{"format":"vercy-enterprise-profile-candidate/v1","contourId":"EM-LND-15","name":"Enterprise Risk Landscape and Assurance Coverage Projection","decision":"PROFILE","newRuntimeId":false,"bases":["WM-XCT-027","WM-KNW-015","WM-ACT-033","WM-ACT-034","WM-KNW-012","WM-XCT-029","WM-MAT-008","WM-POL-001"],"constraints":["Risk Landscape is a governed versioned view definition with immutable snapshots and Assurance Coverage Projection is a cite-only projection; registry or citation identity never becomes subject-model identity.","View definitions, snapshots and projection runs cannot bear obligations, own residual risk, become control targets, mint subject facts or remaster risk, requirement, obligation, assessment, audit, finding or observation state.","Each snapshot binds the exact view-definition version, valid-time as-of, record/ingest cut-off and scenario, freezes included master references, exclusions and caveats under a content digest, and rejects any body whose digest mismatches; records arriving after the ingest cut-off enter only a later snapshot.","The view definition owns population selector, taxonomy, allowed measure set, aggregation and caveat-retention rules, currency rule with an explicit clock, time basis and scenario basis; every read or projection records its currency-evaluation instant and snapshot ID while current status is derived without body mutation.","Applicability is a time-and-scenario-bound assessment; missing applicability is undetermined, is never coerced to inapplicable, compliant, effective or zero, and stays outside both binding obligation and metric denominator.","Disputed applicability is a distinct retained and countable outcome, never merged into applicable or undetermined; each projection declares its denominator placement explicitly.","A control that required no execution in the period is not-exercised-in-period rather than applicability-undetermined; it remains in the coverage denominator and is excluded from the effectiveness denominator under a declared reason.","Each projection declares exactly one measure type, an explicit denominator and numerator rule; every numerator item belongs to that denominator and has a current in-scope determination for the stated criterion.","Every projection publishes undetermined, disputed and excluded counts plus exclusion reasons; a quantity missing any of these or its denominator is ill-formed.","Any aggregating or trend projection records an explicit comparability verdict and the criteria, method, scope, horizon, taxonomy, time and scenario axes it covers; caveats survive every UI and export.","Coverage, compliance, assurance and residual risk use separate semantics and denominators and never collapse into one percentage or imply one another.","Control existence, design, implementation, operation and effectiveness are independent; completed cards, mappings, documents, incident-free periods, unexpired exceptions, landscape snapshots and projection outputs are non-evidence for later control facets, compliance or assurance.","Effectiveness conclusions name method, vocabulary, validity interval and invalidation triggers; assurance conclusions name scope, method, exclusions and assurance level.","Risk reduction requires a current, in-scope, same-scenario effectiveness determination; reliance without such determination remains explicit and exceptions alone confer no reduction credit.","Requirement, obligation, control and evidence remain distinct; no artifact or view may collapse one into another.","Findings remain owned by their WM-ACT-033 engagement, and WM-MAT-008 observations never become findings automatically.","Exceptions preserve authority, beneficiary, cited requirement or obligation, scope, stated effect and expiry; current status is derived, and expiry or supersession sets dependent conclusions to revalidation-pending, suspends reliance and never alters the cited requirement.","Expired or superseded exceptions remain readable but cannot authorize treatment, carve out current coverage or support risk-reduction credit.","Control remains identifier-unassigned after the WM-XCT-027 split; the profile records pending-master markers, labels dependent quantities provisional and cannot present Control or its facets as resolved until an identifier is allocated or the facets are re-homed on assigned masters."],"holds":["Control remains identifier-unassigned under EM-RSK-01, so control-facet ownership is not implementable and dependent quantities remain provisional.","WM-XCT-027 control split and relation contracts require reconciliation; views cannot bridge that gap by minting subject facts.","WM-ACT-034 remains a candidate with unratified relationship contracts and is a provisional base.","Canonical publication is held pending registry allocation or re-homing for Control, source pins, crosswalks and parent relationship contracts."],"provisionalBases":[{"ref":"WM-ACT-034","reason":"candidate status and relationship contracts remain unratified"},{"ref":"WM-XCT-027","reason":"control split and relation contracts remain unreconciled"},{"ref":"Control","reason":"identifier unassigned; pending-master markers required"}]}