Method / 02

Purposeful attempts to falsify system claims through failure exploration, misuse analysis, boundary pressure, and contradictory evidence.

Independent software assuranceSM / 02.14

SecondMark position

Assurance should not reward evidence that survives only cooperative conditions. Material claims must face plausible challenge at the level where consequences emerge.

The examination is bounded to defined claims, a versioned system, and evidence that can be traced to the state under review. Any material exclusion or uncertainty remains visible in the conclusion.

01

Core questions

What the examination needs to establish.

  1. 01

    How can the claim fail while nominal tests pass?

  2. 02

    Which assumptions can an adversary or environment violate?

  3. 03

    How do failures propagate across boundaries?

  4. 04

    Can the system fail silently or ambiguously?

02

Evidence model

Evidence is assembled around the claim—not the folder structure.

01

Defined claims and decision context

Collected, attributed, challenged, and connected to the exact system boundary under examination.

02

Versioned system and dependency record

Collected, attributed, challenged, and connected to the exact system boundary under examination.

03

Direct observations and reproducible tests

Collected, attributed, challenged, and connected to the exact system boundary under examination.

04

Contradictory, missing, and residual evidence

Collected, attributed, challenged, and connected to the exact system boundary under examination.

Intended outcome

A more credible conclusion shaped by the strongest reasonable challenges to the system's claims.

Recorded reasoning chainFindings linked to evidenceConditions for continuing validity
03

Professional boundary

What an opinion does—and does not—mean.

It provides

A traceable independent conclusion on defined claims, grounded in the evidence and system state examined.

It does not provide

A guarantee that failure is impossible, a permanent certification, or a conclusion beyond the stated scope and validity conditions.