Conformance Requirements
ODDC certification requires a system to satisfy five gates: a declared or auto-discovered operational domain, demonstrated operational stability, runtime-enforced boundaries via ENVELO Interlock, a tamper-evident evidence record, and a clear revocation pathway.
The operational design domain must be formally declared by the operator or auto-discovered through ENVELO's adaptive learning mode and approved.
The system must demonstrate 72+ cumulative hours of stable operation within its declared ODD under monitored conditions.
All three ENVELO Interlock enforcement tiers must be present and verified: Tier 1 self-correction, Tier 2 Minimum Risk Condition, Tier 3 hard halt.
A tamper-evident, cryptographically-anchored audit record must be generated for all enforcement events and tier transitions during the CAT-72 period.
The applicant must execute a Conformance Agreement that specifies conditions under which the attestation may be revoked or suspended.
- R-01ODD boundaries must be defined in machine-readable format compatible with ENVELO Interlock's enforcement engine, or auto-discovered and operator-approved prior to enforcement activation. Declared boundaries must include at minimum: (a) at least one quantitative operational parameter with defined limit values, (b) a defined geographic, environmental, or operational scope, and (c) explicit identification of conditions under which enforcement activates. Boundaries defined solely by time window, administrative classification, or other non-operational criteria do not satisfy this requirement.
- R-01aODD declarations are subject to Pre-CAT-72 Audit Control Review. Sentinel Authority will return declarations that are insufficiently specified, internally inconsistent, or that define boundaries so narrow as to render the verification period non-representative of actual operational conditions. Revision history of ODD declarations is retained and published in the certificate registry.
- R-02The system must complete a minimum of 72 cumulative hours of monitored operation without boundary violation during the CAT-72 assessment period.
- R-03ENVELO Tier 1 (self-correction) must engage automatically on ODD approach with no human intervention required.
- R-04ENVELO Tier 2 (Minimum Risk Condition) must activate on ODD boundary breach and bring the system to a defined safe state.
- R-05ENVELO Tier 3 (hard halt at the ENVELO wall) must function as an absolute override that cannot be disabled by operator or software command.
- R-06All enforcement events must be logged with timestamps, positional context where applicable, and cryptographic hash chains linking each event to the prior record.
- R-07Audit logs must be transmitted to Sentinel Authority servers in real time or near-real time during the CAT-72 period. Gaps exceeding 15 minutes require justification.
- R-08System must maintain IP protection: the ENVELO Interlock transmits only operational telemetry. Proprietary system internals are not accessed or transmitted.
- R-09ODD scope changes after certification initiation require a new scope assessment and may require a new CAT-72 test run.
- R-10The applicant must designate a primary technical contact responsible for ENVELO Interlock integration and ongoing attestation maintenance.
Submit system information and select the adaptive or prescriptive ODD path. ODD boundaries may be auto-discovered during Phase 3 for the adaptive path.
Sentinel Authority reviews the application, defines test parameters, and issues a scope confirmation with associated fee schedule.
Sentinel Authority conducts an ODDC Audit Control Review — a structured evaluation of ODD boundary definition, ENVELO Interlock enforcement configuration, and telemetry readiness. CAT-72 testing is authorized only upon successful completion.
72+ hour monitored assessment. Adaptive path begins with learning mode; prescriptive path enforces from the start. All three tiers verified.
Conformance determination issued with certificate hash and publication to the public registry.
Ongoing ENVELO Interlock operation with annual renewal testing prior to attestation expiration.
ENVELO Requirements, CAT-72 Procedure, ODDC Scenarios, and Certification Guide available in the document library.