This note defines the narrow built-environment stress track for Candidate 001. Its purpose is to expose state and cost that disappear when a topology edit is represented as an instantaneous graph operation.
The contract applies only when physical or service topology changes while people, critical services, or hazardous inventory remain inside the affected dependency boundary. If the asset can be isolated and a fixed approved sequence dominates, ordinary change control is the relevant baseline.
Typed transition state
For transition version and step , keep the state tuple
The fields are deliberately not collapsed:
- : surveyed physical and service topology, including uncertainty;
- : required service by user group, location, and time;
- : observed or forecast occupancy, ability, familiarity, and assistance;
- : ordinary, accessible, construction, emergency, responder, and goods routes, including capacity and closures;
- : detection, alarm, suppression, compartment, smoke and heat state, and scenario-specific evacuation timing;
- : structural, utility, control, and indoor-environment state;
- : ownership, permits, operating restrictions, acceptance authority, stop-work power, and their expiry;
- : material and work state—installed, removed, stored, in transit, reusable, damaged, waste, temporary, and irreversible;
- : cost, energy, carbon, water, waste, and disruption accounts; and
- : evidence support, timestamp, version, calibration, coverage, uncertainty, and invalidation dependencies.
A plan or model is an input to ; it is not a substitute for , , , or . Likewise, an actuator command belongs to the control record while verified equipment response belongs to .
Intermediate-state admissibility
Let be the preregistered set of hard constraints. The step gate is
where every indicator is dimensionless. Each retains its own physical unit and threshold; the conjunction does not add seconds, newtons, contaminant concentration, and route availability into a fictitious scalar score.
For fire scenario , one necessary margin is
with . Here is available safe egress time, is required safe egress time, and is the frozen scenario margin, all in seconds. Passing this one margin does not establish structural, accessibility, utility, or environmental admissibility.
For user group , define accessible route availability as
where is dimensionless, route capacity and its minimum use the same declared unit such as persons per second, and “usable” includes the group's mobility and assistance requirements. A graph path that is blocked, untenable, too narrow, or unsupported does not satisfy the predicate.
The controller may execute step only when . Otherwise it must abstain or enter a pre-approved restricted, decanted, isolated, or safe-stop state. It cannot average one hard violation against an energy saving.
Evidence-age gate
For evidence item , let measurement time be , current decision time be , and maximum permitted age under the current hazard and work state be , all in seconds. Its freshness indicator is
where is a dimensionless invalidation flag. Moving a wall, isolating a circuit, changing occupancy, impairing suppression, or changing the sensor support can set even before the clock expires. Required evidence is current only when .
Service and transition burden
For user group over transition interval , service loss is
If is usable service places, is place-hours; if is flow in persons per hour, is persons. The service unit must be declared, and the vector remains visible so an aggregate cannot hide loss concentrated on one group.
Transition burden is reported as a vector rather than an automatic weighted sum:
The components use, respectively, declared service-unit-hours, seconds, joules, kilograms COe, currency, kilograms, a defect count, and a hard- violation count. Any scalarization must publish its weights, units, and decision authority. The primary feasibility condition is for every protected scenario—not a favorable mean.
Fast reversible allocation and slow structural adaptation therefore retain different action, deficit, build, carry, and stranded-capacity coordinates (C-1496).
Commitment and recovery
Let be the set of material or legal commitments already made. A software rollback is physically available only if a tested predecessor state remains reachable under the current , resources, authority, and time. Define
where is dimensionless and is the set of reachable, verified states. When , the record must name a reachable safe-stop or forward- recovery state; calling the transition reversible is false.
Recovery after a demand-regime reversal is part of the structural decision, not an optional endpoint after the selected regime has already been scored (C-1496).
Recovery is complete only after target service, evidence validity, open-defect limits, and reserve are restored. For each service component ,
where is fault or interruption time, is the frozen sustainment window, and reserve use declared service units, and is seconds. Reopening without reserve restoration is reported separately.
Equal-budget comparison and rejection
The residual contract is compared with the complete ordinary stack: surveyed as-built records, code and professional review, permits, impairment control, configuration management, construction sequencing, commissioning, post- occupancy evaluation, and lifecycle asset management. All arms receive the same asset, staff time, information, sensors, professional review, material, construction window, compute, maintenance, and whole-life budget.
Reject or merge the residual when any of the following holds:
- the asset can be isolated and a fixed approved sequence matches outcomes;
- a protected-user accessibility or life-safety constraint is violated;
- the advantage disappears when stale evidence, failed actuators, occupancy changes, transition duration, irreversible work, and common causes are represented;
- mature change control plus commissioning matches the protected-service and lifecycle frontier; or
- apparent recovery omits displaced exposure, defects, reserve restoration, or the next disruption.
The editable transition diagram is occupancy-qualified-spatial-transition.mmd. The evidence boundary is developed in the built-environment audit.