{ "schema_version": "1.0.0", "model": { "registry_id": "vr.wm-xct-040", "model_id": "WM-XCT-040", "name": "Model Composition Resolution", "entry_kind": "pattern", "purpose": "Resolve and verify a bounded exact composition of model releases for one sovereign Dimension, preserving authority, provenance and explicit runtime readiness.", "scope_statement": "One domain-neutral resolution plan and its evidence, with offline validation, fresh-target staging and a NEW-Dimension reference bootstrap.", "in_scope": [ "Exact release and asset references; mandatory closure and optional edges.", "Independent adoption authority, temporal preconditions and scoped readiness.", "Versioned binding records, receipts, refusal and explicit migration boundaries." ], "out_of_scope": [ "Domain facts, universal semantic equivalence, ELMM/MVS runtime, online range solving, IAM/authenticity enforcement and migration of existing Dimensions." ], "boundary_notes": [ { "neighbor": "Existing Vercy kernel", "distinction": "Reuse owner, identity, record and provenance substrate; the contract never replaces the kernel.", "source_refs": [ "SRC-007", "SRC-008" ] }, { "neighbor": "Enterprise Landscape / ELMM", "distinction": "Domain landscape and semantic context router remain separate; exact offline package closure is not their full implementation.", "source_refs": [ "SRC-006", "SRC-009" ] }, { "neighbor": "Dependency / Impact WM-XCT-037", "distinction": "Overlap in typed graph description, but this contract evaluates exact package selection; no dependency on that model or exact-match claim.", "source_refs": [ "SRC-007" ] } ] }, "sources": [ { "id": "SRC-001", "title": "JSON Schema Core 2020-12", "organization": "JSON Schema", "url": "https://json-schema.org/draft/2020-12/json-schema-core", "version_or_date": "2020-12, published 2022-06-16", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Sections 8.1, 8.2, 9.3: dialect and reference identity. Use a real validator and a declared bounded offline profile, not arbitrary keyword ignoring." }, { "id": "SRC-002", "title": "OCI Image Specification content descriptors", "organization": "Open Container Initiative", "url": "https://github.com/opencontainers/image-spec/blob/v1.1.0/descriptor.md", "version_or_date": "v1.1.0", "source_type": "schema", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Descriptor properties digest, size and media type are a precedent for byte identity, not publisher authentication. Original Vercy descriptors are not an OCI compliance claim." }, { "id": "SRC-003", "title": "PROV-DM", "organization": "World Wide Web Consortium", "url": "https://www.w3.org/TR/prov-dm/", "version_or_date": "W3C Recommendation 2013-04-30", "source_type": "ontology", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Sections 5.1 and 5.2 distinguish entities, activities, attribution and derivation. Use a plan, execution and receipt without treating provenance as truth." }, { "id": "SRC-004", "title": "Semantic Versioning", "organization": "SemVer project", "url": "https://semver.org/spec/v2.0.0.html", "version_or_date": "2.0.0", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Rules 1-3 and 9 distinguish declared public API, immutable releases and prerelease labels. SemVer cannot itself establish business semantic compatibility." }, { "id": "SRC-005", "title": "npm package-lock.json", "organization": "npm", "url": "https://docs.npmjs.com/cli/v11/configuring-npm/package-lock-json/", "version_or_date": "CLI v11 documentation, observed 2026-09-21", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Description and packages: a lock records exact installed resolution, separate from broad dependency requests. Align concept only; no npm execution or lifecycle hooks." }, { "id": "SRC-006", "title": "Go Modules Reference, Minimal Version Selection", "organization": "Go project", "url": "https://go.dev/ref/mod#minimal-version-selection", "version_or_date": "Living reference observed 2026-09-21", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "MVS is a graph algorithm with ecosystem assumptions. Exact-closure-v1 deliberately does not claim MVS or SemVer range solving." }, { "id": "SRC-007", "title": "Vercy model agent protocol and owner kernel", "organization": "Vercy", "url": "https://ver.cy/model-agent-protocol.md", "version_or_date": "Observed 2026-09-21", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Read pinned model instructions, preserve ownership and provenance, distinguish bindings and model semantics. Owner authority must be supplied independently of package text." }, { "id": "SRC-008", "title": "Vercy native Dimension validator", "organization": "Vercy", "url": "https://ver.cy/skills/vercy/scripts/validate_dimension.py", "version_or_date": "Skill 0.4.0, observed 2026-09-21", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Local V1 registry file requirements, V2 specification digest and path checks, V3 record semantics. This implementation is not full JSON Schema evaluation of nested objects." }, { "id": "SRC-009", "title": "ELMM profile at immutable source commit", "organization": "Vercy", "url": "https://github.com/ver-cy/elmm/blob/a5c04a68adc082958baddaa6820bf20b73a18907/README.md", "version_or_date": "a5c04a68adc082958baddaa6820bf20b73a18907", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Kernel isolation, typed composition and semantic fingerprint are architectural precedents. The profile is not a verified native package in the current public runtime index." }, { "id": "SRC-010", "title": "Python filesystem rename and replacement operations", "organization": "Python Software Foundation", "url": "https://docs.python.org/3/library/os.html#os.rename", "version_or_date": "Python 3 documentation, observed 2026-09-21", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-09-21T15:00:43+00:00", "relevance": "Filesystem rename semantics motivate a fresh same-filesystem target. No distributed transaction or power-loss durability claim follows from one rename." } ], "structure": { "bundles": [ { "id": "composition-bundle-scope", "name": "Kernel and domain boundary", "description": "Kernel and domain boundary within the bounded composition episode.", "rationale": "Keep this concern independently reviewable without importing domain data.", "source_refs": [ "SRC-001", "SRC-005", "SRC-007", "SRC-009" ], "layers": [ { "id": "composition-layer-boundary", "name": "Bounded contract identity", "description": "One composition episode is owned by one Dimension; it reuses the kernel and does not import corporate domain models.", "source_refs": [ "SRC-007", "SRC-009" ], "findings": [ { "id": "composition-plan", "name": "Bounded contract identity", "description": "One composition episode is owned by one Dimension; it reuses the kernel and does not import corporate domain models.", "source_refs": [ "SRC-007", "SRC-009" ], "questions": [ { "id": "composition-plan-q1", "text": "What exactly is the subject of this composition episode?", "kind": "definition", "answer_data": [ "planId", "dimensionId", "revision", "supersedes" ] }, { "id": "composition-plan-q2", "text": "Which issuer owns this plan identity and its predecessor?", "kind": "identity", "answer_data": [ "planId", "dimensionId", "revision", "supersedes" ] }, { "id": "composition-plan-q3", "text": "Which concerns remain in the kernel or domain models?", "kind": "composition", "answer_data": [ "planId", "dimensionId", "revision", "supersedes" ] } ], "data_elements": [ { "id": "composition-plan-field-1", "name": "planId", "description": "See typed contract and field-catalog entry for planId. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-009" ] }, { "id": "composition-plan-field-2", "name": "dimensionId", "description": "See typed contract and field-catalog entry for dimensionId. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-009" ] }, { "id": "composition-plan-field-3", "name": "revision", "description": "See typed contract and field-catalog entry for revision. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "number", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-009" ] }, { "id": "composition-plan-field-4", "name": "supersedes", "description": "See typed contract and field-catalog entry for supersedes. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-007", "SRC-009" ] } ], "artifacts": [ { "id": "composition-plan-artifact", "name": "Bounded contract identity evidence", "description": "Plan fields planId, dimensionId, revision, supersedes and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-007", "SRC-009" ] } ], "inline_only_rationale": null } ] }, { "id": "composition-layer-graphs", "name": "Three independent graphs", "description": "Package closure is distinct from instance relationships and transport locations. A legal business cycle is not a mandatory package cycle.", "source_refs": [ "SRC-001", "SRC-005", "SRC-009" ], "findings": [ { "id": "composition-graph", "name": "Three independent graphs", "description": "Package closure is distinct from instance relationships and transport locations. A legal business cycle is not a mandatory package cycle.", "source_refs": [ "SRC-001", "SRC-005", "SRC-009" ], "questions": [ { "id": "composition-graph-q1", "text": "Which edges are mandatory package dependencies?", "kind": "relationship", "answer_data": [ "roots", "releases.requires", "releases.references" ] }, { "id": "composition-graph-q2", "text": "Does the required graph contain a cycle or missing exact target?", "kind": "constraint", "answer_data": [ "roots", "releases.requires", "releases.references" ] }, { "id": "composition-graph-q3", "text": "Which optional references must remain outside automatic closure?", "kind": "composition", "answer_data": [ "roots", "releases.requires", "releases.references" ] } ], "data_elements": [ { "id": "composition-graph-field-1", "name": "roots", "description": "See typed contract and field-catalog entry for roots. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "collection", "cardinality": "1..n", "required": true, "source_refs": [ "SRC-001", "SRC-005", "SRC-009" ] }, { "id": "composition-graph-field-2", "name": "releases.requires", "description": "See typed contract and field-catalog entry for releases.requires. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-005", "SRC-009" ] }, { "id": "composition-graph-field-3", "name": "releases.references", "description": "See typed contract and field-catalog entry for releases.references. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-005", "SRC-009" ] } ], "artifacts": [ { "id": "composition-graph-artifact", "name": "Three independent graphs evidence", "description": "Plan fields roots, releases.requires, releases.references and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-001", "SRC-005", "SRC-009" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "composition-bundle-releases", "name": "Release and content identity", "description": "Release and content identity within the bounded composition episode.", "rationale": "Keep this concern independently reviewable without importing domain data.", "source_refs": [ "SRC-002", "SRC-004", "SRC-005", "SRC-007" ], "layers": [ { "id": "composition-layer-versions", "name": "Exact immutable releases", "description": "Select one exact release per publisher-qualified ID. Do not collapse content digest, semantic fingerprint, SemVer and object revision.", "source_refs": [ "SRC-002", "SRC-004", "SRC-005" ], "findings": [ { "id": "composition-release", "name": "Exact immutable releases", "description": "Select one exact release per publisher-qualified ID. Do not collapse content digest, semantic fingerprint, SemVer and object revision.", "source_refs": [ "SRC-002", "SRC-004", "SRC-005" ], "questions": [ { "id": "composition-release-q1", "text": "What exact model identifier and version are selected?", "kind": "identity", "answer_data": [ "modelId", "version", "semanticFingerprint", "compatibility" ] }, { "id": "composition-release-q2", "text": "Do changed bytes reuse a previously selected release version?", "kind": "quality", "answer_data": [ "modelId", "version", "semanticFingerprint", "compatibility" ] }, { "id": "composition-release-q3", "text": "What scoped evidence supports compatibility beyond a version label?", "kind": "interoperability", "answer_data": [ "modelId", "version", "semanticFingerprint", "compatibility" ] } ], "data_elements": [ { "id": "composition-release-field-1", "name": "modelId", "description": "See typed contract and field-catalog entry for modelId. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-004", "SRC-005" ] }, { "id": "composition-release-field-2", "name": "version", "description": "See typed contract and field-catalog entry for version. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-004", "SRC-005" ] }, { "id": "composition-release-field-3", "name": "semanticFingerprint", "description": "See typed contract and field-catalog entry for semanticFingerprint. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-004", "SRC-005" ] }, { "id": "composition-release-field-4", "name": "compatibility", "description": "See typed contract and field-catalog entry for compatibility. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-004", "SRC-005" ] } ], "artifacts": [ { "id": "composition-release-artifact", "name": "Exact immutable releases evidence", "description": "Plan fields modelId, version, semanticFingerprint, compatibility and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-002", "SRC-004", "SRC-005" ] } ], "inline_only_rationale": null } ] }, { "id": "composition-layer-bytes", "name": "Transport integrity and origins", "description": "Descriptors pin every specification, agent guide and binding file. Local owner policy supplies trusted origins; matching bytes do not establish authorship.", "source_refs": [ "SRC-002", "SRC-007" ], "findings": [ { "id": "composition-descriptor", "name": "Transport integrity and origins", "description": "Descriptors pin every specification, agent guide and binding file. Local owner policy supplies trusted origins; matching bytes do not establish authorship.", "source_refs": [ "SRC-002", "SRC-007" ], "questions": [ { "id": "composition-descriptor-q1", "text": "Do specification and AGENTS bytes match their digests and sizes?", "kind": "evidence", "answer_data": [ "specification", "agents", "binding.runtime" ] }, { "id": "composition-descriptor-q2", "text": "Can a source or path escape the permitted package boundary?", "kind": "security", "answer_data": [ "specification", "agents", "binding.runtime" ] }, { "id": "composition-descriptor-q3", "text": "Which source URL and observation identify these bytes?", "kind": "provenance", "answer_data": [ "specification", "agents", "binding.runtime" ] } ], "data_elements": [ { "id": "composition-descriptor-field-1", "name": "specification", "description": "See typed contract and field-catalog entry for specification. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-007" ] }, { "id": "composition-descriptor-field-2", "name": "agents", "description": "See typed contract and field-catalog entry for agents. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-007" ] }, { "id": "composition-descriptor-field-3", "name": "binding.runtime", "description": "See typed contract and field-catalog entry for binding.runtime. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-007" ] } ], "artifacts": [ { "id": "composition-descriptor-artifact", "name": "Transport integrity and origins evidence", "description": "Plan fields specification, agents, binding.runtime and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-002", "SRC-007" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "composition-bundle-authority", "name": "Authority and temporal validity", "description": "Authority and temporal validity within the bounded composition episode.", "rationale": "Keep this concern independently reviewable without importing domain data.", "source_refs": [ "SRC-003", "SRC-005", "SRC-007" ], "layers": [ { "id": "composition-layer-policy", "name": "Independent installation authority", "description": "The caller-supplied policy, not assertions within the plan, decides owner, actor, purpose, effective interval, model allowlist and draft permission.", "source_refs": [ "SRC-003", "SRC-007" ], "findings": [ { "id": "composition-authority", "name": "Independent installation authority", "description": "The caller-supplied policy, not assertions within the plan, decides owner, actor, purpose, effective interval, model allowlist and draft permission.", "source_refs": [ "SRC-003", "SRC-007" ], "questions": [ { "id": "composition-authority-q1", "text": "Which current owner policy authorizes this actor and purpose?", "kind": "authority", "answer_data": [ "authority", "policyDigest", "allowedModelIds" ] }, { "id": "composition-authority-q2", "text": "Which model identifiers and assurance levels are allowed?", "kind": "access", "answer_data": [ "authority", "policyDigest", "allowedModelIds" ] }, { "id": "composition-authority-q3", "text": "What happens when the plan tries to grant itself permission?", "kind": "exception", "answer_data": [ "authority", "policyDigest", "allowedModelIds" ] } ], "data_elements": [ { "id": "composition-authority-field-1", "name": "authority", "description": "See typed contract and field-catalog entry for authority. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-007" ] }, { "id": "composition-authority-field-2", "name": "policyDigest", "description": "See typed contract and field-catalog entry for policyDigest. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-007" ] }, { "id": "composition-authority-field-3", "name": "allowedModelIds", "description": "See typed contract and field-catalog entry for allowedModelIds. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "collection", "cardinality": "1..n", "required": true, "source_refs": [ "SRC-003", "SRC-007" ] } ], "artifacts": [ { "id": "composition-authority-artifact", "name": "Independent installation authority evidence", "description": "Plan fields authority, policyDigest, allowedModelIds and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-003", "SRC-007" ] } ], "inline_only_rationale": null } ] }, { "id": "composition-layer-time", "name": "Freshness and current-state preconditions", "description": "Plan and policy are evaluated at one explicit time; exact starting lock bytes prevent stale application. Historical evaluation cannot authorize a new CLI write.", "source_refs": [ "SRC-003", "SRC-005" ], "findings": [ { "id": "composition-time", "name": "Freshness and current-state preconditions", "description": "Plan and policy are evaluated at one explicit time; exact starting lock bytes prevent stale application. Historical evaluation cannot authorize a new CLI write.", "source_refs": [ "SRC-003", "SRC-005" ], "questions": [ { "id": "composition-time-q1", "text": "At which valid time was this plan applicable?", "kind": "temporal", "answer_data": [ "createdAt", "validUntil", "baseLockDigest", "provenance.recordedAt" ] }, { "id": "composition-time-q2", "text": "What changed between planning and activation?", "kind": "event", "answer_data": [ "createdAt", "validUntil", "baseLockDigest", "provenance.recordedAt" ] }, { "id": "composition-time-q3", "text": "Which immutable revision corrects an earlier decision?", "kind": "lifecycle", "answer_data": [ "createdAt", "validUntil", "baseLockDigest", "provenance.recordedAt" ] } ], "data_elements": [ { "id": "composition-time-field-1", "name": "createdAt", "description": "See typed contract and field-catalog entry for createdAt. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "timestamp", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-005" ] }, { "id": "composition-time-field-2", "name": "validUntil", "description": "See typed contract and field-catalog entry for validUntil. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "timestamp", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-005" ] }, { "id": "composition-time-field-3", "name": "baseLockDigest", "description": "See typed contract and field-catalog entry for baseLockDigest. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-005" ] }, { "id": "composition-time-field-4", "name": "provenance.recordedAt", "description": "See typed contract and field-catalog entry for provenance.recordedAt. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "timestamp", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-005" ] } ], "artifacts": [ { "id": "composition-time-artifact", "name": "Freshness and current-state preconditions evidence", "description": "Plan fields createdAt, validUntil, baseLockDigest, provenance.recordedAt and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-003", "SRC-005" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "composition-bundle-bindings", "name": "Bindings and validation scope", "description": "Bindings and validation scope within the bounded composition episode.", "rationale": "Keep this concern independently reviewable without importing domain data.", "source_refs": [ "SRC-001", "SRC-007", "SRC-008" ], "layers": [ { "id": "composition-layer-readiness", "name": "Semantic and native readiness", "description": "A published semantic package is useful without a native schema. Native-bound requires an explicit scoped runtime binding tied to the exact specification.", "source_refs": [ "SRC-001", "SRC-007", "SRC-008" ], "findings": [ { "id": "composition-binding", "name": "Semantic and native readiness", "description": "A published semantic package is useful without a native schema. Native-bound requires an explicit scoped runtime binding tied to the exact specification.", "source_refs": [ "SRC-001", "SRC-007", "SRC-008" ], "questions": [ { "id": "composition-binding-q1", "text": "Is this release semantic-only or explicitly native-bound?", "kind": "state", "answer_data": [ "installationMode", "binding", "binding.forSpecificationDigest" ] }, { "id": "composition-binding-q2", "text": "Which runtime fact paths and units are actually declared?", "kind": "requirement", "answer_data": [ "installationMode", "binding", "binding.forSpecificationDigest" ] }, { "id": "composition-binding-q3", "text": "Which registry may contain a package with no native binding?", "kind": "classification", "answer_data": [ "installationMode", "binding", "binding.forSpecificationDigest" ] } ], "data_elements": [ { "id": "composition-binding-field-1", "name": "installationMode", "description": "See typed contract and field-catalog entry for installationMode. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-007", "SRC-008" ] }, { "id": "composition-binding-field-2", "name": "binding", "description": "See typed contract and field-catalog entry for binding. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-007", "SRC-008" ] }, { "id": "composition-binding-field-3", "name": "binding.forSpecificationDigest", "description": "See typed contract and field-catalog entry for binding.forSpecificationDigest. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-007", "SRC-008" ] } ], "artifacts": [ { "id": "composition-binding-artifact", "name": "Semantic and native readiness evidence", "description": "Plan fields installationMode, binding, binding.forSpecificationDigest and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-001", "SRC-007", "SRC-008" ] } ], "inline_only_rationale": null } ] }, { "id": "composition-layer-nested", "name": "Nested data validation", "description": "V3 envelope validation is not nested domain validation. Structured snapshots require both a schema and a separately selected trusted companion check.", "source_refs": [ "SRC-001", "SRC-008" ], "findings": [ { "id": "composition-nested", "name": "Nested data validation", "description": "V3 envelope validation is not nested domain validation. Structured snapshots require both a schema and a separately selected trusted companion check.", "source_refs": [ "SRC-001", "SRC-008" ], "questions": [ { "id": "composition-nested-q1", "text": "Which validator checks nested and cross-record meaning?", "kind": "validation", "answer_data": [ "binding.instanceSchema", "binding.companionValidator", "binding.scope" ] }, { "id": "composition-nested-q2", "text": "Can an empty or permissive schema falsely promote readiness?", "kind": "constraint", "answer_data": [ "binding.instanceSchema", "binding.companionValidator", "binding.scope" ] }, { "id": "composition-nested-q3", "text": "How are untrusted downloaded validators prevented from auto-executing?", "kind": "process", "answer_data": [ "binding.instanceSchema", "binding.companionValidator", "binding.scope" ] } ], "data_elements": [ { "id": "composition-nested-field-1", "name": "binding.instanceSchema", "description": "See typed contract and field-catalog entry for binding.instanceSchema. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-008" ] }, { "id": "composition-nested-field-2", "name": "binding.companionValidator", "description": "See typed contract and field-catalog entry for binding.companionValidator. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-008" ] }, { "id": "composition-nested-field-3", "name": "binding.scope", "description": "See typed contract and field-catalog entry for binding.scope. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-008" ] } ], "artifacts": [ { "id": "composition-nested-artifact", "name": "Nested data validation evidence", "description": "Plan fields binding.instanceSchema, binding.companionValidator, binding.scope and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-001", "SRC-008" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "composition-bundle-execution", "name": "Execution and recovery", "description": "Execution and recovery within the bounded composition episode.", "rationale": "Keep this concern independently reviewable without importing domain data.", "source_refs": [ "SRC-005", "SRC-007", "SRC-008", "SRC-010" ], "layers": [ { "id": "composition-layer-staging", "name": "Fresh-target staging and idempotency", "description": "Stage verified bytes under a creation lease and expose a result only at commit. Replaying an identical verified plan is unchanged; a differing existing target is preserved.", "source_refs": [ "SRC-005", "SRC-010" ], "findings": [ { "id": "composition-staging", "name": "Fresh-target staging and idempotency", "description": "Stage verified bytes under a creation lease and expose a result only at commit. Replaying an identical verified plan is unchanged; a differing existing target is preserved.", "source_refs": [ "SRC-005", "SRC-010" ], "questions": [ { "id": "composition-staging-q1", "text": "Which action is reversible before the fresh target is activated?", "kind": "process", "answer_data": [ "receiptId", "planDigest", "status", "committedAt" ] }, { "id": "composition-staging-q2", "text": "Which exact receipt demonstrates a committed staging result?", "kind": "event", "answer_data": [ "receiptId", "planDigest", "status", "committedAt" ] }, { "id": "composition-staging-q3", "text": "What remains after a write failure or a competing writer?", "kind": "exception", "answer_data": [ "receiptId", "planDigest", "status", "committedAt" ] } ], "data_elements": [ { "id": "composition-staging-field-1", "name": "receiptId", "description": "See typed contract and field-catalog entry for receiptId. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-010" ] }, { "id": "composition-staging-field-2", "name": "planDigest", "description": "See typed contract and field-catalog entry for planDigest. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-010" ] }, { "id": "composition-staging-field-3", "name": "status", "description": "See typed contract and field-catalog entry for status. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-010" ] }, { "id": "composition-staging-field-4", "name": "committedAt", "description": "See typed contract and field-catalog entry for committedAt. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "timestamp", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-010" ] } ], "artifacts": [ { "id": "composition-staging-artifact", "name": "Fresh-target staging and idempotency evidence", "description": "Plan fields receiptId, planDigest, status, committedAt and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-005", "SRC-010" ] } ], "inline_only_rationale": null } ] }, { "id": "composition-layer-bootstrap", "name": "New Dimension installation", "description": "A separate adapter creates owner controls with semantic and native registries, pins both, then runs the unchanged V1-V3 validator. It never overwrites an existing Dimension.", "source_refs": [ "SRC-007", "SRC-008", "SRC-010" ], "findings": [ { "id": "composition-bootstrap", "name": "New Dimension installation", "description": "A separate adapter creates owner controls with semantic and native registries, pins both, then runs the unchanged V1-V3 validator. It never overwrites an existing Dimension.", "source_refs": [ "SRC-007", "SRC-008", "SRC-010" ], "questions": [ { "id": "composition-bootstrap-q1", "text": "How is the startup minimum assembled without HR or ERP imports?", "kind": "composition", "answer_data": [ "nativeBoundModels", "semanticOnlyModels", "nativeControlValidation" ] }, { "id": "composition-bootstrap-q2", "text": "Which control and record checks pass for the assembled Dimension?", "kind": "validation", "answer_data": [ "nativeBoundModels", "semanticOnlyModels", "nativeControlValidation" ] }, { "id": "composition-bootstrap-q3", "text": "What data remains absent after a successful empty bootstrap?", "kind": "state", "answer_data": [ "nativeBoundModels", "semanticOnlyModels", "nativeControlValidation" ] } ], "data_elements": [ { "id": "composition-bootstrap-field-1", "name": "nativeBoundModels", "description": "See typed contract and field-catalog entry for nativeBoundModels. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "number", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-008", "SRC-010" ] }, { "id": "composition-bootstrap-field-2", "name": "semanticOnlyModels", "description": "See typed contract and field-catalog entry for semanticOnlyModels. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "number", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-008", "SRC-010" ] }, { "id": "composition-bootstrap-field-3", "name": "nativeControlValidation", "description": "See typed contract and field-catalog entry for nativeControlValidation. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-008", "SRC-010" ] } ], "artifacts": [ { "id": "composition-bootstrap-artifact", "name": "New Dimension installation evidence", "description": "Plan fields nativeBoundModels, semanticOnlyModels, nativeControlValidation and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-007", "SRC-008", "SRC-010" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "composition-bundle-governance", "name": "Adoption, disclosure and evolution", "description": "Adoption, disclosure and evolution within the bounded composition episode.", "rationale": "Keep this concern independently reviewable without importing domain data.", "source_refs": [ "SRC-003", "SRC-004", "SRC-006", "SRC-007", "SRC-009" ], "layers": [ { "id": "composition-layer-rights", "name": "Mastership and projections", "description": "Publishers own definitions, local owners control adoption, binding maintainers own path meaning and agents record evidence. Installation itself confers no read access to corporate facts.", "source_refs": [ "SRC-003", "SRC-007" ], "findings": [ { "id": "composition-rights", "name": "Mastership and projections", "description": "Publishers own definitions, local owners control adoption, binding maintainers own path meaning and agents record evidence. Installation itself confers no read access to corporate facts.", "source_refs": [ "SRC-003", "SRC-007" ], "questions": [ { "id": "composition-rights-q1", "text": "Who masters release meaning, chosen pins and execution evidence?", "kind": "ownership", "answer_data": [ "owner", "masterSystem", "classification", "purpose" ] }, { "id": "composition-rights-q2", "text": "Which parts of a real composition must remain private?", "kind": "privacy", "answer_data": [ "owner", "masterSystem", "classification", "purpose" ] }, { "id": "composition-rights-q3", "text": "What single object and purpose does a disclosed plan projection cover?", "kind": "access", "answer_data": [ "owner", "masterSystem", "classification", "purpose" ] } ], "data_elements": [ { "id": "composition-rights-field-1", "name": "owner", "description": "See typed contract and field-catalog entry for owner. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-007" ] }, { "id": "composition-rights-field-2", "name": "masterSystem", "description": "See typed contract and field-catalog entry for masterSystem. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-007" ] }, { "id": "composition-rights-field-3", "name": "classification", "description": "See typed contract and field-catalog entry for classification. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-007" ] }, { "id": "composition-rights-field-4", "name": "purpose", "description": "See typed contract and field-catalog entry for purpose. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-007" ] } ], "artifacts": [ { "id": "composition-rights-artifact", "name": "Mastership and projections evidence", "description": "Plan fields owner, masterSystem, classification, purpose and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-003", "SRC-007" ] } ], "inline_only_rationale": null } ] }, { "id": "composition-layer-migration", "name": "Explicit evolution and deferral", "description": "Changed pins, down-conversion and existing-Dimension migration require a separate reviewed procedure. ELMM, PLMM and AISMM are compared without inventing compatibility.", "source_refs": [ "SRC-004", "SRC-006", "SRC-007", "SRC-009" ], "findings": [ { "id": "composition-migration", "name": "Explicit evolution and deferral", "description": "Changed pins, down-conversion and existing-Dimension migration require a separate reviewed procedure. ELMM, PLMM and AISMM are compared without inventing compatibility.", "source_refs": [ "SRC-004", "SRC-006", "SRC-007", "SRC-009" ], "questions": [ { "id": "composition-migration-q1", "text": "Which change requires a new plan or explicit migration?", "kind": "lifecycle", "answer_data": [ "supersedes", "migration-decision", "crosswalk", "retention-policy" ] }, { "id": "composition-migration-q2", "text": "Which receipts and predecessor links must local retention preserve?", "kind": "retention", "answer_data": [ "supersedes", "migration-decision", "crosswalk", "retention-policy" ] }, { "id": "composition-migration-q3", "text": "Which ELMM or legacy-landscape capabilities remain deliberately deferred?", "kind": "decision", "answer_data": [ "supersedes", "migration-decision", "crosswalk", "retention-policy" ] } ], "data_elements": [ { "id": "composition-migration-field-1", "name": "supersedes", "description": "See typed contract and field-catalog entry for supersedes. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-004", "SRC-006", "SRC-007", "SRC-009" ] }, { "id": "composition-migration-field-2", "name": "migration-decision", "description": "See typed contract and field-catalog entry for migration-decision. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-004", "SRC-006", "SRC-007", "SRC-009" ] }, { "id": "composition-migration-field-3", "name": "crosswalk", "description": "See typed contract and field-catalog entry for crosswalk. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-004", "SRC-006", "SRC-007", "SRC-009" ] }, { "id": "composition-migration-field-4", "name": "retention-policy", "description": "See typed contract and field-catalog entry for retention-policy. Ownership and uncertainty are preserved within the stated finding boundary.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-004", "SRC-006", "SRC-007", "SRC-009" ] } ], "artifacts": [ { "id": "composition-migration-artifact", "name": "Explicit evolution and deferral evidence", "description": "Plan fields supersedes, migration-decision, crosswalk, retention-policy and a recorded validation or disposition; unknowns do not become successful checks.", "media_or_form": [ "application/json", "text/markdown" ], "serial": true, "identity_strategy": "Use authoritative issuer-qualified plan or receipt ID plus immutable revision; checksum is integrity evidence.", "source_refs": [ "SRC-004", "SRC-006", "SRC-007", "SRC-009" ] } ], "inline_only_rationale": null } ] } ] } ] }, "functions": [ { "id": "composition-function-verify-exact-plan", "name": "verify-exact-plan", "description": "Bounded contract operation with explicitly scoped evidence.", "inputs": [ "plan", "trusted policy", "current lock", "local descriptor assets" ], "outputs": [ "verification or refusal" ], "preconditions": [ "Known contract dialect and authorized actor." ], "effects": [ "No writes; evaluate exact graph, scope, time, policy and bytes." ], "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "composition-function-stage-assets", "name": "stage-assets", "description": "Bounded contract operation with explicitly scoped evidence.", "inputs": [ "verified plan", "local assets", "fresh target" ], "outputs": [ "immutable staging receipt" ], "preconditions": [ "Independent current authority; exclusive creation lease." ], "effects": [ "Stage and recheck bytes; commit a fresh directory; never execute package code." ], "source_refs": [ "SRC-002", "SRC-005", "SRC-010" ] }, { "id": "composition-function-bootstrap-dimension", "name": "bootstrap-dimension", "description": "Bounded contract operation with explicitly scoped evidence.", "inputs": [ "staged plan", "trusted local Vercy skill", "new target" ], "outputs": [ "owner package", "separate semantic/native registries", "V1-V3 control validation" ], "preconditions": [ "Empty starting lock; target absent; policy still valid." ], "effects": [ "Create a new Dimension without inventing facts; existing Dimensions remain outside this action." ], "source_refs": [ "SRC-007", "SRC-008" ] }, { "id": "composition-function-validate-instance", "name": "validate-instance", "description": "Bounded contract operation with explicitly scoped evidence.", "inputs": [ "native object/fact records", "runtime binding", "trusted companion validator" ], "outputs": [ "scoped runtime and nested reports" ], "preconditions": [ "Explicit native binding tied to pinned specification." ], "effects": [ "Detect invalid nested semantics separately from outer runtime validation." ], "source_refs": [ "SRC-001", "SRC-008" ] }, { "id": "composition-function-record-correction", "name": "record-correction", "description": "Bounded contract operation with explicitly scoped evidence.", "inputs": [ "previous plan", "new evidence", "new revision identity" ], "outputs": [ "successor plan" ], "preconditions": [ "Authoritative correction and preserved predecessor." ], "effects": [ "Retain knowledge history; refuse implicit data migration." ], "source_refs": [ "SRC-003", "SRC-004" ] }, { "id": "composition-function-evaluate-historical-plan", "name": "evaluate-historical-plan", "description": "Bounded contract operation with explicitly scoped evidence.", "inputs": [ "frozen plan", "historical policy", "historical lock", "evaluation time" ], "outputs": [ "historical validity result" ], "preconditions": [ "Explicit evaluation time and frozen evidence." ], "effects": [ "Read-only result; never grants present installation authority." ], "source_refs": [ "SRC-003", "SRC-007" ] } ], "composition": [], "service_layers": { "dimension": { "owner_package_requirements": [ "Dimension identity, purpose and accountable owner.", "Independent trusted installation policy and current lock bytes.", "Declared actor, reviewers, origins, retention and disclosure limits." ], "namespace_guidance": "Use issuer-qualified registry IDs and separate export namespaces; file paths never define semantic identity.", "registry_links": [ "https://ver.cy/models/runtime-index.json", "https://ver.cy/enterprise/models/em-krn-01/" ] }, "canon_and_patch": { "canonicalization_rules": [ "One exact selected version per model ID; preserve byte digests separately from optional semantic fingerprints.", "Keep published lifecycle distinct from research assurance and runtime readiness." ], "patch_rules": [ "Never mutate a released specification; append a new plan revision for corrections.", "Preserve existing Dimensions and refuse implicit update or downgrade." ], "compatibility_rules": [ "A version label alone does not prove compatibility. Require scoped evidence and an authorized reviewer.", "Current implementation accepts exact closures only; ELMM/MVS and range resolution remain separate profiles." ] }, "artifact_rules": { "identity_priority": [ "Authoritative master-system identifier with issuer and namespace.", "Dimension-qualified registry identity where no upstream identifier exists.", "Immutable revision and receipt identities with checksums as supplementary integrity evidence." ], "timestamp_rule": "Use RFC 3339 timestamps with seconds and an explicit UTC offset; separate plan validity, policy effectiveness, observation and recording.", "serial_naming_rule": "Stable plan and receipt IDs; filenames are portable carriers only.", "integrity_rule": "Verify every transported descriptor and current policy/lock bytes. A digest is not proof of truth, semantics or publisher authenticity." }, "policies": [ "Kernel-role releases have no mandatory domain imports.", "Required closure is acyclic, exact, complete and minimal; optional references remain optional.", "Authority is evaluated against caller-supplied trusted policy, never package instructions.", "Semantic-only packages never receive invented runtime schemas.", "Structured snapshots require an explicit companion validation gate.", "Staging and fresh-Dimension bootstrap never update an existing populated target.", "No downloaded code or lifecycle hooks are executed.", "All external provider memos remain distinct from the Codex-authored normalized specification." ], "crud": { "read": [ "Read permitted owner policy, selected specifications and source evidence; no corporate instance data is sent to the catalogue." ], "create": [ "Create a scoped exact plan and a verified new staging package under authorized local policy." ], "update": [ "Create a successor plan with explicit predecessor; changed installed versions require a separately reviewed migration." ], "delete": [ "Retire according to local retention policy; preserve permitted receipt lineage. Automatic removal of user data or installed versions is not implemented." ] }, "roles": [ { "name": "Dimension owner", "responsibilities": [ "Masters adoption policy and disclosure." ] }, { "name": "Model publisher", "responsibilities": [ "Masters model releases and immutable definitions." ] }, { "name": "Binding maintainer", "responsibilities": [ "Defines scoped runtime paths and companion checks." ] }, { "name": "Compatibility reviewer", "responsibilities": [ "Records a scoped compatibility decision with evidence." ] }, { "name": "Executing agent", "responsibilities": [ "Evaluates and stages within supplied authority; cannot grant itself permission." ] } ], "access": { "default_rule": "Deny adoption without caller-supplied authority; installation does not grant access to domain data. Real selection metadata stays private by default.", "scopes": [ "bundle", "layer", "finding", "artifact" ], "exceptions": [ "Exceptional disclosure and production IAM bindings require owner policy; this package supplies no access-bypass mechanism." ], "audit_requirements": [ "Record purpose, actor, policy digest, plan digest, result and scope; minimize logs and preserve only policy-permitted history." ] }, "agents_bootstrap": { "filename": "AGENTS.md", "required_fields": [ "Name", "Type", "Specification URL", "Storage type URL", "Interface URL", "Processes URL" ], "read_order": [ "Nearest owner authority and current Dimension controls.", "Pinned AGENTS.md, specification, model-spec and public review limits.", "Composition schema, source crosswalk and independently trusted policy.", "Fixtures, staging receipt and separate native/nested validation evidence." ] } }, "coverage": { "claim": "Bounded executable reference for exact package composition; broader enterprise kernel and production adoption capabilities remain explicitly outside this release.", "confidence": "medium", "checklist": [ { "dimension": "identity", "status": "covered", "notes": "Separate qualified plan, model, binding and receipt identities." }, { "dimension": "lifecycle", "status": "covered", "notes": "Guarded verify, stage, bootstrap, refuse and supersede." }, { "dimension": "relationships", "status": "covered", "notes": "Required package edges are not object links." }, { "dimension": "temporal", "status": "covered", "notes": "Explicit policy and plan intervals plus knowledge timestamps." }, { "dimension": "provenance", "status": "covered", "notes": "Publisher and execution assertions stay attributed." }, { "dimension": "ownership", "status": "covered", "notes": "Publisher meaning and local adoption authority remain distinct." }, { "dimension": "validation", "status": "covered", "notes": "Schema, graph, runtime and nested checks have separate evidence." }, { "dimension": "access", "status": "covered", "notes": "Caller policy is evaluated; no domain access is granted." }, { "dimension": "interoperability", "status": "covered", "notes": "Explicit bounded JSON Schema and exact-byte profile." }, { "dimension": "whole-object", "status": "covered", "notes": "Distinct five-facet assessment for every exported type." }, { "dimension": "recovery", "status": "covered", "notes": "Fresh-target staging, idempotency and failure tests; no distributed durability claim." } ], "known_omissions": [ "No general version-range solver, MVS or verified semantic fingerprint algorithm.", "No arbitrary current-Dimension upgrades, data migration or downgrade conversion.", "No publisher signature validation, production IAM/read-side enforcement, distributed writer exclusion or crash-durable journal.", "Native structured bindings still require a separately trusted companion validator; staging never executes it." ], "conflicts": [], "regional_assumptions": [ "No jurisdiction-specific company, employment or data-retention rules are encoded." ], "adversarial_checks": [ "Reject cycle, missing dependency, namespace collision and changed same-version bytes.", "Reject self-authorized policy, stale lock, future/expired plan and unsupported schema references.", "Preserve existing target on commit failure and require nested semantic tests beyond V3." ] } }