L-band jamming from the spectrum, clock holdover and a Galileo-only fallback

2. Inputs

Every field the scenario file sets, flattened to its path. Units come from the result's units block (the field-units schema, docs/field-units-schema.json) where it describes the field, otherwise from the field-name suffix; a unit neither states is shown as not stated.

Parameter	Value	Unit	Unit source
`kind`	campaign	text	a text input carries no unit
`phases[0].duration_s`	60	s	field-name suffix
`phases[0].end_at`	timeline.bands[0].first_loss_t_s	text	a text input carries no unit
`phases[0].end_at_run`	1	not stated	no units entry and no unit suffix
`phases[0].name`	onset	text	a text input carries no unit
`phases[0].runs[0].scenario.clock_classical.id`	csac-sa45s	text	a text input carries no unit
`phases[0].runs[0].scenario.clock_classical.provenance`	Microchip SA65 / SA.45s CSAC datasheet sigma_y(1s)=3e-10; q_wf=sigma_y(1s)^2.	text	a text input carries no unit
`phases[0].runs[0].scenario.clock_classical.q_rw`	0	not stated	no units entry and no unit suffix
`phases[0].runs[0].scenario.clock_classical.q_wf`	9.0000e-20	not stated	no units entry and no unit suffix
`phases[0].runs[0].scenario.clock_classical.y0`	5.0000e-10	not stated	no units entry and no unit suffix
`phases[0].runs[0].scenario.clock_quantum.id`	optical-sr-lattice	text	a text input carries no unit
`phases[0].runs[0].scenario.clock_quantum.provenance`	Strontium optical lattice clock, space-oriented goal sigma_y(1s)=1e-15 (arXiv:1503.08457); not flown.	text	a text input carries no unit
`phases[0].runs[0].scenario.clock_quantum.q_rw`	0	not stated	no units entry and no unit suffix
`phases[0].runs[0].scenario.clock_quantum.q_wf`	1.0000e-30	not stated	no units entry and no unit suffix
`phases[0].runs[0].scenario.clock_quantum.y0`	5.0000e-17	not stated	no units entry and no unit suffix
`phases[0].runs[0].scenario.gnss.windows[0].state`	nominal	text	a text input carries no unit
`phases[0].runs[0].scenario.gnss.windows[0].t0`	0	not stated	no units entry and no unit suffix
`phases[0].runs[0].scenario.gnss.windows[0].t1`	60	not stated	no units entry and no unit suffix
`phases[0].runs[0].scenario.seed`	42	1	field-units schema: input entry `seed`, matched by field name
`phases[0].runs[0].scenario.threshold_ns`	50	ns	field-name suffix
`phases[0].runs[0].scenario.time.duration_s`	60	s	field-name suffix
`phases[0].runs[0].scenario.time.step_s`	1	s	field-units schema: input entry `timeline.step_s`, matched by field name
`phases[0].runs[1].scenario.duration_s`	60	s	field-name suffix
`phases[0].runs[1].scenario.grid.f_max_mhz`	1590	MHz	field-name suffix
`phases[0].runs[1].scenario.grid.f_min_mhz`	1160	MHz	field-name suffix
`phases[0].runs[1].scenario.grid.n_freq`	430	not stated	no units entry and no unit suffix
`phases[0].runs[1].scenario.jammers[0].bandwidth_mhz`	16	MHz	field-name suffix
`phases[0].runs[1].scenario.jammers[0].centre_mhz`	1575.42	MHz	field-name suffix
`phases[0].runs[1].scenario.jammers[0].eirp_dbw`	-13	dBW	field-name suffix
`phases[0].runs[1].scenario.jammers[0].name`	chirp privacy device	text	a text input carries no unit
`phases[0].runs[1].scenario.jammers[0].on_s`	10	s	field-name suffix
`phases[0].runs[1].scenario.jammers[0].range_m`	100	m	field-name suffix
`phases[0].runs[1].scenario.jammers[0].sweep_period_us`	9	us	field-name suffix
`phases[0].runs[1].scenario.jammers[0].waveform`	chirp	text	a text input carries no unit
`phases[0].runs[1].scenario.kind`	spectrum	text	a text input carries no unit
`phases[0].runs[1].scenario.receiver.antenna_temp_k`	290	K	field-name suffix
`phases[0].runs[1].scenario.receiver.noise_figure_db`	2	dB	field-name suffix
`phases[0].runs[1].scenario.receiver.tracking_threshold_dbhz`	25	dB-Hz	field-name suffix
`phases[0].runs[1].scenario.seed`	7	1	field-units schema: input entry `seed`, matched by field name
`phases[0].runs[1].scenario.step_s`	1	s	field-units schema: input entry `timeline.step_s`, matched by field name
`phases[0].runs[1].series[0].channel`	cn0_l1ca_dbhz	text	a text input carries no unit
`phases[0].runs[1].series[0].t`	timeline.t_s[]	text	a text input carries no unit
`phases[0].runs[1].series[0].unit`	dB-Hz	text	a text input carries no unit
`phases[0].runs[1].series[0].y`	timeline.bands[0].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[0].runs[1].series[1].channel`	cn0_e1_dbhz	text	a text input carries no unit
`phases[0].runs[1].series[1].t`	timeline.t_s[]	text	a text input carries no unit
`phases[0].runs[1].series[1].unit`	dB-Hz	text	a text input carries no unit
`phases[0].runs[1].series[1].y`	timeline.bands[1].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[0].runs[1].series[2].channel`	cn0_floor_dbhz	text	a text input carries no unit
`phases[0].runs[1].series[2].t`	timeline.t_s[]	text	a text input carries no unit
`phases[0].runs[1].series[2].y`	receiver.tracking_threshold_dbhz	text	a text input carries no unit
`phases[0].runs[1].series[3].channel`	alarm	text	a text input carries no unit
`phases[0].runs[1].series[3].compare`	below	text	a text input carries no unit
`phases[0].runs[1].series[3].t`	timeline.t_s[]	text	a text input carries no unit
`phases[0].runs[1].series[3].threshold`	25	not stated	no units entry and no unit suffix
`phases[0].runs[1].series[3].y`	timeline.bands[0].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[0].runs[2].scenario.al_h_m`	40	m	field-name suffix
`phases[0].runs[2].scenario.al_v_m`	50	m	field-name suffix
`phases[0].runs[2].scenario.constellation.altitude_km`	20200	km	field-name suffix
`phases[0].runs[2].scenario.constellation.inclination_deg`	55	deg	field-name suffix
`phases[0].runs[2].scenario.constellation.phasing_f`	1	not stated	no units entry and no unit suffix
`phases[0].runs[2].scenario.constellation.planes`	6	not stated	no units entry and no unit suffix
`phases[0].runs[2].scenario.constellation.sats_per_plane`	4	not stated	no units entry and no unit suffix
`phases[0].runs[2].scenario.kind`	integrity	text	a text input carries no unit
`phases[0].runs[2].scenario.mask_deg`	5	deg	field-name suffix
`phases[0].runs[2].scenario.p_fa`	1.0000e-5	not stated	no units entry and no unit suffix
`phases[0].runs[2].scenario.p_md`	0.001	not stated	no units entry and no unit suffix
`phases[0].runs[2].scenario.seed`	7	1	field-units schema: input entry `seed`, matched by field name
`phases[0].runs[2].scenario.sigma_uere_m`	1	m	field-name suffix
`phases[0].runs[2].scenario.time.duration_s`	60	s	field-name suffix
`phases[0].runs[2].scenario.time.step_s`	10	s	field-units schema: input entry `timeline.step_s`, matched by field name
`phases[0].runs[2].scenario.user.altitude_km`	0.4	km	field-name suffix
`phases[0].runs[2].scenario.user.inclination_deg`	45	deg	field-name suffix
`phases[0].runs[2].scenario.user.raan_deg`	10	deg	field-name suffix
`phases[0].runs[2].scenario.user.u0_deg`	0	deg	field-name suffix
`phases[1].carry`	[time_error_ns]	not stated	no units entry and no unit suffix
`phases[1].duration_s`	600	s	field-name suffix
`phases[1].name`	holdover	text	a text input carries no unit
`phases[1].runs[0].scenario.clock_classical.id`	csac-sa45s	text	a text input carries no unit
`phases[1].runs[0].scenario.clock_classical.provenance`	Microchip SA65 / SA.45s CSAC datasheet sigma_y(1s)=3e-10; q_wf=sigma_y(1s)^2.	text	a text input carries no unit
`phases[1].runs[0].scenario.clock_classical.q_rw`	0	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.clock_classical.q_wf`	9.0000e-20	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.clock_classical.y0`	5.0000e-10	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.clock_quantum.id`	optical-sr-lattice	text	a text input carries no unit
`phases[1].runs[0].scenario.clock_quantum.provenance`	Strontium optical lattice clock, space-oriented goal sigma_y(1s)=1e-15 (arXiv:1503.08457); not flown.	text	a text input carries no unit
`phases[1].runs[0].scenario.clock_quantum.q_rw`	0	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.clock_quantum.q_wf`	1.0000e-30	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.clock_quantum.y0`	5.0000e-17	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.gnss.windows[0].state`	nominal	text	a text input carries no unit
`phases[1].runs[0].scenario.gnss.windows[0].t0`	0	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.gnss.windows[0].t1`	1	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.gnss.windows[1].state`	denied	text	a text input carries no unit
`phases[1].runs[0].scenario.gnss.windows[1].t0`	1	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.gnss.windows[1].t1`	600	not stated	no units entry and no unit suffix
`phases[1].runs[0].scenario.seed`	43	1	field-units schema: input entry `seed`, matched by field name
`phases[1].runs[0].scenario.threshold_ns`	50	ns	field-name suffix
`phases[1].runs[0].scenario.time.duration_s`	600	s	field-name suffix
`phases[1].runs[0].scenario.time.step_s`	10	s	field-units schema: input entry `timeline.step_s`, matched by field name
`phases[1].runs[1].scenario.duration_s`	600	s	field-name suffix
`phases[1].runs[1].scenario.grid.f_max_mhz`	1590	MHz	field-name suffix
`phases[1].runs[1].scenario.grid.f_min_mhz`	1160	MHz	field-name suffix
`phases[1].runs[1].scenario.grid.n_freq`	430	not stated	no units entry and no unit suffix
`phases[1].runs[1].scenario.jammers[0].bandwidth_mhz`	16	MHz	field-name suffix
`phases[1].runs[1].scenario.jammers[0].centre_mhz`	1575.42	MHz	field-name suffix
`phases[1].runs[1].scenario.jammers[0].eirp_dbw`	-13	dBW	field-name suffix
`phases[1].runs[1].scenario.jammers[0].name`	chirp privacy device	text	a text input carries no unit
`phases[1].runs[1].scenario.jammers[0].on_s`	0	s	field-name suffix
`phases[1].runs[1].scenario.jammers[0].range_m`	100	m	field-name suffix
`phases[1].runs[1].scenario.jammers[0].sweep_period_us`	9	us	field-name suffix
`phases[1].runs[1].scenario.jammers[0].waveform`	chirp	text	a text input carries no unit
`phases[1].runs[1].scenario.kind`	spectrum	text	a text input carries no unit
`phases[1].runs[1].scenario.receiver.antenna_temp_k`	290	K	field-name suffix
`phases[1].runs[1].scenario.receiver.noise_figure_db`	2	dB	field-name suffix
`phases[1].runs[1].scenario.receiver.tracking_threshold_dbhz`	25	dB-Hz	field-name suffix
`phases[1].runs[1].scenario.seed`	7	1	field-units schema: input entry `seed`, matched by field name
`phases[1].runs[1].scenario.step_s`	10	s	field-units schema: input entry `timeline.step_s`, matched by field name
`phases[1].runs[1].series[0].channel`	cn0_l1ca_dbhz	text	a text input carries no unit
`phases[1].runs[1].series[0].t`	timeline.t_s[]	text	a text input carries no unit
`phases[1].runs[1].series[0].unit`	dB-Hz	text	a text input carries no unit
`phases[1].runs[1].series[0].y`	timeline.bands[0].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[1].runs[1].series[1].channel`	cn0_e1_dbhz	text	a text input carries no unit
`phases[1].runs[1].series[1].t`	timeline.t_s[]	text	a text input carries no unit
`phases[1].runs[1].series[1].unit`	dB-Hz	text	a text input carries no unit
`phases[1].runs[1].series[1].y`	timeline.bands[1].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[1].runs[1].series[2].channel`	cn0_floor_dbhz	text	a text input carries no unit
`phases[1].runs[1].series[2].t`	timeline.t_s[]	text	a text input carries no unit
`phases[1].runs[1].series[2].y`	receiver.tracking_threshold_dbhz	text	a text input carries no unit
`phases[1].runs[1].series[3].channel`	alarm	text	a text input carries no unit
`phases[1].runs[1].series[3].compare`	below	text	a text input carries no unit
`phases[1].runs[1].series[3].t`	timeline.t_s[]	text	a text input carries no unit
`phases[1].runs[1].series[3].threshold`	25	not stated	no units entry and no unit suffix
`phases[1].runs[1].series[3].y`	timeline.bands[1].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[2].duration_s`	300	s	field-name suffix
`phases[2].name`	galileo-fallback	text	a text input carries no unit
`phases[2].runs[0].scenario.clock_classical.id`	csac-sa45s	text	a text input carries no unit
`phases[2].runs[0].scenario.clock_classical.provenance`	Microchip SA65 / SA.45s CSAC datasheet sigma_y(1s)=3e-10; q_wf=sigma_y(1s)^2.	text	a text input carries no unit
`phases[2].runs[0].scenario.clock_classical.q_rw`	0	not stated	no units entry and no unit suffix
`phases[2].runs[0].scenario.clock_classical.q_wf`	9.0000e-20	not stated	no units entry and no unit suffix
`phases[2].runs[0].scenario.clock_classical.y0`	5.0000e-10	not stated	no units entry and no unit suffix
`phases[2].runs[0].scenario.clock_quantum.id`	optical-sr-lattice	text	a text input carries no unit
`phases[2].runs[0].scenario.clock_quantum.provenance`	Strontium optical lattice clock, space-oriented goal sigma_y(1s)=1e-15 (arXiv:1503.08457); not flown.	text	a text input carries no unit
`phases[2].runs[0].scenario.clock_quantum.q_rw`	0	not stated	no units entry and no unit suffix
`phases[2].runs[0].scenario.clock_quantum.q_wf`	1.0000e-30	not stated	no units entry and no unit suffix
`phases[2].runs[0].scenario.clock_quantum.y0`	5.0000e-17	not stated	no units entry and no unit suffix
`phases[2].runs[0].scenario.gnss.windows[0].state`	nominal	text	a text input carries no unit
`phases[2].runs[0].scenario.gnss.windows[0].t0`	0	not stated	no units entry and no unit suffix
`phases[2].runs[0].scenario.gnss.windows[0].t1`	300	not stated	no units entry and no unit suffix
`phases[2].runs[0].scenario.seed`	44	1	field-units schema: input entry `seed`, matched by field name
`phases[2].runs[0].scenario.threshold_ns`	50	ns	field-name suffix
`phases[2].runs[0].scenario.time.duration_s`	300	s	field-name suffix
`phases[2].runs[0].scenario.time.step_s`	10	s	field-units schema: input entry `timeline.step_s`, matched by field name
`phases[2].runs[1].scenario.duration_s`	300	s	field-name suffix
`phases[2].runs[1].scenario.grid.f_max_mhz`	1590	MHz	field-name suffix
`phases[2].runs[1].scenario.grid.f_min_mhz`	1160	MHz	field-name suffix
`phases[2].runs[1].scenario.grid.n_freq`	430	not stated	no units entry and no unit suffix
`phases[2].runs[1].scenario.jammers[0].centre_mhz`	1575.42	MHz	field-name suffix
`phases[2].runs[1].scenario.jammers[0].eirp_dbw`	-20	dBW	field-name suffix
`phases[2].runs[1].scenario.jammers[0].name`	CW tone on L1	text	a text input carries no unit
`phases[2].runs[1].scenario.jammers[0].on_s`	0	s	field-name suffix
`phases[2].runs[1].scenario.jammers[0].range_m`	1000	m	field-name suffix
`phases[2].runs[1].scenario.jammers[0].waveform`	cw	text	a text input carries no unit
`phases[2].runs[1].scenario.kind`	spectrum	text	a text input carries no unit
`phases[2].runs[1].scenario.receiver.antenna_temp_k`	290	K	field-name suffix
`phases[2].runs[1].scenario.receiver.noise_figure_db`	2	dB	field-name suffix
`phases[2].runs[1].scenario.receiver.tracking_threshold_dbhz`	25	dB-Hz	field-name suffix
`phases[2].runs[1].scenario.seed`	7	1	field-units schema: input entry `seed`, matched by field name
`phases[2].runs[1].scenario.step_s`	10	s	field-units schema: input entry `timeline.step_s`, matched by field name
`phases[2].runs[1].series[0].channel`	cn0_l1ca_dbhz	text	a text input carries no unit
`phases[2].runs[1].series[0].t`	timeline.t_s[]	text	a text input carries no unit
`phases[2].runs[1].series[0].unit`	dB-Hz	text	a text input carries no unit
`phases[2].runs[1].series[0].y`	timeline.bands[0].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[2].runs[1].series[1].channel`	cn0_e1_dbhz	text	a text input carries no unit
`phases[2].runs[1].series[1].t`	timeline.t_s[]	text	a text input carries no unit
`phases[2].runs[1].series[1].unit`	dB-Hz	text	a text input carries no unit
`phases[2].runs[1].series[1].y`	timeline.bands[1].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[2].runs[1].series[2].channel`	cn0_floor_dbhz	text	a text input carries no unit
`phases[2].runs[1].series[2].t`	timeline.t_s[]	text	a text input carries no unit
`phases[2].runs[1].series[2].y`	receiver.tracking_threshold_dbhz	text	a text input carries no unit
`phases[2].runs[1].series[3].channel`	alarm	text	a text input carries no unit
`phases[2].runs[1].series[3].compare`	below	text	a text input carries no unit
`phases[2].runs[1].series[3].t`	timeline.t_s[]	text	a text input carries no unit
`phases[2].runs[1].series[3].threshold`	25	not stated	no units entry and no unit suffix
`phases[2].runs[1].series[3].y`	timeline.bands[1].cn0_effective_dbhz[]	text	a text input carries no unit
`phases[2].runs[2].scenario.al_h_m`	40	m	field-name suffix
`phases[2].runs[2].scenario.al_v_m`	50	m	field-name suffix
`phases[2].runs[2].scenario.constellation.altitude_km`	23221.664	km	field-name suffix
`phases[2].runs[2].scenario.constellation.inclination_deg`	56	deg	field-name suffix
`phases[2].runs[2].scenario.constellation.phasing_f`	1	not stated	no units entry and no unit suffix
`phases[2].runs[2].scenario.constellation.planes`	3	not stated	no units entry and no unit suffix
`phases[2].runs[2].scenario.constellation.sats_per_plane`	8	not stated	no units entry and no unit suffix
`phases[2].runs[2].scenario.kind`	integrity	text	a text input carries no unit
`phases[2].runs[2].scenario.mask_deg`	5	deg	field-name suffix
`phases[2].runs[2].scenario.p_fa`	1.0000e-5	not stated	no units entry and no unit suffix
`phases[2].runs[2].scenario.p_md`	0.001	not stated	no units entry and no unit suffix
`phases[2].runs[2].scenario.seed`	7	1	field-units schema: input entry `seed`, matched by field name
`phases[2].runs[2].scenario.sigma_uere_m`	1	m	field-name suffix
`phases[2].runs[2].scenario.time.duration_s`	300	s	field-name suffix
`phases[2].runs[2].scenario.time.step_s`	30	s	field-units schema: input entry `timeline.step_s`, matched by field name
`phases[2].runs[2].scenario.user.altitude_km`	0.4	km	field-name suffix
`phases[2].runs[2].scenario.user.inclination_deg`	45	deg	field-name suffix
`phases[2].runs[2].scenario.user.raan_deg`	10	deg	field-name suffix
`phases[2].runs[2].scenario.user.u0_deg`	0	deg	field-name suffix
`seed`	20260928	1	field-units schema: units entry `seed`
`timeline.step_s`	1	s	field-units schema: units entry `timeline.step_s`
`title`	L-band jamming from the spectrum, clock holdover and a Galileo-only fallback	text	a text input carries no unit

Result	Value	Unit
`reproducibility.campaign_hash`	1ce2687e8ded87c7fcb679798d3887c994934dc791b43fed638e9d5d87f0264a	text
`reproducibility.run_digest`	dd09401aa42b43d2d073648f8aae12b35fccefd825c256f2a35e6b2b774304bb	text
`reproducibility.runs_total`	8	count
`seed`	20260928	1
`timeline.channels.alarm.label`	alarm flag: 1 while any monitor of the phase alarms	text
`timeline.channels.alarm.unit`	1	text
`timeline.channels.alert_limit_m.label`	vertical alert limit	text
`timeline.channels.alert_limit_m.unit`	m	text
`timeline.channels.cn0_e1_dbhz.label`	cn0_e1_dbhz	text
`timeline.channels.cn0_e1_dbhz.unit`	dB-Hz	text
`timeline.channels.cn0_floor_dbhz.label`	tracking-loss floor of the receiver	text
`timeline.channels.cn0_floor_dbhz.unit`	dB-Hz	text
`timeline.channels.cn0_l1ca_dbhz.label`	cn0_l1ca_dbhz	text
`timeline.channels.cn0_l1ca_dbhz.unit`	dB-Hz	text
`timeline.channels.guard_ns.label`	time-error guard (the run's own threshold)	text
`timeline.channels.guard_ns.unit`	ns	text
`timeline.channels.protection_level_m.label`	vertical protection level	text
`timeline.channels.protection_level_m.unit`	m	text
`timeline.channels.time_error_ns.label`	clock time error	text
`timeline.channels.time_error_ns.unit`	ns	text
`timeline.duration_s`	910	s
`timeline.step_s`	1	s

Column	Count	Min	Max	First	Last	Unit
`timeline.channels.alarm.values[]`	911	0	1	0	0	1
`timeline.channels.alert_limit_m.values[]`	311	50	50	50	50	m
`timeline.channels.cn0_e1_dbhz.values[]`	911	4.69	44.98	44.98	44.98	dB-Hz
`timeline.channels.cn0_floor_dbhz.values[]`	911	25	25	25	25	dB-Hz
`timeline.channels.cn0_l1ca_dbhz.values[]`	911	3.38	43.48	43.48	17.98	dB-Hz
`timeline.channels.guard_ns.values[]`	911	50	50	50	50	ns
`timeline.channels.protection_level_m.values[]`	311	5.670424	21.635892	21.635892	5.670424	m
`timeline.channels.time_error_ns.values[]`	911	-0.073174	5.063193	0	1.358894	ns
`timeline.phases[].carried.time_error_ns`	1	0	0	0	0	ns
`timeline.phases[].runs[].skip_s`	8	0	0	0	0	s
`timeline.phases[].t0_s`	3	0	610	0	610	s
`timeline.phases[].t1_s`	3	10	910	10	910	s
`timeline.t_s[]`	911	0	910	0	910	s

phase	start (s)	end (s)	duration (s)	ended by	member kinds	carried in
onset	0	10	10	end_at timeline.bands[0].first_loss_t_s = 10 s	clock, spectrum, integrity	nothing carried
holdover	10	610	600	duration_s	clock, spectrum	time_error_ns = 0
galileo-fallback	610	910	300	duration_s	clock, spectrum, integrity	nothing carried

Export	Applies	Files or reason
czml https://github.com/AnalyticalGraphicsInc/czml-writer/wiki/CZML-Structure	yes	written by `kshana scenarios/campaign-spectrum-holdover-integrity.toml --export all`
kml https://www.ogc.org/standard/kml/	yes	written by `kshana scenarios/campaign-spectrum-holdover-integrity.toml --export all`
geojson https://www.rfc-editor.org/rfc/rfc7946	yes	written by `kshana scenarios/campaign-spectrum-holdover-integrity.toml --export all`
stk https://help.agi.com/stk/#stk/importfiles-02.htm	yes	written by `kshana scenarios/campaign-spectrum-holdover-integrity.toml --export all`
sigmf https://github.com/sigmf/SigMF/blob/main/sigmf-spec.md	no	no member scenario of the campaign has anything this format describes; export a member on its own to see its reason

Start (s)	End (s)	Event	Source
0	10	phase onset (ended by end_at timeline.bands[0].first_loss_t_s = 10 s)	result `timeline.phases[0]`
10	610	phase holdover (ended by duration_s)	result `timeline.phases[1]`
610	910	phase galileo-fallback (ended by duration_s)	result `timeline.phases[2]`

5. Verification labels

Each row is a verification-matrix row this run's kinds exercise, with the label and the oracle the matrix gives it (src/verification.rs, docs/VERIFICATION-MATRIX.md). A label grades the capability as the matrix records it; it does not grade this scenario's configuration, and a VALIDATED row does not make the run's inputs measured. A PARTNER row is a discipline the run relies on that Kshana does not provide.

Capability (matrix requirement)	Label	Used by	Source: oracle	Test evidence
Frequency stability characterisation Allan/modified/Hadamard deviation + power-law noise ID with χ² CIs	VALIDATED exercised	clock	NIST SP 1065 (Riley) / Stable32 reference deviations on NBS14 (ExternalDataset)	tests/allan_reference.rs (NBS14 vs Stable32 to 1e-4); allan::tests
Integrity (RAIM/ARAIM/SBAS) Snapshot/MHSS RAIM, ARAIM P_HMI budget, SBAS DO-229E combination	VALIDATED exercised	integrity	DO-229E/DO-316 K-factors; real IGS SP3 geometry (ExternalDataset)	tests/igs_real_data.rs, tests/araim_dual_real_data.rs (real IGS SP3 + Celestrak TLE)
GNSS geometry / dilution of precision (DOP) GDOP/PDOP/HDOP/VDOP/TDOP from line-of-sight geometry via Q=(HᵀH)⁻¹ with a local ENU split	VALIDATED exercised	integrity	gnss_lib_py 1.0.4 (Stanford NAV Lab) DOP — independent library, matched to 1e-6 relative (ExternalDataset)	tests/dop_reference.rs (8 geometries, well-conditioned → near-singular)
RAIM/ARAIM integrity statistical kernel (χ² / non-central χ² / normal laws) The distributional core every protection level rests on: the snapshot fault-detection threshold χ²₁₋ₚfₐ(dof), the missed-detection non-centrality pbias=√λ, and the K_fa/K_md/K_V solution-separation multipliers	VALIDATED exercised	integrity	SciPy 1.17.0 (scipy.stats.chi2/.norm/.ncx2 + optimize.brentq) — independent library (Cephes/Boost), a different algorithm from Kshana's incomplete-gamma series; matched to ≤1e-6 rel. Kernel only. The ARAIM MHSS P_HMI budget allocation is no longer without a published numeric oracle — the WG-C ARAIM Technical Subgroup's own worked example now backs the separate 'ARAIM MHSS protection levels against published reference vectors' row, matched at the reference's own TOL_PL = 5e-2 m — so this row's scope is the statistical kernel and that row carries the allocation (see docs/ARAIM_REFERENCE.md) (ExternalDataset)	tests/raim_reference.rs (171 cases: χ² CDF/quantile, normal CDF/quantile, non-central χ² CDF, pbias across the P_fa/P_md/redundancy ranges)
GNSS-denied clock holdover Closed-form coast-error growth + holdover-to-threshold; quantum-clock classes	MODELLED exercised	clock	Multi-step clock_state covariance recursion (same-codebase cross-check); the underlying coast-variance & holdover-inversion kernel is externally validated vs scipy (see 'Clock-holdover coast-variance & threshold inversion'). The per-class red-noise-floor holdover figures stay MODELLED (ReferenceImpl)	holdover::tests (vs multi-step Kalman covariance recursion; white-FM exact; round-trip); coast-variance kernel externally validated in tests/gnss_denied_clock_holdover_reference.rs (vs scipy Van-Loan/brentq)
Onboard clock state estimation 3-state (phase/freq/drift) van-Loan Kalman clock, Joseph-stabilised	MODELLED exercised	clock	filterpy 1.4.5 KalmanFilter (R. Labbe, MIT), with F via scipy.linalg.expm and Q via the Van-Loan 1978 block-matrix — an independent reference implementation reproducing kshana's full filter trajectory. Cross-implementation consistency: the clock physics / Allan calibration are not externally validated, so this stays MODELLED (ReferenceImpl)	clock_state::tests (analytic van-Loan Q; NEES; PSD positivity); tests/clock_state_reference.rs (full predict+update trajectory — state x and 3×3 covariance P over 1925 steps / 4 parameter sets vs filterpy 1.4.5; worst \|relΔ\| 2.8e-14)
Spoofing detection Clock-aided χ², RAIM, AGC, SQM fused per-epoch security FoM	MODELLED exercised	clock	TEXBAT scenario parameters (Humphreys 2012) — characterisation, not pinned vectors (ExternalDataset)	tests/spoof_texbat_validation.rs (TEXBAT parameter characterisation)
Reproducibility & software assurance Deterministic, scenario-hashed, SBOM + cross-platform golden gates	MODELLED exercised	every run	SBOM conformance to the official CycloneDX 1.5 JSON Schema (+ valid SPDX identifiers) — an external published standard, zero validation errors over the full dependency graph; the FoM-determinism / byte-reproducibility part remains a pinned self-consistency check, so the row stays MODELLED (ExternalDataset)	tests/golden.rs, tests/determinism.rs, tests/cross_platform_golden.rs; tests/reproducibility_software_assurance_reference.rs (the generated SBOM validates with zero errors against the official CycloneDX 1.5 JSON Schema over the full 66-component shipped graph: default + python + wasm features, dev-dependencies excluded)
Navigation RF payload & antenna hardware design Not provided — Kshana models signal performance, not payload/antenna hardware	PARTNER relied on, not provided	spectrum	none: a partner-owned discipline, with no module and no test by design (NoneKind)	none: a partner-owned discipline
Closed-form L-band signal power spectral densities and spectral separation coefficients Unit-area power spectral densities of GPS L1 C/A and L2C (BPSK(1)), GPS L5 and Galileo E5a (BPSK(10)), sine-BOC(1,1) and Galileo E1 MBOC(6,1,1/11) (navsignal::Modulation::psd, with an MBOC variant added), their numerically located nulls and maxima (spectrum::psd_nulls_hz, psd_peak_hz, main_lobe_null_to_null_hz), and the spectral separation coefficient of a signal against any spectrum at any offset (navsignal::spectral_separation_coeff_offset) or against a tone, flat noise, a chirp or matched noise (spectrum::Jammer::ssc), with the anti-jam coefficient Q = 1/(R_c kappa)	VALIDATED exercised	spectrum	Published textbook values: the BPSK(n) main lobe of 2n x 1.023 MHz null to null and the anti-jam coefficients Q = 1 for a narrowband (CW) jammer and Q = 1.5 for a spread-spectrum jammer matched to C/A (Kaplan & Hegarty, Understanding GPS/GNSS, 3rd ed., section 9.4); the BOC(m,n) main lobes centred at plus or minus m x 1.023 MHz (Betz, Binary Offset Carrier Modulations for Radionavigation, NAVIGATION 48(4), 2001); the spectral separation coefficients -61.8, -64.8 and -67.8 dB/Hz for C/A with C/A, BOC(1,1) with BOC(1,1) and C/A with BOC(1,1) (Betz 2001; Hein et al., MBOC: The New Optimized Spreading Modulation Recommended for Galileo L1 OS and GPS L1C, Inside GNSS, May/June 2006), reproduced here from their Parseval autocorrelation closed forms. The BOC(1,1) maximum is not at 1.023 MHz: the lobe spans the carrier null to 2.046 MHz and peaks at 0.759 MHz, and the test pins both. The MBOC mix is the ICD definition, checked for unit area and linearity only (ExternalDataset)	spectrum::tests (bpsk_main_lobe_null_to_null_is_two_n_times_1_023_mhz — BPSK(1) 2.046 MHz and BPSK(10) 20.46 MHz located numerically on the closed form; boc11_lobes_are_centred_at_plus_minus_1_023_mhz — carrier null, first null at 2.046 MHz, lobe centre 1.023 MHz, and the exact maximum at 0.7590 MHz against an independent Newton solve of tan y = 2y; ssc_matches_parseval_closed_forms — C/A x C/A 2/(3R_c) = -61.86 dB/Hz, BOC(1,1) x BOC(1,1) 1/(3R_c) = -64.87 dB/Hz, C/A x BOC(1,1) 1/(6R_c) = -67.88 dB/Hz, each within 0.02 dB; q_values_match_kaplan_hegarty — CW at the carrier Q = 1, matched-spectrum noise Q = 1.5, flat null-to-null noise Q = 2.215; mboc_is_a_unit_area_one_eleventh_mix)
L-band spectrum waterfall with per-band J/S and effective C/N0 under a scripted jammer timeline The `spectrum` kind: a frequency-by-time grid of the L-band power spectral density (thermal floor k T_sys with T_sys = T_ant + 290 K (F - 1), the signals at their interface-specification minimum received powers, and continuous-wave, narrowband, chirp and matched-noise jammers with on/off times), each cell averaged over its bin and row (chirps exactly over whole and partial sweeps, jammers by duty), per-band effective C/N0 = [1/(C/N0) + sum (J/S) kappa]^-1 per row, J/S per band, in-band J/S, and an SVG waterfall with C/N0 bars. The report carries a cross-check against the `jamming` kind's chain on the same link inputs	MODELLED exercised	spectrum	Reduction to the existing `jamming` kind's anti-jam equation and link budget (the same code, called on the same inputs), and the k T0 F noise-floor closed form. The signal spectra underneath are the validated row above; the jammer powers, timeline and front-end bandwidths are scenario inputs, the spectra are continuous (no spreading-code lines), and no automatic gain control, blanking or antenna pattern acts on the jammer. No measured jammed spectrum is in the repository to check the composite against. The `jamming` kind's representative Q table (broadband 1.0, CW 1.5) differs from the Q this model derives from the spectra (CW at the carrier 1.0, matched 1.5, flat null-to-null 2.2); the report prints both (InternalConsistency)	spectrum::tests (agrees_with_the_jamming_kind_chain — J/S equal to jamming::j_over_s_db and effective C/N0 equal to jamming::effective_cn0_dbhz with Q = 1/(R_c kappa) to 1e-9 dB, and the 32.105 dB anchor of the jamming kind's own test; noise_floor_is_kt0f; chirp_window_splits_whole_and_partial_sweeps; duty_weights_partial_rows; demo_scenario_runs_and_denies_l1_while_l5_survives; defaults_run_with_no_jammer; bad_inputs_are_refused)
SigMF recording input and output, and Welch spectral estimates of complex IQ sigmf: read and write Signal Metadata Format recordings (JSON .sigmf-meta with the core global, captures and annotations fields; raw .sigmf-data as cf32_le, ci16_le or ci8, the integer decoders shared with realdata::iqif::load_iq), all on strings and byte buffers. spectrum::welch_psd: Hann-windowed, overlapped, averaged periodograms, density-scaled, on an in-crate radix-2 transform (spectrum::fft_in_place). spectrum::synthesise_iq draws the model as IQ, and the `spectrum` kind's [iq] section runs model to IQ to SigMF to Welch and compares with the model; its [recording] section estimates a real recording (native builds)	MODELLED exercised	spectrum	Round-trip identities, a direct discrete Fourier transform, and the white-noise, Parseval and Hann equivalent-noise-bandwidth closed forms. The SigMF field names follow the published specification (github.com/sigmf/SigMF), but no externally produced recording is in the repository, so reading a third-party file is untested here and the row stays Modelled. A synthesised periodic chirp shows lines, Fresnel ripple and edge tails the smooth model omits: total power agrees within 2 %, per-bin densities near a chirp do not (InternalConsistency)	sigmf::tests (cf32_round_trip_is_exact_to_single_precision; ci16_round_trip_is_within_half_a_code; ci16_is_little_endian_i_then_q; integer_encoding_counts_saturation; metadata_uses_the_core_namespace; unsupported_types_and_channels_are_refused; sample_start_offsets_into_the_data); spectrum::tests (fft_matches_a_direct_dft; welch_reads_white_noise_as_variance_over_fs_and_keeps_a_tone_s_power — floor within 2 % of variance over sample rate, Parseval total within 2 %, Hann equivalent noise bandwidth 1.5 bins; noise_like_synthesis_is_unbiased_through_welch — median Welch-minus-model within 0.1 dB through a ci16_le round trip; synthesised_iq_through_sigmf_reproduces_the_model_spectrum)
A chained mission across scenario kinds on one shared timeline The `campaign` kind's phases: each phase runs one or more scenarios of existing kinds through run_toml, reads their outputs into named channels (clock time error and guard, mean effective carrier-to-noise density ratio and tracking floor, vertical protection level and alert limit, position error, satellites tracking, alarm flags) by per-kind presets or explicit result paths, places them at the phase start and holds them onto a common grid, with phase boundaries and events; state is handed on by carry (a channel continues from the previous phase's end value), handoff (a previous phase's number written into the next scenario) and end_at (a phase ends at a time a run computed, such as a spoofing monitor's detection time); a campaign hash and a digest over every member result	MODELLED exercised	campaign	Composition identities against the stand-alone runs of the same kinds: a one-phase campaign reproduces the stand-alone output bit for bit, the carried offset equals the previous run's own last sample, and the phase ended by end_at has exactly the run's detection time as its length. The additive carry across a phase boundary and the zero-order hold are modelling choices, and each phase is as good as the kind that ran it; no chained mission has been checked against a measured one (InternalConsistency)	tests/campaign_composition_reference.rs (a_one_phase_clock_campaign_reproduces_the_standalone_run_bit_for_bit, a_one_phase_integrity_campaign_reproduces_the_standalone_run_bit_for_bit, a_one_phase_jamming_campaign_reproduces_the_standalone_run_bit_for_bit — the member result byte-identical to the stand-alone run and every aligned value equal to the stand-alone series; the_chained_mission_hands_state_on_and_ends_the_spoofing_phase_on_detection; a_handoff_writes_the_previous_phase_number_into_the_next_scenario; malformed_campaigns_fail_loudly)

Statement	Source
MODELLED composition of existing scenario kinds. Every number is read from a real run of the named kind; the chaining (additive carry of a channel across a phase boundary, zero-order hold onto the timeline grid, a phase ended at a computed time) is a modelling choice, and each phase carries the label of the kind that produced it.	result `label`
MODELLED: the additive carry and the zero-order hold are modelling choices, and each phase carries the label of the kind that ran it.	kind catalogue (`kshana kinds --json`)
MODELLED: the chaining is a modelling choice (additive carry, zero-order hold), and each phase is as good as the kind that ran it. E1 recovering under the CW tone rests on the spectrum kind's continuous-spectrum treatment (a CW tone on the MBOC carrier null couples nothing); a real tone would couple through the code's spectral lines.	scenario file comment, lines 30 to 33
GNSS-denied clock holdover is MODELLED, not validated: checked against a separate implementation in this same codebase — independent of the unit under test, but not externally authoritative.	verification matrix (docs/MODELLED-RATIONALE.md)
Onboard clock state estimation is MODELLED, not validated: checked against a separate implementation in this same codebase — independent of the unit under test, but not externally authoritative.	verification matrix (docs/MODELLED-RATIONALE.md)
Spoofing detection is MODELLED, not validated: a sub-claim is externally checked, but the whole capability composes modelled pieces, so the capability stays Modelled.	verification matrix (docs/MODELLED-RATIONALE.md)
Reproducibility & software assurance is MODELLED, not validated: a sub-claim is externally checked, but the whole capability composes modelled pieces, so the capability stays Modelled.	verification matrix (docs/MODELLED-RATIONALE.md)
L-band spectrum waterfall with per-band J/S and effective C/N0 under a scripted jammer timeline is MODELLED, not validated: checked against its own closed-form / analytic identity — catches transcription and coefficient errors, but is not an external oracle.	verification matrix (docs/MODELLED-RATIONALE.md)
SigMF recording input and output, and Welch spectral estimates of complex IQ is MODELLED, not validated: checked against its own closed-form / analytic identity — catches transcription and coefficient errors, but is not an external oracle.	verification matrix (docs/MODELLED-RATIONALE.md)
A chained mission across scenario kinds on one shared timeline is MODELLED, not validated: checked against its own closed-form / analytic identity — catches transcription and coefficient errors, but is not an external oracle.	verification matrix (docs/MODELLED-RATIONALE.md)

Command to reproduce	kshana scenarios/campaign-spectrum-holdover-integrity.toml
Working directory	Run the command from the directory the original run was started in: the scenario path, and any relative data path inside the scenario, resolve against it. Check the scenario file against scenario_sha256 first.
Engine version	0.29.0
Source commit	not recorded: this engine was built without the KSHANA_GIT_COMMIT environment variable; the engine version identifies the release
Scenario file	campaign-spectrum-holdover-integrity.toml
Scenario file SHA-256 (Secure Hash Algorithm 256-bit)	88f7d33f660c94afa81cd60ec0de435be8f4dc34b00bf544b28a58d9841d53f7
Result scenario_hash	1ce2687e8ded87c7fcb679798d3887c994934dc791b43fed638e9d5d87f0264a (the kind's own fingerprint of the scenario; not the file digest)
Result document SHA-256	e1c0060106fcd1a45ec3daafbfd6c5756be1713cbf109d7d13f741a4c856060c (campaign-spectrum-holdover-integrity.result.json)
Seed	20260928 (scenario `seed`)
Platform	macos / aarch64 (unix)
Determinism	Same scenario bytes, seed and engine build give a byte-identical result document and report; this report carries no timestamp. Floating-point results are pinned per platform; another operating system or architecture may differ in the last digits.

L-band jamming from the spectrum, clock holdover and a Galileo-only fallback

1. Executive summary

2. Inputs

3. Results

Scalar results

Numeric columns

3a. Aggregation of member runs

Chain phases

3b. Animation and exports

4. Events timeline

5. Verification labels

6. Not modelled, and assumptions

7. Reproducibility record