Appendix C — Model Reference

C.4 Measurement

Measurement models represent quantitative properties of the running system and the bounds against which they are evaluated. In review, they expose what is measured, what bound applies, and what evidence supports that bound.

Engineering question. What quantity matters, how is it measured, what bound has been declared, and what should happen when the bound is exceeded?

Representation.

Measure
    id
    quantity
    unit
    scope
    observation_source
Bound
    measure_id
    threshold
    aggregation
Disposition
    bound_id
    mode        # report | warn | gate

The disposition stays separate from the measured bound; its mode records whether a bound is report-only, warning-producing, or admission-blocking. Measurability alone does not justify enforcement.

Figure C.4-1 separates the measurement from the authority that may or may not attach to it.

Measurement does not imply authority — a number earns a gate only when evidence warrants it A running system is observed along a dashed arrow into a measurement box holding latency, cost, and queue depth. The measurement is compared, along a solid arrow, against a declared bound. The comparison branches on whether authority is warranted. A no leads to a plain report-only box: the number is surfaced, not enforced. A yes flows along a heavy bordered arrow, crossed by a gate glyph, into a warning or admission gate — the one place authority sits. The lesson: represent first; grant authority only when the evidence warrants it. Legend as in Figure C-1; weight, dash, and glyph carry the meaning without colour. Question: what bound is declared — and what happens when it is exceeded? observe OBSERVED compare no yes RUNNING SYSTEM MEASUREMENT latency · cost · queue DECLARED BOUND threshold · scope · statistic authority warranted? REPORT ONLY surfaced, not enforced WARNING / ADMISSION GATE CHECKED Represent first; grant authority only when the evidence warrants it. Legend: see Figure C-1. A quantity does not earn a gate by being measurable.
Figure C.4-1. Measurement does not imply authority. A sensor produces an observed measurement, which is compared with a declared bound. The result remains report-only unless the evidence warrants warning or admission authority.

Property. A measurement model can state that request latency remains below a declared bound for a defined request class, queue depth below a declared ceiling, or processing cost within a specified envelope. Scope, statistic, and aggregation window are part of the property; a threshold without them is underspecified.

Authority and correspondence. Sensors supply observations; the model supplies their scope, interpretation, and declared bounds. Measurements remain observations unless the evidence warrants warning or gate authority.

© James C. Davis, 2026–present