§ 01
The Foundational Claim
A circular engineered system is a system that closes. Every input transforms into an output that is either a product, a recycled feedstock, or a quantified residual — nothing disappears into an unaccounted stream.
That closure is not an aspiration; it is the mathematical constraint from which the entire design is derived. This is what makes the design deterministic in the strict sense: given the governing physical and chemical laws, the system's behavior under normal conditions is not probabilistic — it is calculated. Every process variable has a predicted value and a defined tolerance. If reality departs from the model, that departure is a measurable event, not ambient noise.
Deterministic
System behavior under normal conditions is fully predicted by first-principles analysis. Deviations from specification are events, not variance.
Circular
Every stream is accounted for by design intent. No open sinks. Outputs not consumed as products return as inputs or are explicitly engineered for disposition.
Verifiable
Because behavior is predicted, deviations are enumerable. FMEA becomes a precision instrument rather than a probabilistic survey.
§ 02
Design Doctrine — Stages I through III
The design is derived from axioms — laws that cannot be violated — and proceeds inward from system boundary to process variable. At Stage III, design is complete.
I
Design
Axiom definition
Mass must balance. Energy must account. Reaction stoichiometry must close. Thermodynamic limits must be respected. These are not engineering assumptions — they are the axioms against which every design decision is tested. A design requiring violation of a mass balance at any zone boundary is not a design; it is an error.
II
Design
Closed-loop system design
Every stream entering the system must exit as something. Every transformation must be chemically and physically grounded. No stream may be labeled “miscellaneous loss.” In a circular system, outputs that are not primary products must cycle back as inputs or their disposition must be explicitly engineered.
III
Design
Deterministic specification
For every controllable process condition — temperature, pressure, flow rate, residence time, pH, concentration — the design establishes: (a) nominal operating value derived from first principles, (b) acceptable tolerance band, (c) alarm condition signaling departure, and (d) control action restoring nominal state.
§ 03
FMEA Verification — Stages IV through VI
Failure Mode and Effects Analysis is the systematic interrogation of the deterministic design. The quality of the FMEA is a direct function of the rigor of the first-principles work that precedes it.
IV
FMEA
Failure mode enumeration — modes and effects
For each process variable: in what specific way can it deviate from specification? What happens immediately within the affected subsystem (local effect)? What propagates to the broader process (system-level effect)? In a circular design, effects may cascade backward into feed streams or laterally into parallel loops — a dimension absent from linear process analysis.
V
FMEA
Risk quantification — S × P × D = RPN
Each failure mode is scored on Severity (1–5), Probability (1–5), and Detectability (1–5). The Risk Priority Number (RPN) is a prioritization instrument, not an absolute danger score. See §06 for ACM-calibrated scoring anchors.
VI
FMEA
Mitigation, residual scoring, and loop closure
High-RPN items drive specific responses: additional instrumentation, redundant controls, process buffers, vendor qualification, or design modification. Each mitigation produces a residual RPN. No failure mode is fully closed until its cross-zone cascade potential has been assessed.
Cascade sensitivity in circular systems
In a linear process, a failure propagates forward. In a closed-loop circular design, a failure can propagate backward into feed streams or sideways into parallel loops. A vendor supply failure in one zone may starve a conversion step in the next, create a utility imbalance, and generate a secondary process deviation elsewhere. FMEA must trace these cross-zone chains before closure.
§ 05
CAFI — Continuous Adaptive Feedback Integration
Definition
CAFI is the protocol by which validated events from each node of the Digital Triplet are ingested into the shared data lake and returned as actionable intelligence to all three nodes. CAFI closes the loop between operational reality and engineering specification — ensuring the deterministic design is not a static artifact but a living model continuously refined by evidence from construction and operations.
Each node generates events — process deviations, QC holds, telemetry anomalies, FMEA triggers, design change requests. Under CAFI, each event undergoes three transformations before it is considered integrated:
1
Ingest
Validated event capture
The event is structured, timestamped, attributed to a specific process variable or module, and validated against the current specification. Raw telemetry is not an event. A deviation from a defined tolerance band is an event.
2
Enrich
Cross-node contextualization
The event is enriched with context from the other two nodes. An operations deviation is cross-referenced against the manufacturing as-built record and the engineering specification. Enrichment surfaces cascade potential before it manifests.
3
Return
Intelligence distribution
The enriched event is returned to all three nodes as a structured intelligence artifact: an updated FMEA entry, a specification revision recommendation, a manufacturing alert, or an operations protocol update. The loop closes when each receiving node acknowledges and acts.
CAFI is the mechanism by which the six-stage doctrine becomes continuous rather than episodic. Without it, the engineering doctrine produces a specification correct at commissioning and increasingly divergent thereafter. With CAFI, every operational event that departs from specification feeds back into the design model, the FMEA register, and the manufacturing specification simultaneously.
§ 06
FMEA Scoring Reference — ACM Context
Severity, Probability, and Detectability are each scored 1–5. RPN = S × P × D. Anchors are calibrated to Carbotura's Advanced Circular Manufacturing operating context.
| Dimension | Score | ACM-Specific Anchor |
|---|
| Severity | 1 | Negligible process deviation; self-correcting within tolerance band |
| 2 | Minor quality impact on output stream; recoverable within shift |
| 3 | Subsystem shutdown required; module offline <4 hours |
| 4 | Module offline >4 hours; production loss; RevCon™ level impact |
| 5 | Safety or environmental event; regulatory notification threshold crossed |
| Probability | 1 | Unlikely in asset lifetime under designed operating conditions |
| 2 | Possible but rare; expected <1 occurrence per 5 operating years |
| 3 | Occasional; expected 1–3 occurrences per operating year |
| 4 | Likely in normal operations; expected monthly occurrence |
| 5 | Near-certain without active intervention; expected weekly occurrence |
| Detectability | 1 | Immediately visible on process instrumentation; automated alarm fires |
| 2 | Detectable in routine shift inspection without special testing |
| 3 | Detectable with specific periodic testing or sampling |
| 4 | Difficult to detect; requires forensic analysis after-the-fact |
| 5 | Failure occurs and effects propagate before detection is possible |
§ 07
The Governing Relationship
“The design-to-FMEA arc is not a sequence — it is a single doctrine. The design creates the specification against which failure is defined. The FMEA returns refinements that sharpen the design. The Digital Triplet makes that exchange continuous across engineering, manufacturing, and operations. The CAFI Loop ensures that no event at any node is lost.”
Carbotura Engineering Doctrine — v1.0
The loop closes when residual RPNs fall within acceptable bounds, every cross-zone cascade path has been addressed, and the shared data lake reflects the current operational truth of the system rather than its designed-for truth.
Design integrity
A probabilistic design produces vague, unscoreable FMEA entries. A deterministic design produces precise, actionable ones. The doctrine begins with rigor.
Circular verification
FMEA must trace cascade risk across zone boundaries — forward, backward, and lateral — before any failure mode is closed.
Living intelligence
CAFI ensures the specification is never static. Every operational event feeds back into the model, the FMEA register, and the manufacturing record simultaneously.
Disclaimer: This document is an engineering doctrine reference prepared by Carbotura, Inc. It does not constitute a certified engineering assessment, regulatory filing, or legal opinion. All process parameters and FMEA scoring anchors are reference frameworks requiring site-specific validation. “Circular Royalty™,” “OmniCrude™™,” “RevCon™” and related marks are trademarks of Carbotura, Inc. “CAFI” and “Digital Triplet” are proprietary Carbotura frameworks. © 2026 Carbotura, Inc. All rights reserved.
§ 08 — Vendor & Partner Framework
Authorized Vendor & Partner Tiers
Every entity that manufactures, supplies, integrates, or validates within a Carbotura ACM facility operates under an authorization tier. Tier designation defines doctrine obligations, CAFI data lake access rights, contractual accountability, and performance standing requirements. Authorization is not a commercial designation alone — it is a doctrine compliance commitment.
Tier 1 — Highest Authorization Level
ASI — Authorized System Integrator
Contract integrator · Full lifecycle accountability · Performance guarantee holder
The ASI is Carbotura's primary contractual integrator for ACM facility delivery. No other tier carries equivalent scope or accountability. The ASI assumes full design-to-operations lifecycle responsibility on Carbotura's behalf — holding the performance guarantee, the system warranty, and ultimate accountability for doctrine compliance across all subordinate tiers it engages.
The ASI operates as a full participant in the Digital Triplet. It holds read/write access across all three nodes of the CAFI data lake — receiving engineering specifications from Node 1, contributing manufacturing event data from Node 2 activities it manages, and receiving live operational deviation data from Node 3 for warranty and performance tracking.
Assembly & fabrication
Full module assembly, structural fabrication, system integration to Carbotura DFM spec
Testing & commissioning
Factory acceptance testing (FAT), site acceptance testing (SAT), process commissioning
Deployment
Logistics, on-site installation, startup support, operator training, handover documentation
Spares & sustaining
Mandatory spares inventory, OEM parts coordination, scheduled preventive maintenance packages
Performance guarantee
Contractual throughput, RevCon™ level, and uptime guarantees tied to Carbotura CSA obligations
System warranty
Integrated system warranty covering workmanship, materials, and design-to-spec conformance
FMEA accountability
Receives full FMEA register; holds residual RPN mitigation responsibility for integrated system
CAFI data lake access
Full read/write across Nodes 1, 2, 3 — highest access level in the authorization framework
Supporting authorization tiers operate within defined doctrine scope. CAFI access and obligation set bounded by authorization level, governed by the ASI or Carbotura directly.
Tier 2
Authorized Component Manufacturer
ACM — Authorized Component Manufacturer
Manufactures specific engineered components to Carbotura's deterministic specification and DFM compliance standards. May supply directly to site or through the ASI. Scope bounded to defined sub-assemblies or component families. Holds component-level conformance and material certification responsibilities.
CAFI access: Node 2 write — as-built records, material certs, QC hold events, dimensional conformance data
Tier 3
Authorized Material Supplier
AMS — Authorized Material Supplier
Provides certified feedstocks, process chemistry, consumables, and reagents meeting Carbotura's input specification. Authorization includes approved supplier listing (ASL) status, certificate of conformance (CoC) obligations, and supply chain continuity commitments.
CAFI access: Selective Node 2/3 write — supply deviation events, CoC records, lot traceability data only
Tier 4
Authorized Technology Partner
ATP — Authorized Technology Partner
Contributes proprietary technology, process licenses, instrumentation systems, controls platforms, or specialized IP that integrates into the ACM stack. Relationship defined by a technology integration agreement covering interface specifications, software version control, and IP boundary rules.
CAFI access: Domain-scoped Node 1/3 read — spec interface data and relevant process telemetry within technology domain
Tier 5
Authorized Validation Partner
AVP — Authorized Validation Partner
Provides independent third-party testing, commissioning verification, FMEA audit, performance certification, and regulatory compliance verification. Structurally independent from the ASI and from Carbotura operations. AVP findings are authoritative inputs to the CAFI data lake. Engagement mandatory at FAT, SAT, and defined operational review intervals.
CAFI access: Full read across all nodes + validation write — test results, audit findings, performance certifications
Responsibility matrix across doctrine stages and CAFI protocol steps. R = Responsible A = Accountable C = Consulted I = Informed
| Doctrine stage / CAFI step |
ASI
Tier 1 |
ACM
Tier 2 |
AMS
Tier 3 |
ATP
Tier 4 |
AVP
Tier 5 |
| Stage I — Axiom definition | C | I | I | C | I |
| Stage II — Closed-loop design | C | C | I | C | I |
| Stage III — Deterministic specification | A | R | C | C | I |
| Stage IV — Failure mode enumeration | A | C | C | C | C |
| Stage V — RPN scoring | A | C | I | C | R |
| Stage VI — Mitigation & loop closure | R | R | C | C | A |
| Assembly, fabrication & test | A | R | I | C | C |
| FAT / SAT verification | A | C | I | I | R |
| Deployment & commissioning | R | C | I | C | A |
| Performance guarantee & warranty | R | I | I | I | C |
| Spares management | R | C | C | I | I |
| CAFI — Event ingestion | R | R | R | C | R |
| CAFI — Cross-node enrichment | A | C | I | C | C |
| CAFI — Intelligence return & action | R | R | C | C | A |
R Responsible — executes the activity
A Accountable — owns the outcome
C Consulted — provides input before/during
I Informed — notified of outcome
Tier designations are granted by Carbotura, Inc. and subject to active authorization agreements, qualification audits, and ongoing doctrine compliance review. Authorization may be suspended or revoked for material breach of doctrine obligations or sustained CAFI non-compliance.
Authorized vendor & partner inquiries are handled through the Carbotura vendor portal. Submit your inquiry to begin the authorization review process.
Submit Vendor Inquiry →