add ztt-uncert for ad hoc ztt OS -> isol OS uncertainty