{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-PEO-04",
  "proposedName": "Candidacy",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NEW MODEL",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "One person's purpose-scoped participation in one hiring effort remains identifiable across stages, assessments, offers, withdrawal and outcome, including internal mobility without a public opening.",
    "versionIdentity": "Status, documents, declarations and stage outcomes append versions to the same candidacy; a later application creates a new candidacy linked to the same person.",
    "independentLifecycle": [
      "sourced",
      "submitted",
      "received",
      "screening",
      "assessing",
      "selected",
      "rejected",
      "withdrawn",
      "offered",
      "closed"
    ],
    "mastership": "employer applicant-tracking authority under stated privacy purpose"
  },
  "boundary": {
    "owns": [
      "persistent candidacy identity",
      "person, opening and recruitment-process references",
      "submission and receipt times",
      "supplied document and declaration bindings",
      "stage and status history",
      "withdrawal and outcome",
      "controller, purpose, lawful basis and notice version",
      "retention, legal-hold and disposition triggers",
      "application artifact binding without separate root identity",
      "valid and transaction time",
      "stage-occurrence history pinned to process release"
    ],
    "references": [
      {
        "target": "WM-PER-001",
        "purpose": "Person anchor"
      },
      {
        "target": "WM-ORG-008",
        "purpose": "Asserted opening",
        "contractState": "provisional"
      },
      {
        "target": "WM-ACT-039",
        "purpose": "Recruitment process and stage design",
        "contractState": "provisional"
      },
      {
        "target": "WM-ACT-025",
        "purpose": "Interview session"
      },
      {
        "target": "WM-ACT-034",
        "purpose": "Assessment result"
      },
      {
        "target": "WM-ECO-021",
        "purpose": "Employment offer"
      }
    ],
    "excludes": [
      "person, position, opening or requisition identity",
      "recruitment campaign or stage-definition identity",
      "interview or assessment-result identity",
      "selection decision or recommendation",
      "offer, contract, assignment or employment",
      "unlimited consent or indefinite talent-pool rights",
      "matching score as opening attribute",
      "person biography as candidacy-owned dossier"
    ]
  },
  "objects": {
    "Candidacy": {
      "identity": [
        "candidacyId",
        "versionId"
      ],
      "required": [
        "controllerRef",
        "purpose",
        "lawfulBasis",
        "validFrom",
        "recordedAt",
        "recordedBy",
        "rightsRouteRef",
        "status"
      ],
      "optional": [
        "applicationArtifactRef",
        "automatedDecision",
        "campaignRef",
        "contactedAt",
        "correctionReason",
        "declarations",
        "dispositionDueAt",
        "dispositionReceiptRefs",
        "dispositionState",
        "documentRefs",
        "humanReviewRef",
        "legalHoldRef",
        "linkConfidence",
        "linkEvidenceRef",
        "noticeDueAt",
        "noticeVersion",
        "offerRefs",
        "openingRef",
        "outcome",
        "outcomeDecisionRef",
        "outcomeReason",
        "personRef",
        "postingRef",
        "predecessorRef",
        "processRef",
        "provisionalSubjectRef",
        "receivedAt",
        "recommendationRefs",
        "requisitionRef",
        "retentionPolicyRef",
        "retentionStartAt",
        "selectionDecisionRefs",
        "sourceChannel",
        "sourcedFromRef",
        "submittedAt",
        "successorRef",
        "validTo"
      ],
      "lifecycle": [
        "sourced",
        "submitted",
        "received",
        "screening",
        "assessing",
        "selected",
        "rejected",
        "withdrawn",
        "offered",
        "closed"
      ],
      "scopeRule": "Exactly one recruiting-effort scope is declared by at least one of requisitionRef, openingRef, processRef or campaignRef; openingRef is optional for internal mobility, succession and appointment paths.",
      "requiredOneOfSubject": [
        "personRef",
        "provisionalSubjectRef"
      ],
      "requiredOneOfScope": [
        "requisitionRef",
        "openingRef",
        "processRef",
        "campaignRef"
      ],
      "lifecycleSemantics": "unordered state set; lifecycle list is not an ordinal sequence",
      "outcomeVocabulary": [
        "hired",
        "not-selected",
        "declined-by-candidate",
        "withdrawn-by-candidate",
        "withdrawn-by-employer",
        "lapsed"
      ],
      "conditionalRequirements": {
        "contactedOrSubmitted": "noticeVersion is required.",
        "sourced": "sourceChannel, sourcedFromRef and noticeDueAt are required; a provisional subject does not mint WM-PER-001.",
        "offered": "at least one immutable offerRef is required.",
        "closed": "outcome, outcomeReason and outcomeDecisionRef are required.",
        "adverseOutcome": "outcomeDecisionRef with actor and reason is required for rejection or employer withdrawal.",
        "automatedDecision": "humanReviewRef is required when automatedDecision is true.",
        "backdatedSuccessor": "correctionReason is required when a successor validFrom precedes recordedAt."
      },
      "collections": {
        "stageOccurrences": {
          "appendOnly": true,
          "requiredFields": [
            "stageDefinitionRef",
            "processDesignReleaseRef",
            "occurredAt",
            "outcome",
            "actorRef"
          ]
        },
        "documentsAndDeclarations": {
          "requiredPerItem": [
            "artifactRef",
            "dataClass"
          ],
          "dataClasses": [
            "identity",
            "contact",
            "cv-biography",
            "special-category",
            "monitoring",
            "decision-evidence"
          ]
        },
        "disclosures": {
          "requiredFields": [
            "recipientRef",
            "purpose",
            "lawfulBasis",
            "transferMechanism",
            "disclosedAt"
          ]
        },
        "offerRefs": {
          "appendOnly": true,
          "versionPinned": true
        }
      },
      "privacyRules": [
        "Special-category and monitoring data never appear in assessment or decision inputs and use a separate purpose and basis.",
        "Close, withdrawal or fill establishes retentionStartAt and dispositionDueAt by data class.",
        "Legal hold suspends disposition without changing outcome or dispositionDueAt.",
        "External artifact stores return attributable disposition receipts and disposed references resolve to tombstones.",
        "Talent-pool membership is a separate expiring purpose-scoped consent and is never inferred from closed Candidacy.",
        "Fairness audit is a distinct purpose with pseudonymised access by default and recorded justification for re-identification.",
        "Assessment results and stage outcomes survive biography disposition as decision-evidence."
      ],
      "provisionalSubjectRule": "A sourced lead may use a pseudonymous provisionalSubjectRef with link confidence and evidence; promotion to WM-PER-001 requires recorded authorized evidence and never auto-merges.",
      "uniquenessRule": "At most one active candidacy per Person and Opening; without Opening, at most one active candidacy per subject and declared effort scope."
    }
  },
  "invariants": [
    "One candidacy binds one subject, one declared recruiting-effort scope and an interval.",
    "Candidate role never creates a second person identity.",
    "Name, email or birth date never justify automatic person merge.",
    "A later application creates a new candidacy while reusing the person anchor.",
    "Every stage occurrence pins the exact process-design release.",
    "Score, recommendation and decision remain distinct assertions.",
    "Interview session and assessment result retain separate identity and evidence.",
    "Offer acceptance never creates contract, employment or assignment automatically.",
    "CV possession never grants unlimited consent or indefinite retention.",
    "Purpose, controller, lawful basis, notice and rights route are explicit.",
    "Withdrawal and disposition never cascade to person or employment masters.",
    "Legal hold suspends disposition without changing candidacy outcome.",
    "At least one recruiting-effort scope reference exists, but an asserted opening is not mandatory.",
    "Application is an originating artifact of Candidacy and never a sibling root or Opening attribute.",
    "Matching is a purpose-qualified evaluation or process result, never an Opening attribute.",
    "At most one active candidacy exists for the same Person and Opening; no-opening paths use the declared effort scope instead.",
    "Candidacy closure or CV disposition never deletes Person, Decision or Employment records.",
    "Candidacy close, withdrawal or fill starts retention unless a recorded legal hold suspends disposition.",
    "Standing requisition does not authorize an indefinite talent pool.",
    "Rehire reuses Person, creates a new Candidacy and never resurrects a purged CV.",
    "Valid time and recorded time remain distinct and corrections are attributable successors."
  ],
  "holds": [
    "Registry allocation is pending and no identifier may be guessed.",
    "Privacy, retention, fairness and cross-company reuse require jurisdictional review.",
    "WM-ORG-008 and relation contracts require canonical completion.",
    "No-opening internal-mobility uniqueness requires canonical governance.",
    "Frozen audit returned REVISE at revision 2; all 32 semantic remediation groups were applied once without audit rerun, and canonical review remains pending."
  ],
  "candidateRevision": 3,
  "invariantRules": [
    {
      "id": "CAND-INV-01",
      "text": "One candidacy binds one subject, one declared recruiting-effort scope and an interval."
    },
    {
      "id": "CAND-INV-02",
      "text": "Candidate role never creates a second person identity."
    },
    {
      "id": "CAND-INV-03",
      "text": "Name, email or birth date never justify automatic person merge."
    },
    {
      "id": "CAND-INV-04",
      "text": "A later application creates a new candidacy while reusing the person anchor."
    },
    {
      "id": "CAND-INV-05",
      "text": "Every stage occurrence pins the exact process-design release."
    },
    {
      "id": "CAND-INV-06",
      "text": "Score, recommendation and decision remain distinct assertions."
    },
    {
      "id": "CAND-INV-07",
      "text": "Interview session and assessment result retain separate identity and evidence."
    },
    {
      "id": "CAND-INV-08",
      "text": "Offer acceptance never creates contract, employment or assignment automatically."
    },
    {
      "id": "CAND-INV-09",
      "text": "CV possession never grants unlimited consent or indefinite retention."
    },
    {
      "id": "CAND-INV-10",
      "text": "Purpose, controller, lawful basis, notice and rights route are explicit."
    },
    {
      "id": "CAND-INV-11",
      "text": "Withdrawal and disposition never cascade to person or employment masters."
    },
    {
      "id": "CAND-INV-12",
      "text": "Legal hold suspends disposition without changing candidacy outcome."
    },
    {
      "id": "CAND-INV-13",
      "text": "At least one recruiting-effort scope reference exists, but an asserted opening is not mandatory."
    },
    {
      "id": "CAND-INV-14",
      "text": "Application is an originating artifact of Candidacy and never a sibling root or Opening attribute."
    },
    {
      "id": "CAND-INV-15",
      "text": "Matching is a purpose-qualified evaluation or process result, never an Opening attribute."
    },
    {
      "id": "CAND-INV-16",
      "text": "At most one active candidacy exists for the same Person and Opening; no-opening paths use the declared effort scope instead."
    },
    {
      "id": "CAND-INV-17",
      "text": "Candidacy closure or CV disposition never deletes Person, Decision or Employment records."
    },
    {
      "id": "CAND-INV-18",
      "text": "Candidacy close, withdrawal or fill starts retention unless a recorded legal hold suspends disposition."
    },
    {
      "id": "CAND-INV-19",
      "text": "Standing requisition does not authorize an indefinite talent pool."
    },
    {
      "id": "CAND-INV-20",
      "text": "Rehire reuses Person, creates a new Candidacy and never resurrects a purged CV."
    },
    {
      "id": "CAND-INV-21",
      "text": "Valid time and recorded time remain distinct and corrections are attributable successors."
    }
  ]
}