EM-XCT-03 · Enterprise profiles · Published 0.1.0

Enterprise Assertion Provenance

Preserve the origins, evidence, changes and method-qualified confidence of enterprise assertions without inferring truth or permission.

4 bundles · 8 layers · 20 findings · 20 questions

Use in a Company Dimension

Start with a pinned external claim, a file capture, an acquisition activity and an attributed account. Add evidence relationships and purpose-qualified assessments when needed. The package includes three synthetic examples, a closed schema, a reference validator and native installation checks.

Research assurance: reviewable-draft. This is a bounded original companion. Truth, permissions and source independence are never inferred. A trusted host must authenticate actors, hold the latest complete register and invoke the companion validator. Adoption limits.

Bundles → Layers → Findings → Questions

Collect the expected evidence for each question. Unknown context remains explicit. Listed actions confer no operational permission.

AP-SOURCESources and execution2 layers

Sources and execution for the bounded assertion-provenance contract.

AP-CAPTURECaptured representations3 findings

Collect explicit context and preserve unknowns. See the semantic contract for exact rules.

AP-F01

What was directly acquired, and by whom?

What was directly acquired, and by whom? Separate capture from claim truth

Questions
  1. Q01 What was directly acquired, and by whom? Separate capture from claim truthgoverned-context
    Expected answer
    • Capture and Activity and representation pin
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Capture and Activity and representation pinExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Show acquisition account; never infer source truth
AP-F05

What survives rename or relocation?

What survives rename or relocation? Distinguish source location and identity

Questions
  1. Q05 What survives rename or relocation? Distinguish source location and identitygoverned-context
    Expected answer
    • Qualified external pin
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Qualified external pinExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Preserve external source identity separately; a changed sourceRef, acquisition, version or content digest requires a new Capture ID
AP-F18

Which representation and which execution event are being described?

Which representation and which execution event are being described? Keep their identities separate

Questions
  1. Q18 Which representation and which execution event are being described? Keep their identities separategoverned-context
    Expected answer
    • Capture and Activity pins, event and receipt times
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Capture and Activity pins, event and receipt timesExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Record one representation and a separately identified event; reject incompatible declaration
AP-EVENTExecution activities2 findings

Collect explicit context and preserve unknowns. See the semantic contract for exact rules.

AP-F02

Is this source-asserted, inferred or proposed?

Is this source-asserted, inferred or proposed? Separate account and activity kind

Questions
  1. Q02 Is this source-asserted, inferred or proposed? Separate account and activity kindgoverned-context
    Expected answer
    • ProvenanceRecord plus generation method
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • ProvenanceRecord plus generation methodExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Explain declared kind and its limits
AP-F06

Correction or a new acquisition/assessment?

Correction or a new acquisition/assessment? Preserve activity identity

Questions
  1. Q06 Correction or a new acquisition/assessment? Preserve activity identitygoverned-context
    Expected answer
    • Change reason and predecessor pin
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Change reason and predecessor pinExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Correct metadata or mint a genuinely new event
AP-ACCOUNTAssertion accounts2 layers

Assertion accounts for the bounded assertion-provenance contract.

AP-GRAINClaim and account boundary2 findings

Collect explicit context and preserve unknowns. See the semantic contract for exact rules.

AP-F04

Is this the claim, its account or its evidence?

Is this the claim, its account or its evidence? Preserve grain

Questions
  1. Q04 Is this the claim, its account or its evidence? Preserve graingoverned-context
    Expected answer
    • Typed IDs and external target reference
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Typed IDs and external target referenceExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Resolve exact record kind
AP-F09

Which system masters which data?

Which system masters which data? Avoid a new master for the external claim

Questions
  1. Q09 Which system masters which data? Avoid a new master for the external claimgoverned-context
    Expected answer
    • Mastership matrix
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Mastership matrixExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Link to the owning system
AP-HISTORYHistorical reliance3 findings

Collect explicit context and preserve unknowns. See the semantic contract for exact rules.

AP-F03

How is an unreliable account withdrawn?

How is an unreliable account withdrawn? Preserve immutable history

Questions
  1. Q03 How is an unreliable account withdrawn? Preserve immutable historygoverned-context
    Expected answer
    • Retraction revision and impact report
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Retraction revision and impact reportExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Append an authorized withdrawal; propose re-review
AP-F10

What was known at a particular time?

What was known at a particular time? Keep occurrence/capture/receipt separate

Questions
  1. Q10 What was known at a particular time? Keep occurrence/capture/receipt separategoverned-context
    Expected answer
    • As-of history with exact pins
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • As-of history with exact pinsExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Read historical account without rewriting it
AP-F11

Which state transitions are allowed?

Which state transitions are allowed? Distinguish account lifecycle from kind

Questions
  1. Q11 Which state transitions are allowed? Distinguish account lifecycle from kindgoverned-context
    Expected answer
    • Transition table and immutable revisions
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Transition table and immutable revisionsExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Admit authorized creation/correction/withdrawal
AP-REVIEWEvidence and assessment2 layers

Evidence and assessment for the bounded assertion-provenance contract.

AP-EVIDENCEEvidence relationships3 findings

Collect explicit context and preserve unknowns. See the semantic contract for exact rules.

AP-F07

What is missing or disputed?

What is missing or disputed? No selected truth from absent evidence

Questions
  1. Q07 What is missing or disputed? No selected truth from absent evidencegoverned-context
    Expected answer
    • Evidence links and explicit limitations
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Evidence links and explicit limitationsExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Return insufficient-context and known gaps
AP-F12

Which links and cardinalities are required?

Which links and cardinalities are required? No dangling executable references

Questions
  1. Q12 Which links and cardinalities are required? No dangling executable referencesgoverned-context
    Expected answer
    • Closed schema and local graph check
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Closed schema and local graph checkExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Reject malformed or unresolved internal pins
AP-F16

Are multiple citations independent?

Are multiple citations independent? Repetition is not corroboration

Questions
  1. Q16 Are multiple citations independent? Repetition is not corroborationgoverned-context
    Expected answer
    • Declared origin paths and overlap flags
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Declared origin paths and overlap flagsExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Flag shared inputs; never count distinct roots as proof
AP-ASSESSQualified confidence1 findings

Collect explicit context and preserve unknowns. See the semantic contract for exact rules.

AP-F17

Can two confidence values be compared?

Can two confidence values be compared? Method and scale matter

Questions
  1. Q17 Can two confidence values be compared? Method and scale mattergoverned-context
    Expected answer
    • Exact assessment and scheme pins
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Exact assessment and scheme pinsExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Refuse automatic cross-scheme arithmetic
AP-GOVGovernance and adoption2 layers

Governance and adoption for the bounded assertion-provenance contract.

AP-RIGHTSRights and disclosure3 findings

Collect explicit context and preserve unknowns. See the semantic contract for exact rules.

AP-F08

Who may change this record?

Who may change this record? Authorship is not authentication

Questions
  1. Q08 Who may change this record? Authorship is not authenticationgoverned-context
    Expected answer
    • Host-owned writer configuration
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Host-owned writer configurationExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Validate current scope; emit generic rejection
AP-F13

What can this reader see for this purpose?

What can this reader see for this purpose? Avoid evidence leakage

Questions
  1. Q13 What can this reader see for this purpose? Avoid evidence leakagegoverned-context
    Expected answer
    • Full-register projection gate
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Full-register projection gateExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Return full permitted view or generic denial
AP-F15

What can an agent conclude or propose?

What can an agent conclude or propose? Keep evidence distinct from permission

Questions
  1. Q15 What can an agent conclude or propose? Keep evidence distinct from permissiongoverned-context
    Expected answer
    • Impact report and agent guide
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Impact report and agent guideExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Explain and propose a check; do not contact, publish or change rights
AP-ADOPTMinimal composition and migration3 findings

Collect explicit context and preserve unknowns. See the semantic contract for exact rules.

AP-F14

What is the smallest useful setup?

What is the smallest useful setup? Optional confidence, no mandatory ERP

Questions
  1. Q14 What is the smallest useful setup? Optional confidence, no mandatory ERPgoverned-context
    Expected answer
    • Startup capture/account example
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Startup capture/account exampleExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Compose the bounded companion
AP-F19

Does the native envelope validate the inner history?

Does the native envelope validate the inner history? Check both layers

Questions
  1. Q19 Does the native envelope validate the inner history? Check both layersgoverned-context
    Expected answer
    • Native report, installed schema and companion report
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Native report, installed schema and companion reportExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Validate nested register and extension against trusted prior root
AP-F20

Can this old payload be imported without losing semantics?

Can this old payload be imported without losing semantics? Preserve unknowns

Questions
  1. Q20 Can this old payload be imported without losing semantics? Preserve unknownsgoverned-context
    Expected answer
    • Migration decision and exact source pins
    • If unavailable: insufficient-context; name the missing pin, record, policy or evidence instead of inferring it.
Artifacts
  • Migration decision and exact source pinsExact records or reproducible report; no inferred truth or permissions.
Actions and unknown handling
  • Accept same-version lossless snapshot only; stage other mappings for review

Research and validation

Claude and Grok performed independent studies and separate static implementation audits. Executed tests and native checks are recorded separately. Research dossier · Review and limits · Tests · Native acceptance · Checksums.

Catalogue identity: vr.profile.enterprise-assertion-provenance. EM-XCT-03 remains a broader, partially covered research contour. Parent models are semantic references; no subtype or whole-parent conformance is asserted.