AAG Certification White Paper
Assurance case, formal properties, test evidence
Formal safety model and assurance argument for the Actuation Governor. Describes proof boundaries, five-stage pipeline, runtime invariants, and cross-platform test results. Intended for certification reviewers and safety engineers.

