Non-negotiable boundary
No production-like record may cross the synthetic tenant boundary. Every export must be traceable.
Stage 01 of 07 · Assessment contract
Define the work before observing the worker.
The operating consequence, constraints, and evidence standard are fixed before the exercise begins.
1/07
Scenario 03 · governed release recovery
The service works. The release system does not.
A regional care network is six weeks from a regulated launch. Its retrieval service meets quality targets, but releases are fragile, incident ownership is unclear, and the receiving team cannot explain the rollback boundary.
Operating boundary
Clinical sources
Retrieval service
Release control
Failure boundary unresolved
What a test can showRecognition under known conditions.
What the benchmark needsJudgment when the system, customer, and evidence disagree.
Operating consequence
The candidate must restore a safe release path while keeping a credible rollback available.
Human handoff
The receiving team must be able to operate, explain, and challenge the resulting system.
Instrument map
Proposed · timing and anchors not validatedOne scenario. Five observable turns.
100–20 minDiscoverFind the real constraint
220–55 minDesignMake the boundary inspectable
355–115 minBuildChange the working system
4115–145 minRecoverRespond to an injected failure
5145–180 minDefendExplain tradeoffs and transfer