{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-PEO-05",
  "proposedName": "Enrollment",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NEW MODEL",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "A learner admission and participation record remains identifiable independently of the scheduled delivery and survives delivery cancellation, postponement or replacement.",
    "versionIdentity": "Transfer, waitlist, withdrawal or admission correction appends an attributable successor state.",
    "independentLifecycle": [
      "requested",
      "waitlisted",
      "admitted",
      "enrolled",
      "transferred",
      "withdrawn",
      "cancelled",
      "closed"
    ],
    "mastership": "authorized learning registrar"
  },
  "boundary": {
    "owns": [
      "enrollment identity",
      "learner and program-version binding",
      "admission and prerequisite decision",
      "delivery allocation",
      "transfer and withdrawal history"
    ],
    "references": [
      {
        "target": "WM-PER-001",
        "purpose": "Learner identity",
        "contractState": "provisional"
      },
      {
        "target": "WM-ACT-038",
        "purpose": "Delivery participation",
        "contractState": "provisional"
      },
      {
        "target": "WM-REC-010",
        "purpose": "Admission decision",
        "contractState": "provisional"
      },
      {
        "target": "WM-PER-008",
        "purpose": "Result boundary",
        "contractState": "provisional"
      },
      {
        "target": "WM-ACT-038",
        "purpose": "Capacity, waitlist, attendance and delivery-completion masters; enrollment stores non-authoritative back-references only",
        "contractState": "provisional"
      }
    ],
    "excludes": [
      "program definition",
      "delivery identity",
      "attendance",
      "assessment result",
      "qualification",
      "credential"
    ]
  },
  "objects": {
    "Enrollment": {
      "identity": [
        "enrollmentId",
        "versionId"
      ],
      "required": [
        "learnerRef",
        "programVersionRef",
        "status",
        "validFrom",
        "recordedAt",
        "recordedBy"
      ],
      "optional": [
        "decisionRef",
        "waitlistPosition",
        "attendanceRefs",
        "completionRef",
        "resultRefs",
        "validTo",
        "deliveryRef",
        "predecessorRef",
        "transferFromDeliveryRef",
        "transferToDeliveryRef",
        "retentionPolicyRef",
        "disclosureScope"
      ]
    }
  },
  "invariants": [
    "Enrollment identity is external to delivery.",
    "Enrollment pins one program version.",
    "Admission and attendance remain distinct.",
    "Login or access never proves attendance.",
    "Cancellation of delivery does not erase enrollment.",
    "Transfer appends history.",
    "Withdrawal preserves prior participation facts.",
    "Prerequisite evaluation is attributable.",
    "Capacity state is explicit.",
    "Enrollment never proves achievement.",
    "Enrollment grants no qualification or credential.",
    "Missing attendance remains unknown.",
    "A cancelled or superseded Enrollment remains historical participation and is not an active seat.",
    "Attendance, completion and assessment are independent assertions.",
    "Enrollment is not WM-ORG-016 assignment and grants no access.",
    "Waitlist and transfer history never overwrite earlier states.",
    "Every state append records actor and time.",
    "Capacity and waitlist facts remain WM-ACT-038 Delivery-owned.",
    "Transfer preserves predecessor Program Version pin and appends a successor state."
  ],
  "holds": [
    "Registry allocation is pending and no identifier may be guessed.",
    "All base specifications and relation contracts remain provisional reviewable drafts.",
    "Privacy, retention, source pins and executable conformance remain pending.",
    "Package conversion and live verification are pending.",
    "Frozen audit returned REVISE at revision 2; all 44 checklist items were remediated once without audit rerun."
  ],
  "candidateRevision": 3,
  "digestPolicy": {
    "algorithm": "SHA-256",
    "canonicalization": "UTF-8 canonical JSON with sorted object keys and no insignificant whitespace",
    "coverage": "all fields bearing on released semantics",
    "verification": "asserted and unverified until live conformance closes"
  },
  "privacyPolicy": {
    "purposeLimited": true,
    "minimumDisclosure": true,
    "disclosureScopeRequired": true,
    "evidenceMinimized": true,
    "unknownDistinctFromAbsent": true
  },
  "lifecycles": {
    "enrollment": [
      "requested",
      "waitlisted",
      "admitted",
      "enrolled",
      "transferred",
      "withdrawn",
      "cancelled",
      "closed"
    ],
    "participation": [
      "unknown",
      "active",
      "ended"
    ]
  },
  "transferSemantics": "Transfer appends a successor Enrollment version, retains the predecessor Program Version pin, and may allocate a successor Delivery without repinning the historical state.",
  "backReferenceSemantics": {
    "attendanceRefs": "non-authoritative",
    "completionRef": "non-authoritative",
    "resultRefs": "non-authoritative"
  },
  "invariantRules": [
    {
      "id": "ENR-INV-01",
      "text": "Enrollment identity is external to delivery."
    },
    {
      "id": "ENR-INV-02",
      "text": "Enrollment pins one program version."
    },
    {
      "id": "ENR-INV-03",
      "text": "Admission and attendance remain distinct."
    },
    {
      "id": "ENR-INV-04",
      "text": "Login or access never proves attendance."
    },
    {
      "id": "ENR-INV-05",
      "text": "Cancellation of delivery does not erase enrollment."
    },
    {
      "id": "ENR-INV-06",
      "text": "Transfer appends history."
    },
    {
      "id": "ENR-INV-07",
      "text": "Withdrawal preserves prior participation facts."
    },
    {
      "id": "ENR-INV-08",
      "text": "Prerequisite evaluation is attributable."
    },
    {
      "id": "ENR-INV-09",
      "text": "Capacity state is explicit."
    },
    {
      "id": "ENR-INV-10",
      "text": "Enrollment never proves achievement."
    },
    {
      "id": "ENR-INV-11",
      "text": "Enrollment grants no qualification or credential."
    },
    {
      "id": "ENR-INV-12",
      "text": "Missing attendance remains unknown."
    },
    {
      "id": "ENR-INV-13",
      "text": "A cancelled or superseded Enrollment remains historical participation and is not an active seat."
    },
    {
      "id": "ENR-INV-14",
      "text": "Attendance, completion and assessment are independent assertions."
    },
    {
      "id": "ENR-INV-15",
      "text": "Enrollment is not WM-ORG-016 assignment and grants no access."
    },
    {
      "id": "ENR-INV-16",
      "text": "Waitlist and transfer history never overwrite earlier states."
    },
    {
      "id": "ENR-INV-17",
      "text": "Every state append records actor and time."
    },
    {
      "id": "ENR-INV-18",
      "text": "Capacity and waitlist facts remain WM-ACT-038 Delivery-owned."
    },
    {
      "id": "ENR-INV-19",
      "text": "Transfer preserves predecessor Program Version pin and appends a successor state."
    }
  ]
}