Independence, simulation, and fail-closed rules are in Architecture, Verification model, and Threat model.
