# fig19 — the Ω-TD architecture under attack (paper_safety, Figure 19)
# Registered in PLAN.md (addendum ARCH; renderer upgraded to D2 before regeneration).
# Render: d2 --layout dagre fig19.d2 ../imgs/fig19_omega_td.png

direction: down

classes: {
  untrusted: {
    style.fill: "#F7F7F7"
    style.stroke: "#777777"
    style.stroke-width: 1
    style.border-radius: 10
  }
  trusted: {
    style.fill: "#FFFFFF"
    style.stroke: "#2B5797"
    style.stroke-width: 1
    style.border-radius: 10
  }
  env: {
    style.fill: "#EFEFEF"
    style.stroke: "#444444"
    style.stroke-width: 1
    style.border-radius: 10
  }
  measure: {
    style.fill: "#EAF4EA"
    style.stroke: "#3E7A3E"
    style.stroke-width: 1
    style.border-radius: 10
  }
  open: {
    style.fill: "#FDF6E3"
    style.stroke: "#B58900"
    style.stroke-width: 1
    style.stroke-dash: 4
    style.border-radius: 10
  }
}

proposer: {
  label: |md
  **PROPOSER π**\
  network / search / adversary\
  model-based proposals *(a, s)*\
  \
  may only **restrict** within the\
  guard's admissible set\
  *containment, Thm 1*
  |
  class: untrusted
}

authority: {
  label: "AUTHORITY Ω — pinned · parameter-free · typed"
  style.fill: "#EEF3FA"
  style.border-radius: 12
  style.stroke: "#2B5797"
  style.stroke-width: 2

  predicates: {
    label: |md
    **1. PREDICATES**\
    gap · ttc · lanes\
    contact · bounds
    |
    class: trusted
  }
  model: {
    label: |md
    **2. MODEL  M**\
    k-step rollforward\
    CV / CA / responder\
    **margin = ε̂**
    |
    class: trusted
  }
  guard: {
    label: |md
    **3. GUARD**\
    certify · abstain-certify\
    · disclosed WALL
    |
    class: trusted
  }
  verifier: {
    label: |md
    **4. VERIFIER**\
    kernel analog —\
    checks each certificate
    |
    class: trusted
  }

  predicates -> model -> guard -> verifier: {
    style.stroke: "#2B5797"
    style.stroke-width: 1
    style.font-size: 12
  }
}

environment: {
  label: |md
  **ENVIRONMENT** — the grader\
  highway-env · MPE · perception substrate *(next, §6)*
  |
  class: env
}

measurement: {
  label: |md
  **MEASUREMENT** — offline\
  ε̂ = model error · ρ = regime visitation\
  facts FROM the environment,\
  never predicted by the agent
  |
  class: measure
}

monitor: {
  label: |md
  **MONITOR**\
  contract vs trace (H-MC)\
  *0.797 — still open (§6)*
  |
  class: open
}

corpus: {
  label: |md
  **CORPUS**\
  certified claims,\
  prune-only reader
  with regime prior *(§4.3–4.6)*
  |
  class: measure
}

# --- flows -----------------------------------------------------------------
proposer -> authority: propose (a, s) {
  style.font-size: 13
}
authority -> proposer: restrict {
  style.font-size: 13
  style.stroke-dash: 3
}
authority.guard -> environment: executed action {
  style.font-size: 13
}
environment -> measurement: trajectory {
  style.font-size: 13
}
measurement -> authority.guard: ε̂ → margin {
  style.font-size: 13
  style.stroke: "#3E7A3E"
}
environment -> monitor
environment -> corpus
corpus -> authority: certified claims {
  style.stroke-dash: 3
  style.font-size: 12
}