Three caveats surfaced during walkthrough lived only in the
conversation transcript before this commit. Now they live where
future agents and future-me will actually see them:
- reach_operation.m and reachability/README.md state prominently that
the current reach tube is an over-approximation of the LINEAR
model, not a sound tube for the nonlinear plant. Thesis-blocking
for a real safety claim. Upgrade paths documented.
- ctrl_heatup.m header and plant-model/CLAUDE.md note that the
feedback-linearization u_ff assumes exact alpha_f, alpha_c. Real
plants drift (burnup ~20%, boron ~10x, xenon). Robust treatment =
parametric reach with alpha as an interval.
- ctrl_heatup.m header and plant-model/CLAUDE.md note that sat() is
formally a 3-mode piecewise-affine sub-system. Operation-mode LQR
is dormant (trivially); heatup will need either a dormancy proof
or explicit hybrid modeling.
README.md top-level now has a run-commands table for the reach
artifacts and a pointer to the soundness status.
Hacker-Split: raise caveats from transcript to artifact so the work
is actually reviewable by people who weren't in the room.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
bc3a6028a9