{
  "format": "vercy-model-allocation-candidate/v1",
  "contourId": "EM-STR-03",
  "proposedName": "Capability Realization",
  "modelId": null,
  "registryId": null,
  "allocationState": "unassigned",
  "decision": "NEW MODEL",
  "canonicalPublishable": false,
  "identityTest": {
    "stableIdentity": "A temporal evidenced binding between one capability and one realizer remains identifiable across transfer, revision, correction and capacity change.",
    "versionIdentity": "Real-world change creates a successor realization; recording correction creates a knowledge-time successor without rewriting the original.",
    "independentLifecycle": [
      "proposed",
      "active",
      "constrained",
      "suspended",
      "transferred",
      "superseded",
      "ended"
    ],
    "mastership": "enterprise capability-register authority"
  },
  "boundary": {
    "owns": [
      "persistent capability-realization identity",
      "one capability reference and one realizer reference",
      "realizer kind and role",
      "valid-time and knowledge-time history",
      "coverage share assertions and evidence pins",
      "operational accountability, transfer and successor lineage",
      "scoped completeness and coverage claims",
      "tombstone retention"
    ],
    "references": [
      {
        "target": "WM-ACT-001",
        "purpose": "agent competence and period capacity for agent-kind realizers only"
      },
      {
        "target": "WM-ACT-003",
        "purpose": "process or workflow realizer"
      },
      {
        "target": "WM-ORG-002",
        "purpose": "organizational-unit realizer or accountable party"
      },
      {
        "target": "WM-ORG-003",
        "purpose": "team realizer"
      },
      {
        "target": "WM-ORG-004",
        "purpose": "position realizer"
      },
      {
        "target": "WM-MAT-008",
        "purpose": "pinned performance evidence"
      },
      {
        "target": "WM-ACT-034",
        "purpose": "capability assessment"
      }
    ],
    "excludes": [
      "capability or realizer identity",
      "process, organization, position, system or supplier lifecycle",
      "required or actual level ownership",
      "assessment or observation identity",
      "stored capability coverage or fullness",
      "scenario values in authoritative actuals"
    ]
  },
  "objects": {
    "CapabilityRealization": {
      "identity": [
        "capabilityRealizationId",
        "assertionRevisionId"
      ],
      "required": [
        "capabilityRef",
        "realizerRef",
        "realizerKind",
        "role",
        "validFrom",
        "assertedAt",
        "asserterRef",
        "accountablePartyRef",
        "assertionMode",
        "status"
      ],
      "optional": [
        "validTo",
        "coverageShare",
        "capacityRef",
        "evidenceRefs",
        "predecessorRef",
        "successorRef",
        "correctionOfRef",
        "gapReason",
        "tombstone"
      ],
      "lifecycle": [
        "proposed",
        "active",
        "constrained",
        "suspended",
        "transferred",
        "superseded",
        "ended"
      ],
      "granularity": "exactly one realizer; accountablePartyRef is governance, not a realizer"
    },
    "CoverageShare": {
      "required": [
        "value",
        "basis",
        "denominatorRef",
        "periodFrom",
        "periodTo"
      ],
      "optional": [
        "overlapJustification"
      ]
    },
    "EvidencePin": {
      "required": [
        "evidenceRef",
        "digest",
        "digestAlg",
        "criterionRef"
      ]
    },
    "CompletenessAssertion": {
      "identity": [
        "completenessAssertionId"
      ],
      "required": [
        "populationRef",
        "scopeRef",
        "asOf",
        "asserterRef",
        "methodRef",
        "assertedAt"
      ]
    },
    "CapabilityCoverageClaim": {
      "identity": [
        "coverageClaimId"
      ],
      "required": [
        "capabilityRef",
        "scopeRef",
        "asOf",
        "claimGrade",
        "basisRefs",
        "assertedAt",
        "asserterRef"
      ],
      "rules": [
        "evaluated over the realization binding set",
        "system-only sets cannot establish full realization"
      ]
    }
  },
  "invariants": [
    "Every realization binds exactly one capability to exactly one realizer for a valid interval; accountablePartyRef is not a realizer.",
    "Capability and realizer identities remain externally mastered.",
    "Transfer closes the predecessor and opens a successor; prior accountability is never rewritten.",
    "Transferred, superseded and ended have disjoint triggers; terminal states require validTo.",
    "Coverage share, when asserted, carries value, basis, denominator and its own period.",
    "Concurrent shares on one denominator reconcile or carry an explicit overlap justification.",
    "Coverage and fullness are derived claims over a scoped as-of binding set and are never fields of BusinessCapability.",
    "A system is only a supporting realizer and cannot alone establish full realization under any evidence grade.",
    "Evidence references pin digest, digest algorithm and criterion; absence of an approved sufficiency rule blocks fullness claims.",
    "Missing bindings remain unknown unless a scoped completeness assertion names population, scope, as-of, asserter and method.",
    "Actual and scenario bindings are explicitly discriminated; scenario bindings never feed authoritative actuals.",
    "Capacity is period-scoped and admissible from WM-ACT-001 only for agent-kind realizers.",
    "Multiple realizations of one capability may coexist.",
    "Assessment and observation identities remain external immutable records.",
    "Valid time and knowledge time are distinct; corrections append knowledge-time successors rather than rewriting facts.",
    "Ended realizations retain tombstones and remain resolvable for historical coverage and assessment."
  ],
  "holds": [
    "Registry allocation is pending and no identifier may be guessed.",
    "Realizer-role vocabulary and evidence-sufficiency criteria require canonical approval.",
    "No fullness claim is allowed until evidence-sufficiency rules are approved."
  ],
  "lifecycleRules": {
    "transferred": "realizer or operational accountability moves; terminal and requires successorRef and validTo",
    "superseded": "record is replaced for a non-transfer real-world change; terminal and requires successorRef and validTo",
    "ended": "binding ceases without successor; terminal and requires validTo",
    "constrained": "binding remains active but a named constraint limits claimed coverage"
  },
  "invariantRules": [
    {
      "id": "CR-01",
      "rule": "Every realization binds exactly one capability to exactly one realizer for a valid interval; accountablePartyRef is not a realizer."
    },
    {
      "id": "CR-02",
      "rule": "Capability and realizer identities remain externally mastered."
    },
    {
      "id": "CR-03",
      "rule": "Transfer closes the predecessor and opens a successor; prior accountability is never rewritten."
    },
    {
      "id": "CR-04",
      "rule": "Transferred, superseded and ended have disjoint triggers; terminal states require validTo."
    },
    {
      "id": "CR-05",
      "rule": "Coverage share, when asserted, carries value, basis, denominator and its own period."
    },
    {
      "id": "CR-06",
      "rule": "Concurrent shares on one denominator reconcile or carry an explicit overlap justification."
    },
    {
      "id": "CR-07",
      "rule": "Coverage and fullness are derived claims over a scoped as-of binding set and are never fields of BusinessCapability."
    },
    {
      "id": "CR-08",
      "rule": "A system is only a supporting realizer and cannot alone establish full realization under any evidence grade."
    },
    {
      "id": "CR-09",
      "rule": "Evidence references pin digest, digest algorithm and criterion; absence of an approved sufficiency rule blocks fullness claims."
    },
    {
      "id": "CR-10",
      "rule": "Missing bindings remain unknown unless a scoped completeness assertion names population, scope, as-of, asserter and method."
    },
    {
      "id": "CR-11",
      "rule": "Actual and scenario bindings are explicitly discriminated; scenario bindings never feed authoritative actuals."
    },
    {
      "id": "CR-12",
      "rule": "Capacity is period-scoped and admissible from WM-ACT-001 only for agent-kind realizers."
    },
    {
      "id": "CR-13",
      "rule": "Multiple realizations of one capability may coexist."
    },
    {
      "id": "CR-14",
      "rule": "Assessment and observation identities remain external immutable records."
    },
    {
      "id": "CR-15",
      "rule": "Valid time and knowledge time are distinct; corrections append knowledge-time successors rather than rewriting facts."
    },
    {
      "id": "CR-16",
      "rule": "Ended realizations retain tombstones and remain resolvable for historical coverage and assessment."
    }
  ]
}