CAD.3:7 - Conformance Checklist

• The bound covers the actual initial condition, command class, mismatch and timing modes.
• Switching uses a common invariant set or proved transitions between the admitted mode or phase sets.
• A continuous-time claim ends at the first exit from its proof domain unless continued existence and containment in that domain are established.
• Every claimed constraint is tied to the instants or continuous intervals actually covered.
• Nominal commands leave justified correction authority.
• The command/error dependence closes without a circular assumption.
• There is a feasible continuation or an explicit limit on the duration of the claim.
• Physical reliance is no broader than the model and implementation evidence.