Water & Sanitation

SECTION 01

Domain overview and system boundary

A water case connects a source to delivered service and to the environment receiving withdrawals and discharges. Define the source, abstraction, treatment, storage, distribution, sanitation and drainage functions separately. A city surrounded by water may still lose potable supply through energy or treatment failure. Population coverage, continuous delivery and microbiological safety therefore require different observations. Include users who receive service through informal or alternative arrangements rather than treating the network connection as the complete outcome. [R01; R24; R47]

Water and sanitation connects source ecosystems, abstraction, treatment, storage, distribution, wastewater and stormwater to the users and environments that depend on them. Define the function whose loss is being anticipated before selecting indicators.

The scope can be a utility, a reservoir, an aquifer, a basin, an urban drainage corridor or an interconnected service area. Source availability, quality, delivered service and recovery are linked but distinct analytical objects.

A learning case can be real or simulated. The library supplies mechanisms, evidence questions and research methods; local thresholds and operational responsibilities require case-specific evidence and the applicable review.

A domain label is not yet a case boundary. Separate the condition of a resource or asset from the function delivered to users. A nominally available installation may fail to deliver usable service, and a system-wide average can conceal localized loss. Preserve the original physical or institutional unit alongside any normalized representation. The boundary should make it possible to ask what enters, what changes, what leaves and who experiences the consequences.

Section readings [R01; R24; R47]

SECTION 02

Historical development and changing conditions

Historical development joins physical assets to social feedbacks. A protective structure can change settlement incentives, exposure and memory of past flooding. Source development can also commit a city to long-lived operating and maintenance dependencies. Reconstruct changes in demand, land cover, abstraction, operating rules and measurement practice before comparing event frequencies. Nonstationarity is a reason to examine the mechanism and test assumptions, not to discard historical evidence. The useful question is which relationships have changed and which observations still constrain them. [R02; R10; R25]

A historical baseline must be examined for changes in exposure, technology, operating practice and observation. Compare episodes using their mechanisms and evidence, rather than treating all events with a similar label as exchangeable observations. A reconstruction should show what was known at each time; later explanations should not be presented as information available to the original decision maker. Recovery and long-term change may require a separate timeline from the initiating incident.

Section readings [R02; R10; R25]

SECTION 03

Actors, institutions and decision responsibilities

Water institutions often divide responsibility for the resource, the service, public health, environmental protection and emergency coordination. Map each function and its actual decision interface. A laboratory result can be technically clear while the route from notification to protective action remains ambiguous. Record how operators, authorities, researchers and affected communities provide information and challenge an interpretation. Examine capacity and accountability together: a named responsibility does not demonstrate that the actor has the means or timely information to perform it. [R11; R30; R31]

Map actors by the function they perform and the responsibility they actually hold in the case. The same organization may observe a condition, supply a service and participate in a decision; those roles should remain distinguishable. Examine information access, resources, expertise, affected users and accountability together. A list of institution names is not an operating governance arrangement. Record the evidence for each responsibility and the process for resolving a disagreement or correcting a record.

Section readings [R11; R30; R31; C07]

SECTION 04

Primary systemic risks

Water risk should be organized by how the function can be lost. A drought changes availability; a damaged intake changes usable abstraction; contamination changes treatability or safety; an outage changes delivery. Several mechanisms may coexist without being equivalent. Separate primary threats from chronic exposure and from amplifiers such as dependence on one source. The inventory below is a starting point for mechanism-based investigation across quantity, quality, physical integrity, operation and recovery. It does not imply that each risk is present in every water system. [R01; R23; R24; R25]

The inventory is a structured set of research hypotheses. It separates a threatening condition from the mechanism of loss and from its consequences. The proposed TFP association indicates which question to investigate; it is not evidence that a particular indicator predicts the event. Risk importance depends on the defined function, exposure, duration and usable alternatives. Do not infer frequency, severity or priority from the position of a row in the table.

Section readings [R01; R23; R24; R25]

SECTION 05

Amplification mechanisms and secondary risks

Similar rainfall or contamination can produce different outcomes where source concentration, maintenance, workforce, access or institutional coordination differ. Investigate the time at which an alternative ceases to be useful. A reserve pump shares the original vulnerability if both use the same flooded power supply; an alternative laboratory may not help if samples cannot reach it. Frame each amplifier as a counterfactual and connect it to an observation of capacity or delay. This separates plausible explanation from simply adding more risk labels. [R06; R07; R24]

An amplifier changes the consequences of an initiating condition without necessarily causing the initiating event. Useful counterfactuals hold the threat constant and vary concentration, maintenance, access, information or response capacity. Document the mechanism and the observation that would distinguish it from an alternative explanation. Several amplifiers may share the same upstream cause; counting each one as independent evidence exaggerates confidence.

Section readings [R06; R07; R24]

SECTION 06

Emerging risks and research horizons

An emerging-water agenda must distinguish a new substance or technology from a changing exposure to a familiar process. PFAS monitoring depends on compound-specific methods; potable reuse depends on verified barriers and governance; connected controls add information dependencies. Microplastics require careful separation of detection, exposure and demonstrated health consequences. Changes in glacier and snow contributions concern both seasonal delivery and long-term source conditions. The research horizon should reflect the time needed to investigate or adapt, rather than a date at which harm is assumed to occur. [R14; R26; R27; R29]

A research horizon is tied to the time needed to investigate, prepare or change a system. It is not a date at which an emerging threat is predicted to occur. Record the reason for concern, the strength of evidence, the exposed function and the observation that would change the priority. Distinguish a newly observed mechanism from a known mechanism whose exposure, scale or institutional context is changing.

Section readings [R14; R26; R27; R29]

SECTION 07

Cascades and cross-domain dependencies

Water and energy illustrate a directed dependency that can operate in both directions through different mechanisms. Electricity supports pumping and treatment, while some generation depends on water availability. An extreme event can also strike both systems directly, producing common-cause failure rather than a cascade. Trace the chronology before choosing a model. Hospital water loss, irrigation restrictions and disrupted laboratory access connect the initial loss to other functions on different time scales. Each arrow needs a process, a useful delay and case evidence. [R06; R07; R12]

Availability can deteriorate through persistent imbalance between replenishment and withdrawal, or become unusable because the abstraction geometry and water quality change. [R13; R19]

Treatment depends on raw-water conditions, controls, inputs, energy and qualified operators. A source problem can become a service problem through a barrier that is not designed for that condition. [R23; R24]

Distribution depends on integrity and pressure, but restoration of hydraulics alone cannot demonstrate safety after a contamination mechanism. [R15; R24]

For each directed dependency, specify the function supplied, the destination, the propagation time and the substitute. Shared-cause failure, interacting threats and cascading propagation are different structures. A directed arrow becomes an explanatory claim only when the timing and mechanism are supported. Test apparent redundancy by removing the common access route, platform, energy supply or specialist on which both alternatives depend.

Section readings [R06; R07; R12; C01; C02]

SECTION 08

Readiness and response protocols

Readiness begins before a public warning is needed. Identify priority users, usable source alternatives, tested treatment controls, distribution routes and verification capacity. The appropriate sanitary message depends on the hazard: boiling is not a universal remedy for chemical contamination. Separate the observation triggering investigation from the condition requiring a competent protective decision. A water safety plan can organize preventive controls and review across the supply chain, while an exercise tests how those controls perform when an assumed prerequisite is missing. [R23; R24; R37]

Preparedness connects a signal to a responsible actor, an available measure and a condition of completion. This learning architecture does not grant emergency command or operational authority to the c-ECO Institute or a course participant. A useful protocol distinguishes checking the signal, protecting exposed functions and verifying recovery. A paper plan contributes to usable capacity only when its relevant assumptions have been tested.

Section readings [R23; R24; R37]

SECTION 09

Scientific review and decision records

A review of a water anomaly should retain the original measurement, sampling location, time, method and relevant operating state. Competing interpretations can concern instrument failure, local network conditions, a treatment problem or a changed source. Match expertise to the mechanism and record unresolved disagreement without treating consensus as another observation. The Flint investigation is useful for separating recognition, responsibility and action. The purpose is to make the route from evidence to decision inspectable, with an identified owner and condition for reassessment. [R24; R30; R37]

A review record separates observation, inference and decision. Record the data version, methods, alternative explanations, relevant expertise, conflicts of interest and unresolved disagreement. Review should be matched to the question and its consequences. Scientific analysis can inform a competent actor without replacing that actor’s mandate. No membership size, quorum or institutional power is established by this teaching library.

Section readings [R24; R30; R37; C05; C07]

SECTION 10

Communication and observation continuity

A loss of telemetry can precede or conceal a loss of water service. Test communication continuity together with power and physical access. A private radio path, local operating record or alternative connectivity contributes only if its reach, autonomy and responsible personnel are demonstrated. Preserve the last reliable state and explain how uncertainty grows while observation is interrupted. When connectivity returns, reconcile time and authorship so that later analysis can reconstruct the sequence rather than treating all reports as simultaneous. [R07; R22; R29]

Continuity of observation should be tested alongside continuity of the function itself. Losing data may increase uncertainty before the physical process visibly changes. Redundancy must be demonstrated against common causes, including power, location, communications, credentials and specialist availability. During disconnected operation, preserve the last reliable observation, record the uncertainty that follows and reconcile timestamps and authorship when information paths return.

Section readings [R07; R22; R29; C01]

SECTION 11

International instruments and technical references

The international reference set has several distinct functions. Watercourse conventions concern cooperation and applicable obligations; WHO guidance concerns health-based risk management; Sendai links risk knowledge and preparation; OECD principles address governance conditions. A reference should be connected to a specific question in the case, not used as an institutional badge. Examine whether it supplies a method, a policy objective, an investigation record or a potentially applicable legal instrument. The TFP mapping is an analytical interpretation and is separate from the instrument itself. [R23; R30; R32; R33; R34]

Classify each instrument before using it. A scholarly article supports an inference, a technical guide describes a method, a standard has a defined scope, and a legal instrument may create obligations only where applicable. The case record should identify the specific provision or method, its version and the activity to which it relates. A source’s institutional reputation cannot by itself establish applicability or demonstrate compliance.

Section readings [R23; R30; R32; R33; R34]

SECTION 12

Jurisdiction-specific responsibilities and requirements

A water case can involve resource allocation, service operation, sanitary quality, environmental discharge, asset safety and data responsibilities simultaneously. A right to abstract water does not demonstrate that delivered water meets its relevant requirement. A local compliance record does not characterize the continuity of a whole territory. Use official instruments and identify the actor, activity and evidence concerned. Brazil’s water-resource policy and the EU basin-planning example can support comparison, but neither supplies one universal rule for every application. [R35; R36]

The register should cover the actual activity and location, including interfaces between organizations and jurisdictions. Separate responsibility for observing, supervising, deciding and executing. Retain the official source, version consulted and evidence needed to assess a condition. Conflicting definitions and overlapping mandates are analytical findings to investigate. A general library cannot create a universal legal threshold for all settings.

Section readings [R35; R36]

SECTION 13

Causation, accountability and cascading consequences

An observed water failure may generate direct damage, dependent service loss and environmental effects that persist after service resumes. Technical attribution must reconstruct the mechanism and chronology; legal responsibility requires its own applicable duties and determinations. Read investigations according to their objects. The EPA Flint report concerns management and response weaknesses, while the IBAMA Fundão assessment is an early account of environmental impacts. Neither should be expanded silently into a complete assessment of every later consequence. [R37; R44]

A technical chain of consequences is not automatically a legal allocation of liability. Separate evidence of causation from the duties, control and decisions relevant to each actor. A case may contain direct damage, dependent service interruption and persistent environmental or social consequences on different timescales. The analysis should show which links are documented and which need further investigation, without presuming an institutional restoration fund, mandatory levy or insurance mechanism.

Section readings [R37; R44]

SECTION 14

Cross-boundary coordination

Basin processes cross administrative and national borders through flow, sediment, water quality and reservoir operation. A downstream actor needs information early enough to interpret and act; the useful notification time depends on propagation, exposure and mobilization. Compatible definitions and reference systems are prerequisites for joint monitoring. They do not themselves settle disagreements over allocation or acceptable effects. In an international Amazonian setting, language, observation networks and institutional arrangements must be part of the transfer analysis alongside hydrological similarity. [R12; R32; R33]

Processes and dependencies often cross administrative, organizational or national boundaries. Coordination requires compatible definitions, useful timing, authorized exchange and an identifiable decision interface. Sharing data does not by itself resolve disagreements over objectives, risk allocation or resources. An exercise should expose which decision can be coordinated under existing arrangements and which would require an additional agreement or competent determination.

Section readings [R12; R32; R33; C07]

SECTION 15

Position (P): candidate observations

Position must follow the actual water function. A reservoir’s physical volume differs from the volume that can be abstracted and treated; an available network differs from continuous service at a household. For each candidate indicator, identify direction of deterioration, reference state, relevant boundary and scale. Sanitary and operational limits arise through different processes and should remain distinguishable. The indicator catalogue preserves physical units and asks how each observation supports the case, rather than assigning one generic threshold across water systems. [R05; R23; R24]

P represents position relative to a specified loss of function. The raw observation, reference condition, direction of deterioration and boundary of failure must remain explicit. A candidate monotone transformation can help compare states within a defined case, but it does not establish the threshold or validate an aggregate index. Capacity, delivered performance and exposure may require different indicators even when they concern the same installation.

A didactic monotone transformation for an indicator that worsens as it rises is p = clip[(x − x_ref)/(x_failure − x_ref), 0, 1]. Reverse the direction for a reserve that deteriorates as it falls. The expression makes the reference points visible; it does not choose those points, prove comparability or establish an operational aggregate. Retain x in its original unit and justify the function separately for each case.

Section readings [R05; R23; R24]

SECTION 16

Velocity (ΔV): rates and trajectory

Rate information changes the time available for interpretation and protection. Reservoir drawdown, river rise, salinity advance and reagent depletion operate on different clocks and require different observation intervals. A rapid river-level increase is not the same quantity as the speed of a flood wave. A groundwater trend may reflect seasonal abstraction as well as persistent imbalance. Compare windows, methods and operating changes before inferring acceleration. A conditional time-to-boundary calculation can be useful in an exercise without establishing a forecast of when service will fail. [R10; R12; R19]

ΔV describes direction and rate of change over a declared interval. Two systems at the same apparent position may have different reaction times because their trajectories differ. Compare rates using consistent units, observation windows and reference systems. Check seasonality, missing periods, reporting changes and process acceleration before extrapolating. A time-to-boundary calculation is conditional on its trajectory assumption; it is not a general forecast.

Section readings [R10; R12; R19]

SECTION 17

Uncertainty (σ): evidence and model limits

Water uncertainty includes sample coverage, laboratory method, hydrological parameters, model structure, future demand and unverified recovery arrangements. These uncertainties cannot be represented credibly by assigning one confidence percentage to an institution. Identify what each interval describes. A rainfall ensemble, a measurement uncertainty and a set of demand scenarios concern different objects. Ask which unresolved assumption could change a sanitary message, source decision or recovery sequence. The investigation should then target that uncertainty rather than indiscriminately increasing the volume of available data. [R08; R09; R21]

Uncertainty should be recorded by object and source. Measurement uncertainty, sampling limitations, parameter uncertainty, model structure, future scenarios and institutional ambiguity cannot be replaced by one unsupported percentage. More simulation samples can reduce numerical sampling error without resolving a missing mechanism. Identify which uncertainty changes the decision and which further observation, comparison or test could reduce it.

Section readings [R08; R09; R21; C06]

SECTION 18

Reversibility liquidity (Lr): usable recovery resources

Water reversibility is constrained by useful time and the object being recovered. A tanker can protect some users while a network is repaired, but it does not replace the full service or restore a depleted aquifer. Equipment without access, fuel, compatible inputs or qualified personnel does not provide usable capacity. Distinguish recovery of delivered water from groundwater recovery, ecosystem change and public confidence. The performance concepts in Hashimoto and the socioecological distinctions in Walker support these questions without being synonyms for the c-ECO construct Lr. [R05; R13; R18]

Lr examines resources that can preserve, contain or recover the defined function within the relevant time. A resource listed in an inventory is different from a resource that is accessible, compatible, staffed and mobilizable. Record capacity, useful arrival time, duration, dependencies and evidence of testing. Avoid averaging away an essential bottleneck. Recovery of a service does not necessarily restore ecological condition, accumulated losses or public trust.

Section readings [R05; R13; R18]

SECTION 19

Stress scenarios and comparative strategies

Stress-test source quantity, quality and operational prerequisites separately before combining them. A prolonged drought scenario can remove a source alternative; a flood scenario can remove access and energy together; a control-system incident can undermine trustworthy observation. Specify the prior operating state and the point at which a strategy stops preserving the defined function. Compare an interim protective measure with a structural change and record what each can actually deliver. The exercise should identify tests and evidence needs rather than produce unsupported event probabilities. [R04; R06; R19; R25]

A stress scenario states the initiating condition, prior state, time sequence, exposed function, shared dependencies and feasible responses. Its purpose is to reveal when a strategy loses usefulness and why. Compare alternatives across several conditions, including absent substitutes and simultaneous demand. Scenarios should lead to observations, tests and resource questions; assigning a precise event probability requires a separate justified model and evidence.

Section readings [R04; R06; R19; R25]

SECTION 20

Reproducible simulation and sensitivity analysis

A water model is useful when its purpose and test are clear. Calibration against observed behavior is different from testing performance under conditions outside that fit. Monte Carlo propagates chosen input assumptions through a defined relationship; additional draws improve numerical resolution without repairing a missing mechanism. Sensitivity analysis helps identify where the result depends on uncertainty or weighting. The synthetic laboratory demonstrates those operations in a reproducible form. Replacing its assumptions with water evidence would require a separately designed and reviewed model for the case. [R08; R09; R19; R21]

Simulation is an explicit transformation of assumptions. Input distributions, dependencies, parameter estimation, output definition and testing must be documented. Numerical convergence does not establish model validity. Examine sensitivity to the function used, the weights selected, dependence assumptions and conditions outside the fitting data. The reproducible laboratory below is a synthetic exercise, separated from SPS and from any claim about real-event frequency.

The factor loadings define association on the latent scale. Correlations after the nonlinear transform should be estimated from the simulated samples. Q is a teaching index and is not SPS. Its exceedance fraction concerns the generated sample under these assumptions; it is not the probability of a real event or a forecast over a stated number of years. A temporal forecast would require a separately specified process and observation model.

from random import Random
from math import log, exp, sqrt
from statistics import mean
rng = Random(4027218047)
m = [.72, .62, .40, .38]
s = [.40, .45, .30, .40]
a = [.65, .55, .35, -.45]
q = []
for _ in range(10000):
    g = rng.gauss(0, 1)
    x = []
    for mj, sj, aj in zip(m, s, a):
        z = aj*g + sqrt(1-aj*aj)*rng.gauss(0, 1)
        x.append(1/(1+exp(-(log(mj/(1-mj))+sj*z))))
    p, v, u, lr = x
    q.append(.35*p+.25*v+.15*u+.25*(1-lr))
q.sort()
print(mean(q), q[499], (q[4999]+q[5000])/2, q[9499])
print(sum(x >= .70 for x in q)/len(q))

Sensitivity exercise: remove the common factor, vary one dispersion, change the weight of recovery resources, and compare the ranking of the selected strategies. Then state which domain observations would be needed to replace each illustrative assumption. Use a suitable estimator when inputs are dependent; the common-factor experiment is a dependence check, not a claim that a particular Sobol estimator applies unchanged.

Section readings [R08; R09; R19; R21; C03; C06]

SECTION 21

Restoration and performance verification

Restoring potable service is a sequence of prerequisites and verification. Secure a safe source, establish the needed energy and treatment capability, address network integrity, then verify the delivered outcome under the relevant sanitary procedure. Chemical contamination can require a different pathway from a microbial incident. Protect critical users while that path is addressed. A restart is not equivalent to clearance, and clearance in one zone need not demonstrate a whole network’s condition. Persistent environmental and social effects may require continued observation after technical service returns. [R15; R23; R24; R40]

Restoration follows prerequisites and verification conditions rather than a universal fixed clock. Tasks may proceed in parallel only where they do not compete for the same people, access, equipment or information. Protect essential functions while the critical path is addressed. Define what is measured before returning service, who can make that determination and which effects require continued observation after a technical restart.

Section readings [R15; R23; R24; R40]

SECTION 22

Recovery provider capability

A water-recovery provider should be assessed against the process and conditions of the task. Demonstrated capacity for one raw water does not establish performance for another; ownership of a mobile unit does not show that operators and supplies can reach the affected area. Separate engineering, treatment, distribution, laboratory and logistics tasks. Define how competence, safety, compatibility and availability are verified. The evidence should demonstrate delivered performance, with a scope and limitations suitable for the case rather than a generic provider label. [R23; R24; R39]

Capability assessment must be specific to the task, place and stress conditions. A training certificate cannot demonstrate that a team can mobilize and deliver the required function. Inspect competence, safety, compatibility, relevant experience and actual availability. Define the verification method and limits of recognition. This teaching library does not establish a c-ECO provider certification scheme or substitute for professional or regulatory requirements.

Section readings [R23; R24; R39]

SECTION 23

Recovery sequencing and time constraints

Water recovery often depends on a critical chain through energy, process control, distribution and verification. Interim distribution can proceed while that chain is addressed, but apparent parallel tasks may compete for the same vehicle, access corridor or specialist. Separate mobilization, execution, sampling, analysis and decision times. Compare target recovery time with the capability demonstrated under stress. Extend the exercise by removing a laboratory or transport route and examine which prerequisite now controls useful service restoration for the most exposed users. [R05; R19; R24]

A recovery time objective is a decision criterion to test against real capacity. Distinguish mobilization, work, verification and decision time, and identify dependencies between tasks. Shared resources can prevent apparently parallel activities from proceeding together. Repeating the sequence with unavailable access, a specialist or a verification service reveals where a target relies on an untested assumption.

Section readings [R05; R19; R24]

SECTION 24

Equipment, inputs and replenishment

Water inventory should follow the protected function. Reagents require usable stock, correct storage and realistic stress consumption; pumps and electrical equipment require compatibility and installation; analytical kits require valid methods and a functioning sampling pathway. Replenishment includes transport and safe access rather than supplier availability alone. A nominal reserve period has little meaning without a demand assumption and a test of the whole delivery chain. Record inspection date and common dependencies so that a regional event does not turn several listed substitutes into one unavailable resource. [R07; R19; R24]

Inventory analysis connects each item to a protected function. Use condition, compatibility, accessibility and consumption under stress rather than a nominal stock count alone. Replenishment time must include procurement, transport, installation and verification where relevant. A substitute that depends on the same supplier or platform may disappear in the same event. Keep the last inspection date and the evidence supporting usable availability.

Section readings [R07; R19; R24]

SECTION 25

Mutual aid and cooperation arrangements

Cooperation can connect operators, laboratories, engineering specialists, emergency distribution and basin institutions. Its contribution depends on documented scope, activation and practical availability, not merely the name of a network. Specify who asks for which resource, the useful arrival time, the responsibility for operating it and the evidence of delivery. A regional flood may increase demand across all participants simultaneously. A university’s research contribution has a different object from a standing operational commitment and should be described accordingly. [R24; R30; R32; R34]

Cooperation contributes to recovery when its scope, activation, resources and practical availability are demonstrated. Record who requests support, who authorizes it, the useful arrival time, responsibility for the work and conditions of return. Consider simultaneous demand across participants. A reference to an organization or network in the literature does not imply that c-ECO or a case partner has joined it or secured a deployment commitment.

Section readings [R24; R30; R32; R34]

SECTION 26

Source classification and evidence quality

Classify the information product rather than assigning automatic authority to the publisher. An official coverage estimate, a laboratory result, an operator’s pressure trace and a peer-reviewed mechanism study serve different questions. A research paper and a dashboard may share one underlying series. Preserve that provenance so apparent agreement is not counted as independent replication. FAIR and PROV help organize access, definitions and transformations, while the study design and measurement method still determine what can be inferred from the product. [R20; R22; R47]

Source classes organize origin and function; they do not form an automatic hierarchy of evidential strength. An official statistic, an operational record and a causal study answer different questions. Classify the product, not only the organization. Detect shared data origins so that a dashboard, article and secondary report based on one observation are not counted as three independent confirmations.

Section readings [R20; R22; R47; C04; C05]

SECTION 27

Institutional, regulatory and technical sources

Water institutional products include health guidance, population service estimates, hydrological observations, disaster-risk syntheses and governance frameworks. Identify the actual document or dataset and its edition. A national coverage statistic cannot show whether a particular hospital received continuous supply during an outage. A global screening indicator can orient further investigation without resolving a utility-scale diagnosis. Use these products to define a question, contextualize a territory or justify a method, and obtain the operational evidence required for the local claim. [R23; R25; R27; R28; R47]

Institutional sources should be selected by product, method and scale. Record whether the source defines a requirement, observes a condition, reports an investigation or synthesizes a literature. A current portal may contain several editions and methods; cite the actual version used. Public access does not establish accuracy for a different question, and a restricted source can still be used only under its authorized conditions.

Section readings [R23; R25; R27; R28; R47]

SECTION 28

Operational observations and monitoring products

Operational water data describe a process but can omit the delivered experience. Pressure, flow, treatment logs, samples, repairs and stock records need consistent definitions and time references. User reports can reveal local loss hidden by an aggregate operating dashboard. Earth observation adds valuable spatial information, but reservoir area is not automatically usable storage and gravimetry does not measure the level of each well. Record each transformation between product and analytical variable, retaining independent checks at the scale of the decision. [R17; R20; R22]

Operational observations should show what the system delivered, not merely that an asset was declared available. Inspect the acquisition process, sensor or reporting changes, gaps, coverage and quality controls. Compare records with independent observations where feasible. Aggregated performance, a status dashboard and user experience can diverge because they concern different units, locations, periods or definitions of availability.

Section readings [R17; R20; R22]

SECTION 29

Academic research and independent evidence

The reading set connects water-security assessment, sociohydrology, ecological flow, groundwater observation, quality management and model testing. Compare what each design can establish: a global comparison, a conceptual feedback model, a case investigation and an operational experiment do not have the same inferential reach. Include critical interpretations and conditions of transfer rather than using a published result as a universal parameter. A reading note should identify the question, method, result, limits and the specific change it makes to the case analysis. [R01; R02; R08; R12; R13; R19]

Read the research design before transferring a conclusion. Identify the question, unit of analysis, method, comparison, result, limitations and conditions that matter for the case. Foundational concepts, empirical studies, critical replications and technical syntheses serve different functions. A literature-supported mechanism may justify a hypothesis without validating a local threshold, forecasting performance or a complete TFP application.

Section readings [R01; R02; R08; R12; R13; R19]

SECTION 30

Source–variable correspondence

The water source–variable map must retain quantity, quality and service distinctions. A gauge, a laboratory sample, a process record and a tested inventory each observe a different object. Derived position and velocity may share one record and therefore share its gaps. Recovery capacity requires evidence of access and mobilization beyond a list of assets. Preserve raw units, reference systems, transformations and data versions so that the interpretation can be inspected and repeated. A normalized score should make these choices visible rather than replace the originating evidence. [R20; R21; R22]

The source–variable matrix exposes the path from an observation to an analytical representation. Preserve the raw unit, time, location, method, transformation and uncertainty. Multiple derived variables may share one observation and therefore share its limitations. Record the code or reproducible procedure, authorized access and version. A score should remain inspectable through its originating evidence rather than replacing that evidence.

Section readings [R20; R21; R22; C04; C05]

SECTION 31

Source–risk correspondence

A flood extent, a pump outage and a water-quality advisory can be simultaneous without proving a single causal chain. For each risk, distinguish observations of the threat, the function’s state, the proposed failure mechanism and the consequence for users. A dated process record helps test order; a laboratory or engineering investigation may support the mechanism; service and exposure records concern consequences. Identify which link is still hypothetical and what observation could distinguish it from a competing explanation. This makes the risk inventory an investigable set of claims. [R06; R07; R24; R37]

A source–risk matrix should cover the threat, the observed state, the mechanism and the consequences separately. Evidence that an event occurred does not alone show why a function failed or who was affected. Use a chronology and alternative explanations to test the chain. A citation becomes useful when the specific part of the claim it supports and its limits are visible.

Section readings [R06; R07; R24; R37]

SECTION 32

Monitoring gaps and research priorities

A monitoring gap matters when it can change an interpretation or protective decision. Missing peak river levels, insufficient sampling coverage, incomparable analytical limits and untested alternative supply are different deficiencies. A denser rainfall network cannot solve uncertainty about a distribution contaminant, while another sample of the same type may not resolve an unrepresented exposure group. State the affected claim, the needed observation and the useful time for obtaining it. Then compare the value of that investigation with the consequence of leaving the gap unresolved. [R20; R21; R24; R47]

Prioritize a gap by its consequence for the decision. The next observation may be a targeted measurement, an independent comparison, a capability test or a correction of incompatible definitions. More data of the same kind may not resolve structural uncertainty. Specify the question, required observation, responsible custodian, time of collection and condition under which the gap is considered sufficiently addressed.

Section readings [R20; R21; R24; R47; C03]

SECTION 33

Dependency matrix and propagation tests

Dependency analysis should test a function under loss of its prerequisites for different durations. Water distribution can depend on electricity, while the backup depends on fuel, road access and trained personnel. An alternative source can share the same treatment or transmission bottleneck. Record the directed mechanism and usable delay rather than merely listing linked sectors. Examine a loop between service loss and response capacity, then identify which change breaks propagation. Ecological dependence also requires attention to the flow regime and receiving environment rather than only engineered assets. [R06; R07; R12]

A basin process can affect multiple services across boundaries through flow, sediment, water quality and operating decisions. [R12; R32; R33]

Social feedback changes exposure and capacity: protection can affect settlement, and prior experience can alter behavior and institutional attention. [R02]

Recovery is constrained by resources and the object of restoration; service return, aquifer response and ecological recovery follow different processes. [R05; R13; R18]

A dependency matrix should be directional and time-specific. Record the supplying function, receiving function, mechanism, useful delay, substitute and evidence. Test the destination when the origin becomes unavailable for different periods. Then remove a common prerequisite of the substitute. The resulting structure describes the case; it does not establish all connections in a global architecture or validate an edge weight.

For each relationship, add the measured delay, duration of tolerable interruption, substitute and observation supporting the directed edge. Repeat the test for short, intermediate and extended unavailability. A generic list of linked sectors is not an estimated network, and no edge weight is validated by inclusion in this table.

Section readings [R06; R07; R12; C01; C02]

SECTION 34

Documented cases, near misses and recovery

The case collection supports comparison without treating unlike events as one statistical sample. Flint and Walkerton expose different barriers and decision failures; Oroville concerns spillway damage rather than an observed dam breach; Fundão and wildfire-affected networks raise different persistence and verification problems. A satellite storage study is an observation example rather than an incident record. Preserve those objects and the source’s time and scope. Compare mechanisms, evidence and recovery conditions, and avoid using the number of records as a claim about event frequency or framework performance. [R15; R37; R38; R39; R44]

Historical analysis distinguishes observed loss, protective response, near miss and recovery. Several records can concern one event without becoming independent events. Preserve what the source actually investigated and avoid adding unsupported casualty, cost or restoration-time estimates. Compare cases by mechanism and evidence quality; the fact that one response was associated with an outcome does not alone establish a general causal effect.

Section readings [R15; R37; R38; R39; R44]

SECTION 35

Integrated review, transfer and learning portfolio

A water portfolio should make its main conclusion and strongest alternative explanation reviewable. Combine a bounded function, source register, risk mechanisms, dependency map, indicator definitions, scenarios and a monitoring plan. Explain how sanitation, source condition and delivered drinking-water service connect without collapsing them into one result. Transfer to another municipality or basin requires checking hydrology, treatment, exposure and recovery resources as well as institutional responsibilities. Specify the observation that would reopen the conclusion and how that evidence would reach the responsible review and decision process. [R08; R20; R22; R30]

The integrated portfolio should allow a reviewer to move from the question to observations, transformations, mechanism tests, scenarios and proposed monitoring. Make the strongest competing explanation and the most consequential unresolved gap visible. Transfer requires checking mechanisms, exposure and recovery resources in the new setting. Formation, optional credentialing, submission permission and licensing remain distinct processes; no case or data contribution enters the SIL without an associated fellow and applicable review.

Section readings [R08; R20; R22; R30; C04; C05]