Appendix A. Official design signals and reference register

These sources inform the architecture and mappings. They do not grant RTracer access, redistribution rights, certification, legal authority or conformance. Controlled standards are referenced at the level of their official public descriptions; RTracer must license any normative text it needs to implement directly.

#A1 — SAE J3016

Six levels for on-road driving-automation systems; the scope reinforces function/task and operational-context modeling rather than a universal machine ladder.

https://saemobilus.sae.org/standards/j3016_202104-taxonomy-definitions-terms-related-driving-automation-systems-road-motor-vehicles

#A2 — NIST ALFUS

Autonomy framework considering human independence, mission complexity and environmental complexity for unmanned systems.

https://www.nist.gov/publications/autonomy-levels-unmanned-systems-alfus-framework-volume-ii-framework-models-version-10

#A3 — IMO autonomous shipping

Function- and mode-oriented treatment of maritime autonomous operation and remote operation.

https://www.imo.org/en/mediacentre/hottopics/pages/autonomous-shipping.aspx

#A4 — IMO ship-type definitions

Official maritime material notes that ship-type definitions are not universally applicable across instruments.

https://www.imo.org/en/ourwork/safety/pages/regulationsdefault.aspx

#A5 — EASA drone operations

Open, Specific and Certified are operation-risk categories, demonstrating why classification can attach to an operation rather than only the aircraft.

https://www.easa.europa.eu/en/domains/drones-air-mobility/operating-drone

#A6 — EU road M/N/O categories

Passenger, goods and trailer categories plus vehicle type/variant/version concepts.

https://eur-lex.europa.eu/eli/reg/2018/858/oj/eng

#A7 — EU L-category vehicles

Powered cycles, mopeds, motorcycles, sidecars and quadricycles under a road-specific regulatory scheme.

https://eur-lex.europa.eu/legal-content/en/ALL/?uri=CELEX%3A32013R0168

#A8 — EU agricultural T/C/R/S

Wheeled/tracked tractors, trailers and interchangeable towed equipment.

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32013R0167

#A9 — FAA aircraft glossary

Aircraft categories include airplane, glider, lighter-than-air, powered-lift and rotorcraft, supporting facet-separated classification.

https://www.faa.gov/air_traffic/publications/atpubs/pcg_html/glossary-a.html

#A10 — European Register of Authorised Types of Vehicles

Rail type, variant/version and authorization are separate from the individual vehicle record.

https://www.era.europa.eu/domains/registers/eratv_en

#A11 — European Vehicle Register

Individual rail vehicle registration and keeper data illustrate separate identity and registry assertions.

https://www.era.europa.eu/registers/evr_en

#A12 — NASA Small Spacecraft State of the Art

Cross-system treatment of propulsion, power, GNC, structures, thermal, avionics, communications, deployment, operations, tracking and deorbit.

https://www.nasa.gov/smallsat-institute/sst-soa/

#A13 — NASA in-space propulsion

Chemical, electric and propellantless propulsion families provide official cross-domain vocabulary signals.

https://www.nasa.gov/smallsat-institute/sst-soa/in-space_propulsion/

#A14 — IEC 81346-1

General principles for structuring systems and unambiguous reference designations across technologies and multiple aspects.

https://webstore.iec.ch/en/publication/64021

#A15 — ISO 10007

Configuration management guidance from concept through disposal.

https://www.iso.org/standard/70400.html

#A16 — ISO 14224

Equipment taxonomy, failure cause/consequence and maintenance action/resources/downtime are strong generic lifecycle patterns.

https://www.iso.org/standard/64076.html

#A17 — ISO 3833

Road-vehicle type terms; useful as a road pack vocabulary, not a universal root ontology.

https://www.iso.org/standard/9389.html

#A18 — ISO 19649

Vocabulary for mobile robots moving on solid surfaces.

https://www.iso.org/standard/65658.html

#A19 — ISO 10303-239 PLCS

Product-life-cycle support, parts, versions, structures, interfaces, configuration and maintenance history.

https://www.iso.org/standard/78832.html

#A20 — VMRS

Maintenance system-to-part hierarchy and extensible component/work/failure code concepts.

https://tmc.trucking.org/VMRS-Overview

#A21 — ATA iSpec

Aircraft-system numbering and technical-information standards as an aviation interoperability signal.

https://ataebiz.org/standards/

#A22 — W3C PROV-O

Interchangeable provenance entities, activities and agents for heterogeneous systems.

https://www.w3.org/TR/prov-o/

#A23 — W3C SHACL

A standard language for expressing and validating constraints over RDF graphs.

https://www.w3.org/TR/shacl/

#A24 — W3C JSON-LD 1.1

JSON-based linked-data representation useful for semantic export without requiring the application store to be RDF-native.

https://www.w3.org/TR/json-ld11/

#A25 — W3C SSN/SOSA

Separates sensor, observation, procedure, actuator and actuation, including phenomenon and result time.

https://www.w3.org/TR/vocab-ssn/

#A26 — IMO ship identification

A permanent ship identifier designed to persist across changes such as name, flag and ownership.

https://www.imo.org/en/ourwork/iiis/pages/imo-identification-number-schemes.aspx

#A27 — UNOOSA space treaties

Space registration materials encompass space objects, launch vehicles and component parts.

https://www.unoosa.org/oosa/SpaceLaw/treaties.html

#A28 — JSON Schema 2020-12

Machine-readable JSON structure and validation vocabulary; useful for compact wire contracts when extension and remote-reference policy are controlled.

https://json-schema.org/draft/2020-12

#A29 — W3C SKOS

Concept schemes, preferred/alternative labels, hierarchy and mapping relationships for governed vocabularies.

https://www.w3.org/TR/skos-reference/

#A30 — OGC SensorThings API

Open geospatial IoT model with separate sensing and tasking functions; useful as an observation/actuation interoperability adapter.

https://www.ogc.org/standards/sensorthings/

#A31 — COVESA Vehicle Signal Specification

A syntax and catalog for road-vehicle signals with overlays; useful as a signal adapter rather than a universal cross-domain tree.

https://covesa.github.io/vehicle_signal_specification/index.html

#A32 — ASAM OpenODD

A machine-readable model and exchange formats for operational design domains, operational domains and current domains in automated driving.

https://www.asam.net/standards/detail/openodd/

#A33 — ASAM MDF and ODS

Measurement-file and test-data management standards that can anchor RTracer test/telemetry adapters without defining the lifecycle kernel.

https://www.asam.net/standards/detail/mdf/

#A34 — GS1 EPCIS 2.0

Cross-enterprise visibility events for objects, aggregations, transformations and business context; valuable for part, lot and custody mappings.

https://ref.gs1.org/standards/epcis/2.0.0/

#A35 — W3C ODRL

An information model for permissions, prohibitions and duties; useful for rights exchange while internal action grants remain stricter.

https://www.w3.org/TR/odrl-model/

#A36 — W3C Verifiable Credentials 2.0

Issuer-holder-verifier claims with integrity and privacy semantics; a signature authenticates provenance, not universal truth.

https://www.w3.org/TR/vc-data-model-2.0/

#A37 — C2PA specifications

Content provenance, binding and edit-lineage signals for media and synthetic disclosure.

https://spec.c2pa.org/specifications/

#A38 — JCGM 100 measurement uncertainty

General guidance for evaluating and expressing measurement uncertainty.

https://www.bipm.org/en/doi/10.59161/jcgm100-2008e

#A39 — UNECE UN Regulation No. 156

Software-update and software-update-management requirements for applicable road-vehicle contexts.

https://unece.org/transport/documents/2021/03/standards/un-regulation-no-156-software-update-and-software-update

#A40 — EU Battery Regulation 2023/1542

Individual battery passports, use-derived data, state of health, repurpose lineage, access control and interoperable open-format requirements.

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R1542

#A41 — Asset Administration Shell

Industrial Digital Twin Association specifications for metamodel, APIs, data specification, security and AASX packaging.

https://industrialdigitaltwin.org/en/content-hub/aasspecifications

#A42 — ISO 23247 digital-twin framework

Digital-twin general principles for manufacturing; useful as a mapping signal for synchronized representations and digital threads.

https://www.iso.org/standard/75066.html

#A43 — RFC 8785 JSON Canonicalization Scheme

Deterministic JSON representation for hashing and signing, subject to a strict numeric and parser profile.

https://www.rfc-editor.org/rfc/rfc8785.html

#A44 — CloudEvents

A common event-transport envelope; useful between services but not a replacement for RTracer's canonical record.

https://github.com/cloudevents/spec

#A45 — NIST Cybersecurity Framework

Risk-governance framework for identifying, protecting, detecting, responding and recovering across product and platform operations.

https://www.nist.gov/cyberframework

#A46 — NASA configuration management

Baseline, change, deviation/waiver, status accounting, audit and historical configuration principles.

https://www.nasa.gov/reference/6-5-configuration-management/

#A47 — FIVA Charter of Turin

Historic-vehicle preservation, conservation, repair and restoration principles, including documentation and marking of replacement material.

https://www.fiva.org/storage/Documents/Culture%20and%20Youth%20Commission/BOOK_Charter%20of%20Turin_web%20version.pdf

#A48 — IMO in-water cleaning guidance

Planning, inspection, coating protection, record-keeping and reporting guidance for cleaning ship biofouling in water.

https://wwwcdn.imo.org/localresources/en/OurWork/Environment/Documents/Biofouling%20pages/MEPC.1-Circ.918%20-%20Guidance%20On%20In-Water%20Cleaning%20Of%20Ships%27%20Biofouling%20%28Secretariat%29.pdf

#A49 — EASA continuing-airworthiness rules

Component serviceability, unsalvageable disposition, maintenance data and release patterns for aviation domain-pack adapters.

https://www.easa.europa.eu/en/document-library/easy-access-rules/online-publications/easy-access-rules-continuing-airworthiness

#A50 — ISO 1585 engine net power

A standardized road-vehicle engine net-power test context, reinforcing the need to preserve measurement location, setup and correction basis.

https://www.iso.org/standard/70078.html

#A51 — RFC 9562 UUIDs

Current IETF UUID formats, including time-ordered UUID version 7; useful for opaque sortable identifiers without embedding VIN, MAC, owner or location semantics.

https://www.rfc-editor.org/info/rfc9562/

#A52 — RFC 9421 HTTP Message Signatures

A method for signing selected HTTP message components; useful for transport integrity while remaining separate from record proofs and authorization.

https://www.rfc-editor.org/info/rfc9421/

#A53 — RFC 9457 Problem Details for HTTP APIs

A standard problem-response format on which RTracer can layer stable codes, validation stage, safe context and retry semantics.

https://www.rfc-editor.org/rfc/rfc9457.html

#A54 — RFC 8949 CBOR

A compact binary data representation suited to constrained devices and deterministic interchange profiles when paired with strict schema and canonicalization rules.

https://www.rfc-editor.org/rfc/rfc8949.html

#A55 — RFC 9052 COSE

CBOR Object Signing and Encryption structures for signed or encrypted compact device records and manifests.

https://www.rfc-editor.org/rfc/rfc9052.html

#A56 — RFC 9530 HTTP Digest Fields

HTTP content and representation digest fields for transport-integrity checks; these do not replace the canonical semantic-record digest.

https://www.rfc-editor.org/rfc/rfc9530.html

#A57 — OpenAPI Specification

Official HTTP API description family used to publish versioned developer contracts subordinate to the semantic schema registry.

https://spec.openapis.org/oas/

#A58 — AsyncAPI 3.0

Official event-driven API description specification for channels, operations, messages and bindings; useful for the at-least-once event surface.

https://www.asyncapi.com/docs/reference/specification/v3.0.0

#A59 — W3C Trace Context

Cross-service trace propagation. Trace identifiers aid operations but never become domain identity, authorization or canonical provenance.

https://www.w3.org/TR/trace-context/

#A60 — OpenTelemetry specifications

Vendor-neutral telemetry and OTLP signals for platform observability; operational telemetry is kept distinct from vehicle lifecycle telemetry.

https://opentelemetry.io/docs/specs/

#A61 — Apache Parquet file format

Columnar storage format used as an implementation option for high-volume telemetry segments with explicit RTracer manifests and schema locks.

https://parquet.apache.org/docs/file-format/

#A62 — Apache Arrow columnar format

Language-independent in-memory columnar representation useful for telemetry interchange and analysis without redefining channel semantics.

https://arrow.apache.org/docs/format/Columnar.html

#A63 — NIST SP 800-162 attribute-based access control

ABAC definition and considerations supporting subject, object, action, purpose and environment policy decisions.

https://csrc.nist.gov/pubs/sp/800/162/upd2/final

#A64 — NIST SP 800-207 Zero Trust Architecture

Continuous, resource-specific authorization principles supporting short-lived grants, explicit policy decisions and no ambient trust based on network location.

https://csrc.nist.gov/pubs/sp/800/207/final

#A65 — RFC 3339 date and time on the Internet

Timestamp lexical reference. RTracer adds explicit time-scale, precision, clock-domain and uncertainty semantics rather than treating a printed timestamp as measurement simultaneity.

https://www.rfc-editor.org/rfc/rfc3339.html

#A66 — RFC 8032 Edwards-curve signatures

Ed25519/Ed448 algorithm definitions supporting a pinned proof suite where deployment policy permits them.

https://www.rfc-editor.org/rfc/rfc8032.html

#A67 — RFC 8446 TLS 1.3

Modern transport-security protocol used under application-layer identity, proof, authorization and record-integrity controls.

https://www.rfc-editor.org/rfc/rfc8446.html

#A68 — RFC 9700 OAuth 2.0 Security Best Current Practice

Current OAuth security guidance, including audience restriction and sender-constrained access tokens for high-value APIs.

https://www.rfc-editor.org/rfc/rfc9700.html

#A69 — RFC 9449 Demonstrating Proof of Possession

DPoP binds an OAuth token presentation to an asymmetric key and HTTP request, reducing replay of stolen bearer material.

https://www.rfc-editor.org/rfc/rfc9449.html

#A70 — RFC 8705 OAuth mutual TLS

Certificate-bound token and mutual-TLS profiles for workload/provider integrations requiring proof of possession.

https://www.rfc-editor.org/rfc/rfc8705.html

#A71 — RFC 9396 OAuth Rich Authorization Requests

Structured authorization details that inform exact action, resource, amount and beneficiary bindings; RTracer's canonical grants remain the authority source.

https://www.rfc-editor.org/rfc/rfc9396.html

#A72 — W3C Web Authentication Level 3

Phishing-resistant public-key credentials and user-verification signals for human authentication and consequential confirmations.

https://www.w3.org/TR/webauthn-3/

#A73 — SPIFFE X.509-SVID

Short-lived workload identity profile useful for mutually authenticated service boundaries without ambient network trust.

https://github.com/spiffe/spiffe/blob/main/standards/X509-SVID.md

#A74 — UCUM

Machine-oriented unit syntax and semantics used as a mapping source while RTracer separately locks quantity kind, dimension, representation and uncertainty.

https://ucum.org/ucum

#A75 — Protocol Buffers encoding

Official encoding documentation notes that serialization order and stability are not canonical guarantees; protobuf bytes are therefore not the portable signature representation.

https://protobuf.dev/programming-guides/serialization-not-canonical/

#A76 — Apache Iceberg specification

Snapshot, schema/partition evolution and table metadata concepts supporting rebuildable high-volume telemetry analytics above immutable source manifests.

https://iceberg.apache.org/spec/

#A77 — PostgreSQL transaction isolation

Serializable and repeatable-read behavior, retries and anomaly prevention supporting fenced stream append, auction close and budget reservation.

https://www.postgresql.org/docs/current/transaction-iso.html

#A78 — PostgreSQL row security policies

Database-enforced row filtering used as tenant defense in depth, never as the only application authorization boundary.

https://www.postgresql.org/docs/current/ddl-rowsecurity.html

#A79 — Open Policy Agent policy language

A policy-as-code reference for versioned deterministic authorization bundles and decision tests; deployments may use an equivalent engine with the same receipt semantics.

https://www.openpolicyagent.org/docs/policy-language

#A80 — W3C ActivityPub

Federated social-network client/server and server/server protocol used only through a public projection adapter.

https://www.w3.org/TR/activitypub/

#A81 — NIST SP 800-63-4 Digital Identity Guidelines

Current identity proofing, authentication and federation guidance informing assurance, recovery and authenticator policy.

https://csrc.nist.gov/pubs/sp/800/63/4/final

#A82 — SLSA specification 1.2

Software supply-chain provenance levels and build-integrity controls for services, registries, packs, migrations and connector artifacts.

https://slsa.dev/spec/v1.2/

#A83 — The Update Framework specification

Signed repository metadata, version/freeze/rollback resistance and delegated trust concepts for registry and software distribution.

https://theupdateframework.github.io/specification/latest/

#A84 — C2PA 2.4

Media provenance, assertions, ingredients and edit lineage. Provenance authenticates history of content bytes and operations, not truth of the depicted claim.

https://spec.c2pa.org/specifications/specifications/2.4/index.html