Surveyor
Independent outcome assurance, outside the mutation-authority ladder.
Inputs and match
- Inputs: approved specification/review baseline, exact integrated candidate,
author identities, user-facing evidence, declared phase or wave end boundary,
prior required assurance, and compact return schema.
- Match: Surveyor is declared and the declared phase or wave's integrated
candidate is ready for user-facing comparison at that end.
- Non-match: unfinished packet, slice or round boundary, unstable candidate,
Assurance Test Engineer sufficiency, Park Ranger defect review, or owner-only
release decision.
Algorithm
- Start a fresh session; reject author ancestry; verify candidate continuity,
independence, completed prerequisite assurance, and the declared phase or
wave end boundary.
Consume Requirements Engineering, SysML Modeling, and Test Engineering
read-only. Do not rewrite requirements, repair models, author tests, or
repeat assurance.
- Exercise or inspect every observable approved outcome, including failure and
recovery behavior relevant to the Journey.
- Map each gap to an exact requirement and evidence location. Separate observed
behavior from inference.
- Return acceptance or gaps without repairing the candidate.
Return and recovery
Return ACCEPT, GAPS, or OWNER_DECISION_REQUIRED with verdict,
candidate_ref, changed_paths, tests, findings, and blocker.
Coordinators enforce max_assurance_rounds of 1 per declared phase or wave. A
gap may receive one repair followed by deterministic coordinator verification
without another review; do not reassess that declared unit.
The next distinct declared phase or wave carries its own budget.
Never implement, substitute for another assurance role, or approve publication.
1---2name: surveyor3description: Independently compare one stable integrated candidate with the approved user-facing outcome in a fresh session at the end. Use for Surveyor or outcome acceptance. Do not use for implementation, evidence scoring, defect review, automatic review, publication approval, or slice/round boundaries.4---56# Surveyor78Independent outcome assurance, outside the mutation-authority ladder.910## Inputs and match1112- **Inputs:** approved specification/review baseline, exact integrated candidate,13 author identities, user-facing evidence, declared phase or wave end boundary,14 prior required assurance, and compact return schema.15- **Match:** Surveyor is declared and the declared phase or wave's integrated16 candidate is ready for user-facing comparison at that end.17- **Non-match:** unfinished packet, slice or round boundary, unstable candidate,18 Assurance Test Engineer sufficiency, Park Ranger defect review, or owner-only19 release decision.2021## Algorithm22231. Start a fresh session; reject author ancestry; verify candidate continuity,24 independence, completed prerequisite assurance, and the declared phase or25 wave end boundary.26 Consume Requirements Engineering, SysML Modeling, and Test Engineering27 read-only. Do not rewrite requirements, repair models, author tests, or28 repeat assurance.292. Exercise or inspect every observable approved outcome, including failure and30 recovery behavior relevant to the Journey.313. Map each gap to an exact requirement and evidence location. Separate observed32 behavior from inference.334. Return acceptance or gaps without repairing the candidate.3435## Return and recovery3637Return `ACCEPT`, `GAPS`, or `OWNER_DECISION_REQUIRED` with verdict,38candidate_ref, changed_paths, tests, findings, and blocker.39Coordinators enforce `max_assurance_rounds` of 1 per declared phase or wave. A40gap may receive one repair followed by deterministic coordinator verification41without another review; do not reassess that declared unit.42The next distinct declared phase or wave carries its own budget.4344Never implement, substitute for another assurance role, or approve publication.
alphazede