Defence & Security — AR Rubric Data Twin

Foreword. Data Artifact: the machine-readable twin of VRS-DEF-201 (VRS 2026 (draft)) — the sector criteria with their point ranges, rungs and tier ceilings, the contributing intrinsic criteria, the letter bands and the application classes — generated FROM the protocol’s Clause 5–7 by tools/vrs-twin-generate.py. Consistency is by construction and re-verified on every build (conformance check 15). The JSON in Clause 4 is the normative payload; scorer tooling consumes it directly. A change to VRS-DEF-201 and to this twin is one change instrument.

1 Scope

This Data Artifact carries the rubric data of the Defence & Security (DEF) sector in machine-readable form: the 9 sector criteria of VRS-DEF-201 Clause 6 with points, rungs and Unverified / Verified / Certified ceilings; the contributing intrinsic criteria of Clause 5; the letter bands and application classes of Clause 7. It states no independent requirements. Where this artifact and VRS-DEF-201 could be read to differ, VRS-DEF-201 governs and this twin is regenerated to match.

2 Normative references

• VRS-DEF-201, Defence & Security — AR Assessment Protocol — source protocol twinned (Clauses 5–7).
• VRS-DEF-001, Defence & Security — Sector Standard — application classes and hazard groups.
• VRS-GEN-005, IR Methodology — point sum, tier ceilings, no-evidence rule.
• VRS-GEN-006, AR Scheme — pool mechanics, letter bands, tier caps by construction.
• VRS-GEN-002, Designation and Drafting Rules — criterion layout (§6.5) and versioning.

3 Terms and definitions

The terms of VRS-GEN-001 and VRS-DEF-201 apply. data twin — a machine-readable artifact regenerated one-to-one from a source protocol’s normative clauses. rung — a named state of a criterion awarding a stated integer number of points (VRS-GEN-002 §3.9). ceiling — the maximum points a criterion awards at a stated tier (VRS-GEN-002 §3.10).

4 Payload

Sector criteria total 100 points; ceilings Unverified 70, Verified 85, Certified 100.

{
  "_meta": {
    "description": "DEF sector AR rubric data twin — machine-readable form of VRS-DEF-201 Clause 5/6/7 (VRS 2026 (draft)). Generated by tools/vrs-twin-generate.py; never hand-edited.",
    "edition": "VRS 2026 (draft)",
    "source_protocol": "VRS-DEF-201 v1.0.0",
    "generated": "2026-09-16",
    "conforms_to": "VRS-GEN-005 §6 (point sum, tier ceilings); VRS-GEN-006 §6–§8 (pool, bands, tier caps by construction)"
  },
  "sector_code": "def",
  "bands_percent": {
    "AAA": 90,
    "AA": 75,
    "A": 60,
    "B": 45,
    "C": 0
  },
  "application_classes": [
    "ground UGV (logistics/ISR)",
    "EOD/CBRN (overlaps HAZ)",
    "base/perimeter security",
    "maritime security USV"
  ],
  "contributing_ir_criteria": [
    {
      "id": "SF-1",
      "document": "VRS-GEN-101",
      "clause": "6.1"
    },
    {
      "id": "SF-2",
      "document": "VRS-GEN-101",
      "clause": "6.2"
    },
    {
      "id": "SF-4",
      "document": "VRS-GEN-101",
      "clause": "6.4"
    },
    {
      "id": "SF-5",
      "document": "VRS-GEN-101",
      "clause": "6.5"
    },
    {
      "id": "SF-8",
      "document": "VRS-GEN-101",
      "clause": "6.8"
    },
    {
      "id": "RL-2",
      "document": "VRS-GEN-102",
      "clause": "6.2"
    },
    {
      "id": "RL-5",
      "document": "VRS-GEN-102",
      "clause": "6.5"
    },
    {
      "id": "SV-2",
      "document": "VRS-GEN-103",
      "clause": "6.2"
    },
    {
      "id": "SV-5",
      "document": "VRS-GEN-103",
      "clause": "6.5"
    },
    {
      "id": "CY-2",
      "document": "VRS-GEN-105",
      "clause": "6.2"
    },
    {
      "id": "CY-4",
      "document": "VRS-GEN-105",
      "clause": "6.4"
    },
    {
      "id": "CY-5",
      "document": "VRS-GEN-105",
      "clause": "6.5"
    },
    {
      "id": "MS-1",
      "document": "VRS-GEN-106",
      "clause": "6.1"
    },
    {
      "id": "MS-6",
      "document": "VRS-GEN-106",
      "clause": "6.6"
    },
    {
      "id": "MS-7",
      "document": "VRS-GEN-106",
      "clause": "6.7"
    },
    {
      "id": "SI-2",
      "document": "VRS-GEN-104",
      "clause": "6.2"
    },
    {
      "id": "SI-6",
      "document": "VRS-GEN-104",
      "clause": "6.5"
    }
  ],
  "sector_criteria": [
    {
      "clause": "6.1",
      "id": "DEF-1",
      "name": "Scope integrity — weapons-function exclusion verified",
      "points_max": 12,
      "what_is_measured": "Attestation and design evidence that the assessed configuration has no weapons function and no provision for one without hardware change.",
      "rungs": [
        {
          "points": 12,
          "state": "attested + witnessed configuration inspection"
        },
        {
          "points": 10,
          "state": "attested + design evidence"
        },
        {
          "points": 9,
          "state": "publicly evidenced only (no pack, no demonstration)"
        },
        {
          "points": 5,
          "state": "attested only"
        },
        {
          "points": 0,
          "state": "not attested"
        }
      ],
      "ceiling": {
        "unverified": 9,
        "verified": 10,
        "certified": 12
      },
      "company_wide": null,
      "evidence_bar": "Attestation required for any rating.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    },
    {
      "clause": "6.2",
      "id": "DEF-2",
      "name": "Own-force and bystander protection at speed and load",
      "points_max": 14,
      "what_is_measured": "Detection/stop for personnel in the operating area at declared speed/load; base-traffic behaviour.",
      "rungs": [
        {
          "points": 14,
          "state": "witnessed at limits"
        },
        {
          "points": 11,
          "state": "pack-evidenced (documents), not demonstrated"
        },
        {
          "points": 10,
          "state": "nominal"
        },
        {
          "points": 8,
          "state": "certified/tested ((public))"
        },
        {
          "points": 5,
          "state": "documented"
        },
        {
          "points": 0,
          "state": "not established"
        }
      ],
      "ceiling": {
        "unverified": 8,
        "verified": 11,
        "certified": 14
      },
      "company_wide": null,
      "evidence_bar": "Envelope declared.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    },
    {
      "clause": "6.3",
      "id": "DEF-3",
      "name": "Contested-environment integrity (jamming, spoofing, interference)",
      "points_max": 14,
      "what_is_measured": "Navigation and link behaviour under GNSS denial/spoofing and RF interference; safe degradation.",
      "rungs": [
        {
          "points": 14,
          "state": "witnessed degradation on a test range (lab route)"
        },
        {
          "points": 11,
          "state": "pack-evidenced (documents), not demonstrated"
        },
        {
          "points": 10,
          "state": "test data"
        },
        {
          "points": 8,
          "state": "publicly evidenced only (no pack, no demonstration)"
        },
        {
          "points": 6,
          "state": "documented"
        },
        {
          "points": 0,
          "state": "not established"
        }
      ],
      "ceiling": {
        "unverified": 8,
        "verified": 11,
        "certified": 14
      },
      "company_wide": null,
      "evidence_bar": "Link/positioning architecture declared.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    },
    {
      "clause": "6.4",
      "id": "DEF-4",
      "name": "Environmental qualification (MIL-STD-810 or equivalent)",
      "points_max": 12,
      "what_is_measured": "Temperature, shock, vibration, sand/dust, immersion per declared theatres.",
      "rungs": [
        {
          "points": 12,
          "state": "certificates + witnessed sample"
        },
        {
          "points": 11,
          "state": "pack-evidenced (documents), not demonstrated"
        },
        {
          "points": 10,
          "state": "certificates/reports public"
        },
        {
          "points": 6,
          "state": "ratings declared"
        },
        {
          "points": 0,
          "state": "not established"
        }
      ],
      "ceiling": {
        "unverified": 10,
        "verified": 11,
        "certified": 12
      },
      "company_wide": null,
      "evidence_bar": "Theatre envelope declared.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    },
    {
      "clause": "6.5",
      "id": "DEF-5",
      "name": "Field maintainability by uniformed maintainers",
      "points_max": 12,
      "what_is_measured": "Module swaps with organic tools; maintainer training; spares kits.",
      "rungs": [
        {
          "points": 12,
          "state": "witnessed swaps + training + kits"
        },
        {
          "points": 10,
          "state": "pack-evidenced (documents), not demonstrated"
        },
        {
          "points": 9,
          "state": "documented in detail"
        },
        {
          "points": 5,
          "state": "documented"
        },
        {
          "points": 0,
          "state": "not established"
        }
      ],
      "ceiling": {
        "unverified": 9,
        "verified": 10,
        "certified": 12
      },
      "company_wide": {
        "text": "Record company-wide → 9",
        "ceiling": 9
      },
      "evidence_bar": "None.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    },
    {
      "clause": "6.6",
      "id": "DEF-6",
      "name": "Capture and compromise resilience",
      "points_max": 14,
      "what_is_measured": "Data-at-rest encryption, zeroisation, anti-tamper, remote disable; technology-exposure controls.",
      "rungs": [
        {
          "points": 14,
          "state": "witnessed zeroisation/anti-tamper + accreditation"
        },
        {
          "points": 11,
          "state": "pack-evidenced (documents), not demonstrated"
        },
        {
          "points": 10,
          "state": "accreditation/certificate public"
        },
        {
          "points": 8,
          "state": "publicly evidenced only (no pack, no demonstration)"
        },
        {
          "points": 6,
          "state": "documented"
        },
        {
          "points": 0,
          "state": "not established"
        }
      ],
      "ceiling": {
        "unverified": 8,
        "verified": 11,
        "certified": 14
      },
      "company_wide": null,
      "evidence_bar": "None.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    },
    {
      "clause": "6.7",
      "id": "DEF-7",
      "name": "Cyber accreditation and vulnerability handling",
      "points_max": 10,
      "what_is_measured": "National/coalition cyber accreditation; PSIRT/CVD; patch history.",
      "rungs": [
        {
          "points": 10,
          "state": "accreditation + PSIRT + history"
        },
        {
          "points": 9,
          "state": "pack-evidenced (documents), not demonstrated"
        },
        {
          "points": 8,
          "state": "PSIRT + history public"
        },
        {
          "points": 5,
          "state": "policy"
        },
        {
          "points": 0,
          "state": "not established"
        }
      ],
      "ceiling": {
        "unverified": 8,
        "verified": 9,
        "certified": 10
      },
      "company_wide": {
        "text": "Company-wide → 8",
        "ceiling": 8
      },
      "evidence_bar": "None.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    },
    {
      "clause": "6.8",
      "id": "DEF-8",
      "name": "Programme continuity and export/security constraints",
      "points_max": 6,
      "what_is_measured": "Multi-year support commitments; export-control status disclosed; supply-chain continuity.",
      "rungs": [
        {
          "points": 6,
          "state": "commitments + disclosed constraints + record"
        },
        {
          "points": 5,
          "state": "publicly evidenced or company-wide record"
        },
        {
          "points": 4,
          "state": "commitments"
        },
        {
          "points": 2,
          "state": "described"
        },
        {
          "points": 0,
          "state": "not established"
        }
      ],
      "ceiling": {
        "unverified": 5,
        "verified": 6,
        "certified": 6
      },
      "company_wide": {
        "text": "Company-wide → 5",
        "ceiling": 5
      },
      "evidence_bar": "None.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    },
    {
      "clause": "6.9",
      "id": "DEF-9",
      "name": "Mission incident record",
      "points_max": 6,
      "what_is_measured": "Incidents over the window (declassified/public sources).",
      "rungs": [
        {
          "points": 6,
          "state": "none (model)"
        },
        {
          "points": 5,
          "state": "publicly evidenced or company-wide record"
        },
        {
          "points": 4,
          "state": "null-result rung"
        },
        {
          "points": 3,
          "state": "remediated"
        },
        {
          "points": 0,
          "state": "not established"
        }
      ],
      "ceiling": {
        "unverified": 5,
        "verified": 6,
        "certified": 6
      },
      "company_wide": {
        "text": "Company-wide → 5",
        "ceiling": 5
      },
      "evidence_bar": "None.",
      "applicability": "ground UGV (logistics/ISR) · EOD/CBRN (overlaps HAZ) · base/perimeter security · maritime security USV. All criteria apply to all classes.",
      "not_applicable_by_class": false
    }
  ],
  "pool": {
    "sector_only": {
      "points": 100,
      "ceiling_unverified": 70,
      "ceiling_verified": 85,
      "ceiling_certified": 100,
      "best_letter": {
        "unverified": "A",
        "verified": "AA",
        "certified": "AAA"
      }
    },
    "with_contributors": "contributor ceilings are those of the cited IR standards; the combined pool sums are verified by the conformance gate (check 14)"
  },
  "rules": {
    "no_evidence": "0 points (VRS-GEN-005 §6, R3.3); the criterion stays in the pool at full range",
    "not_applicable": "criterion removed from numerator and denominator for that class (VRS-GEN-006 §6)",
    "tier_rule": "AR tier ≤ IR tier (VRS-GEN-006 §7)"
  }
}

5 Field dictionary

6 Verification

Regenerate with python3 tools/vrs-twin-generate.py --sector def --check; a non-zero exit means the committed twin no longer matches VRS-DEF-201 and shall be regenerated before publication.

Bibliography

• VRS-DEF-201, Defence & Security — AR Assessment Protocol, v1.0.0, 2026 — the source of every number in Clause 4.
• VRS-DEF-001, DEF Sector Standard, 2026 — sector scope, hazard taxonomy and application classes.
• VRS-GEN-005, Intrinsic Rating — Methodology, 2026 — point aggregation and tier ceilings for the contributing IR criteria.
• VRS-GEN-006, Application Rating Scheme, 2026 — letter bands and pool mechanics reproduced in bands_percent and pool.
• VRS-GEN-002, Designation and Drafting Rules, 2026 — §6.5 criterion layout and §7.5.1 (ceilings equal rungs) that this twin verifies.
• VRS-GEN-004, Change, Edition and Review Policy, 2026 — how a twin regeneration is designated.
• VRS-GEN-009, Robot Risk Passport and Registry — Data Schema, 2026 — consumer of the payload.
• ISO/IEC 21778:2017, Information technology — The JSON data interchange syntax.

Change history