User Requirements Specification (URS)
Document reference: GFTCL-URS-001 · Framework: GAMP 5 Category 5 · EU Annex 11
Verified by: PQ — Performance Qualification
FortressAI Research Institute · Norwich, Connecticut
Patents: USPTO 19/460,960 · USPTO 19/096,071 — © 2026 Richard Gillespie
This specification states what the GaiaFTCL vQbit Quantum VM must do, in
operator/regulator terms, independent of implementation. Each requirement is testable
and traced in the Requirements Traceability Matrix.
---
Requirement classes
URS-Fxx functional · URS-Dxx data integrity · URS-Sxx security ·
URS-Cxx compliance · URS-Pxx performance.
Functional requirements
| ID | Requirement | Trace |
|---|---|---|
| URS-F01 | The system shall run the M⁸ = S⁴ × C⁴ quantum substrate natively on Apple Silicon, with no external runtime dependency to start. | FS-01, IQ |
| URS-F02 | The substrate shall operate autonomously through Franklin's heartbeat within operator-defined bounded authority, without per-operation operator approval. | FS-02, OQ |
| URS-F03 | The system shall expose an operator CLI for inspection and manual override of the sovereign state machine. | FS-03, CLI Reference |
| URS-F04 | The system shall compose the 19 C⁴-rail algorithms plus QC-020/QC-021 inside the vQbit VM. | FS-04, MQ |
| URS-F05 | The system shall hold a self-custody local wallet (QFOT + Euro stablecoin) and refuse to expose the private key through any interface. | FS-05, Wallet PQ Proof |
| URS-F06 | The system shall demonstrate post-quantum readiness: Shor recovery against classical keys and proven safety after PQ migration. | FS-06, Wallet PQ Proof |
Data-integrity requirements
| ID | Requirement | Trace |
|---|---|---|
| URS-D01 | All records shall be append-only; update and delete shall be refused at the database level. | FS-D01, Data Integrity |
| URS-D02 | Every record shall carry a canonical witness and SHA-256 witness hash enabling bit-exact re-verification. | FS-D02 |
| URS-D03 | Every record shall carry a federation cosignature quintet attributable to its signing cell. | FS-D03 |
| URS-D04 | Substrate arithmetic shall be exact-rational; floating-point value amounts shall be refused. | FS-D04 |
| URS-D05 | Sessions shall be bit-exact replayable from sealed anchors. | FS-D05, PQ |
Security requirements
| ID | Requirement | Trace |
|---|---|---|
| URS-S01 | Private keys shall never be agent-generated, displayed, logged, or emitted to the mesh. | FS-S01, Security |
| URS-S02 | The production binary shall contain no testnet/regtest/simulation path. | FS-S02 |
| URS-S03 | Operator authority shall be bounded by configuration files the operator controls. | FS-S03, Config Spec |
Compliance requirements
| ID | Requirement | Trace |
|---|---|---|
| URS-C01 | The system shall self-qualify (IQ→OQ→PQ→MQ) and seal signed receipts re-verifiable by a regulator. | Qualification Catalog |
| URS-C02 | The system shall enforce a constitutional floor (C-007…C-010) per measurement. | FS-C02, SDS §6 |
| URS-C03 | The system shall maintain an audit trail meeting 21 CFR Part 11 / EU Annex 11 expectations. | Part 11 |
Performance requirements
| ID | Requirement | Trace |
|---|---|---|
| URS-P01 | Per-algorithm capacity shall scale to host resources while preserving measurement invariants. | FS-P01, SDS §5 |
| URS-P02 | The live qualification gate (18–19 in-app checks) shall pass (CALORIE) before a release ships. | PQ |
---
*Federation cosignature: pending — gaiaftcl wiki sign --section GAMP5.*
Federation cosignature: pending operator signing host (v26).
Witness (sha256 of rendered body):
aad0522ae5e41b9b1706dd5229f53e7e239ad479a060bd7acb467109487cd900.
This page serves with a substrate-honest pending-signature notice until the operator's Franklin signer cosigns it.