{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-LEG-04",
  "proposedName": "Regulatory Authorization / Granted Permission",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NEW MODEL",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "An authority-issued permission persists independently of application cases, credentials, commercial rights, IP rights and stewardship.",
    "naturalKey": [
      "authorityRef",
      "jurisdictionRef",
      "instrumentClass",
      "authorityGrantKey"
    ],
    "uniqueness": "Exactly one grant identity may use an authority-local key within the issuing authority, jurisdiction and instrument class; keys and registry identifiers are never recycled.",
    "versionIdentity": "grantVersion changes append-only when holder, validity or operative state changes; scope and condition versions remain dependent on the grant.",
    "independentLifecycle": [
      "issued",
      "in-force",
      "suspended",
      "revoked",
      "surrendered",
      "expired",
      "annulled",
      "reinstated",
      "superseded"
    ],
    "mastership": "competent public authority and authoritative grant register"
  },
  "boundary": {
    "owns": [
      "authority-qualified grant identity",
      "explicit holder and party-role references",
      "grant validity and versions",
      "closed-world scope versions",
      "dependent typed conditions and waiver acts",
      "append-only authority transitions",
      "register observations and freshness"
    ],
    "references": [
      {
        "target": "WM-POL-004",
        "purpose": "Cases whose decisions may produce grant transition events"
      },
      {
        "target": "WM-XCT-017",
        "purpose": "Credentials or documents that evidence but do not own the grant"
      },
      {
        "target": "WM-ECO-022",
        "purpose": "Commercial entitlement kept semantically separate"
      }
    ],
    "excludes": [
      "WM-POL-004 case workflow identity",
      "WM-XCT-017 credential lifecycle",
      "WM-ECO-022 commercial entitlement",
      "intellectual-property licence",
      "WM-POL-014 ownership or stewardship",
      "generic corporate ownership or registration"
    ]
  },
  "objects": {
    "RegulatoryAuthorization": {
      "identity": [
        "authorityRef",
        "jurisdictionRef",
        "instrumentClass",
        "authorityGrantKey"
      ],
      "required": [
        "regulatoryAuthorizationId",
        "grantVersion",
        "holderRef",
        "legalBasisRefs",
        "validFrom",
        "statusDerivedFromTransitionRef",
        "currentScopeVersionRef",
        "currentRegisterObservationRef"
      ],
      "optional": [
        "validTo",
        "operatorRef",
        "ownerRef",
        "beneficiaryRef",
        "holderChangeDecisionRef",
        "successorRef"
      ],
      "lifecycle": [
        "issued",
        "in-force",
        "suspended",
        "revoked",
        "surrendered",
        "expired",
        "annulled",
        "reinstated",
        "superseded"
      ]
    },
    "AuthorizationTransition": {
      "identity": [
        "regulatoryAuthorizationId",
        "sequence"
      ],
      "required": [
        "transitionKind",
        "authorityRef",
        "legalBasisRefs",
        "grounds",
        "decisionTime",
        "effectTime",
        "recordTime",
        "resultingState"
      ],
      "optional": [
        "affectedScopeRefs",
        "appealRoute",
        "originatingCaseRef",
        "dueProcessEvidenceRefs",
        "supersedesTransitionRef"
      ],
      "transitionKinds": [
        "issue",
        "variation",
        "suspension",
        "revocation",
        "surrender",
        "expiry",
        "annulment",
        "reinstatement",
        "supersession"
      ]
    },
    "AuthorizationScopeVersion": {
      "identity": [
        "regulatoryAuthorizationId",
        "scopeVersion"
      ],
      "required": [
        "verbatimActivityText",
        "activityDecomposition",
        "territoryRefs",
        "closureRule",
        "validFrom",
        "legalBasisRefs",
        "contentDigest"
      ],
      "optional": [
        "validTo",
        "siteRefs",
        "assetRefs",
        "productRefs",
        "capacityLimits",
        "exclusions",
        "supersedesVersion"
      ],
      "closureRule": "Absent activity, product, site, asset, territory or capacity authorization means no permission for that dimension; silence never means unconstrained."
    },
    "ClassifierMapping": {
      "identity": [
        "regulatoryAuthorizationId",
        "scopeVersion",
        "mappingId"
      ],
      "required": [
        "scheme",
        "schemeVersion",
        "mappingRelation",
        "confidence",
        "informationLoss",
        "normative"
      ],
      "optional": [
        "code",
        "label"
      ],
      "fixed": {
        "normative": false
      }
    },
    "PermitCondition": {
      "identity": [
        "regulatoryAuthorizationId",
        "conditionId",
        "conditionVersion"
      ],
      "required": [
        "scopeVersionRef",
        "conditionKind",
        "sourceRef",
        "responsiblePartyRef",
        "effectiveFrom"
      ],
      "optional": [
        "trigger",
        "deadline",
        "evidenceRequirement",
        "breachConsequence",
        "effectiveTo",
        "waiverActRef",
        "supersedesConditionVersion"
      ],
      "conditionKinds": [
        "precondition",
        "continuing-duty",
        "limit",
        "reporting-monitoring-duty",
        "prohibition",
        "exception",
        "waiver"
      ]
    },
    "RegisterObservation": {
      "identity": [
        "registerObservationId"
      ],
      "required": [
        "regulatoryAuthorizationRef",
        "registerRef",
        "observedAt",
        "sourceAsOf",
        "freshnessStatus",
        "contentDigest"
      ],
      "optional": [
        "credentialRef",
        "supersedesObservationRef"
      ]
    }
  },
  "invariants": [
    "Authority, jurisdiction, instrument class and authority-local grant key uniquely identify one grant and are never recycled.",
    "Grant master is distinct from WM-POL-004 case, WM-XCT-017 credential, WM-ECO-022 entitlement, IP licence and WM-POL-014 stewardship.",
    "A case decision affects a grant only through a complete append-only AuthorizationTransition citing the originating case.",
    "Every transition records authority, legal basis, grounds, decision, effect and record times and resulting state.",
    "Grant status is derived from the latest effective transition and is never independently overwritten.",
    "Expiry, revocation, surrender and annulment remain distinct transition grounds.",
    "Suspension disables exercise without deleting identity; reinstatement never widens scope.",
    "Holder changes require an explicit authority decision and a new grant version.",
    "Verbatim authority scope is retained; structured decomposition cannot add, drop or generalise it.",
    "Classifier mappings are versioned, non-normative and loss-explicit; code match never grants permission.",
    "Scope is closed-world: unlisted activities, products, sites, assets, territories, capacities and parties are unauthorized.",
    "Conditions are grant-dependent, scope-version-bound, typed and versioned; a waiver is an authority act.",
    "Conditions constrain existing permission and never add holders, sites, activities or territory.",
    "Register observation records observed-at, source-as-of and freshness; stale observation cannot assert current status.",
    "Credential loss, issue or replacement never changes grant state.",
    "Commercial and IP rights never substitute for or enlarge regulatory permission.",
    "Affiliates, subsidiaries, parents, successors, assigns and contractors receive no permission by relationship traversal.",
    "Grant validity bounds exercise independently of credential and commercial status.",
    "Scope, conditions, grant versions, observations and transition history remain append-only and citable.",
    "No registry or runtime identifier is allocated until the reservation is formally adjudicated."
  ],
  "holds": [
    "Registry allocation is pending and no identifier may be guessed.",
    "The WM-POL-004 decision-to-grant transition contract needs canonical specification.",
    "Jurisdiction-qualified classes, appeal and due-process semantics require specialist review.",
    "This provider-reconciled single-audited candidate remains noncanonical and nonpublishable."
  ]
}