Amagi Framework v2.0: Architecture as Compliance, Licensing, and Integration

License: This work is dual-licensed.
(1) CC BY-NC 4.0 — https://creativecommons.org/licenses/by-nc/4.0/legalcode
(2) S-APL v2.0 — full text in the attached PDF and at https://zenodo.org/records/20753406

The Zenodo `license` field shows CC BY-NC 4.0 (the SPDX ID accepted by Zenodo); S-APL v2.0 governs any commercial or safety-critical use of derivative works.

───────────────────────────────────────────────

Common Criteria Protection Profile (ISO/IEC 15408) for the AMAGI Architectural Class — the normative top-level specification that defines the Target of Evaluation (TOE), Security Functional Requirements (SFRs), and assurance package for hardware-enforced Programmable Trust Compute Base (PTCB) subsystems in autonomous Cyber-Physical Systems.

SCOPE
Establishes the architectural contract of the AMAGI class: a deterministic, single-core, FPGA-resident safety controller that enforces the TTP Triad (Timely, Tamper-evident, Provable) through six hardware invariants. The Framework is the authoritative reference for all downstream AMAGI documents — NIPU, MEM, MPS, HARA, FMEDA, Open Spec, NIST Profile, and Traceability Matrix — and is the entry point for certifiers and integrators.

ARCHITECTURAL FOUNDATION — THE SIX INVARIANTS
• INV-001 — Single-Core Determinism: no caches, no speculation, fixed-latency instruction stream
• INV-002 — Hardware-Enforced TTP Triad: CRTM ≤ 15 µs, EGW ≤ 50 ns, cryptographic attestation on every safety transition
• INV-003 — Dual-Tier Trust Model: Tier-1 (PCCP-governed Safety Kernel) vs Tier-2 (Application Sandbox), with one-way isolation
• INV-004 — Memory Partitioning: MAG (eFuse/OTP), SHMF (executable), Audit Log (append-only hash-chained)
• INV-005 — Cryptographic Determinism: ML-KEM-1024 / ML-DSA-44 / SLH-DSA-128f — post-quantum from first boot
• INV-006 — Provable Shutdown: any invariant violation forces CRTM-safe state within one watchdog tick

COMPLIANCE FRAMEWORK
• ISO/IEC 15408 (Common Criteria) — EAL4+ baseline with AVACLAS.1 augmentations
• IEC 61508 — SIL2 functional safety allocation to MAG and SCC FSM
• EU AI Act — Annex IV technical documentation mapping (high-risk AI system)
• ISO/SAE 21434 — cybersecurity assurance interface for automotive CPS
• NIST SP 800-218 — secure software development framework alignment

VERSION 2.0
Version 2.0 supersedes Framework v1.4 (Zenodo record 10.5281/zenodo.17849595). Principal changes: (a) consolidation of the Dual-Tier Trust Model as a normative invariant; (b) introduction of the PCCP (Pre-market Certifiable Change Package) mechanism for FDA-aligned post-market updates; (c) full PQC migration (ML-KEM-1024, ML-DSA-44, SLH-DSA-128f); (d) alignment with Amagi-Q cryptographic profile and Master Parameter Sheet v2.0.

ALIGNMENT
This document is normatively aligned with: NIPU v1.1, MEM v1.1, MPS v2.0, HARA v1.0, FMEDA v1.0, Open Spec v1.1, NIST Profile v1.1, Traceability Matrix v1.0, S-APL v2.0, and AGIAM Charter v1.2.