For NMIs · 01 of 01
The Authority Quickstart
A runbook for a legal-metrology authority: stand up the OIML SMART
stack and reproduce a full type evaluation end to end. Every step
names the command and what the authority should see; the whole runbook
is gated by npm run orient (the same checklist the platform runs on
itself, browser/e2e/orient.e2e.ts in the oimlsmart/smart
repository, member access today, executed live).
0. Prerequisites
| Need | Check |
|---|---|
| Node.js 22 or 24 | node --version |
The oimlsmart/smart checkout |
cd smart |
| Ports free: 5190 (app), 3190 (auth) | lsof -i :5190 → nothing |
cd browser && npm install
1. The one-command proof, npm run reset-db && npm run dev
cd browser && npm run reset-db && npm run dev
What the authority should see: the seed prints the seven demo accounts
(their roles are the OIML-CS’s own, applicant, issuing authority,
test laboratory, CS administrator, MC/RC members, secretariat), and
the app serves http://localhost:5190/app (200). Demo accounts accept
any password, a development posture, never a deployment one.
2. Walk the certification workflow (the 14 seeded flows)
Sign in as ia@oiml.org (the issuing-authority officer). Open an
application: it carries its instrument model, its storyline, and its
dispatch. What the authority should verify:
- Dispatch is eligibility-gated: a laboratory only sees the tests
its declared competence covers (the lab-selection evaluator over
evaluation/lab-selection-criteria.yaml). - The evaluation report requires full coverage: every applicable provision of the Recommendation determined, with the conclusion on the type, no partial determinations pass.
- The certificate carries the workflow’s state machine: DRAFT → SUBMITTED → ACTIVE, with suspension and withdrawal as declared transitions (the certificate machine, not a status string).
3. Reproduce a type evaluation (the live demonstration, asserted)
cd browser && npm run pilot
What the authority should see (six asserted steps):
- ACME publishes, the type evaluation executes (20 forms × 3 samples); the certificate issues with 5/5 product promises verified (promises-as-verified, never decorative).
- The quarry integrates, the consumer’s design-time validation passes (the chain-rule gate: 3/3 tested characteristics covered, the capacity-within-E_max design check holds) and the live twin binds (four chain pairs, the indication flows to BOTH the R 60 requirements and the twin-fidelity program, the multi-standard reality).
- The monitor runs, hourly AND on change; a drift flags, an outage degrades to indeterminate, a truthful fault opens a service case (never a certificate flag).
- The passport serves, the product passport’s abstract + live views; its QR payload resolves through the endpoint.
- The audit trail, clause → promise → the quarter’s verdict history → this morning’s batch records: every link resolvable.
- The demonstration suite prints its own green lines; 6/6 asserted is the bar.
4. The Twin Lab (the authority’s workbench)
Open /app/twin-lab, pick R 60, point at a twin endpoint (a sim or a
real Primmel SMART instrument), Discover → Bind → Run cycle. The
verdict stream fills from the SAME verdict engine the workflow uses
(INV-9, never a second dialect). Then the guided run: the test’s
declared steps as a script, attested readings (of record) paired with
the twin’s auto-captured serves (with the pair skew judged against the
declared fresh_within).
5. The health checklist (all of it, one command)
cd browser && npm run orient
Eight printed steps, each green: login → the application → the
participant registry → the demo twin provisioned → a monitor cycle →
the twin-certification section (the ACTIVE twin certificate
TC/2027/DE-0042 + the D2 probe evidence) → the Twin Lab’s connect
surface. If any step is red, the output names exactly which link.
6. What the authority just verified
- The Recommendation executed as data, requirements, tests, forms, evaluation, the certificate machine.
- Eligibility-gated dispatch and coverage-gated evaluation, the OIML-CS’s own gates, mechanized.
- Traceability to the clause at every link (the position pack’s §2).
- The twin direction: live surveillance, twin certification, the workbench, all declaration, all provenance.
Next: the member-state narrative in the position pack, or the demo manual for the full operator detail.