Every climate model drifts — energy leaks, mass fails to close, and no run ever refuses because of it. AURORA makes every timestep prove itself at machine precision, or halt. Not a tolerance you choose. An algebraic identity that either holds or doesn't.
Every climate simulation makes errors it doesn't report. AURORA makes conservation an algebraic identity — each timestep either proves itself or halts. The predictability horizon is a field you can map, not a scalar you fit.
Climate models have lived with energy drift, mass non-closure, and PV non-conservation because the alternative — failing the run — was institutionally unthinkable. AURORA makes the alternative cheap and routine.
The Davis Field Equations, instantiated for geophysical fluid dynamics. Capacity sets the predictability horizon. Closure decomposes every state into a regime assignment with no residual.
In a standard dycore, conservation drift is measured post-hoc and reported as a number in a paper appendix. In AURORA, it is checked at every step as an algebraic identity on the Casimir invariants of the Poisson bracket.
step :: uint64 wall_time :: monotonic_ns casimir_energy :: f64 # H, bit-exact across compatible profiles casimir_mass :: f64 # continuity as semidirect-product Casimir casimir_pv_l1 :: f64 # ∫ρ q dV — Ertel casimir_pv_l2 :: f64 # ∫ρ q² dV — potential enstrophy kelvin_holonomies :: map<loop_id, f64> # PLAQUETTE sums c_field_summary :: { min, max, mean, attractor_avg } s_d2_residual :: f64 # max |1 − S − d²| over mesh refusal_reason :: Option<{ casimir, expected, actual, eps_mult }>
eps_mult ≤ 8
per Casimir — a closed-form bound on the integrator's worst-case roundoff amplification,
derived once and pinned.
Williamson 2, 5, and 6 are the dycore-equivalent of MNIST. Any working geometric integrator passes them — AURORA's claim is that it passes them with zero drift, not just with skill.
Restraint is the credibility move. The reviewer will look for these. The substrate names them first.