OBSERVER-MODE EVALUATION WORKFLOW

Goal
----
Provide a fast, low-friction way for an OEM or technical partner to prove/disprove CFCR
against its own workflow without touching production control authority.

Stage 0 — Public/pre-NDA review
-------------------------------
Review the Stage-1 page and this credibility pack:
  - architecture summary;
  - proof anchors;
  - maturity matrix;
  - runnable public integrity/receipt-chain demo;
  - NDA review inventory.

Stage 1 — 20-minute fit call
----------------------------
Determine whether CFCR maps to any of the recipient's workflows:
  - fuel-cell controls;
  - electrolyzer controls;
  - fleet health analytics;
  - warranty adjudication;
  - insurance / residual-value review;
  - production records / MRV / compliance evidence.

Stage 2 — NDA
-------------
On signed NDA, the recipient receives the reproducible evaluation package:
  - implementation-level reports;
  - provenance carriers;
  - verifier tooling;
  - replay instructions;
  - complete specification and claim set;
  - integration-level technical materials.

Stage 3 — Observer-mode replay, 2-4 weeks
-----------------------------------------
Run observer-mode analysis on historical, simulated, or representative telemetry:
  - no controller changes;
  - no actuator authority;
  - no stack redesign;
  - no added specialty sensors for Stage-1 replay.

Expected outputs:
  - hidden-state estimates;
  - envelope events;
  - ACCEPT / DERATE / REFUSE flags;
  - timing / completeness results;
  - receipt-chain outputs;
  - discrepancy list and next-test recommendations.

Stage 4 — Review
----------------
The reviewer decides whether the result justifies:
  - hardware-in-loop testing;
  - controlled stack testing;
  - advisory-envelope pilot;
  - commercial or licensing discussion.

Core message
------------
Do not trust us. Run the package and decide whether CFCR matters in your environment.
