{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-FAC-01",
  "proposedName": "Workplace Allocation",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NEW MODEL",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "A governed relationship between exactly one engagement context and one physical, generalized, client-site, home-jurisdiction or mobile work locus remains identifiable across address, endpoint description, recurrence and booking changes.",
    "versionIdentity": "Changes to locus, workplace kind, validity, recurrence, exclusivity, purpose or primary status create effective-dated allocation versions while preserving prior allocation history.",
    "independentLifecycle": [
      "proposed",
      "approved",
      "active",
      "suspended",
      "ended",
      "superseded",
      "revoked"
    ],
    "mastership": "workplace planning and allocation authority"
  },
  "boundary": {
    "owns": [
      "persistent workplace-allocation identity",
      "employment or engagement context reference",
      "locus choice and workplace kind",
      "effective validity and recurrence",
      "exclusive, shared or pooled allocation semantics",
      "purpose, approving authority and primary-location assertion",
      "disclosure class and allocation status",
      "supersession and termination history"
    ],
    "references": [
      {
        "target": "WM-ORG-005",
        "purpose": "Employment or engagement context"
      },
      {
        "target": "WM-ORG-016",
        "purpose": "Work-assignment context only; position identity resolves through its own applicable master."
      },
      {
        "target": "WM-BLT-002",
        "purpose": "Premises or spatial-unit locus"
      },
      {
        "target": "WM-BLT-008",
        "purpose": "Site or campus locus"
      },
      {
        "target": "WM-PLC-010",
        "purpose": "Generalized place or jurisdiction locus"
      }
    ],
    "excludes": [
      "person, employment, assignment, place, site or premises identity",
      "home address or residential premises record",
      "lease, licence or ownership terms",
      "physical or logical access authorization",
      "desk, room or visit booking",
      "legal branch or establishment identity"
    ]
  },
  "objects": {
    "WorkplaceAllocation": {
      "identity": [
        "workplaceAllocationId"
      ],
      "required": [
        "engagementContextRef",
        "approvingAuthorityRef",
        "status"
      ],
      "optional": [
        "currentVersionRef",
        "endedAt"
      ],
      "lifecycle": [
        "proposed",
        "approved",
        "active",
        "suspended",
        "ended",
        "superseded",
        "revoked"
      ]
    },
    "AllocationVersion": {
      "identity": [
        "workplaceAllocationId",
        "version"
      ],
      "required": [
        "locus",
        "workplaceKind",
        "validFrom",
        "contentDigest",
        "status",
        "exclusivity",
        "disclosureClass"
      ],
      "optional": [
        "validTo",
        "recurrence",
        "purpose",
        "primaryLocation",
        "supersedesVersion",
        "primaryProfileRef"
      ],
      "lifecycle": [
        "draft",
        "approved",
        "active",
        "superseded",
        "withdrawn"
      ],
      "defaults": {
        "disclosureClass": "non-public",
        "exclusivity": "exclusive"
      }
    },
    "LocusChoice": {
      "identity": [
        "locusChoiceId"
      ],
      "required": [
        "locusKind",
        "granularityCeiling"
      ],
      "optional": [
        "premisesRef",
        "siteRef",
        "generalizedPlaceRef",
        "externalSiteRef",
        "mobileRegionRef"
      ],
      "oneOf": [
        "premisesRef",
        "siteRef",
        "generalizedPlaceRef",
        "externalSiteRef",
        "mobileRegionRef"
      ],
      "oneOfRule": "Exactly one field named in oneOf is populated and it matches locusKind.",
      "mobileRegionAuthority": "WM-PLC-010 generalized place or jurisdiction reference"
    }
  },
  "invariants": [
    "Every allocation resolves to exactly one explicit employment or engagement context.",
    "A locus choice identifies one permitted locus form and never silently converts between place, site and premises identities.",
    "Remote-home allocation stores only the approved generalized place or jurisdiction detail required for its purpose.",
    "Home work never creates a company office, public residential premises or ownership assertion.",
    "Workplace allocation never grants physical or logical access.",
    "A lease, licence or client-site agreement remains an external agreement record.",
    "A pooled allocation is not a desk reservation and an individual booking does not create an allocation.",
    "Office is an effective-dated use designation and never a new physical identity.",
    "A location designation never creates a legal branch or establishment.",
    "At most one primary allocation is effective per engagement context and period unless a named profile permits multiple primaries.",
    "Changing endpoint descriptions or addresses never silently mints a new site or premises identity.",
    "Ended and superseded allocations remain resolvable for historical workforce and facilities analysis.",
    "The allocation subject is an employment or engagement context and never a copied person master.",
    "A home-work locus is capped at approved jurisdiction granularity and never contains a residential address string.",
    "Replacing or splitting an endpoint creates an explicit successor allocation version when locus meaning changes.",
    "A client-site or third-party locus never implies employer ownership, lease, establishment or branch identity.",
    "Occupancy, capacity and allocation details are non-public by default and preserve source disclosure rules.",
    "The allocation root owns stable identity and engagement context; locus and workplace kind exist only on immutable AllocationVersion records.",
    "locusKind matches exactly one populated locus reference and all other locus reference fields are absent.",
    "Home and mobile loci carry an explicit granularity ceiling and may resolve only through WM-PLC-010 generalized place or jurisdiction authority.",
    "Disclosure defaults to non-public and exclusivity defaults to exclusive; consumers never infer a public or pooled default.",
    "Multiple concurrent primary allocations require an explicit primaryProfileRef; absence of that reference means one primary maximum."
  ],
  "holds": [
    "Registry namespace and identifier allocation are pending and no identifier may be guessed.",
    "Data-protection and employment-law review is required for remote, client-site, mobile and desk-level records.",
    "WM-BLT-002 migration and WM-PLC-009 retirement and retargeting remain unapproved proposals.",
    "Package conversion and live verification are pending."
  ],
  "version": "0.1.0-candidate.3"
}