{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-LND-17",
  "proposedName": "Operational Responsibility Assignment",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NEW MODEL",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "One authorized responsibility assignment remains identifiable across changes to operational placement, custody, asset condition and evidence during its effective interval.",
    "versionIdentity": "The assignment identity persists across immutable record-time versions; transfer to a different responsible party creates a successor assignment linked by supersedesRef, separate from version lineage.",
    "independentLifecycle": [
      "proposed",
      "authorized",
      "active",
      "suspended",
      "transferred",
      "ended",
      "revoked"
    ],
    "mastership": "asset operations governance authority"
  },
  "boundary": {
    "owns": [
      "persistent responsibility-assignment identity and immutable bitemporal versions",
      "responsible party kind, disclosure class, operational role and explicit scope composition",
      "authority and required governing basis",
      "effective and record intervals",
      "delegation as a related assignment with delegate, parent, scope and validity",
      "transfer, suspension, revocation and termination provenance",
      "same-role overlap and joint-accountability rules"
    ],
    "references": [
      {
        "target": "WM-OBJ-001",
        "purpose": "Physical asset and custody boundary"
      },
      {
        "target": "WM-BLT-006",
        "purpose": "Facility scope when responsibility is locus-qualified"
      },
      {
        "target": "WM-BLT-008",
        "purpose": "Site scope when responsibility is locus-qualified"
      },
      {
        "target": "WM-ACT-007",
        "purpose": "Authorized maintenance work without completion inference"
      },
      {
        "target": "WM-XCT-010",
        "purpose": "Address binding without responsibility inference"
      }
    ],
    "excludes": [
      "party, asset, place, site or facility identity",
      "custody, possession, ownership, title or lease rights",
      "asset placement or occupancy",
      "employment, position or general organizational membership",
      "physical or logical access authorization",
      "maintenance event, work order execution or completion evidence"
    ]
  },
  "objects": {
    "OperationalResponsibilityAssignment": {
      "identity": [
        "operationalResponsibilityAssignmentId"
      ],
      "versionIdentity": [
        "versionId"
      ],
      "required": [
        "responsiblePartyRef",
        "partyKind",
        "disclosureClass",
        "assetScopeRef",
        "scopeKind",
        "responsibilityRole",
        "validFrom",
        "authorityRef",
        "governingBasisRef",
        "status",
        "versionId",
        "assertedAt",
        "recordFrom"
      ],
      "conditionalRequired": {
        "scopeKind=asset-instance-while-at-locus": [
          "locusScopeRef"
        ],
        "status=transferred": [
          "successorRef"
        ],
        "status=suspended": [
          "suspension"
        ],
        "status=revoked": [
          "revocation"
        ],
        "delegatedFromRef present": [
          "delegateRef",
          "delegatedScope",
          "delegatedValidFrom"
        ]
      },
      "optional": [
        "validTo",
        "recordTo",
        "locusScopeRef",
        "evidenceRefs",
        "successorRef",
        "supersedesRef",
        "previousVersionRef",
        "delegatedFromRef",
        "delegateRef",
        "delegatedScope",
        "delegatedValidFrom",
        "delegatedValidTo",
        "jointAccountability"
      ],
      "closedEnums": {
        "status": [
          "proposed",
          "authorized",
          "active",
          "suspended",
          "transferred",
          "ended",
          "revoked"
        ],
        "partyKind": [
          "natural-person",
          "organization",
          "organizational-unit"
        ],
        "scopeKind": [
          "asset-instance",
          "asset-class",
          "locus-qualified-set",
          "asset-instance-while-at-locus"
        ]
      },
      "suspensionRequired": [
        "from",
        "authorityRef",
        "reason"
      ],
      "revocationRequired": [
        "authorityRef",
        "reason"
      ]
    }
  },
  "invariants": [
    "Every assignment names one responsible party, party kind, disclosure class, explicit asset scope, scope kind and operational role.",
    "Responsibility always requires an authorizing authority and governing basis.",
    "Every assignment is bitemporal and versioned; effective versions are immutable and prior record-time states remain queryable.",
    "Assignment succession uses supersedesRef and is separate from the previousVersionRef version chain.",
    "A transferred assignment requires an authorized successor reference and closes the prior effective interval.",
    "Suspension is an authority-bearing interval with a reason; resumption creates a version and preserves suspension history.",
    "Revocation is distinct from ordinary ending and records revocation authority and reason.",
    "Delegation names a delegate and parent assignment, delegated scope and validity; accountability remains with the source assignment.",
    "assetScopeRef and locusScopeRef are interpreted only through scopeKind; an asset-instance-while-at-locus assignment lapses explicitly outside its locus and does not transfer automatically.",
    "Overlapping effective same-role assignments are forbidden unless joint accountability and its apportionment are explicitly authorized.",
    "A natural-person responsible party requires a disclosure class and projection-time protection.",
    "Custody, possession, title, lease, employment, membership and placement never imply operational responsibility.",
    "Operational responsibility never grants physical or logical access and never proves maintenance execution or completion.",
    "Placement and custody may change independently without silently changing responsibility.",
    "Projection behavior is governed only by the shared Landscape Projection definition and does not add identity."
  ],
  "holds": [
    "Registry namespace and identifier allocation remain pending; no identifier is guessed.",
    "Party authority and asset-scope crosswalks plus canonical base/relation validation remain pending.",
    "Privacy and employment-law review, package conversion and live verification remain pending.",
    "Grok review is reconciled and the single frozen audit is spent and remediated without rerun."
  ],
  "invariantRules": [
    "Every assignment names one responsible party, party kind, disclosure class, explicit asset scope, scope kind and operational role.",
    "Responsibility always requires an authorizing authority and governing basis.",
    "Every assignment is bitemporal and versioned; effective versions are immutable and prior record-time states remain queryable.",
    "Assignment succession uses supersedesRef and is separate from the previousVersionRef version chain.",
    "A transferred assignment requires an authorized successor reference and closes the prior effective interval.",
    "Suspension is an authority-bearing interval with a reason; resumption creates a version and preserves suspension history.",
    "Revocation is distinct from ordinary ending and records revocation authority and reason.",
    "Delegation names a delegate and parent assignment, delegated scope and validity; accountability remains with the source assignment.",
    "assetScopeRef and locusScopeRef are interpreted only through scopeKind; an asset-instance-while-at-locus assignment lapses explicitly outside its locus and does not transfer automatically.",
    "Overlapping effective same-role assignments are forbidden unless joint accountability and its apportionment are explicitly authorized.",
    "A natural-person responsible party requires a disclosure class and projection-time protection.",
    "Custody, possession, title, lease, employment, membership and placement never imply operational responsibility.",
    "Operational responsibility never grants physical or logical access and never proves maintenance execution or completion.",
    "Placement and custody may change independently without silently changing responsibility.",
    "Projection behavior is governed only by the shared Landscape Projection definition and does not add identity."
  ],
  "projectionDefinition": "landscape-projection.json"
}