CONFORMANCE TERMS
Conformance Agreement
EFFECTIVE: JANUARY 2026
This Agreement governs the relationship between Sentinel Authority (“SA”) and organizations seeking ODD Conformance Determination (ODDC) for autonomous systems.
NATURE AND SCOPE OF DETERMINATION
ODDC attests that a system operates within defined boundaries with non-bypassable enforcement at the time of determination.
ODDC IS NOT
Regulatory approval, safety attestation, product attestation
Guarantee of performance, insurance, or warranty
Applicant remains solely responsible for system behavior and all consequences of operation
CONTENTS
01SCOPE OF DETERMINATION
SA will evaluate and determine conformance based on:
ODD Specification
The Operational Design Domain as specified by Applicant
ENVELO Compliance
Runtime enforcement architecture meeting ENVELO requirements
CAT-72 Evidence
Successful completion of CAT-72 cumulative enforcement verification period
Architectural Review
System architecture verified to support specified enforcement and boundary implementation
02APPLICANT OBLIGATIONS
2.1 APPLICATION REQUIREMENTS
Provide complete and accurate application materials
Disclose all relevant system specifications and operational parameters
Identify all boundaries, tolerances, and constraints in the ODD specification
Submit documentation of ENVELO-compliant enforcement architecture
2.2 TESTING REQUIREMENTS
Deploy the ENVELO Interlock as configured by SA
Conduct CAT-72 cumulative enforcement verification across active operational intervals within the declared ODD
Not modify system configuration or enforcement settings during testing
Report any test interruptions, violations, or anomalies
2.3 POST-CONFORMANCE — UPTIME REQUIREMENTS
Minimum 99% monthly uptime required. Outages under 1 hour require no action. Extended outages exceeding 1 hour trigger automated notification. Cumulative downtime exceeding 24 hours per calendar month may result in attestation suspension.
2.4 POST-CONFORMANCE REQUIREMENTS
Maintain ENVELO Interlock in continuous operation during attested system operation
Not bypass, disable, or tamper with enforcement mechanisms
Notify SA of any system modifications affecting ODD or enforcement
Complete renewal testing prior to conformance expiration
Use the ODDC mark only in accordance with mark usage guidelines
03SA OBLIGATIONS
Review applications within stated timelines
Conduct scope assessment and provide fee quotation
Administer CAT-72 testing per documented procedures
Issue conformance determination based on evidentiary record
Maintain attestation records per retention requirements
Provide attestation verification services
SA DOES NOT
Implement, operate, or monitor runtime systems
Certify implementation correctness or validate code
Warrant system behavior or performance
Provide regulatory approval or compliance attestation
Sentinel Authority maintains strict separation between standard-setting and conformance determination, consistent with ISO/IEC 17065 conformity assessment principles.
04CONFORMANCE TERMS
4.1 TERM DURATION
6–24 months based on operational domain risk profile, ODD complexity, and applicant conformance history. Term duration specified in the conformance determination.
4.2 RENEWAL
Renewal requires CAT-72 re-completion. Streamlined renewal (minimum 48 cumulative enforcement hours) may be available for applicants with clean conformance history and no system modifications.
4.3 MODIFICATIONS
Any modification to ODD specification, enforcement architecture, or underlying simulation requires:
Notification to SA within 5 business days
Evaluation of modification impact
Potential re-assessment if modification affects conformance basis
05REVOCATION
Material misrepresentation in application materials
Unauthorized modification to attested system
Disabling, bypassing, or tampering with ENVELO enforcement
Failure to maintain ENVELO Interlock operation
Non-payment of fees or violation of this Agreement
Revocation is recorded in the SA registry and reflected in verification results.
06SUSPENSION & REINSTATEMENT
6.1 AUTOMATIC SUSPENSION TRIGGERS
ENVELO Interlock downtime exceeds 24 cumulative hours per calendar month
Violation metrics exceed thresholds defined in the applicable conformance determination
Interlock unreachable for more than 72 consecutive hours
6.2 REINSTATEMENT
1stRestore interlock operation and pass 24-hour verification check
2ndAbove plus written remediation plan
3rdFull CAT-72 re-assessment required
Reinstatement fee of $500 applies after first suspension. Conformance fees are non-refundable during suspension periods.
07LIABILITY & INDEMNIFICATION
SA's total liability shall not exceed fees paid for the specific attestation at issue. SA is not liable for indirect, incidental, consequential, special, or punitive damages.
SA has no liability for the behavior, performance, or consequences of operation of any system, whether attested or not.
Applicant shall indemnify, defend, and hold harmless SA from any claims, damages, losses, or expenses arising from operation of Applicant's systems or violation of this Agreement.
08CONFIDENTIALITY
SA will maintain confidentiality of technical documentation and application materials, except:
Certificate information is publicly verifiable
Disclosure required by law or valid legal process
Aggregate, anonymized data for research or reporting
09INTELLECTUAL PROPERTY
Applicant retains all rights to its systems, documentation, and intellectual property. SA retains all rights to ODDC methodology, ENVELO specifications, CAT-72 procedures, and related IP. Nothing in this Agreement grants either party rights to the other's intellectual property except as expressly stated.
10GENERAL PROVISIONS
10.1 GOVERNING LAW
This Agreement is governed by the laws of the Province of Ontario, Canada. Disputes shall be resolved in the courts of Ontario, Canada.
10.2 ENTIRE AGREEMENT
This Agreement, together with the Terms of Use and applicable fee schedules, constitutes the entire agreement between the parties.
10.3 AMENDMENTS
SA may amend this Agreement by providing thirty (30) days written notice. Amendments apply prospectively only. Prior versions are archived upon revision. Continued participation following the notice period constitutes acceptance of the amended terms.
10.4 SEVERABILITY
If any provision is found unenforceable, the remaining provisions remain in effect.
10.5 SURVIVAL
Sections 7 (Liability and Indemnification), 8 (Confidentiality), 9 (Intellectual Property), and 10.1 (Governing Law) survive termination or expiration of this Agreement.
10.6 FORCE MAJEURE
Neither party shall be liable for delays or failures in performance resulting from causes beyond its reasonable control, including acts of God, governmental action, natural disaster, or failure of third-party infrastructure.
10.7 ASSIGNMENT
Applicant may not assign this Agreement without SA's prior written consent. SA may assign this Agreement in connection with a merger, acquisition, or reorganization, provided the successor assumes all obligations herein.
10.8 DISPUTE RESOLUTION
The parties submit to the exclusive jurisdiction of the courts of Ontario, Canada. Each party waives any objection to venue in such courts. The prevailing party in any dispute shall be entitled to recover reasonable legal fees and costs.
QUESTIONS ABOUT THIS AGREEMENT
Contact our conformance team for clarification.
CONFORMANCE@SENTINELAUTHORITY.ORG →