| ID | Source | Edition or date | Clause or page | Source text | Source status | Checked on | Requirement | Kind | Data to collect | How proven | Pass level | Evidence | Status | Critical |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| R01 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF01 | Door remains latched in 100 dry capture cycles on each of 10 concept units | to find | Not independently checked | Door remains latched in 100 dry capture cycles on each of 10 concept units | design and test | Capture door configuration, measured readings and deviations | Cycle rig then 5 N outward retention pull | Door remains latched in 100 dry capture cycles on each of 10 concept units | Not performed — T01 planned | not checked yet | no |
| R02 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF02 | At least two independent raised vent paths remain unobstructed in bedding surrogate trial | to find | Not independently checked | At least two independent raised vent paths remain unobstructed in bedding surrogate trial | design and test | Ventilation ribs configuration, measured readings and deviations | Occlude either vent bank with paper surrogate; inspect remaining airflow path | At least two independent raised vent paths remain unobstructed in bedding surrogate trial | Not performed — T02 planned | not checked yet | yes |
| R03 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF03 | Release grip keeps fingers 30 mm from door path; 10 adult users complete unloaded task without path contact | to find | Not independently checked | Release grip keeps fingers 30 mm from door path; 10 adult users complete unloaded task without path contact | design and test | Release slider configuration, measured readings and deviations | Video-record unloaded representative-user task | Release grip keeps fingers 30 mm from door path; 10 adult users complete unloaded task without path contact | Not performed — T03 planned | not checked yet | no |
| R04 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF04 | Shell opens without tools; no visible fluorescent soil remains after defined wash on 10 units | to find | Not independently checked | Shell opens without tools; no visible fluorescent soil remains after defined wash on 10 units | design and test | Washable shell configuration, measured readings and deviations | Fluorescent soil inspection after hand wash; biological efficacy not claimed | Shell opens without tools; no visible fluorescent soil remains after defined wash on 10 units | Not performed — T04 planned | not checked yet | no |
| R05 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF05 | Bait insert remains captive after 20 N pull on 10 units | to find | Not independently checked | Bait insert remains captive after 20 N pull on 10 units | design and test | Bait pocket configuration, measured readings and deviations | Force gauge pull and foreseeable misuse inspection | Bait insert remains captive after 20 N pull on 10 units | Not performed — T05 planned | not checked yet | yes |
| R06 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF06 | Instructions require frequent manual checks; user can see occupancy without opening; welfare reviewer sets actual interval before use | to find | Not independently checked | Instructions require frequent manual checks; user can see occupancy without opening; welfare reviewer sets actual interval before use | design and test | Occupancy inspection configuration, measured readings and deviations | 10-user visibility/teach-back study; no live animals before ethical review | Instructions require frequent manual checks; user can see occupancy without opening; welfare reviewer sets actual interval before use | Not performed — T06 planned | not checked yet | yes |
| R07 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF07 | Proposed 3-compartment target; rigid mouse surrogates cannot back-drive baffle at 2 N | to find | Not independently checked | Proposed 3-compartment target; rigid mouse surrogates cannot back-drive baffle at 2 N | design and test | Entry baffle configuration, measured readings and deviations | Probe each chamber loaded with surrogates in 50 cycles | Proposed 3-compartment target; rigid mouse surrogates cannot back-drive baffle at 2 N | Not performed — T07 planned | not checked yet | no |
| R08 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF08 | Detect surrogate in each chamber in 100 placements including dust challenge; zero false-empty permitted in concept screen | to find | Not independently checked | Detect surrogate in each chamber in 100 placements including dust challenge; zero false-empty permitted in concept screen | design and test | Occupancy sensor configuration, measured readings and deviations | Injected beam blockage, drift and stuck-value cases | Detect surrogate in each chamber in 100 placements including dust challenge; zero false-empty permitted in concept screen | Not performed — T08 planned | not checked yet | yes |
| R09 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF09 | Local occupancy indicator works without network; app marks offline within proposed 5 minutes | to find | Not independently checked | Local occupancy indicator works without network; app marks offline within proposed 5 minutes | design and test | Wi-Fi alert queue configuration, measured readings and deviations | Router loss/reconnect and phone permission fault injection | Local occupancy indicator works without network; app marks offline within proposed 5 minutes | Not performed — T09 planned | not checked yet | yes |
| R10 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF10 | Provisioning requires physical button; unique device identity; unauthorized client denied in 50 attempts | to find | Not independently checked | Provisioning requires physical button; unique device identity; unauthorized client denied in 50 attempts | design and test | BLE provisioning configuration, measured readings and deviations | Threat-model-led unauthorized pairing attempts on test build | Provisioning requires physical button; unique device identity; unauthorized client denied in 50 attempts | Not performed — T10 planned | not checked yet | no |
| R11 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF11 | Local indication and mechanical capture remain safe after power interruption at each update phase | to find | Not independently checked | Local indication and mechanical capture remain safe after power interruption at each update phase | design and test | Firmware updater configuration, measured readings and deviations | Interrupt update at 20 points; confirm last known good boot | Local indication and mechanical capture remain safe after power interruption at each update phase | Not performed — T11 planned | not checked yet | yes |
| R12 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF12 | No charging in wet state; proposed independent overtemperature cutoff at 45 C cell surface pending battery engineer review | to find | Not independently checked | No charging in wet state; proposed independent overtemperature cutoff at 45 C cell surface pending battery engineer review | design and test | Rechargeable pack configuration, measured readings and deviations | Specialist battery fault evaluation; no destructive tests by unqualified users | No charging in wet state; proposed independent overtemperature cutoff at 45 C cell surface pending battery engineer review | Not performed — T12 planned | not checked yet | yes |
| R13 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF13 | Electronics detach before washing; power inhibited when cassette unseated | to find | Not independently checked | Electronics detach before washing; power inhibited when cassette unseated | design and test | Electronics cassette configuration, measured readings and deviations | Assembly interlock test and controlled splash screen; no IP rating claimed | Electronics detach before washing; power inhibited when cassette unseated | Not performed — T13 planned | not checked yet | yes |
| R14 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF14 | Collect no precise location; proposed event retention 30 days with deletion request path | to find | Not independently checked | Collect no precise location; proposed event retention 30 days with deletion request path | design and test | Account and cloud configuration, measured readings and deviations | Review data flows and test account deletion across backups | Collect no precise location; proposed event retention 30 days with deletion request path | Not performed — T14 planned | not checked yet | no |
| R15 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF15 | Choose candidate module only after grant, antenna and host obligations reviewed; no FCC ID invented | to find | Not independently checked | Choose candidate module only after grant, antenna and host obligations reviewed; no FCC ID invented | design and test | Radio module integration configuration, measured readings and deviations | Host pre-scan and authorization-path review; results not performed | Choose candidate module only after grant, antenna and host obligations reviewed; no FCC ID invented | Not performed — T15 planned | not checked yet | yes |
| R16 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF16 | Capacity is not rated; proposed three isolated chambers require welfare specialist approval | to find | Not independently checked | Capacity is not rated; proposed three isolated chambers require welfare specialist approval | design and test | Crowded chamber configuration, measured readings and deviations | Surrogate occupancy/thermal analysis first; ethical live study only if approved | Capacity is not rated; proposed three isolated chambers require welfare specialist approval | Not performed — T16 planned | not checked yet | yes |
| R17 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF17 | Deployment requires clear-zone sensing and local supervised enable; obstruction forces stop before contact in unloaded trials | to find | Not independently checked | Deployment requires clear-zone sensing and local supervised enable; obstruction forces stop before contact in unloaded trials | design and test | Wall-side deployment carriage configuration, measured readings and deviations | Test 20 surrogate obstruction positions with power isolated emergency stop | Deployment requires clear-zone sensing and local supervised enable; obstruction forces stop before contact in unloaded trials | Not performed — T17 planned | not checked yet | yes |
| R18 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF18 | Two independent mechanical retention paths; release impossible until ground-contact confirmation | to find | Not independently checked | Two independent mechanical retention paths; release impossible until ground-contact confirmation | design and test | Payload coupler configuration, measured readings and deviations | Static 5x proposed payload proof test plus single-fault latch injection | Two independent mechanical retention paths; release impossible until ground-contact confirmation | Not performed — T18 planned | not checked yet | yes |
| R19 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF19 | No rotor spin until guarded clearance zone verified; guarded ground fixture used first | to find | Not independently checked | No rotor spin until guarded clearance zone verified; guarded ground fixture used first | design and test | Propeller guards configuration, measured readings and deviations | Articulated probe and arm-inhibit single-fault tests | No rotor spin until guarded clearance zone verified; guarded ground fixture used first | Not performed — T19 planned | not checked yet | yes |
| R20 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF20 | Containment geofence independent of mission planner; abort on estimator disagreement | to find | Not independently checked | Containment geofence independent of mission planner; abort on estimator disagreement | design and test | Navigation estimator configuration, measured readings and deviations | Hardware-in-loop injected 20 m position jumps and stale fixes | Containment geofence independent of mission planner; abort on estimator disagreement | Not performed — T20 planned | not checked yet | yes |
| R21 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF21 | Return energy reserve proposed at least 40% under worst-case modeled payload and wind | to find | Not independently checked | Return energy reserve proposed at least 40% under worst-case modeled payload and wind | design and test | Mission battery configuration, measured readings and deviations | Simulate doubled return energy and degraded pack capacity | Return energy reserve proposed at least 40% under worst-case modeled payload and wind | Not performed — T21 planned | not checked yet | yes |
| R22 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF22 | Phone is not safety-critical; autonomous supervisor reaches predefined safe state on link loss | to find | Not independently checked | Phone is not safety-critical; autonomous supervisor reaches predefined safe state on link loss | design and test | Command link configuration, measured readings and deviations | Disconnect phone, radio and cloud separately in simulation | Phone is not safety-critical; autonomous supervisor reaches predefined safe state on link loss | Not performed — T22 planned | not checked yet | yes |
| R23 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF23 | Release permitted only when stationary on validated landing surface with motors stopped | to find | Not independently checked | Release permitted only when stationary on validated landing surface with motors stopped | design and test | Field release door configuration, measured readings and deviations | Inject release command in every mission phase; verify inhibited | Release permitted only when stationary on validated landing surface with motors stopped | Not performed — T23 planned | not checked yet | yes |
| R24 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF24 | No field release until actual local species rules, landowner permission and welfare assessment recorded | to find | Not independently checked | No field release until actual local species rules, landowner permission and welfare assessment recorded | design and test | Release destination configuration, measured readings and deviations | Review jurisdiction and destination documents; no destination approved | No field release until actual local species rules, landowner permission and welfare assessment recorded | Not performed — T24 planned | not checked yet | yes |
| R25 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF25 | No unattended outdoor launch; flight operations require qualified review of route, operator, airspace and permissions | to find | Not independently checked | No unattended outdoor launch; flight operations require qualified review of route, operator, airspace and permissions | design and test | Aircraft operation scope configuration, measured readings and deviations | FAA operational applicability review including line-of-sight and authorization questions | No unattended outdoor launch; flight operations require qualified review of route, operator, airspace and permissions | Not performed — T25 planned | not checked yet | yes |
| R26 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF26 | Remote ID and registration applicability resolved for exact aircraft before any outdoor flight | to find | Not independently checked | Remote ID and registration applicability resolved for exact aircraft before any outdoor flight | design and test | Remote ID equipment configuration, measured readings and deviations | Bench configuration and record review; no registration asserted | Remote ID and registration applicability resolved for exact aircraft before any outdoor flight | Not performed — T26 planned | not checked yet | yes |
| R27 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF27 | Dual isolation and independent thermal protection; no charge after failed dock alignment | to find | Not independently checked | Dual isolation and independent thermal protection; no charge after failed dock alignment | design and test | Charging dock contacts configuration, measured readings and deviations | Specialist fault injection of short, misalignment and sensor open | Dual isolation and independent thermal protection; no charge after failed dock alignment | Not performed — T27 planned | not checked yet | yes |
| R28 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF28 | Research envelope proposed dry conditions and wind below 3 m/s; actual limits require flight validation | to find | Not independently checked | Research envelope proposed dry conditions and wind below 3 m/s; actual limits require flight validation | design and test | Weather monitor configuration, measured readings and deviations | Hardware-in-loop gust and missing-sensor scenarios | Research envelope proposed dry conditions and wind below 3 m/s; actual limits require flight validation | Not performed — T28 planned | not checked yet | yes |
| R29 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF29 | Only authenticated signed mission plan; user cannot bypass safety envelope remotely | to find | Not independently checked | Only authenticated signed mission plan; user cannot bypass safety envelope remotely | design and test | Autonomy cybersecurity configuration, measured readings and deviations | Replay, tamper and privilege escalation tests in isolated rig | Only authenticated signed mission plan; user cannot bypass safety envelope remotely | Not performed — T29 planned | not checked yet | yes |
| R30 | Scenario target in Drone Trap risk review | C1 / 2026-10-24 | Hazard DF30 | Maximum one failed docking attempt then designated safe land; no repeated wall approach | to find | Not independently checked | Maximum one failed docking attempt then designated safe land; no repeated wall approach | design and test | Return docking configuration, measured readings and deviations | Simulate moved dock, marker occlusion and blocked return path | Maximum one failed docking attempt then designated safe land; no repeated wall approach | Not performed — T30 planned | not checked yet | yes |
Sample — fictitious company. All numbers and people are invented scenario assumptions. This is draft concept paperwork; no physical testing, customer evidence, certification, filing or sign-off has occurred.