{"schema":"https://ver.cy/schemas/card/1.0.0","id":"vr.profile.enterprise-action-requests","code":"enterprise-action-requests","url":"https://ver.cy/models/enterprise-action-requests/","name":"Enterprise Action Requests","alternateNames":["Action authority and delegation","ActionDefinition","ActionRequest","EM-XCT-07"],"kind":"enterprise-profile","status":"published","version":"0.1.0","language":"en","classifiers":{"family":"Enterprise profiles","category":"Cross-cutting context","entryKind":"companion-contract","plane":"","domain":["Enterprise","Action and authority"],"industry":["Cross-industry"],"navPath":"NAV.XCT","tags":["EM-XCT-07","action","request","authority","delegation","idempotency","receipt","compensation"],"facets":{}},"whatItIs":"A companion contract for a Company Dimension that records governed actions: what an action is, who asked for it on whose behalf, under which authority, and what local execution happened, with immutable intent and receipts. It describes and validates; it does not run external side effects.","purpose":"Describe governed actions, preserve immutable intent and validate a bounded local execution history without deriving permission from descriptions.","scope":{"in":[],"out":[],"boundaries":[]},"distinguishingFeatures":["Separates the description of an action from the permission to perform it: a defined action grants nothing by itself.","Keeps the requested intent immutable and digest-bound, so a retry can be proven to be the same request.","Records execution as a bounded local history with receipts, unlike a workflow engine that runs the action.","Treats compensation as a new request with its own key, never as an undo of a committed effect."],"structure":{"bundles":[{"id":"AR-B1","name":"Definition","description":"Definition of company action requests.","layers":[{"id":"AR-B1-L1","name":"Operation semantics","description":"Questions and evidence for operation semantics.","findings":[{"id":"AR-F01","name":"Operation boundary","description":"Exact immutable ActionDefinition and parameter contract","questions":[{"text":"Which versioned operation is described?","id":"AR-Q01","kind":"host-guidance"},{"text":"Is it descriptive-only or executable in this binding?","id":"AR-Q02","kind":"host-guidance"}]},{"id":"AR-F03","name":"Neighbor alignment","description":"Pinned comparison and explicit relation","questions":[{"text":"Does K2 actClass overlap this operation?","id":"AR-Q05","kind":"host-guidance"},{"text":"Does a capability or obligation authorize it?","id":"AR-Q06","kind":"host-guidance"}]}]},{"id":"AR-B1-L2","name":"Definition governance","description":"Questions and evidence for definition governance.","findings":[{"id":"AR-F02","name":"Revision and stewardship","description":"Stable definition ID, revision chain, steward, master and validity","questions":[{"text":"Who governs this definition?","id":"AR-Q03","kind":"host-guidance"},{"text":"What changed across revisions or retirement?","id":"AR-Q04","kind":"host-guidance"}]}]}]},{"id":"AR-B2","name":"Request","description":"Request of company action requests.","layers":[{"id":"AR-B2-L1","name":"Intent and identity","description":"Questions and evidence for intent and identity.","findings":[{"id":"AR-F04","name":"Intent boundary","description":"Closed immutable intent and exact definition pin","questions":[{"text":"What exact effect is being requested?","id":"AR-Q07","kind":"host-guidance"},{"text":"What is the smallest valid request?","id":"AR-Q08","kind":"host-guidance"}]},{"id":"AR-F05","name":"Retry identity","description":"Retained actor-scoped key hash and intent bytes","questions":[{"text":"How can a caller recover a lost response?","id":"AR-Q09","kind":"host-guidance"},{"text":"Does a changed body reuse the old key?","id":"AR-Q10","kind":"host-guidance"}]},{"id":"AR-F06","name":"Host identity","description":"Host-minted request ID and submission event","questions":[{"text":"Which Dimension owns this request?","id":"AR-Q11","kind":"host-guidance"},{"text":"Who mints its ID?","id":"AR-Q12","kind":"host-guidance"}]}]}]},{"id":"AR-B3","name":"Authority","description":"Authority of company action requests.","layers":[{"id":"AR-B3-L1","name":"Authority basis and scope","description":"Questions and evidence for authority basis and scope.","findings":[{"id":"AR-F07","name":"External authority basis","description":"Host rule, issuer-standing Pin and external basis Pin","questions":[{"text":"Who can act for whom?","id":"AR-Q13","kind":"host-guidance"},{"text":"Who verified the issuer has standing?","id":"AR-Q14","kind":"host-guidance"}]},{"id":"AR-F08","name":"Scope intersection","description":"One complete matching pair of scopes","questions":[{"text":"Are both principal and actor allowed?","id":"AR-Q15","kind":"host-guidance"},{"text":"Are action, resource, purpose and audience exact?","id":"AR-Q16","kind":"host-guidance"}]}]},{"id":"AR-B3-L2","name":"Current decisions and disclosure","description":"Questions and evidence for current decisions and disclosure.","findings":[{"id":"AR-F09","name":"Fresh decision","description":"Policy revision, control sequence, decision and rule digests","questions":[{"text":"Which policy applied at this try?","id":"AR-Q17","kind":"host-guidance"},{"text":"Was the definition still available?","id":"AR-Q18","kind":"host-guidance"}]},{"id":"AR-F10","name":"Disclosure","description":"Current read decision independent of execute","questions":[{"text":"Can this caller see the outcome now?","id":"AR-Q19","kind":"host-guidance"},{"text":"Could an error reveal hidden existence?","id":"AR-Q20","kind":"host-guidance"}]}]}]},{"id":"AR-B4","name":"Execution","description":"Execution of company action requests.","layers":[{"id":"AR-B4-L1","name":"Admission and local effect","description":"Questions and evidence for admission and local effect.","findings":[{"id":"AR-F11","name":"Submission versus proposal","description":"Submission, delivery and try event identities","questions":[{"text":"Has intent been admitted or merely proposed?","id":"AR-Q21","kind":"host-guidance"},{"text":"Did a delivery actually lead to a try?","id":"AR-Q22","kind":"host-guidance"}]},{"id":"AR-F12","name":"Atomic effect","description":"Before/after revisions and one local transaction","questions":[{"text":"What changed in the resource?","id":"AR-Q23","kind":"host-guidance"},{"text":"Are the key, effect and receipt committed together?","id":"AR-Q24","kind":"host-guidance"}]},{"id":"AR-F13","name":"Replay","description":"Retained receipt and immutable digest","questions":[{"text":"Has this request already produced an effect?","id":"AR-Q25","kind":"host-guidance"},{"text":"Did the resource change in the meantime?","id":"AR-Q26","kind":"host-guidance"}]}]},{"id":"AR-B4-L2","name":"Terminal and compensating operations","description":"Questions and evidence for terminal and compensating operations.","findings":[{"id":"AR-F14","name":"Deadline","description":"Half-open request deadline and terminal history","questions":[{"text":"Can a first effect still occur?","id":"AR-Q27","kind":"host-guidance"},{"text":"Is an old committed receipt being mistaken for expiry?","id":"AR-Q28","kind":"host-guidance"}]},{"id":"AR-F15","name":"Cancellation","description":"Current cancel decision and serialized disposition","questions":[{"text":"Can a pending request be cancelled?","id":"AR-Q29","kind":"host-guidance"},{"text":"Which terminal operation won the race?","id":"AR-Q30","kind":"host-guidance"}]},{"id":"AR-F16","name":"Compensation","description":"Original receipt, exact old labels and current revision","questions":[{"text":"Which effect is to be compensated?","id":"AR-Q31","kind":"host-guidance"},{"text":"Has intervening work changed its revision?","id":"AR-Q32","kind":"host-guidance"}]}]}]},{"id":"AR-B5","name":"Evidence","description":"Evidence of company action requests.","layers":[{"id":"AR-B5-L1","name":"Observer knowledge and correction","description":"Questions and evidence for observer knowledge and correction.","findings":[{"id":"AR-F17","name":"Observer knowledge","description":"Observation event and identified observer","questions":[{"text":"What does the caller know about the result?","id":"AR-Q33","kind":"host-guidance"},{"text":"Is uncertainty local to the observer?","id":"AR-Q34","kind":"host-guidance"}]},{"id":"AR-F18","name":"Correction","description":"Linear correction edge and reason","questions":[{"text":"Which observation is corrected?","id":"AR-Q35","kind":"host-guidance"},{"text":"Does the predecessor still exist unchanged?","id":"AR-Q36","kind":"host-guidance"}]}]},{"id":"AR-B5-L2","name":"Master history and continuity","description":"Questions and evidence for master history and continuity.","findings":[{"id":"AR-F19","name":"Mastership","description":"One SQLite master and labeled native evidence","questions":[{"text":"Which store is authoritative for execution?","id":"AR-Q37","kind":"host-guidance"},{"text":"Is a native export being treated as a second master?","id":"AR-Q38","kind":"host-guidance"}]},{"id":"AR-F20","name":"History validation","description":"Replay report and externally expected manifest root","questions":[{"text":"Do the records form a coherent history?","id":"AR-Q39","kind":"host-guidance"},{"text":"Does this prove authenticity or the latest cut?","id":"AR-Q40","kind":"host-guidance"}]},{"id":"AR-F21","name":"Export recovery","description":"Exact manifest, snapshot and deterministic native files","questions":[{"text":"Was every file captured at one cut?","id":"AR-Q41","kind":"host-guidance"},{"text":"Can an interrupted export be resumed safely?","id":"AR-Q42","kind":"host-guidance"}]},{"id":"AR-F22","name":"Retention","description":"Terminal-only key retirement event and retained key slot","questions":[{"text":"Can this key be reused after retirement?","id":"AR-Q43","kind":"host-guidance"},{"text":"Which evidence is retained?","id":"AR-Q44","kind":"host-guidance"}]},{"id":"AR-F23","name":"Restore continuity","description":"Recovery decision and external continuity root","questions":[{"text":"Could this be a coherent old database?","id":"AR-Q45","kind":"host-guidance"},{"text":"What external anchor establishes the latest state?","id":"AR-Q46","kind":"host-guidance"}]}]},{"id":"AR-B5-L3","name":"Representation and adoption","description":"Questions and evidence for representation and adoption.","findings":[{"id":"AR-F24","name":"Byte identity","description":"Explicit Python encoding and raw artifact SHA","questions":[{"text":"Which canonical bytes define equality?","id":"AR-Q47","kind":"host-guidance"},{"text":"Are ordering or Unicode silently normalized?","id":"AR-Q48","kind":"host-guidance"}]},{"id":"AR-F25","name":"Native binding","description":"Three synthetic installation reports and exact file readback","questions":[{"text":"Do stored native records match the semantic snapshot?","id":"AR-Q49","kind":"host-guidance"},{"text":"Did the companion validator run after outer checks?","id":"AR-Q50","kind":"host-guidance"}]},{"id":"AR-F26","name":"Adoption boundary","description":"Descriptive minimum profile, synthetic execution profile and limits","questions":[{"text":"Which use cases are useful today?","id":"AR-Q51","kind":"host-guidance"},{"text":"Which production responsibilities remain external?","id":"AR-Q52","kind":"host-guidance"}]}]}]}]},"agentConduct":{"may":["Draft an action request with actor, principal, resource revision, purpose and audience filled from verified context.","Retry a request with the same intent and idempotency key after continuity is established.","Cancel or let expire a request that is still pending.","Return retained evidence of a past execution to a caller allowed to read it."],"mustNot":["Treat an action definition, a role name or a neighbouring model as permission to act.","Fill a missing actor, principal, purpose or resource revision by guessing.","Reapply an old effect when asked for evidence, or claim an undo after commit.","Combine partial grants from different rules into one permission.","Produce external side effects through the local adapter; those need their own contract."],"requiresHuman":["Granting submit permission for a proposed action.","Approving compensation for a committed effect.","Resolving a request whose context no longer matches the original intent."]},"ethics":{"considerations":["An agent acting for a person can cause harm in that person's name; the principal must be explicit and verifiable.","Denied reads must return a uniform withheld response so the record does not leak who asked for what.","Execution history is evidence about people's decisions and must not be rewritten to hide responsibility."],"affectedParties":["Principals on whose behalf actions are requested","People affected by the executed action","Operators accountable for the host system"]},"owners":{"steward":"The host operator of the Company Dimension holds authority over admission and execution; the action definition belongs to the owner of the domain process it describes.","roles":[],"masterSystems":["Host identity and access management for actors and principals","Domain system of record for the resource being acted upon"]},"relations":[{"target":"WM-XCT-002","type":"references","note":"0.3.0-research.1"},{"target":"WM-XCT-029","type":"references","note":"0.3.0-research.1"},{"target":"WM-XCT-001","type":"references","note":"0.3.1-enterprise.1"},{"target":"vr.wm-xct-002","type":"aligned"},{"target":"vr.wm-xct-029","type":"aligned"},{"target":"vr.wm-xct-001","type":"aligned"}],"interaction":{"identity":{"applicability":"required","items":["Action definition ID and version, immutable once published.","Request ID bound to a client intent digest and an idempotency key.","Server admission ID bound once at admission, kept outside the client digest."]},"properties":{"applicability":"not-applicable","items":[]},"recognition":{"applicability":"optional","items":["An action request names an actor, a principal, a target resource revision, a purpose and an idempotency key.","It is confused with a task (a unit of work) and with an audit log entry (a record after the fact)."]},"capabilities":{"applicability":"required","items":["Keep description separate from permission; do not invoke descriptive-only definitions. Requires the applicable host authority.","Keep optional crosswalk descriptive; never infer permission from a neighbor model. Requires the applicable host authority.","Add a new revision for changed meaning; never replace the same ID/version. Requires the applicable host authority.","Ask for missing actor, principal, resource revision, purpose or audience; do not fill them by guessing. Requires the applicable host authority.","Retry the same intent and key only after continuity is established. Requires the applicable host authority.","Keep server ID outside client intent digest; bind it once at admission. Requires the applicable host authority.","Require host verification; do not construct a second mandate master. Requires the applicable host authority.","Intersect both scopes within the same rule; do not combine partial grants. Requires the applicable host authority.","Check current inputs under the effect transaction. Requires the applicable host authority.","Return the uniform withheld response when read is denied. Requires the applicable host authority.","Require explicit submit permission; preserve proposal origin without executing it. Requires the applicable host authority.","Use only the bounded local adapter; external side effects need another contract. Requires the applicable host authority.","Return permitted retained evidence; never reapply an old effect. Requires the applicable host authority.","Expire only pending requests; preserve committed state. Requires the applicable host authority.","Cancel pending intent only; do not claim undo after commit. Requires the applicable host authority.","Create a new request and key; refuse stale or context-mismatched compensation. Requires the applicable host authority.","Record knowledge separately from authoritative effect state. Requires the applicable host authority.","Append a correction; never edit a receipt or erase the original. Requires the applicable host authority.","Keep export read-only with explicit capture time and sequence. Requires the applicable host authority.","Separate internal consistency from authenticated current admission. Requires the applicable host authority.","Resume identical bytes; a changed cut needs a new directory. Requires the applicable host authority.","Keep nonreuse evidence; this fixture has no erasure mechanism. Requires the applicable host authority.","Stop and reconcile before dispatch after uncertain restoration. Requires the applicable host authority.","Reject duplicates/floats/surrogates; never label this encoding JCS. Requires the applicable host authority.","Validate nested facets/history explicitly; outer envelopes alone are insufficient. Requires the applicable host authority.","Adopt the smallest useful profile; do not claim distributed execution readiness. Requires the applicable host authority."]},"hazards":{"applicability":"required","items":["Duplicate execution when a retry is not recognised as the same intent.","Privilege escalation when a description is read as a grant.","Stale execution when inputs changed between request and effect."]},"interfaces":{"applicability":"required","items":["Idempotency-key practice of HTTP APIs (IETF draft Idempotency-Key header).","W3C PROV for execution evidence."]},"context":{"applicability":"required","items":["Used inside a Company Dimension where a host system authenticates actors and enforces permissions."]}},"sources":[{"title":"Research record EM-XCT-07: independent provider studies, audits and reconciled findings","url":"https://ver.cy/enterprise/research/em-xct-07/","note":"Evidence behind the release; claims in the card trace to it."},{"title":"Enterprise Action Requests 0.1.0 specification","url":"https://ver.cy/models/enterprise-action-requests/versions/0.1.0/spec.json","note":"Normative release, digest sha256:3fc7364792c8f90cd4c1652448fb78bc84fb0e019df606593653f16d4afb300a"}],"openQuestions":["Use the pinned companion schema/validator and trusted-host binding. Native outer validation alone does not enforce nested semantics. Consult the released adoption limits. Use descriptive ActionDefinitions without inferring permission. Execution is a finite synthetic local-label fixture. Read the publication addendum for host authority and admission duties, receipt disclosure, archive/recovery limits, missing edge tests and the nine-asset candidate installation boundary. Required reading: https://ver.cy/models/enterprise-action-requests/versions/0.1.0/publication-addendum.md"],"resources":{"spec":"/models/enterprise-action-requests/versions/0.1.0/spec.json","agents":"/models/enterprise-action-requests/versions/0.1.0/AGENTS.md","package":"/models/enterprise-action-requests/versions/0.1.0/enterprise-action-requests-0.1.0.zip","source":"https://ver.cy/enterprise/research/em-xct-07/"},"provenance":{"origin":"enterprise research","builtFrom":["models/enterprise-action-requests/versions/0.1.0/spec.json","models/enterprise-action-requests/catalogue-entry.json","ver-cy/world-models/card-supplements/enterprise-action-requests.json"],"providers":["Claude","Grok"],"researchStatus":"reviewable-draft","generatedAt":"","builder":"tools/build_cards.py@1.0.0"},"completeness":{"sections":{"classifiers":"filled","whatItIs":"filled","purpose":"filled","distinguishingFeatures":"filled","structure":"filled","agentConduct":"filled","ethics":"filled","owners":"filled","relations":"filled","interaction.identity":"filled","interaction.properties":"not-applicable","interaction.recognition":"filled","interaction.capabilities":"filled","interaction.hazards":"filled","interaction.interfaces":"filled","interaction.context":"filled","sources":"filled"},"notes":{"interaction.properties":"Institutional or informational subject: it has no physical body to measure.","_supplement":"Sections authored in card supplement 1.0.0 by Claude (Opus 5.5) (2026-10-05, unreviewed). Written from the published specification and established practice in the field; no new sources were read. Unreviewed."},"score":1.0}}