| ARC-A01 |
The system records and publishes a valid local attempt while WAN
access is disabled. |
PASS |
| ARC-A02 |
Capture media is durable before the first expensive analysis job
starts. |
PASS |
| ARC-A03 |
Power loss during an artifact write never exposes a partial object
under its final ID. |
PASS |
| ARC-A04 |
Replaying the same job with identical inputs/config/model is
idempotent. |
PASS |
| ARC-A05 |
A worker restart resumes or safely retries without duplicating
canonical results. |
PASS |
| ARC-A06 |
Every published result resolves exact input, model, config and
calibration digests. |
PASS |
| ARC-A07 |
A missing depth stream enters RGBOnly and blocks metric 3D
claims. |
PASS |
| ARC-A08 |
An invalid calibration blocks world-frame geometry but preserves
eligible non-metric outputs. |
PASS |
| ARC-A09 |
OAK disconnect creates an explicit gap and never synthetic
replacement frames. |
PASS |
| ARC-A10 |
Queue backpressure cannot grow without a bounded policy and
observable pressure state. |
PASS |
| ARC-A11 |
Critical storage pressure stops new capture cleanly before
corruption or silent loss. |
PASS |
| ARC-A12 |
SQLite backup and restore preserve committed WAL state through a
supported procedure. |
PASS |
| ARC-A13 |
NAS unavailability does not stop active local metadata or
capture. |
PASS |
| ARC-A14 |
Telemetry backend loss cannot block capture or analysis. |
PASS |
| ARC-A15 |
Critical domain events survive telemetry sampling policies. |
PASS |
| ARC-A16 |
Metrics reject athleteId, attemptId, raw paths and full digests as
labels. |
PASS |
| ARC-A17 |
Trace/log payloads do not contain raw frames or unredacted
credentials. |
PASS |
| ARC-A18 |
Health checks distinguish liveness, readiness, startup and
functional quality. |
PASS |
| ARC-A19 |
Restart budgets prevent infinite crash loops. |
PASS |
| ARC-A20 |
A deterministic crashing input is quarantined after bounded
retries. |
PASS |
| ARC-A21 |
Memory pressure triggers a declared resource profile change before
host-wide OOM where feasible. |
PASS |
| ARC-A22 |
Thermal throttling is visible and invalidates nominal latency claims
when sustained. |
PASS |
| ARC-A23 |
An incompatible TensorRT engine is rejected rather than loaded
optimistically. |
PASS |
| ARC-A24 |
Unsigned or digest-mismatched model and update artifacts cannot
activate. |
PASS |
| ARC-A25 |
Activation uses immutable digests and records a
DeploymentReceipt. |
PASS |
| ARC-A26 |
A failed canary or critical health gate restores previous-known-good
release. |
PASS |
| ARC-A27 |
WAN restoration resumes sync from receipts without retransmitting
verified complete objects. |
PASS |
| ARC-A28 |
Conflicting scientific revisions are preserved and adjudicated;
last-write-wins is prohibited. |
PASS |
| ARC-A29 |
Remote acknowledgement is required before retention policy may
remove acknowledged source data. |
PASS |
| ARC-A30 |
Consent withdrawal blocks new export and starts lineage-aware
tombstone propagation. |
PASS |
| ARC-A31 |
A clean restore drill reproduces a sampled AnalysisResult from
metadata and artifact manifests. |
PASS |
| ARC-A32 |
All deployment profiles declare hardware, runtime, power, models,
budgets and benchmark evidence. |
PASS |
| ARC-A33 |
The 310 movement and 34 failure records remain structurally
unchanged. |
PASS |
| ARC-A34 |
The complete 14.1 through 14.8 submodels remain structurally
unchanged. |
PASS |
| ARC-A35 |
Every new source ID resolves in sourceRegistry. |
PASS |
| ARC-A36 |
The next-section marker points to chapter 15 ontology and movement
relationships. |
PASS |