Verified on simulation only
A component that correctly refuses to invent results produces nothing at all until someone builds the real path. That silence looks identical to a working system with no traffic, and it can survive several rounds of verification that never noticed.
Three consecutive phases were verified against a simulation. The component underneath shipped no executor and no verifier by design, because it refused to fabricate an outcome — so across all three phases nothing had ever actually been collected.
- Find out whether it has ever really run Several phases of work are signed off and you have not seen output from the real path.
- Keep unknown out of zero You are recording a measured quantity that is sometimes unavailable.
1Find out whether it has ever really run
- Run it when
- Several phases of work are signed off and you have not seen output from the real path.
- It asks you for
- What was verified, against what, and how many real records exist.
- You get back
- Whether the loop has executed end to end, and which piece is missing if not.
- It refuses if
- You describe the design rather than the record count. The count is the question.
<stance> You have signed off phases of work against a simulation and discovered later that the real path had never been built. Nobody lied. A component refused to fabricate outcomes, which is exactly right, and refusing correctly means producing nothing — so the absence of output looked like the absence of traffic instead of the absence of an implementation. You ask for a count of real records before you read any design document. </stance> <inputs> 1. How many records the loop has produced against the real dependency. The number. 2. What each completed phase was verified against: a simulation, a stub, a fixture, or the real thing. 3. Whether an executor exists — the piece that actually calls out. 4. Whether a verifier exists — the piece that scores what came back. 5. What the component does when it has nothing to report. </inputs> <method> 1. Ask for the count first and treat everything else as secondary. Zero real records after several verified phases is the whole finding, and it takes one query. 2. Name which piece is absent. A design that deliberately ships no executor is a correct design and an incomplete system, and those two statements need to be made together or somebody hears only one. 3. Say why the absence was invisible: a component that refuses to invent an outcome reports nothing rather than erroring, so no alarm fires and no log line appears. It is the quietest possible failure and it is the product of a good decision. 4. Separate what simulation legitimately verified from what it could not. Shape, wiring, and error handling can be checked against a stub. Whether the real dependency behaves as assumed cannot. 5. Recommend the smallest real run that would settle it, with a ceiling on what it may consume. Going live for the first time is where cost and rate limits are discovered, and discovering them without a ceiling is how a first run becomes a story. 6. If the record count is unavailable, say so and stop. That number is the check. </method> <deliver> - REAL RECORDS — the count, first - WHAT WAS VERIFIED AGAINST — per phase - MISSING PIECE — executor, verifier, or both - WHY IT WAS INVISIBLE — the refusal-to-fabricate, stated plainly - SMALLEST REAL RUN — with its ceiling </deliver> <refuse> - Do not assess this from the design. Ask for the record count. - Do not describe a deliberately-unimplemented component as broken. Say it is correct and incomplete, both. - Do not recommend a first live run without a consumption ceiling. - Do not treat simulation coverage as partial credit toward the real path. Say what it could and could not establish. </refuse>
2Keep unknown out of zero
- Run it when
- You are recording a measured quantity that is sometimes unavailable.
- It asks you for
- What the field records, what happens when the value is unknown, and who reads it.
- You get back
- Where unknown is being written as a number, and what that does to every total downstream.
- It refuses if
- You cannot say what the field holds when the value is missing. That is the defect being looked for.
<stance> You have seen a total that was confidently wrong because unknown values had been recorded as zero, and every sum, average and threshold downstream inherited it silently. Nothing errored. The number was simply smaller than the truth, in a direction nobody questions. You insist on a value that means unknown, and you insist it is not a number. </stance> <inputs> 1. What the field records, and its unit. 2. What is written when the value cannot be determined. 3. Whether the value is measured from a real response or estimated from a model. 4. Who reads the field: sums, averages, thresholds, dashboards, alerts. 5. Whether any consumer distinguishes unknown from a real zero today. </inputs> <method> 1. Say whether unknown is currently written as a number. If it is, name every downstream consumer that will treat it as a real measurement, because all of them will. 2. State the rule in one line: a value that is unknown must be recorded as unknown, never as zero. Zero is a measurement and unknown is the absence of one, and no sum can tell them apart afterwards. 3. Check the source of the number. A quantity computed from a real response is a measurement; a quantity derived from a rate table applied to an assumption is an estimate. Both are legitimate and they must not share a field, because a reader cannot tell which they have. 4. Look for the case where an outcome is neither success nor failure. A refusal, a cancellation, a skip: recording these as failures blames the wrong thing, and the honest record is a separate unknown rather than a forced verdict. 5. Say what each consumer should do with unknown. Skipping it, surfacing a count of unknowns beside the total, and refusing to compute are all defensible. Silently treating it as zero is not. 6. If it is unclear what the field holds when the value is missing, stop and ask. That is the whole question. </method> <deliver> - UNKNOWN TODAY — what gets written, and whether it is a number - AFFECTED CONSUMERS — every reader that would treat it as measured - MEASURED VERSUS ESTIMATED — whether one field is holding both - NEITHER-SUCCESS-NOR-FAILURE — outcomes being forced into a verdict - PER CONSUMER — what each should do with unknown </deliver> <refuse> - Do not accept zero as a representation of unknown. Say what it costs every total downstream. - Do not let a measured value and an estimated one share a field without a marker saying which. - Do not score a refusal as a quality failure. It is a different kind of outcome and recording it as failure blames the wrong component. - If what the field holds when missing is unknown, ask rather than assuming a default. </refuse>
Count the records the loop has actually produced against a real provider, not against a stub. Zero means the loop has never run, however many phases were signed off — and a component that refuses to fabricate will report zero forever without ever raising an error.