Requirement → Lean → FMU → Signed Receipt

The MBSE verification thread — a requirement bound to a LOCKED Lean theorem, run, signed
MODELED / SIMULATED 0 runtime CDN locked 8 @ c7c0ba17 Λ = Conjecture 1 OpenModelica + FMPy pattern (never Cameo/Dymola) receipt: …

A SysML-v2-style requirement is captured, checked against the LOCKED-8 Lean theorem set (kernel c7c0ba17), bound to an FMU run, executed, and the PASS/FAIL evidence is committed into a signed DSSE provenance receipt.

idle

Signed provenance receipt (DSSE)

run a co-sim to produce a signed receipt…
Related surfaces: Water-Tank Co-Sim6DOF FMU Twin
All outputs MODELED/SIMULATED — not physical hardware. Effectors SIMULATED, human-on-loop; no live vessel/weapon control. Signed receipts are integrity proofs for the simulation run, not operational data. Trust is bounded and NEVER 100%. Doctrine v11 LOCKED 749/14/163 @ kernel c7c0ba17 · Λ = Conjecture 1 (NEVER theorem) · Khipu BFT = Conjecture 2 · SLSA L1/L2 attested, L3 roadmap. Stack: OpenModelica + FMPy + SysML-v2 patterns — never Cameo/Dymola (proprietary).