Weakener catalog (v0.8.0)

Generated from uofa catalog --format md at 2026-05-06T23:49:46Z. 32 patterns across 3 packs.

Pack: core (23 patterns)

Pattern	Severity	Description
COMPOUND-01	Critical	Critical and High severity weakeners coexist — compounding risk escalation.
COMPOUND-03	High	Assurance level is not Low, yet Critical weakeners exist — stated assurance level may be overstated.
W-AL-01	High	Validation result has no uncertainty quantification — aleatory uncertainty is uncharacterized.
W-AL-02	Medium	Uncertainty quantification is reported but no sensitivity analysis is documented — the drivers of uncertainty are uncharacterized.
W-AR-01	Critical	Credibility factor has a required level but no acceptance criteria — basis for the requirement is unsupported.
W-AR-02	Critical	Credibility factor achievedLevel is below requiredLevel, yet the decision outcome is Accepted with no documented offset rationale — contradictory result ignored.
W-AR-03	High	Requirement requires a specific verification method but the supporting activity used a different activityType — evidence does not answer the question the requirement asked.
W-AR-04	High	ModelConfiguration was validated at a modelVersion that differs from the UofA currentModelVersion — validation evidence may not apply to the current model.
W-AR-05	High	Validation result has no comparedAgainst link — comparator data source is absent.
W-CON-01	High	Decision is Accepted but a credibility factor has neither requiredLevel nor achievedLevel — the acceptance rests on an unestablished factor.
W-CON-02	Medium	UofA references an identifier whose target does not resolve within the graph and has no documented external-fetch hint.
W-CON-03	High	Evidence timestamp is later than the UofA signature timestamp — evidence was created after the UofA was signed, either a clock anomaly or an uncounted update.
W-CON-04	Medium	UofA conforms to ProfileComplete but declares no SensitivityAnalysis — a Complete profile is structurally expected to document sensitivity analysis alongside uncertainty quantification.
W-CON-05	High	VerificationActivity is declared on the UofA but no Evidence is linked via prov:wasGeneratedBy — the activity is a procedural placeholder rather than real verification.
W-EP-01	Critical	Claim has no prov:wasDerivedFrom link to evidence — provenance chain is broken.
W-EP-02	High	Validation result has no prov:wasGeneratedBy — generation activity is missing.
W-EP-03	High	Input dataset vintage predates the current model revision date — input data may be stale relative to the model it exercises.
W-EP-04	High	Credibility factor is not assessed but model risk level exceeds 2 — unassessed factors at elevated risk weaken the credibility argument.
W-ON-01	Critical	UofA has no Context of Use — intended use and risk context are undefined.
W-ON-02	High	Context of Use has neither an applicability constraint nor an operating envelope — the COU is declared but its boundary of validity is undocumented.
W-PROV-01	Critical	Provenance chain terminates at a node that has no upstream derivation/generation/use edge and is not marked uofa:isFoundationalEvidence=true — chain is incomplete.
W-SI-01	Medium	UofA has no digital signature — structural integrity cannot be verified.
W-SI-02	High	UofA is missing bindsRequirement — incomplete profile binding.

Pack: iso42001 (3 patterns)

Pattern	Severity	Description
W-AL-02	Medium	Claim asserts framework mapping that no other bundle artifact references — claim-evidence alignment broken.
W-AR-02	High	Accept-decision risk has acceptance rationale but no justification body — risk acceptance is not documented.
W-PROV-01	High	Data resource provenance record lacks sourceReference — upstream document or system identifier missing.

Pack: nasa-7009b (6 patterns)

Pattern	Severity	Description
W-NASA-01	High	Data pedigree factor is not assessed but model risk level exceeds 1 — input data provenance should be documented at elevated risk.
W-NASA-02	High	Technical review factor is assessed but has no linked ReviewActivity evidence.
W-NASA-03	High	Process management factor is assessed but has no linked ProcessAttestation evidence.
W-NASA-04	Medium	Use history is not assessed but model risk level exceeds 2 — prior deployment evidence would strengthen the credibility argument.
W-NASA-05	High	Results uncertainty factor is assessed but UofA has no UQ data (hasUncertaintyQuantification is missing).
W-NASA-06	High	Results robustness factor is assessed but has no linked SensitivityAnalysis evidence.