01BRING THE IMPLEMENTATION
Start with the architecture as actually proposed: components, identities, credentials, policies, boundaries, requested actions and claimed controls.
02NAME THE CONSEQUENCE
Identify the exact point where computation, recommendation or authorization would become a consequential action in another system or the physical world.
03MAP THE SEAMS
Separate ACA, AFA, AEA and EABA questions. Cryptographic integrity, federation context, present admissibility and local execution authority are not interchangeable.
04FREEZE THE TEST
Preserve the candidate version, neutral proposition, authority assumptions, evidence objects, falsifiers, changed-condition cases and stop rules before running it.
05CHANGE A CONDITION
Modify evidence, revoke authority, alter the payload, cross a governed domain, introduce delay or replay a prior success. Ask what still has standing.
06PRESERVE THE DETERMINATION
ALLOW, HOLD, DENY, ESCALATE, null and failure results remain part of the record. A later action requires current standing again.