---
title: 'VVUQ: Verification, Validation & Uncertainty Quantification'
url: https://www.emergentmind.com/topics/verification-validation-and-uncertainty-quantification-vvuq
type: topic
---

# VVUQ: Verification, Validation & Uncertainty Quantification

Verification, validation, and uncertainty quantification (VVUQ) denotes a fit-for-purpose, risk-informed framework for establishing the credibility of computational models and simulations. Verification asks whether the model equations are being solved right; validation asks whether the equations are right for the intended use; uncertainty quantification characterizes and propagates uncertainty in inputs, measurements, model structure, and surrogate approximations to decision-relevant predictions. Across multiscale simulation, Bayesian calibration, formal probabilistic verification, and data-driven surrogates, VVUQ links numerical correctness, empirical adequacy, and predictive uncertainty into a single workflow oriented toward predictive distributions rather than single-valued best estimates [2105.00553][2509.21697].

## 1. Core concepts and scope

VVUQ is commonly organized around three distinct but coupled tasks. Verification assesses numerical correctness and includes code verification and solution verification. Validation assesses model adequacy by comparing predictions with experimental or observational data in the relevant domain of use. Uncertainty quantification propagates quantified uncertainties to predictions and risk metrics, so that safety margins, acceptance criteria, or other performance thresholds can be evaluated probabilistically rather than pointwise [2105.00553].

| Pillar | Core question | Typical focus |
|---|---|---|
| Verification | “are we solving the model equations right?” | code verification, solution verification |
| Validation | “are the equations the right ones for the intended use?” | comparison with data, adequacy for context of use |
| Uncertainty quantification | predictive distributions, not single-valued best estimates | uncertainty propagation to predictions and risk metrics |

In application-specific credibility frameworks, VVUQ is explicitly tied to context of use and model risk. In radiotheranostics, for example, PBPK-based theranostic digital twins are framed through a fit-for-purpose, risk-informed foundation in which credibility goals and activities are aligned with conceptual and code verification, internal and external validation, global sensitivity analysis, uncertainty propagation, and decision-focused prediction evaluation. In nuclear systems modeling, the Best Estimate plus Uncertainty paradigm similarly requires predictive distributions for safety-relevant quantities so that acceptance criteria are demonstrated with quantified uncertainty rather than nominal predictions alone [2509.21697][2105.00553].

A recurring implication is that VVUQ is not reducible to a single metric or a single stage in model development. Verification without validation can establish numerical consistency while leaving physical adequacy unresolved. Validation without uncertainty quantification can show nominal agreement while obscuring whether that agreement is robust to parameter, measurement, or model-form uncertainty. UQ without verification and validation can propagate errors whose numerical or physical meaning has not been established.

## 2. Verification: numerical correctness and quantified numerical uncertainty

In PDE-based simulation, verification is primarily concerned with discretization, solver convergence, and implementation correctness. Standard solution-verification analyses adopt an asymptotic error model
\[
f(h) - f_0 = A h^p + o(h^p),
\]
where \(f(h)\) is the quantity of interest at mesh size \(h\), \(f_0\) is the exact-but-unknown value, and \(p\) is the observed order. With three successively refined meshes and refinement ratio \(r\), Richardson extrapolation estimates
\[
\hat f_0 = f(h_1) + \frac{f(h_1)-f(h_2)}{r^{\hat p}-1},
\]
and the Grid Convergence Index uses a safety factor \(F_s\) to form an interval around the finest-grid result. A complementary Bayesian paradigm models discretization uncertainty with Gaussian processes and produces a posterior mean and credible interval for \(f_0\), rather than a deterministic extrapolation interval [2103.14559].

In multiphysics and ODE-based applications, solution verification also includes time-step refinement and solver comparisons. For PBPK models, one recommended convergence study evaluates
\[
\mathcal{R} = \frac{\|y_{\Delta t} - y_{\Delta t/2}\|}{\|y_{\Delta t/2} - y_{\Delta t/4}\|} \to 2^p,
\]
alongside unit tests, dimensional checks, mass-balance tests, regression tests, monitoring of step rejection, and Jacobian conditioning. Manufactured or analytical solutions for simplified subsystems provide an additional route for code and solution verification when exact reference behavior is available [2509.21697].

Verification also appears in formal probabilistic settings. For discrete-time Markov chains, confidence-interval quantitative verification propagates parameter confidence intervals to property-level confidence intervals for PCTL requirements. Decision rules are then stated directly in terms of whether the current property interval lies entirely on the satisfying side of a threshold, entirely on the violating side, or still straddles the decision boundary. When the boundary is unresolved, additional unit-testing data are acquired adaptively to reduce epistemic uncertainty in the most decision-critical components [2109.02984].

A common misconception is that verification is synonymous with validation. The distinction remains fundamental: convergence, conservation, solver residuals, or confidence-interval model checking establish correctness of the computational procedure for a specified mathematical object, not empirical adequacy of that object relative to reality.

## 3. Validation: data comparison, adequacy, and calibration of uncertainty

Validation compares predictions with measurements, benchmarks, or observational data in the intended domain of use. In mechanistic models this comparison may be internal, using the data employed during fitting, or external, using held-out or independent data. Internal validation commonly relies on visual fit of time-activity curves, residual-versus-time or residual-versus-predicted diagnostics, histograms centered at zero, SSE, MSE, \(R^2\), parameter coefficients of variation, correlation matrices, and simulation-based checks such as Visual Predictive Checks, Normalized Prediction Distribution Errors, and posterior predictive checks. External validation extends this with RMSE, MAE, likelihood-based criteria, coverage, PIT histograms, concordance correlation coefficients, and Bland–Altman plots [2509.21697].

In multiscale and ensemble simulation, validation may be distributional rather than pointwise. VECMAtk implements a ValidationSimilarity pattern that compares probability distributions of quantities of interest from simulations and experiments using Hellinger distance, Jensen–Shannon distance, and Wasserstein metrics. It also implements EnsembleValidation, which validates each run in an ensemble and aggregates results into a combined validation metric [2010.03923].

Bayesian validation approaches explicitly compare hypotheses. In a BEPU-oriented framework, the calibrated and uncalibrated models are treated as competing hypotheses,
\[
B_{01} = \frac{p(D^{\mathrm{VAL}}\mid H_0)}{p(D^{\mathrm{VAL}}\mid H_1)},
\]
where \(H_0\) corresponds to the calibrated model and \(H_1\) to the uncalibrated one. The Bayes factor then quantifies support in validation data for posterior-informed versus prior-informed parameter uncertainty and can be propagated into prediction through Bayesian model averaging [2105.00553].

Validation of uncertainty estimates is itself a separate problem. For variance-based UQ, consistency asks whether
\[
\mathbb{E}\!\left[(Y-\mu(X))^2 \mid \sigma(X)=\sigma\right] \approx \sigma^2,
\]
while adaptivity asks whether calibration remains valid across the input domain rather than only on average. For interval-based UQ, the corresponding condition is
\[
\mathbb{P}\!\left(Y\in I_{\alpha}(X)\mid X\in S\right)\approx 1-\alpha
\]
for subsets \(S\) of feature space. Reliability diagrams, calibration curves, local coverage analyses, and confidence curves therefore test different aspects of UQ validity; none of them, by itself, covers all desirable properties [2303.07170].

This suggests that validation is not exhausted by low RMSE or favorable residual plots. Distributional similarity, hypothesis support, coverage, and feature-conditional reliability can disagree, and VVUQ practice increasingly treats those disagreements as diagnostic rather than exceptional.

## 4. Uncertainty quantification and sensitivity analysis

UQ in contemporary VVUQ explicitly distinguishes multiple uncertainty sources. A BEPU-oriented taxonomy includes parameter uncertainty, experimental or measurement uncertainty, model uncertainty caused by missing or incomplete physics and numerical approximation errors, and code uncertainty when surrogate models are used [2105.00553]. Application-specific taxonomies often recast these sources into aleatoric and epistemic terms. In PBPK dosimetry, aleatoric uncertainty includes imaging noise, ROI segmentation, TAC sampling schedules, counting statistics, partial volume effects, motion, and biological variability, whereas epistemic uncertainty includes parameter uncertainty, model structure, S-values, and decay-product biodistribution [2509.21697]. In ML surrogates, a closely related category is code/interpolation uncertainty, arising from data coverage, extrapolation, imperfect architecture, and stochastic training [2503.17385][2206.14615].

Non-intrusive propagation methods are widely used. EasyVVUQ supports stochastic collocation, polynomial chaos expansion, variance-based sensitivity analysis, Sobol analysis, bootstrapping, and basic statistics; it can also integrate surrogates and emulators for model-form uncertainty [2010.03923]. In CFD-oriented workflows, standard and probabilistic polynomial chaos expansions are used to propagate uncertainty from design variables and observation-dependent noise, while heteroscedastic Gaussian process regression supplies surrogates with input-dependent predictive variance [2007.07071]. In fusion virtual qualification, nested sampling over aleatoric and epistemic inputs yields an ensemble of CDFs whose envelope defines a probability box,
\[
F_{\mathrm{lower}}(x)=\min_i F_i(x), \qquad F_{\mathrm{upper}}(x)=\max_i F_i(x),
\]
so that both types of uncertainty are retained without collapsing to a single precise distribution [2605.11886].

Global sensitivity analysis provides the main bridge between UQ and model reduction. Variance-based Sobol decomposition writes
\[
\operatorname{Var}(Y)=\sum_i V_i+\sum_{i<j}V_{ij}+\cdots,
\]
with first-order and total-order indices
\[
S_i=\frac{V_i}{\operatorname{Var}(Y)}, \qquad
S_{T_i}=1-\frac{\operatorname{Var}_{X_{\sim i}}\!\big(E[Y\mid X_{\sim i}]\big)}{\operatorname{Var}(Y)}.
\]
These indices quantify main effects and all interaction effects attributable to each input. Morris screening, eFAST, and PRCC provide complementary low-cost or monotonicity-oriented rankings when full Sobol analysis is impractical [2010.03923][2509.21697][1809.09184].

In data-driven models, UQ methods now include Gaussian process predictive variance, Monte Carlo Dropout, Deep Ensembles, Bayesian Neural Networks, and conformal prediction. The central issue is that ML surrogates introduce approximation uncertainty when they replace expensive physical models. That uncertainty is smaller when mean predictions are close to test data and larger when they deviate or extrapolate; in nuclear engineering case studies, Bayesian neural networks generally produced larger uncertainties than Monte Carlo Dropout and Deep Ensembles [2206.14615][2503.17385].

## 5. Inverse UQ, statistical calibration, and model discrepancy

Inverse UQ infers uncertain model parameters from comparisons between simulation outputs and experimental data. A standard observation model writes
\[
y^{\mathrm{E}}(x)=f(x,\theta^\ast)+\delta(x)+\varepsilon,
\]
where \(f(x,\theta^\ast)\) is the code prediction, \(\delta(x)\) is model discrepancy, and \(\varepsilon\) is measurement noise. In Bayesian form,
\[
p(\theta,\delta,\sigma^2\mid D)\propto p(D\mid \theta,\delta,\sigma^2)\,p(\theta)\,p(\delta)\,p(\sigma^2),
\]
and if a surrogate \(s(x,\theta)\) replaces the high-cost simulator, code uncertainty is added through
\[
\Sigma=\Sigma_{\mathrm{exp}}+\Sigma_{\mathrm{bias}}+\Sigma_{\mathrm{code}}.
\]
This formulation makes calibration, validation, and surrogate error accounting part of a single posterior inference problem [2105.00553].

A major practical development is the Modular Bayesian Approach. In TRACE inverse UQ, one Gaussian process emulator represents the code and another represents model discrepancy inferred from validation data. Hyperparameters are estimated modularly rather than jointly, MCMC is then performed only over the physical parameters, and model discrepancy is used to avoid over-fitting. The same work introduces a sequential test source allocation strategy that first selects validation tests with full coverage of the test domain and then selects inverse-UQ tests that fill unoccupied regions, so that discrepancy extrapolation is reduced and posterior parameter distributions are informed by the most informative experiments [1801.09261].

Inverse UQ is not a purely Bayesian domain. A comparative survey of thermal-hydraulics practice organizes methods into frequentist, Bayesian, and empirical groups and evaluates them through solidity, complexity, accessibility, independence, flexibility, comprehensiveness, transparency, and tractability. Across those methods, recurrent technical issues are parameter identifiability, confounding between \(\theta\) and \(\delta(x)\), prior sensitivity, and the distinction between calibration data and validation data [2104.12919].

Validation evidence can also be transported into prediction. In a BEPU workflow, Bayes factors comparing calibrated and uncalibrated models on validation data are mapped to Bayesian model averaging weights,
\[
\alpha = \frac{B_{01}}{B_{01}+1},
\]
and used to mix prior- and posterior-based predictive distributions. This prevents weak validation evidence from being ignored while also avoiding unconditional trust in a calibrated posterior that may have overfit the calibration domain [2105.00553].

A common misconception is that a sharply concentrated posterior is automatically desirable. The inverse-UQ literature shows the opposite can hold: excluding model discrepancy can shrink posterior variances and improve in-sample agreement while degrading robustness on new validation data.

## 6. Workflows, software environments, and scalable execution

VVUQ is also a workflow problem. VECMAtk provides a flexible, open-source toolkit for single-scale and multiscale simulations that combines directly applicable and reusable procedures for verification, validation, sensitivity analysis, and uncertainty quantification. Its canonical EasyVVUQ workflow consists of application description through an encoder, decoder, and execution action; sampling; execution; collation into an SQL database; and analysis, including the possibility of staged sampling and restartability [2010.03923].

| Component | Role | Selected capabilities |
|---|---|---|
| EasyVVUQ | non-intrusive VVUQ workflow library | sampling, encoding, collation, analysis |
| FabSim3 | workflow automation toolkit | ensemble runs, remote execution, code coupling |
| MUSCLE 3 | multiscale coupling library | time-scale separation, spatial scale separation, parameter overlays |
| QCG tools | advanced HPC workflow suite | pilot jobs, brokered submission, monitoring |

These components are explicitly recombinable. EasyVVUQ supports stochastic collocation, polynomial chaos expansion, variance-driven sensitivity analysis, Sobol analysis, and bootstrapping. FabSim3 curates environment and state variables for reproducibility and automates ensemble execution. MUSCLE 3 supports macro–micro couplings, vector ports, sets of instances, and semi-intrusive UQ patterns for multiscale models. QCG-PilotJob executes many small or varied-resource jobs efficiently within a single scheduler allocation, and EQI provides a domain-oriented interface for running EasyVVUQ campaigns through QCG-PJ on HPC systems [2010.03923].

Scalability is a first-class concern. QCG-PJ can efficiently execute 10,000 jobs with less than 10% overhead, even when jobs are one second long. EasyVVUQ’s SQL backend handles tens of thousands of samples, while FabSim3 multi-threaded submissions reduce per-job overhead. For embarrassingly parallel computational medicine workloads, CloudVVUQ extends the EasyVVUQ workflow to AWS Lambda, Google Cloud Functions, and Google Cloud Run. Reported experiments achieved approximately \(195\times\) speedup for a 54,272-sample lower-limb haemodynamics study, approximately \(366\times\) speedup for a 1,000-sample Ten Tusscher campaign on Cloud Run, and approximately \(723\times\) speedup in a larger 1,728-sample full-parallelization experiment [2304.08190].

This suggests that practical VVUQ increasingly depends on orchestration choices as much as on inference choices. Pilot-job systems remain necessary under scheduler constraints for large ensembles, while serverless execution is viable for short and medium-duration independent tasks but not for tightly coupled, MPI-based, or long-running simulations [2010.03923][2304.08190].

## 7. Applications, limitations, and emerging directions

VVUQ now spans a wide range of scientific and engineering domains. Examples include nuclear system thermal-hydraulics and BEPU analysis, multiscale CFD and wall-boiling closure relations, PBPK models for theranostic digital twins, probabilistic virtual qualification of fusion high heat flux components, formal verification of nonfunctional requirements in software systems modeled as DTMCs, uncertainty-aware ML surrogates in nuclear engineering, and quantum characterization, verification, and validation of qubits, gates, and processors [2105.00553][1809.09184][2509.21697][2605.11886][2109.02984][2503.17385][2503.16383].

Across these applications, several limitations recur. First, numerical formulas and software workflows do not remove the need for domain-specific judgment about context of use, experiment selection, and acceptable extrapolation. Second, model discrepancy remains hard to identify from sparse data; additive discrepancy terms can confound with parameter effects, and extrapolating discrepancy beyond the domain where it was learned is risky. Third, uncertainty metrics themselves require validation: average calibration can hide severe local miscalibration, so consistency and adaptivity must be examined explicitly. Fourth, computational convenience can bias methodology choice; simple range-adjustment or point-estimate calibration procedures remain attractive, but they may fail to separate experimental uncertainty, parameter uncertainty, and model-form error in a defensible way [2104.12919][2303.07170][2105.00553].

Another misconception is that VVUQ is only relevant to traditional physics solvers. The current literature shows the opposite. ML models require explicit UQ because approximation uncertainty arises from data noise, limited coverage, extrapolation, and stochastic training. Quantum information processing has developed QCVV as an application-specific analogue, with characterization estimating predictive models for device behavior and benchmarking assessing overall performance through randomized benchmarking and holistic metrics. Fusion virtual qualification treats validation as the cornerstone of simulation-led component qualification and uses p-box propagation plus probabilistic validation metrics to isolate model-form error from aleatoric and epistemic uncertainty [2503.17385][2503.16383][2605.11886].

The emerging direction is therefore not a single universal metric but a layered, risk-informed practice. Verification quantifies numerical correctness and numerical uncertainty; validation measures adequacy against data with metrics appropriate to the model-output structure; UQ propagates all major quantified uncertainties to decision-relevant outputs; and scalable workflow systems make the resulting procedures operational across ensembles, multiscale couplings, and modern surrogate models. In that sense, VVUQ is best understood as a credibility architecture for computational prediction rather than as a single method or a fixed checklist.

Source: https://www.emergentmind.com/topics/verification-validation-and-uncertainty-quantification-vvuq