# EM-LND-16 local synthesis ## Disposition - Define **Knowledge Landscape** as a governed profile declaration over existing knowledge and record masters. Its declaration has local identity only for scope, authority, review and retrieval policy; it is not a new subject-matter aggregate. - Define **Decision Dependency View** as a reproducible projection over a pinned release set and query/closure specification. It has no independent model or runtime identifier. - Do not allocate a new identifier. Reuse WM-KNW-006, WM-KNW-010 and WM-REC-001, with WM-KNW-007, WM-KNW-008, WM-REC-010 and WM-KNW-018 as explicit adjacent masters. ## Mastership and graph boundary WM-REC-001 owns record identity, immutable versions, instantiations, custody, fixity and disposition. WM-KNW-006 owns concept identity, intrinsic meaning, designations and global lifecycle. WM-KNW-018 owns release-scoped membership, mappings and scheme relations. WM-KNW-007 owns claims and their scoped status. WM-KNW-008 owns each citation act, locator, stance, consulted representation and source-status observations. WM-KNW-010 owns decision content and rationale; WM-REC-010 owns the authentic issued expression. The landscape owns only its declaration, pinned inputs, edge-type registry, query rules, access propagation and declared projection losses. Every semantic edge names one owning model and remains read-only outside it. Relation, similarity and shared labels never establish identity, equality or merge authority. Evidence never establishes truth. ## Impact and conflict semantics A source retraction or claim rebuttal creates dated observations and dependency findings. It triggers notify-and-recheck traversal through citations and premise bindings; it does not automatically revoke decisions. Original rationale, dissent and fixed expressions remain resolvable. Only the competent decision authority may reopen, supersede or retain a decision. Equal labels with different subject fields or delimiting characteristics are reported as terminology conflicts. They are not silently merged. Missing evidence binding, unresolved citation locator and dangling decision reason are separate absence classes. Unknown, unsupported and refuted remain distinct. ## Rights and projection rules The index may expose only identifiers and metadata allowed by source policy. Generated summaries, closures, counts and co-citation results inherit the most restrictive constituent access label. A paraphrase of restricted correspondence is still disclosure. If existence is protected, the result is suppressed and the omission is explicitly represented without leaking the protected fact. Redaction creates a new rendition with its own digest and preserved provenance; it never overwrites the source. Third-party, personal, licensed and records-management restrictions survive indexing and aggregation. ## Acceptance result A shared source cited by two decisions is retracted. Each citation receives its own dated status observation. The view shows both dependency paths at the pinned versions. One decision is reopened and superseded; the other remains effective by an explicit authority action. Neither outcome rewrites the old rationale or issued records. A restricted correspondence item used by one decision is not paraphrased in search output, and derived summaries inherit its restriction. ## Required invariants 1. One editable master exists for every assertion; projections are read-only. 2. Every graph edge pins the relevant claim version, record version, scheme release, consulted representation and decision release. 3. As-of-decision-time and as-of-now queries are both reproducible. 4. Retraction and rebuttal append observations and never erase history. 5. Relation does not imply identity, and citation does not imply truth. 6. Absence and uncertainty are explicit and typed. 7. Access restrictions propagate through every derived result, including inference and aggregation. 8. Disposed identifiers remain resolvable and are never reused. ## Provider reconciliation The landscape handle and view fingerprint are governance coordinates, not subject identity. The handle cannot act as a concept scheme, assertion store, merge authority or decision-validity authority. The fingerprint is limited to query rules, exact source-release pins and evaluation time. Auditable declarations and executions use existing WM-REC-010 or WM-REC-001 records. Retraction and rebuttal append dated source observations and trigger mandatory notify-and-recheck without automatic status change. Shared citations never couple decision fate; reopened, superseded, revoked and remains-effective outcomes require explicit dated competent-authority acts. Historical pins are immutable. Claims without citations remain visible as unevidenced uncertainty. Rights are intersected across all participating nodes before generation. Restricted existence and correspondence cannot leak through paraphrase, inference, paths, counts, aggregates, co-citation or search summaries. Scheme qualification is preserved through every index and count, and redaction produces a new rendition with digest and provenance. ## Frozen-audit remediation The binding candidate now declares role-separated reuse and adjacent bases plus an explicit class-to-master map. Governed documents and records belong to WM-REC-001; non-governed Source Work remains unassigned. Until that boundary resolves, source-status observations for non-governed works are carried on WM-KNW-008 citation acts against locator-plus-digest representations. Cross-scheme terminology conflicts belong to WM-KNW-018; dependency and recheck findings belong to WM-KNW-010. Pins now include concept/designation version and declare projection losses. They bind historical content, while access is always re-evaluated against current policy at generation time. Missing or unresolved access is most-restrictive. Notifications are dated open findings, obey endpoint access intersection and close only through an explicit authority act; the authority attestation must resolve on WM-REC-010. Auditable landscape declarations and ordinary execution records use WM-REC-001 unless a declaration was genuinely issued as a decision. Suppression markers are indistinguishable whether protected content exists, and repeated-query differencing is forbidden. Replays cannot redisclose content after policy tightening or redaction. The candidate is explicitly `publishable: false` pending base, crosswalk, authority and rights contracts. ## Holds All bases remain `publishableCanonical: false`; several depend on single-provider waivers. Required relation-ledger edges and semantic crosswalks are incomplete. Evidence Artifact / Source Work remains an identifier-unassigned candidate for cited items that are not governed records. WM-KNW-006 access scope, WM-KNW-008 deduplication, relation direction and timestamp-offset rules remain unresolved. This is a research checkpoint, not an installable release.