Term Kind Topic What it is
Clock Drift concept Physical-World Failure Modes Device clocks diverging from real time, which corrupts ordering, expires certificates early or late, and produces data that appears to arrive from the past.
Exception Path Frequency Normal Exceptions, Physical Divergence Rate metric Physical-World Failure Modes The rate at which physical operations diverge from the system's model - a business metric to be managed rather than a defect rate to be eliminated, and the input to how the exception path should be resourced.
Invalid-Clock Boot Epoch Boot, Clock-Zero Boot, Time-Before-Trust Problem concept Physical-World Failure Modes A device booting with no trustworthy notion of time, which makes certificate validity unverifiable and creates a dependency loop - correct time needs a trusted connection and a trusted connection needs correct time.
Physical World Failure Mode concept Physical-World Failure Modes The failure classes that only exist once software controls or observes physical equipment, where the system cannot be restarted and the consequences are not confined to data.
Sensor Input Validation Telemetry Plausibility Checking, Physical Input Sanitisation practice Physical-World Failure Modes Treating readings from physical devices as untrusted input requiring plausibility checks - because a sensor that fails toward a well-formed wrong value is far more damaging than one that stops reporting.