{"schema_version":1,"experiment_id":"eoa_inverse_innovation_exp12_substrate_denial72_20260805","cell_id":"constraint_propagation_and_decoupling__accounting_auditing","arm":"CONSTRAINED_HIGH","candidate_id":"constraint_propagation_and_decoupling__accounting_auditing__CONSTRAINED_HIGH","decision":"PROPOSAL","abstention_reason":null,"proposal":{"schema_version":1,"experiment_id":"eoa_inverse_innovation_exp12_substrate_denial72_20260805","cell_id":"constraint_propagation_and_decoupling__accounting_auditing","arm":"CONSTRAINED_HIGH","candidate_id":"constraint_propagation_and_decoupling__accounting_auditing__CONSTRAINED_HIGH","proposal_index":1,"version":0,"title":"Physical Cut-Set Mass-Balance Rig for Auditing Bulk-Liquid Inventory","problem":"A facility stores and transfers financially material bulk liquid through several tanks connected by a shared manifold. A plant-wide comparison of book inventory with tank estimates can reveal an aggregate discrepancy but cannot distinguish a misstated tank quantity, an unrecorded cross-transfer, meter bias, retained liquid, or physical loss. Treating every tank and pipe as one reconciliation problem leaves the auditor with coupled measurement uncertainty and weak evidence about where a discrepancy originates.","actors":["External auditor","Facility inventory custodian","Process-safety owner","Bulk liquid in tanks and transfer pipes","Tank gauges, transfer meters, valves, and manifold branches"],"observable_state":"For a process-compatible challenge liquid of known gravimetric mass, mechanically indexed positive-displacement totalizers show mass-equivalent flow across selected manifold boundaries; portable load cells or calibrated receiving vessels show storage changes; physical blind plates and verified closed valves expose whether an allegedly isolated branch receives or loses material. The directly observable state is the set of dial readings, vessel weights, valve-isolation indications, and recovered challenge mass for each bounded section.","consequence":"Without localized physical evidence, an aggregate inventory mismatch may remain unresolved or be assigned to the wrong tank, transfer, or accounting record, weakening audit evidence for the existence, completeness, and measured quantity of bulk inventory.","affected_objective":"Obtain independently observable and recomposable evidence about bulk-inventory quantity and transfer completeness while narrowing the physical section capable of producing a discrepancy.","intervention":"Use a temporary, process-compatible audit rig consisting of calibrated mechanical totalizers, portable gravimetric measurement, visible isolation indicators, and removable blind plates. First pass a known nonhazardous challenge batch through the intact tank-manifold network and measure storage changes and flows at a small set of physical cut points. Conservation constraints from those readings eliminate sections whose measured input, output, and storage change close within a predefined instrument-tolerance budget. Only after that reduction, physically isolate the residual suspect sections and challenge them separately. Finally remove the isolations, repeat the whole-network measurement, and compare the recovered total with the sum of the section measurements. Software may transcribe readings but is not required.","structural_mapping":[{"archetype_element":"Constraint Network Model","domain_realization":"The actual tanks, pipe branches, junctions, and transfer paths form the network; conservation of liquid mass links storage changes to flows across each boundary."},{"archetype_element":"Invariant and Gauge Basis","domain_realization":"Total challenge mass is the protected invariant. All observations are placed on one gravimetric basis using tared vessels and measured density where volume totalizers require conversion, removing arbitrary meter-zero and vessel-tare offsets."},{"archetype_element":"Propagation Rule Set","domain_realization":"For each bounded section, known input minus measured output minus measured storage increase must fall within the combined physical instrument-tolerance budget; closure at adjacent boundaries excludes or bounds downstream locations."},{"archetype_element":"Derived Implication Register","domain_realization":"Direct dial readings and signed physical reading cards identify sections that close, sections that remain ambiguous, and the minimal adjacent boundaries enclosing a discrepancy. The cards document measurements but do not create the effect."},{"archetype_element":"Coupling Boundary Map","domain_realization":"Metered junctions, valves, and flange locations reveal where mass can cross between sections and where blind plates can create a genuine material separator."},{"archetype_element":"Decoupled Subproblem Partition","domain_realization":"After whole-network measurements narrow the possibilities, blind plates and verified valve closures turn residual branches into physically separate test sections with known inputs and measurable outputs."},{"archetype_element":"Consistency and Recomposition Check","domain_realization":"The sum of recovered section masses and storage changes is compared with the known challenge mass and with a final intact-network run on the same gravimetric basis."},{"archetype_element":"Slack or Tolerance Budget","domain_realization":"Calibration certificates, scale resolution, density uncertainty, retained-liquid allowance, and repeatability establish a bounded closure interval before any branch is labeled discrepant."},{"archetype_element":"Propagation Stop Condition","domain_realization":"Partitioning stops when each remaining section either closes within the predefined physical tolerance or is the smallest safely isolatable section that does not."}],"mechanism_mapping":[{"mechanism_slug":"constraint_dependency_matrix","role":"The piping topology and conservation relation identify which boundary readings constrain each tank or branch.","counterfactual_removal":"Without this mapping, a reading cannot safely exclude adjacent branches and the rig becomes an unstructured collection of measurements."},{"mechanism_slug":"domain_reduction_pass","role":"Measured closure removes physically incompatible discrepancy locations from consideration before isolation.","counterfactual_removal":"Without reduction, every section would still require separate testing and the archetype's propagation-first structure would be lost."},{"mechanism_slug":"gauge_fixing_choice","role":"Taring vessels and converting readings to a common mass basis removes representational offsets while preserving total material quantity.","counterfactual_removal":"Uncontrolled tare, zero, or density bases could create apparent differences that do not represent material gain or loss."},{"mechanism_slug":"cut_set_or_separator_analysis","role":"Boundary measurements identify the smallest safe flange and valve set whose physical closure separates the residual suspect branches.","counterfactual_removal":"Absent justified separators, branches would be isolated by convenience and hidden cross-flow could invalidate local tests."},{"mechanism_slug":"recomposition_consistency_test","role":"Section results are physically recombined and checked against the known challenge mass and intact-network run.","counterfactual_removal":"Local closures could coexist with an omitted interface, retained mass, or common calibration error that violates the whole-network balance."}],"causal_chain":["A gravimetrically known, process-compatible challenge batch establishes a conserved material quantity independent of ledger entries.","Mechanical totalizers and load measurements at selected boundaries expose where the conserved quantity crosses and accumulates in the intact network.","Mass closure at one boundary constrains adjacent sections and eliminates locations inconsistent with the observed input, output, and storage changes.","The residual non-closing region determines which valves and flanges constitute a defensible physical separator.","Blind plates and verified valve closures remove material coupling between the residual sections.","Separate challenge runs yield local physical balances without requiring a plant-wide analytic model.","Recombining section measurements with the intact-network balance tests whether the local conclusions preserve total mass and all boundary flows.","The auditor obtains localized measurement evidence that can be compared with inventory and transfer records, while the measurement effect itself exists before any reporting or procedural response."],"baseline":"The baseline is a periodic whole-facility reconciliation using tank dips or level estimates, installed meter totals, and ledger movements. It may identify an aggregate difference but leaves tank calibration errors, shared-manifold transfers, retained material, and losses coupled in one residual.","nearest_rivals":["Complete shutdown, drain, and weigh of every tank and pipe section, which provides direct evidence but can be operationally intrusive and still requires treatment of retained material.","Permanent installation of independently calibrated flow meters and tank load cells at every boundary, which measures the same physical quantities continuously but requires broader equipment changes.","Conventional tank-strapping, dip, and density reconciliation, which estimates quantities without physically separating shared transfer paths.","Tracer-only leak or cross-connection testing, which can reveal a path but does not by itself provide a recomposable mass balance for inventory quantity.","Documentary vouching of transfer tickets and ledger entries, which tests recorded transactions but does not independently measure the material network."],"remaining_contrastive_claim":"Conditional on adequate calibration and safe access, measuring conserved mass at a small number of physical cut points before installing separators can justify which residual branches need independent testing; this is distinct from both whole-plant reconciliation and preemptively measuring or isolating every branch. The claim is about causal structure, not novelty or expected effect size.","authority_safety":{"decision_authority":"The audit engagement lead may approve the evidentiary test only with the facility process-safety owner, who retains authority over connections, isolation, compatible liquids, pressure limits, and return to service.","authorized_first_step":"Conduct one witnessed trial on an idle, nonhazardous three-vessel water loop using an independently weighed challenge batch, calibrated portable instruments, and an approved isolation plan.","excluded_actions":["Opening or modifying a pressurized system without facility lockout and isolation","Introducing tracer or challenge material into saleable, food, pharmaceutical, reactive, or hazardous inventory during the first step","Bypassing relief devices, containment, sanitation controls, or custody seals","Using the rig to accuse an employee or assign financial liability","Changing ledger balances solely from an unexplained pilot discrepancy","Entering confined spaces or defeating plant interlocks"],"halt_rollback":"Stop for leakage, unexpected pressure, incompatible material, broken containment, unstable calibration, or unexplained failure to recover the challenge batch. Isolate and depressurize under the facility procedure, capture all challenge liquid, remove temporary spools and blinds using a checked flange list, restore the original valve configuration, and verify integrity before return to service."},"negative_tests":{"strongest_counterevidence":"Repeated tests could show that apparent branch discrepancies move with instrument position or density correction rather than remaining with a physical section, indicating common-mode measurement error rather than a localized transfer or inventory problem.","problem_falsifier":"The problem is falsified if independently calibrated boundary meters and direct storage measurements already provide a closing balance for every relevant section, or if the network has stable physical partitions such that no shared-manifold coupling exists.","intervention_falsifier":"The intervention is falsified if, under blinded safe challenge runs containing authorized captured diversions or cross-connections, the rig cannot distinguish the affected section from unaffected sections within its prespecified calibration and retention tolerances, or if section results fail the recomposition check despite stable instruments.","risks":["Challenge-liquid contamination or incompatibility","Leakage or pressure release during temporary instrument installation","False localization caused by meter bias, density change, entrained gas, pipe retention, or valve leakage","Production interruption or incorrect restoration of valve and blind configuration","Tampering with mechanical readings or custody seals","Overgeneralizing an idle-water-loop result to operating inventory conditions","Mistaking a measurement discrepancy for misconduct rather than investigating physical and calibration causes"]},"next_evidence_step":"On one idle three-vessel water loop, predefine calibration, retention, and recomposition tolerances; install mechanical totalizers at two junction cut points; weigh one challenge batch; and run a blinded sequence containing normal transfers plus one process-safety-approved diversion into a captured receiving vessel. Test whether intact-network readings first bound the affected branch, whether subsequent physical isolation localizes it, and whether all recovered masses recompose. End after this single sequence and inspect calibration and retained liquid before considering any production-context test.","prior_art_status":"UNSEARCHED","diversity_from_prior_proposals":"No other proposals or experiment cells were inspected under runtime isolation. Within the supplied packet, this candidate realizes the archetype through conserved liquid mass, mechanical separation, and direct instrumentation rather than through accounting software, workflow, authorization, or analytic reporting.","revision_record":{"parent_version":null,"progress_targets_addressed":["Construct a causally defensible accounting-and-auditing application under the binding substrate constraint","Preserve propagation, justified decoupling, and recomposition rather than merely attaching archetype terminology to a meter","Define falsifiers, physical safeguards, and a bounded first test"],"conceptual_changes":["Translated abstract constraint propagation into material conservation across a tank-and-pipe network","Made physical isolation conditional on prior boundary measurements","Defined total challenge mass as the invariant and tare or density normalization as gauge fixing"],"operational_changes":["Limited the first test to an idle nonhazardous water loop","Specified removable mechanical totalizers, gravimetric measurement, blind plates, and restoration checks","Required predefined physical uncertainty and retention tolerances"],"evidence_changes":["Made direct dial readings, vessel weights, isolation state, and recovered mass the primary evidence","Added blinded captured-diversion and recomposition negative tests"],"claim_changes":["Limited the claim to conditional localization and justified partitioning","Made no claim about novelty, prevalence, demand, or effect size"]},"substrate_contract":{"primary_allowed_process":"MEASUREMENT_INSTRUMENTATION","counterfactual_independence":"If all software, algorithmic inference, dashboards, reporting systems, incentives, authorization schemes, and procedural enforcement are removed, the calibrated mechanical totalizers and gravimetric instruments still produce independent observations of material transfer and storage, while blind plates and closed valves still physically prevent cross-boundary flow. A person can inspect dials, compare weights, and perform elementary mass subtraction without a database or model. Those physical measurements and separations are the essential causal effect; documentation and governance only preserve custody and safety.","forbidden_channel_audit":"No algorithm, model, database, recommender, dashboard, information-routing system, or software control loop determines the intervention. Sensors are not used merely to trigger downstream analytics or reporting: the instruments directly compare conserved material quantities, and the separators directly alter physical coupling. Audit authorization, safety procedure, and reading cards are necessary wrappers for lawful use and evidence custody but do not create localization. Removing incentives, review workflows, training, accountability rules, or automated reporting leaves the measurement-and-isolation mechanism intact."}}}