Observation Design for Certified Control Authority: Projection--Estimability Separation and Active-Face Equivalence
A sound runtime admission gate executes only actions it can certify, and certifies only what its observations support. This paper asks how observations should be designed to maximize the set of actions that can be safely admitted, and shows the question is not a re-vocabulary of classical design problems. First, a proj...