{
  "format": "vercy-enterprise-profile-candidate/v1",
  "contourId": "EM-AI-02",
  "name": "Enterprise AI Model Artifact and Training Binding",
  "decision": "PROFILE",
  "newRuntimeId": false,
  "bases": [
    "WM-SFT-004",
    "WM-AI-007",
    "WM-AI-006",
    "WM-DAT-001",
    "WM-AI-005",
    "WM-AI-001",
    "WM-FLW-015"
  ],
  "constraints": [
    "WM-AI-007 owns registry identity, WM-SFT-004 owns immutable artifacts, WM-AI-006 owns runs, WM-DAT-001 owns datasets, WM-AI-001 owns the AI system and none owns another plane.",
    "Family and architecture classify registry entries and artifact lineage and never identify a registry entry, artifact, run, endpoint or system.",
    "Every WM-AI-006 run owns one immutable resolved effective-configuration digest covering base artifact, tokenizer, datasets, transforms, code, dependencies, parameters, seeds, environment, rights and reproducibility limits.",
    "Requested compute is an EM-WRK-05 demand assertion referencing the run; granted compute is an EM-WRK-05 reservation or quota; observed compute is WM-FLW-015 consumption. WM-AI-006 owns none and holds only typed references.",
    "A checkpoint remains run-contained only within its producing run; cross-run binding or retention beyond its run requires prior promotion to a WM-SFT-004 checkpoint-role artifact with digest and derivation to run and step.",
    "A derived artifact carries the union of restrictions from every version-qualified input including seed checkpoint and base artifact plus output restrictions; derivation never relaxes restrictions and sibling, family, alias, registry or endpoint edges never propagate them.",
    "WM-AI-006 is the single master of reproducibility; WM-SFT-004 may carry only a non-authoritative run-and-revision reference.",
    "No EM-AI-02 base masters endpoints or deployments; deployment state is an authority-qualified external observation and endpoint is an unowned typed reference here.",
    "Co-serving artifacts with divergent restrictions is HELD because no base owns bind-time rights evaluation.",
    "WM-AI-005 is a generic configuration type only and never the effective training record or a second run identity; WM-AI-001 owns neither weights nor endpoints.",
    "Every instant uses RFC 3339 seconds precision with explicit offset; ordering and duration comparisons are valid only within one clock kind and cross-clock arithmetic is rejected.",
    "When a referenced digest changes, evidence becomes stale and supports no lifecycle, rights, reproducibility or publication decision until re-asserted; the prior record remains resolvable.",
    "No profile constraint may depend on an unratified required relation; overridden bindings block publication until ledger approval."
  ],
  "holds": [
    "Reusable Training Recipe remains conditional and identifier-unassigned with no present independent identity.",
    "Independent Grok review complete; recorded in the EM-AI-02 provider comparison.",
    "Frozen semantic audit complete; recorded in this contour's frozen audit.",
    "No EM-AI-02 constraint may depend on an unratified required relation; both overridden bindings block publication until ledger edges are approved.",
    "Endpoint and deployment mastership is unassigned; endpoint invariants remain unenforceable until a frozen runtime or serving authority exists.",
    "Bind-time rights evaluation for co-serving is unowned and therefore held.",
    "Evaluation authority is contradictorily reported: WM-AI-003 is cited as existing but unfrozen in one study and absent in the other; evaluation remains identifier-unassigned.",
    "WM-SFT-004 asserts artifact-level reproducibility status; correction is required in that base spec before its next freeze.",
    "WM-AI-006 and WM-AI-007 are single-provider drafts under waiver (Codex only; Claude and Grok timed out at 120 s).",
    "No frozen evaluation, deployment or endpoint authority exists in this contour.",
    "WM-SFT-004 source ledger is inconsistent: 30 listed sources against 21 base plus three Grok enumerated in holds, with duplicate source IDs for SPDX, AI RMF, ONNX, safetensors and HF model cards.",
    "Source, crosswalk and fixture holds remain.",
    "No installability or publication-readiness claim is made."
  ],
  "candidateRevision": 2,
  "status": "held",
  "canonicalPublishable": false,
  "installable": false,
  "constraintsAreNonExhaustive": false,
  "evaluationAuthority": null,
  "basePins": [
    {
      "modelId": "WM-SFT-004",
      "version": null,
      "digest": null,
      "verification": "unverified-current-draft"
    },
    {
      "modelId": "WM-AI-007",
      "version": null,
      "digest": null,
      "verification": "unverified-current-draft"
    },
    {
      "modelId": "WM-AI-006",
      "version": null,
      "digest": null,
      "verification": "unverified-current-draft"
    },
    {
      "modelId": "WM-DAT-001",
      "version": null,
      "digest": null,
      "verification": "unverified-current-draft"
    },
    {
      "modelId": "WM-AI-005",
      "version": null,
      "digest": null,
      "verification": "unverified-current-draft"
    },
    {
      "modelId": "WM-AI-001",
      "version": null,
      "digest": null,
      "verification": "unverified-current-draft"
    },
    {
      "modelId": "WM-FLW-015",
      "version": null,
      "digest": null,
      "verification": "unverified-current-draft"
    }
  ],
  "invariants": [
    "Digest verifies bytes but does not replace governed identity.",
    "Equal names or aliases do not prove equal weights.",
    "Every run pins one immutable effective configuration digest.",
    "Training pins base model, tokenizer, data, code, dependencies, seeds and environment.",
    "Requested, granted and observed compute remain distinct externally mastered assertions.",
    "Compute grant implies no employment, identity, deployment or use.",
    "Checkpoint, final artifact, selection, release and deployment remain distinct; cross-run checkpoints require promotion.",
    "Endpoint changes create no run or artifact revision.",
    "Rights and lineage do not merge at a shared endpoint; derived restrictions are the union along derivation edges.",
    "Weight transformations create successor artifacts with lineage.",
    "Registry entry, artifact, run, evaluation and deployment remain separate.",
    "Protected weights and data stay outside the public catalogue.",
    "Reproducibility is bounded, environment-pinned and mastered by WM-AI-006.",
    "Different compute quantity kinds are never summed.",
    "Family and architecture classify registry entries and artifact lineage; they never identify a registry entry, artifact, run, endpoint or system.",
    "Reusable Training Recipe has no assigned identifier in this increment and may not be referenced as an identified object."
  ],
  "inheritedCardinalityOverrides": [
    {
      "from": "WM-AI-007",
      "to": "WM-SFT-004",
      "baseCardinality": "required",
      "profileCardinality": "conditional",
      "reason": "relation unratified; no ledger edge"
    },
    {
      "from": "WM-AI-006",
      "to": "WM-DAT-001",
      "baseCardinality": "required",
      "profileCardinality": "conditional",
      "reason": "ledger edge held as candidate"
    }
  ]
}