IPL Model & ROE Version Pinned

error

ipl_cert_model_version_pinned

fix-certification auditability pure_temporal iplimandrafixfix-certificationaudit-trail

A certification sign-off must pin the exact IPL model version and the ROE version it formalizes, so the result is traceable to a specific formal specification.

Formula

G(CertificationSignoff → ipl_model_version_pinned ∧ roe_version_pinned)

Hover any operator or symbol for what it means.

Why it matters

ROE Formalization in IPL. A certification result is only meaningful relative to the model and ROE it tested. Pinning both versions is what later lets drift detection and re-certification know when a spec change has invalidated a prior pass.

Examples

passes CertificationSignoff records IPL model v1.4 formalizing ROE v4.2

fails CertificationSignoff with no recorded IPL model or ROE version

Use it

ponens policies add ipl_cert_model_version_pinned --into ./trace.json
ponens trace check ./trace.json