Enterprise Model Release Acceptance
Register immutable model releases, derive context-qualified installability and assurance, gate canonical status with evidence and holds, and withdraw new use without destroying reproducibility.
Bundle → Layer → Finding → Questions Filled
4 bundles · 8 layers · 16 findings · 32 questions
Release identity Govern release identity for an enterprise model release.
Coordinates and immutability
Separate and verify coordinates and immutability.
Release coordinate
Keep release coordinate explicit, immutable where required, and independently verifiable.
- Which model and semantic version identify this release? evidence
- Can the same coordinate ever point to different bytes? decision
Registration binding
Keep registration binding explicit, immutable where required, and independently verifiable.
- Which WM-XCT-013 entry and act register the release? evidence
- Which authority created the immutable coordinate? decision
Byte and semantic identity
Separate and verify byte and semantic identity.
Package digest
Keep package digest explicit, immutable where required, and independently verifiable.
- Which digest verifies the exact released bytes? evidence
- Does any mutable locator masquerade as the lock? decision
Semantic fingerprint
Keep semantic fingerprint explicit, immutable where required, and independently verifiable.
- Which pinned canonicalization profile produced the semantic fingerprint? evidence
- Is the fingerprint kept distinct from package-byte identity? decision
Resolution and installability Govern resolution and installability for an enterprise model release.
Exact closure
Separate and verify exact closure.
Resolution receipt
Keep resolution receipt explicit, immutable where required, and independently verifiable.
- Which WM-XCT-040 receipt proves mandatory closure resolution? evidence
- Are all closure members digest-addressed? decision
Transitive retention
Keep transitive retention explicit, immutable where required, and independently verifiable.
- Which closure bytes must remain for historical replay? evidence
- Can dependency withdrawal break a prior exact lock? decision
Target-context staging
Separate and verify target-context staging.
Staging context
Keep staging context explicit, immutable where required, and independently verifiable.
- For which target context was the closure staged? evidence
- Does a receipt from another context count? decision
Installability predicate
Keep installability predicate explicit, immutable where required, and independently verifiable.
- Which mechanical checks make the release installable here and now? evidence
- Which quality or approval claims are explicitly excluded? decision
Assessment and evidence Govern assessment and evidence for an enterprise model release.
Profile and tool pins
Separate and verify profile and tool pins.
Assessment profile
Keep assessment profile explicit, immutable where required, and independently verifiable.
- Which profile version and digest define the criteria? evidence
- Can latest or an unpinned profile support assurance? decision
Tool identity
Keep tool identity explicit, immutable where required, and independently verifiable.
- Which tool versions and artifact digests executed the assessment? evidence
- Can a tool name alone reproduce the result? decision
Fixtures and evidence
Separate and verify fixtures and evidence.
Negative fixtures
Keep negative fixtures explicit, immutable where required, and independently verifiable.
- Which frozen fixture set was executed and did every negative fail as expected? evidence
- Where is the fixture outcome recorded? decision
Evidence sufficiency
Keep evidence sufficiency explicit, immutable where required, and independently verifiable.
- Which digest-addressed evidence supports every required kind? evidence
- Is the assessment active rather than revoked or superseded? decision
Publication control Govern publication control for an enterprise model release.
Holds and projection
Separate and verify holds and projection.
Scoped hold
Keep scoped hold explicit, immutable where required, and independently verifiable.
- Which canonical, new-install or discovery scope does this hold affect? evidence
- Is it blocking or advisory and who may dispose it? decision
Projection precedence
Keep projection precedence explicit, immutable where required, and independently verifiable.
- Does the catalogue reflect authoritative current predicates? evidence
- How is a stale projection detected and corrected? decision
Withdrawal and history
Separate and verify withdrawal and history.
Withdrawal notice
Keep withdrawal notice explicit, immutable where required, and independently verifiable.
- Which WM-XCT-013 act authorizes the notice and when is it effective? evidence
- Which current eligibility and discovery scopes stop? decision
Non-destructive retention
Keep non-destructive retention explicit, immutable where required, and independently verifiable.
- Are release bytes, evidence and the transitive closure retained? evidence
- Can exact historical locks still resolve after withdrawal? decision
Classifiers Filled
- Family
- Enterprise profiles
- Category
- Cross-cutting context
- Entry kind
- companion-contract
- Navigation path
- NAV.XCT
- Domain
- EnterpriseProvenanceEvidence
- Industry
- Cross-industry
- Tags
- EM-XCT-10provenanceevidenceassertionconfidence
- Also called
- Assertion provenance, EM-XCT-10, Evidence and confidence
What it is Filled
A companion contract for a Company Dimension that registers immutable model releases, derives whether each is installable and canonical in a given context from evidence and holds, and withdraws releases from new use without deleting them.
Why it exists Filled
Register immutable model releases, derive context-qualified installability and assurance, gate canonical status with evidence and holds, and withdraw new use without destroying reproducibility.
Distinguishing features Filled
- Registers immutable model releases and decides, per context, whether one is installable and canonical.
- Withdraws a release from new use without deleting it, so past results stay reproducible.
- Ties canonical status to evidence and open holds rather than to a version number.
What robots and AI may and may not do Filled
Must not
- Grant operational permission because a release is accepted.
- Delete a withdrawn release.
- Mark a release canonical while a hold is open.
Only with a human decision
- Lifting a publication hold.
- Withdrawing a release that installations depend on.
May
- Validate a release record and retain its evidence.
- Report installability for a stated context.
Moral aspects Filled
- Models shape how organizations see people and work; accepting a release is a decision someone must own.
- Reproducibility of past decisions depends on keeping withdrawn releases available.
Who is affected
- Organizations that install the model
- People described by data structured with the model
Owners Filled
Steward
The model publisher owns releases; the installing organization owns its acceptance decision.
Master systems
- Model release registry
- Evidence store for assessments
Links to other meta-models Filled
references
- WM-XCT-013 - 0.3.0-research.1
- WM-XCT-040 - 0.1.1
aligned
- vr.wm-xct-012
- vr.wm-xct-026
- vr.wm-xct-028
What else AI and robots need to interact with it Filled
Identity and identifiers required Filled
- Release ID with version and specification digest, immutable.
Direct properties not applicable Not applicable
Not applicable
Institutional or informational subject: it has no physical body to measure.
Recognition optional Filled
- A release record pins one model version by digest and lists assessments, holds and status.
Capabilities and actions required Filled
- Validate the governed record and retain its evidence without conferring operational permission.
Hazards and failure modes required Filled
- Installing an unassessed release.
- Losing the ability to reproduce results after a withdrawal.
Standards and interfaces required Filled
- Semantic Versioning.
- Software supply-chain attestations such as SLSA provenance.
Context of use required Filled
- Adoption of Vercy model releases inside a Company Dimension.
Sources Filled
- Research record EM-XCT-10: independent provider studies, audits and reconciled findings - Evidence behind the release; claims in the card trace to it.
- Enterprise Model Release Acceptance 0.1.0 specification - Normative release, digest sha256:98fd24d78876c44cbe453eedaae78e26448a393b5aaf9110d95861c5c64d28cb
Open questions
- Use the pinned companion schema/validator and trusted-host binding. Native outer validation alone does not enforce nested semantics. Consult the released adoption limits. Use as a bounded reference gate with authoritative external registry, resolver and profile inputs. Do not treat fixture defaults, catalogue flags or labels as production proof. Required reading: https://ver.cy/models/enterprise-model-release-acceptance/versions/0.1.0/publication-addendum.md
Machine files
Provenance
enterprise research · reviewable-draft
Built from: models/enterprise-model-release-acceptance/versions/0.1.0/spec.json, models/enterprise-model-release-acceptance/catalogue-entry.json, ver-cy/world-models/card-supplements/enterprise-model-release-acceptance.json