{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-AI-03",
  "proposedName": "Standing Deployment Authorization Instrument",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NO NEW MODEL",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "A standing authorization is independently identifiable only when it persists beyond one decision occurrence with its own holder, scope, validity, renewal and revocation lifecycle.",
    "versionIdentity": "Scope, conditions, accountable authority, validity or safeguards change only through a successor instrument or revision.",
    "independentLifecycle": [
      "draft",
      "issued",
      "effective",
      "suspended",
      "revoked",
      "expired",
      "superseded"
    ],
    "mastership": null,
    "mastershipHold": "no frozen governance master exists for this candidate; mastership is unresolved and may not be inferred."
  },
  "boundary": {
    "owns": [
      "standing authorization identity",
      "holder, scope, conditions and safeguards",
      "validity, renewal, suspension and revocation",
      "issuing authority and competence evidence",
      "successor and supersession lineage"
    ],
    "references": [
      {
        "target": "WM-KNW-010",
        "purpose": "Decision options, criteria, conditions and rationale"
      },
      {
        "target": "WM-ACT-024",
        "purpose": "Authorized decision occurrence and competence"
      },
      {
        "target": "WM-REC-010",
        "purpose": "Issued record and immutable instrument evidence"
      },
      {
        "target": "WM-AI-008",
        "purpose": "Safety assessment cited as evidence"
      },
      {
        "target": "WM-AI-003",
        "purpose": "Evaluation evidence and reevaluation triggers"
      }
    ],
    "excludes": [
      "evaluation measurement",
      "safety assessment judgement",
      "decision rationale",
      "single issuance occurrence",
      "deployment or endpoint lifecycle"
    ]
  },
  "objects": {
    "DeploymentAuthorizationInstrument": {
      "identity": [
        "authorizationInstrumentId"
      ],
      "required": [
        "holderRef",
        "scope",
        "conditions",
        "authorityRef",
        "validFrom",
        "status",
        "currentRevisionRef"
      ],
      "optional": [
        "validTo",
        "renewalTerms",
        "revocationTerms",
        "successorRef",
        "revokedBy",
        "revokedAt",
        "revocationReason",
        "revocationAuthorityRef"
      ],
      "lifecycle": [
        "draft",
        "issued",
        "effective",
        "suspended",
        "revoked",
        "expired",
        "superseded"
      ]
    },
    "AuthorizationRevision": {
      "identity": [
        "authorizationInstrumentId",
        "revision"
      ],
      "required": [
        "scope",
        "conditions",
        "safeguards",
        "contentDigest",
        "effectiveFrom",
        "status"
      ],
      "optional": [
        "effectiveTo",
        "supersedesRevision"
      ]
    }
  },
  "invariants": [
    "Independent identity requires persistence beyond one issued decision record.",
    "Every authorization names accountable authority, holder, scope, conditions and validity.",
    "Assessment acceptance never implies authorization.",
    "Evaluation measurement never implies permission.",
    "Expired, revoked or suspended authorization is not effective.",
    "Context or subject changes require scope proof, successor authorization or explicit non-applicability.",
    "Issued records remain immutable and corrections are additive.",
    "Authorization conditions never overwrite cited assessment or evaluation evidence.",
    "Decision rationale, authorized act and issued instrument retain separate mastership.",
    "Renewal creates a governed successor or revision with preserved history.",
    "Revocation records actor, authority, time and reason.",
    "Standing authorization never owns deployment or endpoint runtime lifecycle.",
    "A high score cannot widen authorization scope.",
    "Retired identifiers and revisions remain resolvable and are never recycled.",
    "An unassigned candidate is not referenceable as an identified model and no identifier may be allocated, inferred or guessed.",
    "Exactly one revision is authoritative at any instant; superseded revisions remain resolvable.",
    "Revocation is recorded only with actor, authority, time and reason present.",
    "An unassigned candidate is not referenceable as an identified model and no identifier may be allocated, inferred or guessed.",
    "Exactly one revision is authoritative at any instant; superseded revisions remain resolvable.",
    "Revocation is recorded only with actor, authority, time and reason present.",
    "An unassigned candidate is not referenceable as an identified model and no identifier may be allocated, inferred or guessed.",
    "Exactly one revision is authoritative at any instant; superseded revisions remain resolvable.",
    "Revocation is recorded only with actor, authority, time and reason present."
  ],
  "holds": [
    "Independent Grok review and the single frozen semantic audit are complete; all material defects were remediated without rerun.",
    "The candidate has no present independent identity and remains identifier-unassigned.",
    "Grok's claim that this candidate can never require independent identity is rejected; absence is present-tense.",
    "No frozen governance master exists for this candidate.",
    "Registry allocation and canonical base publication remain unresolved.",
    "No installability or publication-readiness claim is made."
  ],
  "candidateRevision": 2,
  "status": "held",
  "installable": false,
  "presentIndependentIdentity": false,
  "conditionsUnmet": [
    "independent lifecycle and mastership distinct from the reused base models",
    "registry allocation"
  ],
  "decisionScope": "this checkpoint only",
  "conditional": true,
  "reopenCondition": "evidence of a lifecycle, approval and mastership independent of one evaluation occurrence or one issued decision record"
}
