← Policy gallery

ipl_cert_model_cosimulated

fix-certification conformance pure_temporal iplimandrafix-certificationdriftconformance

Before sign-off the IPL model should be co-simulated against captured UAT or production traffic (the digital twin) to confirm the model and the real system agree.

Formula

G(CertificationSignoff → P(model_cosimulated ∧ consistent))

Hover any operator or symbol for what it means.

Why it matters

Digital Twin & Drift Detection. Co-simulating the IPL model against real session data is what proves the model is a faithful twin of the venue rather than an idealisation. A model that disagrees with observed traffic will mis-certify; the disagreement should be caught before sign-off, not after go-live.

Examples

passes IPL model co-simulated over captured UAT traffic, consistent → CertificationSignoff

fails CertificationSignoff with the model never co-simulated against real traffic

Use it

ponens policies add ipl_cert_model_cosimulated --into ./trace.json
ponens trace check ./trace.json