
Acceptance tests that prove the system behaves under failure — not just under perfect conditions.
A commissioned system is validated as a whole: network boundaries, failure behavior, manual overrides, and audit integrity. The goal is predictable operation for years — not a successful demo.
Examples of validation vectors used during commissioning.
| Category | Test | Pass Criteria |
|---|---|---|
| Offline operation | Remove WAN access | Core control remains operational; no hidden dependency blocks operation. |
| Degraded mode | Disable a subsystem / gateway | Only affected functions degrade; unrelated functions remain stable. |
| Recovery | Restore subsystem | State reconciles; no phantom actions; logs show recovery sequence. |
| Manual override | Use physical controls / overrides | Overrides always work; software reflects true state. |
| Policy enforcement | Attempt forbidden action | Action denied; denial is logged with reason. |
| Audit integrity | Review action chain | Actor → decision → actuation → result captured with correlation ID. |
| Backup & restore | Restore from backup bundle | System returns to known-good; invariants intact. |
A signed commissioning summary of tests and outcomes.
A sanitized network map and trust-zone diagram.
A versioned configuration bundle for recovery and audit.
A clean record of modifications and release versions.