Capability and admissibility are not the same thing.
The framework separates configuration structure Φ(cfg), its nominal ceiling S̄(cfg), and the current survivability S(t). A correct supervisor decision requires all three.
Structure, ceiling, current stateExpand section
Structure, ceiling, current state
The model contains three different quantities: Φ(cfg) tells which functions are structurally present; S̄(cfg) is the nominal survivability ceiling of the configuration; S(t) is the current value here and now.
Without this separation, the supervisor confuses “the function exists structurally” with “the function is truly delivered at the required quality”.
Not every available configuration is correctExpand section
Not every available configuration is correct
A resource-admissible configuration must not use a failed resource. A functionally admissible configuration must not declare active a function that lacks resource coverage.
Adm_F(cfg): each active function has sufficient W coverage
Optimization over an already filtered setExpand section
Optimization over an already filtered set
The DecisionEngine does not rank the whole catalogue blindly. It operates only on the subset that has already passed admissibility checks and then chooses by survivability, criticality, energy or other criteria.