## Verdict **EnterpriseLandscape — new boundary, identifier not allocated.** It is a governed composition *declaration* (member selection, mastership map, crosswalk edition, completeness perimeter, authority, review cycle) with identity and lifecycle independent of every constituent domain landscape: it is approved, amended, narrowed and retired without changing any domain fact. Its *output* is a reproducible, digest-identified, non-reimportable projection with artifact identity only. It is not a subject root, not a kernel, and holds no copy of enterprise data. **EnterpriseViewScope — profile of WM-KNW-012, not new.** It is a versioned, contained policy/release: a dated expression carrying applicability scope, precedence and conflict-strategy declaration, registered derogations, retention and alignment declarations. WM-KNW-012's work/expression/manifestation identity and its "at least one rule slot" invariant already fit a scope release exactly. Contained: no expression may be mutated in place; parameter tailoring per adopter is a tailoring change, not an amendment. ## Evidence All seventeen completed syntheses converge on the same disposition and none allocated an identifier: EM-LND-01, 05, 12, 16, 17 treat the landscape as a read-only profile/projection; EM-LND-02, 03, 07, 08, 10, 13, 15 additionally split a versioned scope object (Group Scope View, Workforce Scope, Market Scope, Finance View Policy, Offering Portfolio Scope, Risk Landscape declaration) from an immutable view. EM-LND-04, 06, 09, 11, 14 add the read-only, no-write-path rule. That is seventeen independent arrivals at the same shape, which is the strongest available support for EM-LND-18's two candidates. ## Identity/mastership Every fact remains mastered where the dossier places it: WM-ORG-001 organizations, WM-ORG-012 inter-organizational relationships (scope, control basis, quantified interest, evidence, dispute), WM-XCT-037 dependency edges, WM-KNW-012 normative statements, and each domain landscape's own referenced masters. The enterprise declaration owns only its scope revisions, member set, pins, derived rows and gap/conflict register. It has no write path; corrections return to the owning master. Placeholder or view-local keys are never promoted to model identifiers. ## Enterprise declaration/scope The declaration registers: viewpoint and named management questions; selected domain landscape declarations at pinned revisions; per-fact mastership map; crosswalk edition and digest; closed completeness perimeter; world-time and knowledge-time as-of; scenario class; disclosure policy; output digest. The scope release (WM-KNW-012 expression) carries the normative half: inclusion predicates, precedence/conflict strategy identifier, derogations, comparability rules, retention. Missing required pins block the view rather than degrading it silently. ## Selection/questions A domain enters only with at least one cited management question, a stated decision it informs, and a traceable question→domain→measure path. Tags, budget lines, registry membership and portfolio convenience create no inclusion (EM-LND-04, EM-LND-05). Non-selected domains are recorded as `not-selected` with reason, distinct from `unavailable`, `withheld`, `pending` and `blocked`. The negative case is refused: the registry confers no installation obligation. ## Composition/transitions Each cross-context transition preserves, per fact: owning Dimension and master, steward, asserting party and capacity, evidence reference and digest, determination method, confidence, effective interval, observation and record time, and uncertainty code. Derived rows retain input references, rule version and as-of and stay visibly separate from asserted rows (EM-LND-02, EM-LND-11, EM-LND-13). Nothing is recomputed into a single "current value"; desired, observed and derived states stay parallel (EM-LND-12). ## Semantic conflicts Conflict is adjudicated per axis, never by label. Local terms: shared name or title yields a review, never identity — EM-LND-07 (name similarity is not duplication), EM-LND-13 (identical KPI title is non-comparable absent facet reconciliation), WM-XCT-039 adversarial check (identical asset names in different tenants cannot merge without authoritative identity evidence). Identifiers: resolve by master-system identifier, then governed IRI, then a recorded fallback; ambiguity returns candidates, never automatic same-as (WM-ORG-012 `resolve-relationship`). Clocks: effective, observation, record, knowledge and reporting times stay distinct; RFC 3339 with explicit offset, unknown offset as `-00:00`; cross-clock arithmetic requires a named authorized transformation (EM-LND-10). Completeness claims: SPDX per-relationship versus CycloneDX per-scope granularity do not merge (WM-XCT-037 recorded conflict) — each claim keeps its own granularity. Access rules: most restrictive constituent label governs any derived result (EM-LND-16). Edge semantics: direction is not universal (WM-XCT-037), so each edge keeps kind, native term and reversal flag. Output per axis is `comparable`, `bridged-with-named-transformation`, or `non-comparable`; a missing verdict is non-comparable. ## Completeness/absence Completeness is relative to an explicit closed scope: named questions, selected domains, perimeter, denominator, supported granularities and opaque segments. Only inside that perimeter may a negative be asserted. Outside it, missing edges are unobserved (WM-XCT-037 `validate-absence-claim`; WM-XCT-039 "missing, stale, filtered or inaccessible dependencies yield incomplete impact, never an unsupported no-impact conclusion"). `unavailable`, `withheld`, `suppressed`, `unknown`, `pending`, `not-selected` and zero never collapse. Absence of a domain outside the question is not incompleteness and must not reduce a coverage figure. ## Rights/access Default deny. Composition membership grants nothing (EM-LND-02, EM-LND-08). Cross-domain reads require a WM-XCT-002 grant from the authorized fact controller with purpose, scope and revocation, shaped by a WM-XCT-003 least-disclosure projection with policy version and fingerprint. Withheld segments are marked withheld, never rendered absent. Cached or inferred edges must not bypass revoked projections (WM-XCT-039). Aggregates reference cohort/disclosure floors. ## Time/provenance Views declare world-time and knowledge-time separately and are refused when a source cannot reconstruct the requested horizon (EM-LND-01, EM-LND-02). Released views are immutable, digest-identified and non-reimportable as source truth. Corrections append successors; identifiers are tombstoned, never reused. Scenario facts never mix with authoritative facts. ## Host/runtime boundary **WM-XCT-039 cannot host this composition; it remains managed-IT-specific.** Its declared scope is a tenant-isolated provider/client graph; its bundles are tenant identity, service responsibility, asset identity map, service-to-asset dependency, observed state, per-fact mastership, routed change, external work tracking, projection and handover; its boundary notes are Redfish, CMDB and task-tracker; and its own out-of-scope bars a "universal infrastructure schema". Hosting seventeen heterogeneous domains would either force finance, legal, knowledge and workforce facts into a service-graph shape or widen XCT-039 into the universal kernel that both it and EM-LND-18 forbid. EM-LND-12 already reused it for Service Landscape under an explicit unverified-generality hold, and EM-LND-14 held graph-host reuse open. Its transferable contribution is pattern, not hosting: per-fact mastership, default-deny cross-tenant, indeterminate-not-failure, incomplete-not-no-impact, authorized projection registry. **Host/policy gaps.** No allocated boundary for landscape view artifact, completeness perimeter, crosswalk edition or management question. WM-XCT-037 carries unresolved traversal-versus-out-of-scope, first-class-versus-weak identity, and digest-as-identifier contradictions plus empty composition contracts, so cross-domain traversal is not yet safe. WM-KNW-012 lacks functions for record classification, retention declaration, parameter tailoring and defect recording — needed for EnterpriseViewScope. WM-ORG-012's registry parent conflicts with its reference boundary. ## Governance One owner package per enterprise declaration; scope releases approved by a named authority with recorded mandate; comparability verdicts and derogations owned by a reviewer; conflicts recorded with claimant capacity and no automatic winner; recency never resolves a dispute. Every release pins inputs and rule versions and publishes its gap/conflict register. ## Acceptance scenario Three-person service firm: scope release selects contracts/obligations, finance and client commercial domains against three named questions; workforce, group structure, consolidation and supply are `not-selected` with reasons. Coverage is complete against its own perimeter. Holding group: a different release over the same registry selects group ownership, accounting consolidation, finance, commercial concentration and risk; ownership and consolidation stay parallel graphs, a deconsolidated 55% holding appears in one and not the other, and an unknown ultimate parent remains a reason-coded unknown. Both share organization identities; neither installs the other's domains; neither figure is comparable without a named transformation. ## Invariants 1. Composition is explicitly selected and question-justified. 2. Facts stay mastered in their domains; no write path. 3. Cross-context transition preserves mastership, rights, provenance, time and uncertainty. 4. Shared labels never establish identity or comparability. 5. Each conflict axis carries a comparability verdict; missing means non-comparable. 6. Completeness is perimeter-relative; absence outside the question is not incompleteness. 7. Negatives require covering completeness evidence. 8. Membership grants no access; cross-domain disclosure requires a grant and shape. 9. Withheld, unknown, not-selected and zero remain distinct. 10. World and knowledge time are pinned separately. 11. Views are immutable, digest-identified, non-reimportable. 12. Scenario never becomes authoritative. 13. No universal kernel and no copy of domain data. 14. No identifier is allocated by this adjudication. ## Minimal model set WM-KNW-012 (scope release), WM-XCT-037 (edges, under holds), the referenced WM-XCT-001 (ownership/stewardship), WM-XCT-002 (grants), WM-XCT-003 (projection shape), WM-XCT-040 (pins), WM-ORG-001 and WM-ORG-012 for enterprise/group endpoints, the seventeen domain landscape declarations as members, plus the new EnterpriseLandscape declaration boundary. WM-XCT-039 is an optional managed-IT member, never the host. ## Holds Every frozen base is `publishableCanonical: false`; WM-XCT-039, WM-XCT-037, WM-KNW-012 and WM-ORG-012 rest on single-provider waivers. WM-KNW-012 is `boundary-review-required`; WM-XCT-037 carries unresolved identity, traversal and composition contradictions; WM-XCT-039 has a validation gap and no adapters. Several required boundaries are unallocated. No crosswalk, immutable pin set or fixture was executed here. This is an adjudication checkpoint: no canonical completeness, installability or publication readiness is claimed.