Architecture Proof · Claim #4 · Regulatory Constraint Enforcement

Regulation as executable gates on OSDU

Thirteen formal constraints — from EPA UIC Class VI, ISO 27914, ISO 25624-1, OGMP 2.0 and EU 2024/1787 — defined in the dVeracity SysML v2 model and enforced as certification gates on a live OSDU platform: a failing constraint withholds or revokes certification, and anomalies cascade automatically.

Domains CCUS/SCEP (Decatur) · Methane MRV (MRV-01) Source sysml/osdu-data-platform/14_constraints.sysml Platform cimpl-stack OSDU v0.31.0 Date 08 Sep 2026

The claim, and what proved it

The architecture claims that regulatory requirements can be enforced as formal constraints, not documented as prose. Two independent lifecycles proved it: a CO₂ storage evidence pack could only reach certified because seven Class VI constraints held — and was suspended the moment one failed; a methane Monitoring Plan could only reach verified because six ISO 25624-1 constraints held — and was suspended and restated when reconciliation failed. In both, the gate decision drove an immutable OSDU state transition.

13
formal constraints enforced
6
regulatory frameworks mapped
2
domains · 2 gate-gated lifecycles
2
anomaly cascades triggered by a single failing constraint

Mechanism

How a constraint becomes enforcement

The same pipeline in both domains — the constraint is a first-class artifact from spec to platform, and the platform's own versioning is the enforcement record.

1 · Specify

SysML v2 constraint def with a boolean expression and typed inputs

2 · Evaluate

Gate evaluates each constraint against live evidence records on OSDU

3 · Gate

Transition to certified / verified is issued only if all constraints hold

4 · Record

Each transition is an immutable OSDU record version — the audit trail

5 · Cascade

A later failing constraint suspends, adjusts claims, and flips the attestation

The two gates

Every constraint, its formula, and its result

Gate A · CCUS / SCEP · EPA UIC Class VI

Decatur storage complex. Certified 7/7; the plume breach failed one constraint and suspended the pack.

InjectionPressureLimitp_inj ≤ p_frac · (1 − 0.10)PASSPASS
PlumeMigrationBoundary · AoRplume ≤ permitted area (30 km²)PASSFAIL
WellIntegrityThresholdintegrity ≥ 0.95PASSPASS
CO2StoragePermanence · ISO 27914leak / (stored·1000) ≤ 0.0001PASSPASS
MassBalanceConservation|inj − Σ(stored, leaked, dissolved, mineral)| / inj ≤ tolPASSPASS
SealIntegrityConstraintp_entry ≥ p_buoy · (1 + margin)PASSPASS
CarbonClaimReconciliationactive claims ≤ verified storedPASSPASS

columns: at certification · on plume breach

Gate B · Methane MRV · ISO 25624-1 / OGMP 2.0 / EU 2024/1787

Site MRV-01. Verified 6/6; the unlit flare failed reconciliation and forced a restatement.

SiteLevelReconciliation · ISO 11|BU − TD| / TD ≤ 0.20PASSFAIL
GoldStandardCoverage · OGMP 2.0L4/L5 coverage ≥ 95%PASSPASS
MaterialityRigor · ISO 8, F.25M = Ė_x / Ė_t · 100; material ⇒ L4+; finding > 5% ⇒ restatePASSRESTATE
MethaneLeakDetectionThresholdmeasured ≥ limit of quantitationPASSPASS
EmissionRateAccuracy · ISO 9|meas − ref| / ref ≤ tolerance (10% L4)PASSPASS
ReportingFrequency · EU 2024/1787LDAR surveys ≥ 4 / yrPASSPASS

columns: at verification · on super-emitter

Frameworks

Regulation traced to constraint to enforcement

FrameworkRequirementConstraint(s)Enforced on
EPA UIC Class VIinjection < 90% fracture pressure; Area of Review; well integrity; pre-injection baselineInjectionPressureLimit · PlumeMigrationBoundary · WellIntegrityThresholdSCEP certification
ISO 27914storage permanence, max 0.01%/yr leakageCO2StoragePermanenceSCEP certification
ISO 25624-1:2026source/site reconciliation (Cl.11); materiality (Cl.8); uncertainty (Cl.9); restatement (12.3)SiteLevelReconciliation · MaterialityRigor · EmissionRateAccuracyMonitoring Plan verification
OGMP 2.0Gold Standard: ≥ 95% at Level 4/5GoldStandardCoverageMonitoring Plan verification
EU Reg 2024/1787quarterly LDARReportingFrequencyMonitoring Plan verification
EPA OOOObsuper-emitter response (≥ 100 kg/h)MethaneAlertEvent triggeranomaly cascade

The decisive property

A single failing constraint changes state

The proof of enforcement is not that constraints were evaluated — it is that a failure had consequences on the platform. In Gate A, one constraint (Area of Review) failing suspended the SCEP, cut the carbon claim by 35,000 t and suspended the attestation. In Gate B, one constraint (reconciliation) failing suspended the plan, forced a materiality-driven restatement of +42,336 kg CH₄ and re-issued the attestation on a new hash. Both cascades are recorded as immutable OSDU versions.

Traceability. Every constraint here is a constraint def in 14_constraints.sysml with the same inputs and boolean expression the gate code evaluates; the ISO-derived ones carry clause pointers. Spec → code → platform state, one chain. Both cascades are replayable in the SCEP and methane consoles.

Caveats & provenance

  • Enforcement pointGates run in the proof orchestration, not yet as OSDU-side OPA policy (OPA is disabled on this stack). Moving them into the Policy service is the production step.
  • DataBoth datasets are synthetic, chosen to exercise the constraints — thresholds (frac pressure, AoR, LoQ) are demo parameters.
  • VerifiedAll 13 evaluations and both cascades were observed live on the cimpl-stack dev OSDU before it was decommissioned; records and version histories are exported to this repository.