Definition: Predeclared certification contract

Before validation data are collected, specify:

1. input and output dimensions, basis identifications, Pauli frame, storage duration, and calendar-time window;

2. operations included in ${\mathcal{N}}_t$, the implemented decoder, all branches, and the output on every failure branch;

3. a fixed ancillary preparation and reset procedure sufficient to identify a logical CPTP channel, rather than a state-dependent system–environment assignment;

4. the reference $Q\cong C$, its isolation or calibrated disturbance, and any joint reference–device cross-talk allowance;

5. preparation and measurement calibration allowances and their simultaneous coverage probability;

6. the repetition model, sample counts, setting selection, optional-stopping rule if any, and permitted drift;

7. the complete outcome alphabet, including loss, leakage, unavailable readout, and heralded failure;

8. the error threshold $\epsilon$, total risk $\alpha$, and exact acceptance rule.

A decoder learned from training data is frozen before primary validation. Conditional on the training and calibration record, the validation contract must hold uniformly.