References
26.1 Normative references
Section titled “26.1 Normative references”An implementation needs these documents to conform. Where a version or date is given, that version applies.¶
- RFC 2119, Key words for use in RFCs to Indicate Requirement Levels, https://www.rfc-editor.org/rfc/rfc2119¶
- RFC 8174, Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words, https://www.rfc-editor.org/rfc/rfc8174¶
- RFC 8785, JSON Canonicalization Scheme (JCS), https://www.rfc-editor.org/rfc/rfc8785¶
- RFC 9162, Certificate Transparency Version 2.0, https://www.rfc-editor.org/rfc/rfc9162¶
- RFC 3161, Time-Stamp Protocol (TSP), https://www.rfc-editor.org/rfc/rfc3161¶
- RFC 4998, Evidence Record Syntax (ERS), https://www.rfc-editor.org/rfc/rfc4998¶
- RFC 7515, JSON Web Signature (JWS), https://www.rfc-editor.org/rfc/rfc7515¶
- RFC 9457, Problem Details for HTTP APIs, https://www.rfc-editor.org/rfc/rfc9457¶
- RFC 9728, OAuth 2.0 Protected Resource Metadata, https://www.rfc-editor.org/rfc/rfc9728¶
- RFC 8707, Resource Indicators for OAuth 2.0, https://www.rfc-editor.org/rfc/rfc8707¶
- RFC 8126, Guidelines for Writing an IANA Considerations Section in RFCs, https://www.rfc-editor.org/rfc/rfc8126¶
- CloudEvents 1.0.2, https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md¶
- Standard Webhooks, https://github.com/standard-webhooks/standard-webhooks/blob/main/spec/standard-webhooks.md¶
- C2SP tlog-checkpoint, https://c2sp.org/tlog-checkpoint¶
- C2SP signed-note, https://c2sp.org/signed-note¶
- C2SP tlog-tiles, https://c2sp.org/tlog-tiles¶
- C2SP tlog-cosignature, https://c2sp.org/tlog-cosignature¶
- JSON Schema 2020-12, https://json-schema.org/draft/2020-12¶
- OpenAPI Specification 3.1, https://spec.openapis.org/oas/v3.1.0¶
- Semantic Versioning 2.0.0, https://semver.org/spec/v2.0.0.html¶
- OpenLineage, https://openlineage.io/¶
- W3C PROV-O, https://www.w3.org/TR/prov-o/¶
- Model Context Protocol, Authorization (2025-06-18), https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization¶
- NIST SP 800-63B, Digital Identity Guidelines: Authentication and Authenticator Management, https://pages.nist.gov/800-63-4/sp800-63b.html¶
- NIST AI RMF 1.0 (NIST AI 100-1), https://doi.org/10.6028/NIST.AI.100-1, and NIST AI 600-1, Generative AI Profile, https://doi.org/10.6028/NIST.AI.600-1¶
26.2 Informative references
Section titled “26.2 Informative references”These references explain or motivate the rules; an implementation does not need them to conform. Most are carried from the research review. The Checked column marks which entries were re-verified for this draft.¶
Standards and guidance¶
| Reference | Checked |
|---|---|
| Open Inference Protocol (KServe V2)¶ | no |
| Open Policy Agent and Rego¶ | no |
| SR 26-2 (April 2026), superseding SR 11-7¶ | no |
Methods¶
| Reference | Checked |
|---|---|
| Talts et al. (2018), simulation-based calibration, arXiv:1804.06788¶ | no |
| Vehtari, Simpson, Gelman, Yao and Gabry (2024), Pareto smoothed importance sampling, JMLR 25(72)¶ | no |
| Vehtari, Gelman, Simpson, Carpenter and Bürkner (2021), rank-normalisation and improved R-hat and MCSE, Bayesian Analysis 16(2)¶ | no |
| Jin et al. (2017), Bayesian MMM with carryover and shape effects; Chan and Perry (2017), MMM challenges¶ | no |
| Runge et al. (2024), Robyn calibration objectives, arXiv:2403.14674¶ | no |
| Endogenous-spend MMM benchmark (2026), arXiv:2608.21130¶ | no |
| Nemhauser, Wolsey and Fisher (1978), greedy submodular maximisation¶ | no |
| Khuller, Moss and Naor (1999), the budgeted maximum coverage problem¶ | no |
| Leskovec et al. (2007), cost-effective outbreak detection (cost-scaled greedy with a best-single fallback)¶ | no |
| Bertrand, Duflo and Mullainathan (2004), serial correlation in DiD¶ | no |
| Chen and Au (2022), Trimmed Match, Annals of Applied Statistics 16(1)¶ | no |
| Braun and Schwartz (2025), divergent delivery, Journal of Marketing 89(2)¶ | no |
| Burtch et al. (2025), Lift versus A/B tests, arXiv:2508.21251¶ | no |
| Smith and Winkler (2006), the optimiser’s curse¶ | no |
| Box (1980), prior predictive checking; Neuenschwander et al. (2010), MAP priors; Schmidli et al. (2014), robust mixture priors¶ | no |
| Benjamini and Hochberg (1995), controlling the false discovery rate¶ | no |
| Benjamini and Yekutieli (2001), false discovery rate under dependency¶ | no |
| Holm (1979), a simple sequentially rejective multiple test procedure¶ | no |
| DerSimonian and Laird (1986), random-effects meta-analysis¶ | no |
| IntHout et al. (2014), the Hartung-Knapp-Sidik-Jonkman method for random-effects meta-analysis¶ | no |
| Egger et al. (1997), bias in meta-analysis detected by a graphical test¶ | no |
| Dwork et al. (2006), calibrating noise to sensitivity in private data analysis¶ | no |
| Fieller (1954), interval estimation of a ratio¶ | no |
| Hyndman and Fan (1996), sample quantiles in statistical packages¶ | no |
| Morris, White and Crowther (2019), using simulation studies to evaluate statistical methods¶ | no |
| Raiffa and Schlaifer (1961), applied statistical decision theory¶ | no |
| O’Hagan et al. (2006), Uncertain Judgements: Eliciting Experts’ Probabilities, Wiley¶ | no |
| Lakens et al. (2018), equivalence testing¶ | no |
| Embrechts et al. (2013), model uncertainty and VaR aggregation (dependence bounds)¶ | no |
| Pimentel, Murta, Braganholo and Freire (2019), notebook reproducibility, MSR¶ | no |
| Lei, Yu et al. (2024), Spider 2.0, arXiv:2411.07763; Deng et al., ReFoRCE, arXiv:2502.00675¶ | no |
| Greshake et al. (2023), indirect prompt injection, AISec¶ | no |
| Debenedetti et al. (2025), defeating prompt injections by design¶ | no |
| Stinnett and Mullahy (1998), net health benefit¶ | no |
Software. PyMC-Marketing (add_lift_test_measurements), Google Meridian (CalibrationBuilder, ROI priors), Meta Robyn (calibration_scope), ArviZ InferenceData, Trillian, Sigstore Rekor.¶
26.3 Provenance
Section titled “26.3 Provenance”This specification grew out of these project documents. They are informative background only (section 0): UMP Standard Document Plan; Model Governance Framework for Internal Models; MMM to EMA Technical Guide (v2, with non-geo experimentation); modeling-api Reference Notes (v0.15); UMP Decision Stack site; UMP Decision Stack Research Review.¶