

ΔV describes direction and rate of change over a declared interval. Two systems at the same apparent position may have different reaction times because their trajectories differ. Compare rates using consistent units, observation windows and reference systems. Check seasonality, missing periods, reporting changes and process acceleration before extrapolating. A time-to-boundary calculation is conditional on its trajectory assumption; it is not a general forecast.

Ten families of rate-of-change observations
ProcessRate / unitInterpretation
Sensor driftmeasurement units/monthEstimate against stable references and environmental conditions
Missingness growthpercentage points/weekInvestigate whether outages coincide with extremes
Calibration debt accumulationinstruments overdue/monthWeight by decision criticality without hiding counts
Data delivery latency changehours/weekSeparate acquisition, processing and release delays
Correction propagationartifacts corrected/dayTrack dependent products and unresolved versions
Model performance degradationmetric units/monthUse a consistent validation population
Metadata erosionpercentage points/releaseCheck migration and aggregation losses
Verification backlog growthclaims/weekRelate intake to independent review capacity
Observer attritionqualified staff/yearAccount for mentoring and replacement time
Knowledge obsolescencecritical assumptions invalidated/yearDefine a reviewable assumption inventory

Section readings [S16]

SECTION 17

Uncertainty (σ): evidence and model limits

σ should preserve distinct sources of uncertainty: sampling variation, measurement error, parameter estimation, structural model error and contextual transfer. Combining them requires an explicit mathematical model and appropriate dependence assumptions. A narrow interval from repeated computation cannot repair a biased sample or omitted process. Use sensitivity analysis to reveal which assumptions drive the conclusion. Where a source cannot be credibly quantified, describe it clearly rather than assigning an arbitrary distribution solely to produce a complete-looking output. [S07] Identify the uncertainty that would remain even with unlimited repeat measurements from the current instrument.

Uncertainty should be recorded by object and source. Measurement uncertainty, sampling limitations, parameter uncertainty, model structure, future scenarios and institutional ambiguity cannot be replaced by one unsupported percentage. More simulation samples can reduce numerical sampling error without resolving a missing mechanism. Identify which uncertainty changes the decision and which further observation, comparison or test could reduce it.

Case-analysis method
Source of uncertaintyObject affectedTreatment
MeasurementInstrument error, drift, reference system and quality controls.Calibration, cross-check and traceable metadata.
SamplingSpatial, temporal or population coverage.A design matched to the decision and exposed groups.
ParametersValues weakly identified by available observations.Estimation, sensitivity and alternatives.
Model structureProcesses excluded or represented inadequately.Competing models and tests outside the fitting conditions.
ScenarioUncertain future demand, environment or operating practice.A declared set of plausible trajectories.
DependenceCorrelated conditions or failures treated as independent.Joint analysis and explicit common-cause hypotheses.
InstitutionsUnverified duties, access or resource availability.Documentary checks and mobilization tests.
Unknown mechanismsA plausible process with insufficient evidence.A research question and decisions robust to the unresolved gap.

Section readings [S07; C06]

SECTION 18

Reversibility liquidity (Lr): usable recovery resources

Lr describes constraints on reconstructing trustworthy knowledge after an observation failure. Recovering files is insufficient if calibration records, software context or consent conditions have been lost. Identify which components are irreplaceable and which can be recreated through new measurements or independent analysis. The time required may exceed the decision window even when eventual recovery is technically possible. Preserve historical versions so that analysts can determine what evidence was actually available when a consequential decision was made. [S06] Identify the smallest lost artifact that would prevent a defensible reconstruction of the case.

Lr examines resources that can preserve, contain or recover the defined function within the relevant time. A resource listed in an inventory is different from a resource that is accessible, compatible, staffed and mobilizable. Record capacity, useful arrival time, duration, dependencies and evidence of testing. Avoid averaging away an essential bottleneck. Recovery of a service does not necessarily restore ecological condition, accumulated losses or public trust.

Recovery resources to verify in the case
Recovery resourceAvailability or mobilization questionVerification or dependency
Reference standardsAppropriate stable comparison for critical measurementsVerify traceability and uncertainty
Raw data preservationImmutable or controlled originals with lawful accessReconstruct a corrected output
Versioned code repositoryRecoverable released code and parameter historyRun the historical analysis version
Execution environmentDependencies, runtime and reconstruction instructionsTest independent setup
Metadata dictionaryDefinitions, units and inclusion rulesResolve an ambiguous historical variable
Independent reviewer poolRelevant expertise and freedom to challenge conclusionsReproduce one critical analytical step
Alternative observation routeIndependent instrument or measurement methodTest common-cause failures
Controlled-access pathwayLawful inspection of sensitive evidenceVerify researcher access under agreed conditions
Correction registerLinked notices and downstream dependency inventoryTrace one correction to all public outputs
Knowledge handover packageProcedures, limitations and tacit-knowledge trainingDemonstrate capability after staff turnover

Section readings [S06]

PART VI

Scenario and simulation intelligence

SECTION 19

Stress scenarios and comparative strategies

Scenario analysis should distinguish changes in the world from changes in evidence quality. Compare a genuine extreme event with instrument drift, a reporting interruption and a compound case where an extreme causes monitoring failure. Specify observable implications for each hypothesis and the independent checks available. The best scenario exposes ambiguity the current observation network cannot resolve. A system designed only around ordinary conditions may provide its least reliable evidence when decisions become most consequential. [S14] Identify one observation that would distinguish an emerging hazard from a malfunctioning measurement chain.

A stress scenario states the initiating condition, prior state, time sequence, exposed function, shared dependencies and feasible responses. Its purpose is to reveal when a strategy loses usefulness and why. Compare alternatives across several conditions, including absent substitutes and simultaneous demand. Scenarios should lead to observations, tests and resource questions; assigning a precise event probability requires a separate justified model and evidence.

Five domain-anchored stress-test designs · N1
ScenarioInitiating mechanismObservation designStrategy comparison
A · Sampling biasObserved cases systematically differ from the target populationCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
B · Unit inconsistencyEquivalent quantities are encoded on incompatible scalesCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
C · Version confusionAnalyses mix incompatible releasesCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
D · Dependent corroborationMany products share the same underlying evidenceCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.
E · Automation hallucinationGenerated claims lack supporting evidenceCheck which observation distinguishes onset, propagation and loss of the defined function.Compare current practice, improved readiness and a structural alternative; remove one shared prerequisite.

Section readings [S14]

SECTION 20

Reproducible simulation and sensitivity analysis

Monte Carlo propagation samples specified input distributions and passes them through a measurement or analytical model. It does not automatically include unknown processes or justify the chosen distributions. Preserve units, physical bounds and dependence among inputs. Report convergence checks and how conclusions change under alternative assumptions. The output distribution is conditional on that model and input specification. Interpret uncertainty in relation to the scientific claim rather than presenting a large number of simulation runs as evidence of empirical validity. [S16] Change one dependence assumption and explain why the resulting output interval widens or narrows.

Simulation is an explicit transformation of assumptions. Input distributions, dependencies, parameter estimation, output definition and testing must be documented. Numerical convergence does not establish model validity. Examine sensitivity to the function used, the weights selected, dependence assumptions and conditions outside the fitting data. The reproducible laboratory below is a synthetic exercise, separated from SPS and from any claim about real-event frequency.

Reproducible synthetic laboratory · N2
ElementSpecification
Samples and seed10,000 samples; Python Random; seed 644906283.
Reference centersP = 0.72; ΔV = 0.62; σ = 0.40; Lr = 0.38.
Latent dispersion0.40, 0.45, 0.30, 0.40, respectively.
Common-factor loading0.65, 0.55, 0.35, −0.45, respectively.
Dependence constructionz_j = a_j g + √(1 − a_j²) ε_j; g and ε_j are independent standard normal draws.
Bounded transformationx_j = logistic[logit(m_j) + s_j z_j].
Learning outputQ = 0.35P + 0.25ΔV + 0.15σ + 0.25(1 − Lr).
Comparison conditionQ ≥ 0.70, selected only for this synthetic laboratory.
Calculated outputs under the declared assumptions
StatisticValue
Mean0.617
5th percentile0.516
Median0.619
95th percentile0.710
Fraction with Q ≥ 0.707.35%

The factor loadings define association on the latent scale. Correlations after the nonlinear transform should be estimated from the simulated samples. Q is a teaching index and is not SPS. Its exceedance fraction concerns the generated sample under these assumptions; it is not the probability of a real event or a forecast over a stated number of years. A temporal forecast would require a separately specified process and observation model.

Reproduce the calculation in Python
from random import Random
from math import log, exp, sqrt
from statistics import mean
rng = Random(644906283)
m = [.72, .62, .40, .38]
s = [.40, .45, .30, .40]
a = [.65, .55, .35, -.45]
q = []
for _ in range(10000):
    g = rng.gauss(0, 1)
    x = []
    for mj, sj, aj in zip(m, s, a):
        z = aj*g + sqrt(1-aj*aj)*rng.gauss(0, 1)
        x.append(1/(1+exp(-(log(mj/(1-mj))+sj*z))))
    p, v, u, lr = x
    q.append(.35*p+.25*v+.15*u+.25*(1-lr))
q.sort()
print(mean(q), q[499], (q[4999]+q[5000])/2, q[9499])
print(sum(x >= .70 for x in q)/len(q))

Sensitivity exercise: remove the common factor, vary one dispersion, change the weight of recovery resources, and compare the ranking of the selected strategies. Then state which domain observations would be needed to replace each illustrative assumption. Use a suitable estimator when inputs are dependent; the common-factor experiment is a dependence check, not a claim that a particular Sobol estimator applies unchanged.

Section readings [S16; C03; C06]

SECTION 21

Restoration and performance verification

An observation recovery exercise should test restoration of the entire evidentiary chain. Rebuild a historical result from raw data, reference records, code and environment; then compare the reconstructed output with the released version under a declared tolerance. Introduce a realistic missing dependency or corrected input. Record where human interpretation is necessary and whether that interpretation was documented. Success means a defensible reconstruction with known differences, not simply a program that executes without an error message. [S13] Have a second analyst perform the reconstruction using only the preserved package and written instructions.

Restoration follows prerequisites and verification conditions rather than a universal fixed clock. Tasks may proceed in parallel only where they do not compete for the same people, access, equipment or information. Protect essential functions while the critical path is addressed. Define what is measured before returning service, who can make that determination and which effects require continued observation after a technical restart.

Case-analysis method
StageAction and prerequisiteEvidence of usable progress
Protect essential usersProvide a feasible interim function while restoration proceeds.Coverage and actual receipt.
Restore prerequisitesRecover access, inputs, energy, information and competent personnel.Verified availability for the next task.
Restore the processRepair and operate the affected function within its relevant constraints.Technical tests matched to the failure mechanism.
Verify performanceMeasure the delivered outcome and remaining exposure.A predeclared verification record.
Authorize and communicateRecord who can declare the relevant return condition.Clear status, limitations and notification.
Follow upMonitor persistent effects and resolve causal and monitoring gaps.A review record and tracked corrective actions.

Section readings [S13]

PART VII

Restoration and recovery architecture

SECTION 22

Recovery provider capability

Qualification should match the task: field measurement, metrology, statistical inference, software engineering and community knowledge engagement require different competencies. Ask contributors to demonstrate critical steps and explain failure modes. An impressive publication record does not establish familiarity with a particular instrument or population. Independent examination should avoid dependence on the same undocumented tools used by the original team. Document the scope of each technical judgment and preserve unresolved questions that materially affect the claim. [S02] Define the competence needed to verify one transformation and provide an observable demonstration of that competence.

Capability assessment must be specific to the task, place and stress conditions. A training certificate cannot demonstrate that a team can mobilize and deliver the required function. Inspect competence, safety, compatibility, relevant experience and actual availability. Define the verification method and limits of recognition. This teaching library does not establish a c-ECO provider certification scheme or substitute for professional or regulatory requirements.

Case-analysis method
CapabilityVerification
Technical capabilityEvidence relevant to the specific task, process and failure mechanism.
MobilizationA demonstrated route, team, equipment and useful arrival time.
CompatibilityProof that resources can work with the installation, data and local constraints.
Safety and responsibilitiesRelevant professional duties, safe work and accountable supervision.
VerificationPerformance tests, records and independent review proportionate to the task.
ContinuitySubstitutes and supplies under simultaneous demand or extended interruption.

Section readings [S02]

SECTION 23

Recovery sequencing and time constraints

Recovery sequencing begins by preserving original evidence and stabilizing the affected acquisition or processing system. Next establish trustworthy references, reconstruct transformations and evaluate which outputs changed. Public correction and dependent-product updates follow the verified scope of the error. Some valid outputs may remain usable, but that conclusion requires explicit reasoning. Keep correction status separate from ordinary release status so users can identify an output under review. A rushed replacement that erases history can make later reconstruction impossible. [S15] Design a correction sequence that maintains access to the earlier version with clear contextual labeling.

A recovery time objective is a decision criterion to test against real capacity. Distinguish mobilization, work, verification and decision time, and identify dependencies between tasks. Shared resources can prevent apparently parallel activities from proceeding together. Repeating the sequence with unavailable access, a specialist or a verification service reveals where a target relies on an untested assumption.

Case-analysis method
Sequencing itemCase requirement
Task and functionDefine the outcome, prerequisites and critical users.
Time componentsSeparate mobilization, execution, verification and decision time.
Shared resourcesIdentify people, equipment, access and systems needed by more than one task.
Parallel workDemonstrate that tasks can proceed together without competing for the same bottleneck.
Completion conditionSpecify the observation that permits the next task or return of the function.
SensitivityRepeat with unavailable resources or longer lead times to expose the critical path.

Section readings [S15]

SECTION 24

Equipment, inputs and replenishment

An evidence inventory should include raw records, instruments, calibration certificates, software, metadata, consent conditions and interpretive expertise. Record location, custodian, access route, version and retention requirements. A resource can exist yet remain unusable because its format is obsolete, its identifier is ambiguous or the responsible person is unavailable. Test retrieval and interpretation with a sample of critical artifacts. Inventory quality is demonstrated through successful reconstruction and lawful access, not the number of entries. [S01] Choose one archived artifact and demonstrate that its meaning can be understood without contacting its original creator.

Inventory analysis connects each item to a protected function. Use condition, compatibility, accessibility and consumption under stress rather than a nominal stock count alone. Replenishment time must include procurement, transport, installation and verification where relevant. A substitute that depends on the same supplier or platform may disappear in the same event. Keep the last inspection date and the evidence supporting usable availability.

Case-analysis method
Inventory fieldVerification
SpecificationIdentity, quantity, condition, compatibility and installation requirements.
AvailabilityLocation, access rights, expiry where relevant and verification date.
Stress consumptionUseful stock under the conditions studied, including losses and surge demand.
ReplenishmentSupplier, lead time, transport constraints and alternatives.
Common dependenceOther stocks or substitutes that share a supplier, access route, platform or energy source.
TestEvidence from inspection, deployment or a representative mobilization exercise.

Section readings [S01]

SECTION 25

Mutual aid and cooperation arrangements

Mutual assistance between observation teams requires compatible quantities, reference systems and access conditions. A replacement instrument may have a different range or calibration model; merging records without documenting that change can introduce a false trend. Agree on formats, responsibilities and quality checks before exchanging data during a crisis. Independent assistance can improve corroboration when it uses a distinct measurement route. It provides little protection against a common processing error if both teams use the same pipeline without independent checks. [S16] Specify a handover test for observations collected by a replacement team with different equipment.

Cooperation contributes to recovery when its scope, activation, resources and practical availability are demonstrated. Record who requests support, who authorizes it, the useful arrival time, responsibility for the work and conditions of return. Consider simultaneous demand across participants. A reference to an organization or network in the literature does not imply that c-ECO or a case partner has joined it or secured a deployment commitment.

Case-analysis method
Agreement elementQuestion
ActivationWho can request and authorize support, and on what documented basis?
ResourceWhat can actually be supplied, at what capacity and for how long?
DeliveryWhich access, transport, compatibility, information and safety conditions apply?
SimultaneityWhat happens when several participants need the resource at the same time?
ResponsibilityWhich actor controls the task and its records, verification and constraints?
ReviewHow are performance, remaining gaps and revised arrangements recorded?

Section readings [S16]

PART VIII

Research and source library

SECTION 26

Source classification and evidence quality

Evidence classification should distinguish measured data, derived estimates, model outputs, expert judgments and synthetic examples. These categories describe how a claim is supported; they do not form a universal ranking in which one type always dominates. A direct measurement can be irrelevant or biased, while a carefully validated model can be fit for a particular decision. Classification should preserve both evidentiary origin and validation scope. Readers need to understand what was observed, what was inferred and what remains an assumption. [S14] Classify every input in one analytical figure and identify which conclusions depend on model assumptions.

Source classes organize origin and function; they do not form an automatic hierarchy of evidential strength. An official statistic, an operational record and a causal study answer different questions. Classify the product, not only the organization. Detect shared data origins so that a dashboard, article and secondary report based on one observation are not counted as three independent confirmations.

Case-analysis method
Source classContributionQuality criterion
A · Institutional / officialOfficial statistics, instruments, technical guidance and investigation records.Mandate, method, version, scope and actual applicability.
B · Operational / technicalMeasurements, process records, assets, inventories and delivered performance.Traceability, coverage, quality controls and usable access.
C · Academic / independentResearch designs, mechanism studies, models and independent observations.Methods, inference, reproducibility and fit to the question.

Section readings [S14; C04; C05]

SECTION 27

Institutional, regulatory and technical sources

Official observation systems often provide long records, documented methods and broad coverage. Their products still require inspection of measurement definitions, revision practices and known limitations. A national aggregate may be unsuitable for a local decision, while a provisional near-real-time series may later be revised. Preserve retrieval date and version. Regulatory acceptance and scientific fitness are related but distinct questions: a required reporting measure may not capture every mechanism relevant to the educational case. [S16] Compare a provisional operational release with a quality-controlled historical product from the same system.

Institutional sources should be selected by product, method and scale. Record whether the source defines a requirement, observes a condition, reports an investigation or synthesizes a literature. A current portal may contain several editions and methods; cite the actual version used. Public access does not establish accuracy for a different question, and a restricted source can still be used only under its authorized conditions.

Institutional and technical source register
IDProduct / documentWhy it matters
[S14]Reproducibility and Replicability in ScienceTerminology and recommendations across disciplines; context matters for replication.
[S15]PROV-DM: The PROV Data ModelEntities, activities and agents for interoperable provenance representation.
[S16]Evaluation of measurement data — Supplement 1 to the GUM — Propagation of distributions using a Monte Carlo methodPropagation of input uncertainty through a specified measurement model.
[S17]Recommendation on Open ScienceEquitable access, responsible openness and knowledge-system participation.
[S18]Mars Climate Orbiter Mishap Investigation Board — Phase I ReportInterface and verification failures involving inconsistent units.
[S19]Columbia Accident Investigation Board Report, Volume IEvidence interpretation, organizational conditions and management decision pathways.
[S20]Retraction Note: Stimulus-triggered fate conversion of somatic cells into pluripotencyA retraction record, used as evidence about correction of the literature, not evidence for the withdrawn biological claim.
[S21]Management Weaknesses Delayed Response to Flint Water CrisisHow evidence availability, interpretation and institutional response can diverge.

Section readings [S16]

SECTION 28

Operational observations and monitoring products

Operational and industry data can reveal fine temporal detail unavailable in published studies. They can also inherit commercial restrictions, undocumented sensor changes and incentives shaping what is recorded. Evaluate whether missingness or aggregation hides high-consequence conditions. Request enough metadata to interpret the quantity and its transformations without requiring unnecessary proprietary details. A source agreement should establish permitted analysis and an appropriate independent inspection route. Repeated use of an opaque dataset does not resolve its original uncertainty. [S01] Identify a commercial data field whose definition could change the conclusion and specify the metadata needed.

Operational observations should show what the system delivered, not merely that an asset was declared available. Inspect the acquisition process, sensor or reporting changes, gaps, coverage and quality controls. Compare records with independent observations where feasible. Aggregated performance, a status dashboard and user experience can diverge because they concern different units, locations, periods or definitions of availability.

Observation products to obtain for the case
ObservationUnitInterpretationProvenance record
Sampling frame coverage% target population representedDescribe unreachable and excluded units explicitlyRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Missing observation rate% expected recordsStratify by place, instrument and operating conditionRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Calibration agedays since valid checkRelate interval to drift evidence and operating demandsRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Reference traceability coverage% critical measurementsRetain reference, procedure and uncertainty chainRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Instrument range exceedancecount and durationDistinguish saturation from true plateauRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Duplicate measurement disagreementquantity-specific unitsCompare paired observations under matched conditionsRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Expanded measurement uncertaintyunit of measurandState coverage factor or interval interpretationRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Timestamp offsetsecondsRecord clock source and synchronization checksRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Geolocation uncertaintymeters or defined areaPreserve coordinate reference systemRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Unit-schema compliance% valid recordsValidate dimensions and conversion rulesRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Provenance completeness% records with required lineageCheck entities, transformations and responsibilityRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.
Version identification coverage% artifactsRequire immutable release identifiers for critical inputsRecord acquisition, coverage, timestamp, reference, quality controls and the responsible custodian.

Section readings [S01]

SECTION 29

Academic research and independent evidence

Academic evidence should be evaluated at the claim level, including study design, sample selection, effect size, uncertainty and transparency. Community observations add knowledge of places and practices that formal sampling may miss; their use requires respectful context and appropriate permission. Neither peer review nor local authenticity eliminates the need to assess relevance. Evidence synthesis should report its search and selection rules, including null findings and disagreement. This allows readers to understand which conclusions reflect convergent evidence and which remain contested. [S03] Compare two studies with different sampling frames and explain why their findings may differ without either being erroneous.

Read the research design before transferring a conclusion. Identify the question, unit of analysis, method, comparison, result, limitations and conditions that matter for the case. Foundational concepts, empirical studies, critical replications and technical syntheses serve different functions. A literature-supported mechanism may justify a hypothesis without validating a local threshold, forecasting performance or a complete TFP application.

Academic reading map: mechanisms and methods
IDResearch workContribution and limit
[S01]The FAIR Guiding Principles for scientific data management and stewardshipFindability, accessibility, interoperability and reuse; FAIR does not imply unrestricted access.
[S02]A manifesto for reproducible scienceResearch design, analysis, reporting and incentives across the evidence lifecycle.
[S03]Why Most Published Research Findings Are FalseA model of how bias, power and prior odds affect the credibility of findings; not an empirical failure percentage for all science.
[S04]Promoting an open research cultureTransparency and Openness Promotion guidelines for data, methods and reporting.
[S05]Reproducible Research in Computational ScienceComputational reproducibility as a practicable minimum for examining claims.
[S06]Ten Simple Rules for Reproducible Computational ResearchPractical preservation of code, inputs, intermediate results and computational context.
[S07]The ASA Statement on p-Values: Context, Process, and PurposeInterpret inferential results with design, uncertainty and substantive context.
[S08]False-Positive Psychology: Undisclosed Flexibility in Data Collection and Analysis Allows Presenting Anything as SignificantAnalytical flexibility and selective reporting as mechanisms of false-positive inflation.
[S09]The preregistration revolutionDistinguishing confirmatory tests from exploratory analyses.
[S10]Estimating the reproducibility of psychological scienceA large replication study; interpret its selection and success criteria before generalizing.
[S11]Investigating the replicability of preclinical cancer biologyMeta-analysis of selected replication experiments; detailed barriers to methods and materials are documented in the companion article, DOI 10.7554/eLife.67995.
[S12]Observation of Gravitational Waves from a Binary Black Hole MergerInstrumental consistency, background assessment and independent detector evidence.
[S13]Enhancing reproducibility for computational methodsPublishing computational artifacts and practices for independently examining results.
[C01]Identifying, understanding, and analyzing critical infrastructure interdependenciesDistinguishes physical, cyber, geographic and logical dependencies; use the categories to formulate a case-specific dependency hypothesis.
[C02]Understanding Compound, Interconnected, Interacting, and Cascading Risks: A Holistic FrameworkProvides distinctions for examining interacting risks and propagation; a plausible pathway still needs evidence in the case.
[C03]Variance based sensitivity analysis of model output. Design and estimator for the total sensitivity indexMethodological reference for sensitivity analysis; assumptions about independence and the model structure must accompany the chosen estimator.
[C07]A general framework for analyzing sustainability of social-ecological systemsSupports a structured inquiry into actors, resources, institutions and interactions; institutional interpretation must be adapted to the system studied.

Section readings [S03]

PART IX

Evidence matrices and historical intelligence

SECTION 30

Source–variable correspondence

Source-to-variable mapping must preserve the measurement model. Identify the original quantity, instrument or record, transformation, unit and uncertainty attached to each derived indicator. A repository is a delivery channel, not necessarily the observation source. If a variable combines several inputs, record their alignment rules and shared dependencies. This map enables targeted review when an input changes and prevents a derived quantity from appearing to be directly observed. [S15] Reconstruct one indicator from its original inputs and document each conversion and exclusion.

The source–variable matrix exposes the path from an observation to an analytical representation. Preserve the raw unit, time, location, method, transformation and uncertainty. Multiple derived variables may share one observation and therefore share its limitations. Record the code or reproducible procedure, authorized access and version. A score should remain inspectable through its originating evidence rather than replacing that evidence.

Source–variable design matrix
ObservationUnitSource requirementCandidate analytical questionTransformation and limit
Sampling frame coverage% target population representedDescribe unreachable and excluded units explicitlyP / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Missing observation rate% expected recordsStratify by place, instrument and operating conditionP and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Calibration agedays since valid checkRelate interval to drift evidence and operating demandsσ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Reference traceability coverage% critical measurementsRetain reference, procedure and uncertainty chainLr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Instrument range exceedancecount and durationDistinguish saturation from true plateauP / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Duplicate measurement disagreementquantity-specific unitsCompare paired observations under matched conditionsP and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Expanded measurement uncertaintyunit of measurandState coverage factor or interval interpretationσ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Timestamp offsetsecondsRecord clock source and synchronization checksLr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Geolocation uncertaintymeters or defined areaPreserve coordinate reference systemP / stateVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Unit-schema compliance% valid recordsValidate dimensions and conversion rulesP and ΔV / trajectoryVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Provenance completeness% records with required lineageCheck entities, transformations and responsibilityσ / evidence qualityVerify whether the observation supports this analytical use; preserve the raw record and transformation.
Version identification coverage% artifactsRequire immutable release identifiers for critical inputsLr / usable resourcesVerify whether the observation supports this analytical use; preserve the raw record and transformation.

Section readings [S15; C04; C05]

SECTION 31

Source–risk correspondence

A source supports a risk mechanism only through a reasoned inference. A gap in a monitoring series may indicate an equipment fault, access problem or an extreme event that disabled the network. Examine timing and independent records before choosing an explanation. Mapping the same source to many risks can be appropriate, but it does not create independent evidence. Identify observations capable of contradicting the proposed link and preserve uncertainty when the available data cannot distinguish alternatives. [S07] Write two competing explanations for a missing observation and identify a discriminating check.

A source–risk matrix should cover the threat, the observed state, the mechanism and the consequences separately. Evidence that an event occurred does not alone show why a function failed or who was affected. Use a chronology and alternative explanations to test the chain. A citation becomes useful when the specific part of the claim it supports and its limits are visible.

Source–risk evidence matrix
RiskProposed mechanismEvidence chainInvestigation requirement
Sampling biasObserved cases systematically differ from the target populationThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Instrument driftResponse changes between reference checksThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Reference mismatchCalibration reference does not represent operating conditionsThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Unit inconsistencyEquivalent quantities are encoded on incompatible scalesThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Timestamp misalignmentMeasurements from different processes are paired incorrectlyThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Geolocation errorObservation is assigned to the wrong place or assetThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Sensor saturationExtreme values exceed measurable rangeThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Missing-not-at-random dataFailure or exclusion is related to the phenomenon measuredThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Provenance lossInput origin and transformations cannot be reconstructedThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.
Version confusionAnalyses mix incompatible releasesThreat / state → mechanism → consequence.Specify the dated observation for each link and at least one alternative explanation.

Section readings [S07]

SECTION 32

Monitoring gaps and research priorities

Monitoring gaps can be spatial, temporal, conceptual or institutional. A dense sensor network can still miss an unmeasured contaminant or an excluded population. Prioritize gaps by whether they could alter the consequential decision. Additional precision in a well-observed variable may have less value than a rough observation of a neglected process. Document when the system is blind and whether an alternative route exists. The absence of recorded anomalies is uninformative when the relevant condition could not be observed. [S14] Identify the most consequential blind spot and explain why adding more of the existing sensors would not resolve it.

Prioritize a gap by its consequence for the decision. The next observation may be a targeted measurement, an independent comparison, a capability test or a correction of incompatible definitions. More data of the same kind may not resolve structural uncertainty. Specify the question, required observation, responsible custodian, time of collection and condition under which the gap is considered sufficiently addressed.

Case-analysis method
Monitoring gapDecision consequenceInvestigation
Spatial coverageExposed locations, groups or assets are not represented.Targeted observations matched to exposure.
Temporal resolutionA change occurs faster than the collection interval.A sampling interval fitted to the process and useful decision time.
Missing periodA critical part of the trajectory is absent.Independent backup and transparent missing-data handling.
Changing methodA sensor, reference or reporting practice changes.Overlap, comparison and version metadata.
Unmeasured mechanismImportant inputs or consequences are not observed.A mechanism-specific investigation and appropriate measurement.
Unverified resourcesA listed capacity has not been mobilized.Inspection and a representative deployment test.
Incompatible definitionsDatasets describe different populations, units or conditions.A documented harmonization and retained original values.
Access restrictionEvidence cannot be inspected or reused under current conditions.An authorized access and review arrangement.
Unequal representationSome users or effects disappear in aggregates.Disaggregated observation and a suitable participatory protocol.
Post-event follow-upReturn of service masks persistent effects.A monitoring period appropriate to the mechanism and affected function.

Section readings [S14; C03]

SECTION 33

Dependency matrix and propagation tests

Dependencies in knowledge systems include physical support, software, reference standards and social interpretation. Two institutions may appear independent while relying on the same satellite product, laboratory reagent or statistical package. A dependency matrix should record direction, shared cause and the practical ability to substitute. Test a plausible interruption and follow its effect on critical claims. A large number of sources can remain fragile when most derive from a single upstream observation or undocumented processing service. [S06] Map one common upstream dependency shared by several apparently independent outputs.

Analytical flexibility increases the number of possible results a researcher might report. Choices about exclusions, transformations, outcomes and stopping rules should be visible. Exploratory work is valuable when labeled; confirmatory claims require a clear relationship between the planned test and the reported result. [S08] [S09]

Computational reproducibility depends on more than releasing source code. Input versions, software dependencies, parameter files and execution order influence outputs. Preserve a runnable environment or an adequate reconstruction recipe, test it independently and document numerical tolerance where exact reproduction is inappropriate. [S05] [S06]

Replication examines findings using new data or procedures selected for the scientific question. A different outcome can reveal error, limited generalizability or meaningful contextual differences. It should prompt analysis of design and uncertainty rather than an automatic verdict on the entire field. [S14]

A dependency matrix should be directional and time-specific. Record the supplying function, receiving function, mechanism, useful delay, substitute and evidence. Test the destination when the origin becomes unavailable for different periods. Then remove a common prerequisite of the substitute. The resulting structure describes the case; it does not establish all connections in a global architecture or validate an edge weight.

Dependency matrix for case testing
DependencyMechanism and directionVerification or TFP inquiry
Water and sanitationMonitoring quality determines whether deterioration is visibleLink measurement uncertainty to decision margins
EnergyPower and environmental control sustain instruments and storageTest acquisition continuity and safe shutdown
Digital infrastructureData processing depends on software, networks and repositoriesPreserve recoverable and inspectable workflows
Public healthSurveillance definitions affect apparent incidence trendsSeparate reporting changes from real changes
GovernanceAuthorities define access, consent and use in public decisionsDocument lawful purpose and review responsibility
EducationTraining sustains calibration and interpretation skillsAssess demonstrated competence
IndustryStandards and supplier information affect measurement comparabilityInspect shared dependencies and commercial restrictions
EnvironmentField conditions change instrument response and sampling accessRecord operating context
Strategic resilienceContinuity planning relies on trustworthy shared observationsMaintain proportionate access and civilian safeguards
FinanceResource stability affects long-term observation recordsRecord capability interruption without exposing internal business planning

For each relationship, add the measured delay, duration of tolerable interruption, substitute and observation supporting the directed edge. Repeat the test for short, intermediate and extended unavailability. A generic list of linked sectors is not an estimated network, and no edge weight is validated by inclusion in this table.

Section readings [S06; C01; C02]

SECTION 34

Documented cases, near misses and recovery

Historical cases reveal different strengths and weaknesses in evidence systems. Mars Climate Orbiter concerns interfaces and unit verification; LIGO concerns convergent observation and background assessment; replication projects concern the portability and inspectability of findings. A retraction is a correction event, not valid support for the withdrawn scientific result. Compare mechanisms without claiming that one case establishes a universal failure rate. Preserve the original question, available evidence and subsequent correction history when deriving lessons. [S12] [S18] Choose two cases with different outcomes and compare how independent scrutiny changed the credibility of the claim.

Historical analysis distinguishes observed loss, protective response, near miss and recovery. Several records can concern one event without becoming independent events. Preserve what the source actually investigated and avoid adding unsupported casualty, cost or restoration-time estimates. Compare cases by mechanism and evidence quality; the fact that one response was associated with an outcome does not alone establish a general causal effect.

Documented cases and comparative learning
Case / periodDocumented mechanism or study objectLearning and transfer questionSource
Mars Climate Orbiter, 1999Inconsistent unit conventions and interface verification failures affected navigationTest units, dimensions and end-to-end interfaces rather than code components alone[S18]
Space Shuttle Columbia, 2003Evidence interpretation and organizational pathways shaped a critical safety decisionDistinguish absence of decisive measurement from evidence of absence[S19]
Psychological science replication project, 2015A coordinated study assessed replication using multiple criteriaCompare effect sizes, intervals and context rather than a binary slogan[S10]
Preclinical cancer biology replication project, 2021Replication outcomes were constrained by available methods and materialsTreat transparency and material access as part of scientific inspectability[S11]
GW150914 gravitational-wave observation, 2015; publication 2016Two detectors and background analysis supported the interpretation of a transient signalStudy independent failure modes and convergent evidence[S12]
STAP cell papers, retracted 2014The publication record was formally corrected through retraction noticesTrack correction status and prevent withdrawn claims from persisting downstream[S20]
Flint water crisis, 2014–2016Available observations did not reliably translate into timely institutional responseDistinguish measurement, interpretation, communication and authorized action[S21]

Section readings [S12; S18]

SECTION 35

Integrated review, transfer and learning portfolio

The cross-domain synthesis should connect evidence quality to the decision it supports. A scientifically careful observation may still arrive too late or at the wrong scale for operational use. Conversely, urgent action may be defensible under uncertainty when its assumptions and consequences are explicit. End the case with an inspectable claim, its supporting chain, relevant limitations and a review condition. Knowledge remains useful when new evidence can revise it without obscuring why an earlier conclusion was reached. [S04] Prepare an evidence package that another domain specialist can challenge, reproduce where appropriate and update responsibly.

The integrated portfolio should allow a reviewer to move from the question to observations, transformations, mechanism tests, scenarios and proposed monitoring. Make the strongest competing explanation and the most consequential unresolved gap visible. Transfer requires checking mechanisms, exposure and recovery resources in the new setting. Formation, optional credentialing, submission permission and licensing remain distinct processes; no case or data contribution enters the SIL without an associated fellow and applicable review.

Case-analysis method
Review stepEvidence requirement
SpecifyState the function, claim, exposed group, location and period.
TraceIdentify original observations, shared origins and transformations.
HarmonizeCompare units, reference systems, sampling and versions.
ChallengeTest alternative explanations and seek counter-evidence.
Evaluate uncertaintyIdentify which assumptions change the conclusion or recommended action.
Test transferCheck equivalence of mechanisms, exposure and recovery resources in another setting.
Record and updatePreserve reasons, limits, responsibility and the next review condition.

Section readings [S04; C04; C05]

RESEARCH AND READING PATHS

Annotated scientific and technical bibliography

The section citations connect domain mechanisms, methods and cases to the underlying sources. Read each reference for its question, design, findings and limits. Technical guides, case investigations and scholarly articles do not provide interchangeable forms of evidence.

  1. S01 · Scholarly principles article

    Wilkinson, M. D. et al. (2016). The FAIR Guiding Principles for scientific data management and stewardship. Scientific Data 3, 160018.

    Original publication / source ↗

    Findability, accessibility, interoperability and reuse; FAIR does not imply unrestricted access.

  2. S02 · Scholarly perspective

    Munafò, M. R. et al. (2017). A manifesto for reproducible science. Nature Human Behaviour 1, 0021.

    Original publication / source ↗

    Research design, analysis, reporting and incentives across the evidence lifecycle.

  3. S03 · Scholarly methodological essay

    Ioannidis, J. P. A. (2005). Why Most Published Research Findings Are False. PLOS Medicine 2, e124.

    Original publication / source ↗

    A model of how bias, power and prior odds affect the credibility of findings; not an empirical failure percentage for all science.

  4. S04 · Scholarly policy article

    Nosek, B. A. et al. (2015). Promoting an open research culture. Science 348, 1422–1425.

    Original publication / source ↗

    Transparency and Openness Promotion guidelines for data, methods and reporting.

  5. S05 · Scholarly perspective

    Peng, R. D. (2011). Reproducible Research in Computational Science. Science 334, 1226–1227.

    Original publication / source ↗

    Computational reproducibility as a practicable minimum for examining claims.

  6. S06 · Scholarly methods guidance

    Sandve, G. K.; Nekrutenko, A.; Taylor, J.; Hovig, E. (2013). Ten Simple Rules for Reproducible Computational Research. PLOS Computational Biology 9, e1003285.

    Original publication / source ↗

    Practical preservation of code, inputs, intermediate results and computational context.

  7. S07 · Scholarly statistical statement

    Wasserstein, R. L.; Lazar, N. A. (2016). The ASA Statement on p-Values: Context, Process, and Purpose. The American Statistician 70, 129–133.

    Original publication / source ↗

    Interpret inferential results with design, uncertainty and substantive context.

  8. S08 · Scholarly research article

    Simmons, J. P.; Nelson, L. D.; Simonsohn, U. (2011). False-Positive Psychology: Undisclosed Flexibility in Data Collection and Analysis Allows Presenting Anything as Significant. Psychological Science 22, 1359–1366.

    Original publication / source ↗

    Analytical flexibility and selective reporting as mechanisms of false-positive inflation.

  9. S09 · Scholarly perspective

    Nosek, B. A. et al. (2018). The preregistration revolution. PNAS 115, 2600–2606.

    Original publication / source ↗

    Distinguishing confirmatory tests from exploratory analyses.

  10. S10 · Scholarly research article

    Open Science Collaboration (2015). Estimating the reproducibility of psychological science. Science 349, aac4716.

    Original publication / source ↗

    A large replication study; interpret its selection and success criteria before generalizing.

  11. S11 · Scholarly research article

    Errington, T. M. et al. (2021). Investigating the replicability of preclinical cancer biology. eLife 10, e71601.

    Original publication / source ↗

    Meta-analysis of selected replication experiments; detailed barriers to methods and materials are documented in the companion article, DOI 10.7554/eLife.67995.

  12. S12 · Scholarly research article

    Abbott, B. P. et al. (2016). Observation of Gravitational Waves from a Binary Black Hole Merger. Physical Review Letters 116, 061102.

    Original publication / source ↗

    Instrumental consistency, background assessment and independent detector evidence.

  13. S13 · Scholarly perspective

    Stodden, V. et al. (2016). Enhancing reproducibility for computational methods. Science 354, 1240–1241.

    Original publication / source ↗

    Publishing computational artifacts and practices for independently examining results.

  14. S14 · Consensus study

    National Academies of Sciences, Engineering, and Medicine (2019). Reproducibility and Replicability in Science. National Academies Press.

    Original publication / source ↗

    Terminology and recommendations across disciplines; context matters for replication.

  15. S15 · Technical recommendation

    W3C; Moreau, L.; Missier, P., editors (2013). PROV-DM: The PROV Data Model. W3C Recommendation, 30 April 2013.

    Original publication / source ↗

    Entities, activities and agents for interoperable provenance representation.

  16. S16 · Metrology guidance

    JCGM (2008). Evaluation of measurement data — Supplement 1 to the GUM — Propagation of distributions using a Monte Carlo method. JCGM 101:2008.

    Original publication / source ↗

    Propagation of input uncertainty through a specified measurement model.

  17. S17 · Official recommendation

    UNESCO (2021). Recommendation on Open Science. UNESCO General Conference.

    Original publication / source ↗

    Equitable access, responsible openness and knowledge-system participation.

  18. S18 · Official investigation

    NASA Mars Climate Orbiter Mishap Investigation Board (1999). Mars Climate Orbiter Mishap Investigation Board — Phase I Report. NASA Lessons Learned 641.

    Original publication / source ↗

    Interface and verification failures involving inconsistent units.

  19. S19 · Official investigation

    Columbia Accident Investigation Board (2003). Columbia Accident Investigation Board Report, Volume I. NASA Technical Reports Server.

    Original publication / source ↗

    Evidence interpretation, organizational conditions and management decision pathways.

  20. S20 · Retraction notice

    Obokata, H. et al. (2014). Retraction Note: Stimulus-triggered fate conversion of somatic cells into pluripotency. Nature 511, 112.

    Original publication / source ↗

    A retraction record, used as evidence about correction of the literature, not evidence for the withdrawn biological claim.

  21. S21 · Official investigation

    U.S. EPA Office of Inspector General (2018). Management Weaknesses Delayed Response to Flint Water Crisis. Report 18-P-0221.

    Original publication / source ↗

    How evidence availability, interpretation and institutional response can diverge.

  22. C01 · peer-reviewed

    Rinaldi, S. M.; Peerenboom, J. P.; Kelly, T. K. (2001). Identifying, understanding, and analyzing critical infrastructure interdependencies. IEEE Control Systems Magazine, 21(6), 11–25.

    Original publication / source ↗

    Distinguishes physical, cyber, geographic and logical dependencies; use the categories to formulate a case-specific dependency hypothesis.

  23. C02 · peer-reviewed

    Pescaroli, G.; Alexander, D. (2018). Understanding Compound, Interconnected, Interacting, and Cascading Risks: A Holistic Framework. Risk Analysis, 38, 2245–2257.

    Original publication / source ↗

    Provides distinctions for examining interacting risks and propagation; a plausible pathway still needs evidence in the case.

  24. C03 · peer-reviewed

    Saltelli, A. et al. (2010). Variance based sensitivity analysis of model output. Design and estimator for the total sensitivity index. Computer Physics Communications, 181, 259–270.

    Original publication / source ↗

    Methodological reference for sensitivity analysis; assumptions about independence and the model structure must accompany the chosen estimator.

  25. C06 · technical guide

    JCGM (2008). Evaluation of measurement data — Supplement 1 to the GUM — Propagation of distributions using a Monte Carlo method. JCGM 101:2008.

    Original publication / source ↗

    A methodological basis for propagating input distributions through a specified model, rather than treating simulated frequency as an observed event probability.

  26. C07 · peer-reviewed

    Ostrom, E. (2009). A general framework for analyzing sustainability of social-ecological systems. Science, 325, 419–422.

    Original publication / source ↗

    Supports a structured inquiry into actors, resources, institutions and interactions; institutional interpretation must be adapted to the system studied.

External sources are cited for research and learning. Their inclusion implies no partnership, certification or institutional endorsement.