{
  "format": "vercy-enterprise-profile-candidate/v1",
  "contourId": "EM-LEG-03",
  "name": "Enterprise Internal Policy",
  "candidateRevision": 3,
  "decision": "PROFILE",
  "newRuntimeId": false,
  "bases": [
    "WM-KNW-012"
  ],
  "duplicateRetirementProposal": {
    "modelId": "WM-ORG-019",
    "currentState": "published-reviewable-draft",
    "proposedState": "deprecated-pending-rehome",
    "aliasPreserved": true,
    "preconditions": [
      "field-level WM-ORG-019 to WM-KNW-012 crosswalk is ratified",
      "control and implementation mappings have an explicit external owner",
      "policy communication and acknowledgement residue has an explicit owner",
      "organizational purpose and risk-motivation framing is retained as profile metadata or assigned to an explicit external owner",
      "policy-mapping.validation and policy-mapping.executionBoundary have explicit counterparts or external owners",
      "registry authority approves the deprecation marking",
      "both parent publication holds remain visible"
    ]
  },
  "ownedSemantics": {
    "policyVersion": "An immutable dated expression of one policy work. A consolidated expression is a governed, citably identified rendering produced from applied modifications; it is neither a new work nor a mutation of any prior expression.",
    "policyAdoption": "A profile construction recording organizational scope, group work, adoption decision, mandate, efficacy term and an explicit floating-or-pinned expression policy.",
    "policyException": "A bounded derogation child targeting a rule slot or expression, never a second policy work.",
    "reviewDue": {
      "status": "candidate-not-normative",
      "meaning": "review scheduling metadata; never expiry or loss of efficacy"
    }
  },
  "operations": [
    {
      "name": "resolve-effective-policy-profile",
      "scope": "profile-level read operation",
      "inputs": [
        "policyWorkRef",
        "asOfInstant",
        "subjectScope"
      ],
      "outputs": [
        {
          "kind": "effective-rule-set",
          "required": [
            "expressionRef",
            "appliedLocalExpressions",
            "appliedExceptions",
            "provenance"
          ]
        },
        {
          "kind": "unresolved-report",
          "required": [
            "cause",
            "affectedSlots",
            "escalationRoute"
          ]
        }
      ],
      "neverReturns": [
        "permit",
        "deny",
        "compliance conclusion",
        "control-effectiveness conclusion"
      ]
    }
  ],
  "constraints": [
    "Every effective policy resolves adopting authority, mandate, adoption decision and in-force instant.",
    "Every adoption records either a bounded efficacy interval or an explicit open-ended declaration with its basis.",
    "Review due never terminates in-force status or efficacy.",
    "Every adoption explicitly declares whether it floats to the current in-force expression or pins an exact expression.",
    "A group expression change never mutates prior expressions, adoptions, exceptions or their history.",
    "Floating adoption resolves to the new in-force expression while local tailoring is revalidated rather than rewritten.",
    "Until successor-expression revalidation completes, affected local tailoring is pending-revalidation and affected slots resolve as unresolved.",
    "An exception pinned to an earlier expression does not automatically apply to a successor expression and requires an explicit validity or reauthorization result.",
    "Inheritance is an explicit acyclic edge and never silently copies clause text.",
    "Local tailoring is a separate local expression and may tighten only under an explicit precedence edge.",
    "A local weakening of a non-derogable superior floor is rejected and never becomes an effective override.",
    "Every exception identifies target slot or expression, scope, granting authority distinct from beneficiary, effective interval, mandatory expiry, state and compensation semantics.",
    "The parent zero-to-many compensating-obligation field is promoted to required-one, satisfied by a reference or explicit none with recorded reason.",
    "Exception expiry or revocation restores the superior and local tightening without changing policy expressions.",
    "Unknown applicability and unresolved conflicts produce an explicit unresolved report with cause and escalation route.",
    "Unresolved-reference handling is declared per rule slot and is fail-closed for prohibition slots.",
    "Resolution returns a rule set or unresolved report, never permit, deny, compliance or control-effectiveness conclusions.",
    "WM-KNW-012 never stores per-recipient receipt, control-execution or control-effectiveness state.",
    "Acknowledgement proves communication only and never comprehension, consent, compliance, risk closure or control effectiveness.",
    "There is no write path from acknowledgement to control execution, effectiveness or exception decisions.",
    "Control mappings are typed references to an external control authority; WM-XCT-027 is not treated as a control register.",
    "Retirement of WM-ORG-019 preserves its identifier as an alias and does not hide source publication holds."
  ],
  "holds": [
    "Both parent models remain non-canonical reviewable drafts and their single-provider assurance holds remain open.",
    "Field-level duplicate crosswalk and source mastership are not ratified.",
    "The explicit control-register owner is unresolved.",
    "The statement-to-organizational-scope adoption construct has no source-grounded structure in WM-KNW-012; it is a profile construction obligation.",
    "Multi-step delegation of rule-making authority is deferred research on WM-KNW-012 and blocks the question who may adopt and revoke.",
    "Delegated-recipient communication semantics remain separately unresolved.",
    "WM-KNW-012 carries boundary-review-required and a contested entity-to-aggregate reclassification; retirement depends on that review.",
    "Policy Communication Event remains identifier-unassigned pending a reuse test.",
    "The effective-rule-set operation is absent from WM-KNW-012's declared function surface and requires parent revision.",
    "policy-mapping.validation and policy-mapping.executionBoundary have no identified base counterpart pending crosswalk.",
    "No registry mutation, including WM-ORG-019 deprecation, is authorized by this contour.",
    "Seven consumed identifiers are unattested in the frozen dossier and remain unverified references.",
    "Privacy, retention, multilingual authenticity and source-resolution/version-pinning semantics require validation.",
    "Timestamp rules require independent verification.",
    "ISO 37301 is paywalled and unverified on the parent.",
    "ISO 37301, COSO, XACML, OPA, ODRL, Akoma Ntoso, ELI, PROV-O and SBVR are alignments only, not conformance claims.",
    "This is standards alignment, not legal advice.",
    "No package conversion, live verification or publication is authorized."
  ]
}