{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-RSK-02",
  "proposedName": "Procedure Definition",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NEW MODEL",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "A reusable assurance procedure remains identifiable across engagements, performers and individual executions while its approved method evolves through controlled revisions.",
    "versionIdentity": "Changes to objective, prerequisites, steps, evidence requirements, sampling method or decision rule create immutable procedure versions; materially different assurance objectives create separate procedures.",
    "independentLifecycle": [
      "draft",
      "reviewed",
      "approved",
      "effective",
      "suspended",
      "superseded",
      "retired"
    ],
    "mastership": "assurance procedure methodology authority"
  },
  "boundary": {
    "owns": [
      "persistent reusable procedure-definition identity",
      "assurance objective and applicability",
      "prerequisites and ordered method steps",
      "required evidence and integrity expectations",
      "population and sampling method specification",
      "decision rule and result vocabulary",
      "competence and independence requirements",
      "approval, versioning, supersession and retirement history",
      "closed sampling-method vocabulary and frame-gap representation",
      "procedure-version authorization bindings",
      "closed sampling-method vocabulary and frame-gap representation",
      "procedure-version authorization bindings"
    ],
    "references": [
      {
        "target": "WM-ECO-035",
        "purpose": "Assurance engagement mandate and intended use"
      },
      {
        "target": "WM-ACT-033",
        "purpose": "Performed execution, observation, appraisal and finding"
      },
      {
        "target": "WM-KNW-012",
        "purpose": "Pinned criteria or governing method expression"
      },
      {
        "target": "WM-KNW-007",
        "purpose": "Claim and finding assertion shape"
      },
      {
        "target": "WM-KNW-014",
        "purpose": "Organization-owned issue lifecycle"
      },
      {
        "target": "WM-ACT-006",
        "purpose": "Corrective work lifecycle"
      }
    ],
    "excludes": [
      "engagement mandate, assurance level or issuance authority",
      "performed procedure or execution occurrence",
      "observation, evidence item, appraisal or finding identity",
      "organizational issue, risk or control state",
      "management response or corrective-action task",
      "assurance opinion or general compliance status",
      "sampling frame, method, sample or cell for a performed test",
      "finding closure or opinion limitation state",
      "sampling frame, method, sample or cell for a performed test",
      "finding closure or opinion limitation state"
    ]
  },
  "objects": {
    "ProcedureDefinition": {
      "identity": [
        "procedureDefinitionId"
      ],
      "required": [
        "name",
        "objective",
        "ownerRef",
        "status"
      ],
      "optional": [
        "successorRef",
        "retiredAt"
      ],
      "lifecycle": [
        "draft",
        "active",
        "suspended",
        "retired"
      ]
    },
    "ProcedureVersion": {
      "identity": [
        "procedureDefinitionId",
        "version"
      ],
      "required": [
        "steps",
        "evidenceRequirements",
        "decisionRule",
        "validFrom",
        "contentDigest",
        "status",
        "approverRef",
        "approvedAt",
        "samplingMethodCode",
        "resultCodeVocabulary"
      ],
      "optional": [
        "validTo",
        "applicability",
        "prerequisites",
        "competenceRequirements",
        "independenceRequirements",
        "criteriaRef",
        "supersedesVersion",
        "withdrawalReason",
        "withdrawalAuthorityRef"
      ],
      "lifecycle": [
        "draft",
        "approved",
        "effective",
        "suspended",
        "superseded",
        "withdrawn"
      ]
    }
  },
  "holds": [
    "Registry namespace and identifier allocation are pending and no identifier may be guessed.",
    "Independent Grok review and one frozen semantic audit are pending.",
    "WM-ACT-033 and WM-ECO-035 dual-root ownership must be normatively resolved before publication.",
    "Criteria, evidence and sampling relation contracts require canonical reconciliation.",
    "Package conversion and live verification are pending."
  ],
  "candidateRevision": 3,
  "candidateStatus": "provider-reconciled-audited-remediated-allocation-held",
  "publishable": false,
  "invariantRules": [
    {
      "id": "I01",
      "rule": "ProcedureDefinition and performed test never share identity; performed test is WM-ACT-033 execution-local."
    },
    {
      "id": "I02",
      "rule": "Every performed test pins one authorised immutable procedure version and pinned criteria before evaluation."
    },
    {
      "id": "I03",
      "rule": "Method, evidence, sampling or decision-rule change creates an immutable successor ProcedureVersion."
    },
    {
      "id": "I04",
      "rule": "ProcedureDefinition owns no engagement, execution, finding, opinion, response, action or closure identity."
    },
    {
      "id": "I05",
      "rule": "Population, frame, gaps, method, sample units and sampling cell are explicit on every performed test."
    },
    {
      "id": "I06",
      "rule": "Evidence is bound to one performed test and sampling cell; observation alone is neither evidence nor finding."
    },
    {
      "id": "I07",
      "rule": "Finding requires pinned criteria, cell-bound evidence and evaluation."
    },
    {
      "id": "I08",
      "rule": "One-system or one-site evidence never extrapolates across an exclusion or frame gap."
    },
    {
      "id": "I09",
      "rule": "Competence and independence requirements are separate and evidenced per engagement and execution."
    },
    {
      "id": "I10",
      "rule": "Procedure completion, task completion, corrective action, management response and opinion never close a finding."
    },
    {
      "id": "I11",
      "rule": "Retired and superseded versions remain immutable and resolvable for issued work."
    },
    {
      "id": "I12",
      "rule": "A reusable definition is catalog-owned and is never cloned into an engagement or execution."
    },
    {
      "id": "I13",
      "rule": "WM-KNW-012 masters criteria statements only; ProcedureVersion owns method steps; neither may contain the other's content."
    },
    {
      "id": "I14",
      "rule": "At most one ProcedureVersion is effective per definition at an instant; supersedesVersion is required when a predecessor exists."
    },
    {
      "id": "I15",
      "rule": "Every approved or effective version records approverRef and approvedAt; new pins require authorized, effective, non-suspended and non-withdrawn status at execution time; withdrawal is prospective."
    },
    {
      "id": "I16",
      "rule": "Engagement criteria binding is mastered by WM-ECO-035; performed tests reference it read-only before evaluation and cannot diverge."
    },
    {
      "id": "I17",
      "rule": "Performed-test sampling record owns population, frame, gap kinds, method code and version, sample units and size, deviations and explicit projection claim including none."
    },
    {
      "id": "I18",
      "rule": "EvidenceItem is an identified provenance/integrity unit; EvidencePackage is a collection of item references; each reference binds test and cell and may reuse an item across tests."
    },
    {
      "id": "I19",
      "rule": "Finding identity is an engagement-scoped unique key and remains stable through retest, response, closure and supersession."
    },
    {
      "id": "I20",
      "rule": "Root cause is an evidenced WM-KNW-007-shaped claim with conclusion status including undetermined, distinct from finding, issue and action."
    },
    {
      "id": "I21",
      "rule": "Event, execution, observation, issuance, response, action completion, retest and ingestion times are separate recorded fields."
    }
  ],
  "vocabularies": {
    "samplingMethod": [
      "census",
      "random",
      "systematic",
      "stratified",
      "judgmental",
      "targeted",
      "other-declared"
    ],
    "frameGapKind": [
      "excluded",
      "unreachable",
      "missing",
      "ineligible",
      "unknown"
    ],
    "resultCode": [
      "pass",
      "fail",
      "exception",
      "inconclusive",
      "not-performed"
    ]
  }
}