{ "vercy": "1.0-draft", "metaModel": { "id": "enterprise-model-release-acceptance", "registryId": "vr.profile.enterprise-model-release-acceptance", "name": "Enterprise Model Release Acceptance", "version": "0.1.0", "kind": "companion-contract", "logicalKind": "model-release-acceptance-contract" }, "canonicalUrl": "https://ver.cy/models/enterprise-model-release-acceptance/versions/0.1.0/spec.json", "model": { "purpose": "Register immutable model releases, derive context-qualified installability and assurance, gate canonical status with evidence and holds, and withdraw new use without destroying reproducibility.", "scope": "This companion owns five release-acceptance records only. It references WM-XCT-013 for registry acts and history, WM-XCT-040 for dependency closure and staging receipts, and model-publication/v1 for catalogue projection. It does not own registry constitution, dependency graphs, package storage, catalogue records, signatures, identity, IAM or source-of-truth business models.", "inScope": [ "ModelRelease", "AcceptanceAssessment", "ConformanceEvidenceRef", "PublicationHoldDisposition", "WithdrawalNotice", "derived status predicates at a time and target context" ], "outOfScope": [ "registry constitution and registration-act history", "dependency-resolution algorithms and closure graphs", "package repository and garbage collection", "catalogue implementation", "cryptographic signing and organizational approval", "native Dimension runtime binding" ] }, "structure": { "bundles": [ { "id": "MRA-B1", "name": "Release identity", "description": "Govern release identity for an enterprise model release.", "layers": [ { "id": "MRA-L1", "name": "Coordinates and immutability", "description": "Separate and verify coordinates and immutability.", "findings": [ { "id": "MRA-F1", "name": "Release coordinate", "description": "Keep release coordinate explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q1", "text": "Which model and semantic version identify this release?", "kind": "evidence", "answer_data": [ "Release coordinate" ] }, { "id": "MRA-Q2", "text": "Can the same coordinate ever point to different bytes?", "kind": "decision", "answer_data": [ "Release coordinate" ] } ], "artifacts": [ { "id": "MRA-A1", "name": "Release coordinate record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X1", "name": "Verify release coordinate", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] }, { "id": "MRA-F2", "name": "Registration binding", "description": "Keep registration binding explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q3", "text": "Which WM-XCT-013 entry and act register the release?", "kind": "evidence", "answer_data": [ "Registration binding" ] }, { "id": "MRA-Q4", "text": "Which authority created the immutable coordinate?", "kind": "decision", "answer_data": [ "Registration binding" ] } ], "artifacts": [ { "id": "MRA-A2", "name": "Registration binding record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X2", "name": "Verify registration binding", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] } ] }, { "id": "MRA-L2", "name": "Byte and semantic identity", "description": "Separate and verify byte and semantic identity.", "findings": [ { "id": "MRA-F3", "name": "Package digest", "description": "Keep package digest explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q5", "text": "Which digest verifies the exact released bytes?", "kind": "evidence", "answer_data": [ "Package digest" ] }, { "id": "MRA-Q6", "text": "Does any mutable locator masquerade as the lock?", "kind": "decision", "answer_data": [ "Package digest" ] } ], "artifacts": [ { "id": "MRA-A3", "name": "Package digest record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X3", "name": "Verify package digest", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] }, { "id": "MRA-F4", "name": "Semantic fingerprint", "description": "Keep semantic fingerprint explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q7", "text": "Which pinned canonicalization profile produced the semantic fingerprint?", "kind": "evidence", "answer_data": [ "Semantic fingerprint" ] }, { "id": "MRA-Q8", "text": "Is the fingerprint kept distinct from package-byte identity?", "kind": "decision", "answer_data": [ "Semantic fingerprint" ] } ], "artifacts": [ { "id": "MRA-A4", "name": "Semantic fingerprint record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X4", "name": "Verify semantic fingerprint", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] } ] } ] }, { "id": "MRA-B2", "name": "Resolution and installability", "description": "Govern resolution and installability for an enterprise model release.", "layers": [ { "id": "MRA-L3", "name": "Exact closure", "description": "Separate and verify exact closure.", "findings": [ { "id": "MRA-F5", "name": "Resolution receipt", "description": "Keep resolution receipt explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q9", "text": "Which WM-XCT-040 receipt proves mandatory closure resolution?", "kind": "evidence", "answer_data": [ "Resolution receipt" ] }, { "id": "MRA-Q10", "text": "Are all closure members digest-addressed?", "kind": "decision", "answer_data": [ "Resolution receipt" ] } ], "artifacts": [ { "id": "MRA-A5", "name": "Resolution receipt record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X5", "name": "Verify resolution receipt", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] }, { "id": "MRA-F6", "name": "Transitive retention", "description": "Keep transitive retention explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q11", "text": "Which closure bytes must remain for historical replay?", "kind": "evidence", "answer_data": [ "Transitive retention" ] }, { "id": "MRA-Q12", "text": "Can dependency withdrawal break a prior exact lock?", "kind": "decision", "answer_data": [ "Transitive retention" ] } ], "artifacts": [ { "id": "MRA-A6", "name": "Transitive retention record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X6", "name": "Verify transitive retention", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] } ] }, { "id": "MRA-L4", "name": "Target-context staging", "description": "Separate and verify target-context staging.", "findings": [ { "id": "MRA-F7", "name": "Staging context", "description": "Keep staging context explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q13", "text": "For which target context was the closure staged?", "kind": "evidence", "answer_data": [ "Staging context" ] }, { "id": "MRA-Q14", "text": "Does a receipt from another context count?", "kind": "decision", "answer_data": [ "Staging context" ] } ], "artifacts": [ { "id": "MRA-A7", "name": "Staging context record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X7", "name": "Verify staging context", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] }, { "id": "MRA-F8", "name": "Installability predicate", "description": "Keep installability predicate explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q15", "text": "Which mechanical checks make the release installable here and now?", "kind": "evidence", "answer_data": [ "Installability predicate" ] }, { "id": "MRA-Q16", "text": "Which quality or approval claims are explicitly excluded?", "kind": "decision", "answer_data": [ "Installability predicate" ] } ], "artifacts": [ { "id": "MRA-A8", "name": "Installability predicate record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X8", "name": "Verify installability predicate", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] } ] } ] }, { "id": "MRA-B3", "name": "Assessment and evidence", "description": "Govern assessment and evidence for an enterprise model release.", "layers": [ { "id": "MRA-L5", "name": "Profile and tool pins", "description": "Separate and verify profile and tool pins.", "findings": [ { "id": "MRA-F9", "name": "Assessment profile", "description": "Keep assessment profile explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q17", "text": "Which profile version and digest define the criteria?", "kind": "evidence", "answer_data": [ "Assessment profile" ] }, { "id": "MRA-Q18", "text": "Can latest or an unpinned profile support assurance?", "kind": "decision", "answer_data": [ "Assessment profile" ] } ], "artifacts": [ { "id": "MRA-A9", "name": "Assessment profile record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X9", "name": "Verify assessment profile", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] }, { "id": "MRA-F10", "name": "Tool identity", "description": "Keep tool identity explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q19", "text": "Which tool versions and artifact digests executed the assessment?", "kind": "evidence", "answer_data": [ "Tool identity" ] }, { "id": "MRA-Q20", "text": "Can a tool name alone reproduce the result?", "kind": "decision", "answer_data": [ "Tool identity" ] } ], "artifacts": [ { "id": "MRA-A10", "name": "Tool identity record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X10", "name": "Verify tool identity", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] } ] }, { "id": "MRA-L6", "name": "Fixtures and evidence", "description": "Separate and verify fixtures and evidence.", "findings": [ { "id": "MRA-F11", "name": "Negative fixtures", "description": "Keep negative fixtures explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q21", "text": "Which frozen fixture set was executed and did every negative fail as expected?", "kind": "evidence", "answer_data": [ "Negative fixtures" ] }, { "id": "MRA-Q22", "text": "Where is the fixture outcome recorded?", "kind": "decision", "answer_data": [ "Negative fixtures" ] } ], "artifacts": [ { "id": "MRA-A11", "name": "Negative fixtures record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X11", "name": "Verify negative fixtures", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] }, { "id": "MRA-F12", "name": "Evidence sufficiency", "description": "Keep evidence sufficiency explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q23", "text": "Which digest-addressed evidence supports every required kind?", "kind": "evidence", "answer_data": [ "Evidence sufficiency" ] }, { "id": "MRA-Q24", "text": "Is the assessment active rather than revoked or superseded?", "kind": "decision", "answer_data": [ "Evidence sufficiency" ] } ], "artifacts": [ { "id": "MRA-A12", "name": "Evidence sufficiency record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X12", "name": "Verify evidence sufficiency", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] } ] } ] }, { "id": "MRA-B4", "name": "Publication control", "description": "Govern publication control for an enterprise model release.", "layers": [ { "id": "MRA-L7", "name": "Holds and projection", "description": "Separate and verify holds and projection.", "findings": [ { "id": "MRA-F13", "name": "Scoped hold", "description": "Keep scoped hold explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q25", "text": "Which canonical, new-install or discovery scope does this hold affect?", "kind": "evidence", "answer_data": [ "Scoped hold" ] }, { "id": "MRA-Q26", "text": "Is it blocking or advisory and who may dispose it?", "kind": "decision", "answer_data": [ "Scoped hold" ] } ], "artifacts": [ { "id": "MRA-A13", "name": "Scoped hold record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X13", "name": "Verify scoped hold", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] }, { "id": "MRA-F14", "name": "Projection precedence", "description": "Keep projection precedence explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q27", "text": "Does the catalogue reflect authoritative current predicates?", "kind": "evidence", "answer_data": [ "Projection precedence" ] }, { "id": "MRA-Q28", "text": "How is a stale projection detected and corrected?", "kind": "decision", "answer_data": [ "Projection precedence" ] } ], "artifacts": [ { "id": "MRA-A14", "name": "Projection precedence record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X14", "name": "Verify projection precedence", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] } ] }, { "id": "MRA-L8", "name": "Withdrawal and history", "description": "Separate and verify withdrawal and history.", "findings": [ { "id": "MRA-F15", "name": "Withdrawal notice", "description": "Keep withdrawal notice explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q29", "text": "Which WM-XCT-013 act authorizes the notice and when is it effective?", "kind": "evidence", "answer_data": [ "Withdrawal notice" ] }, { "id": "MRA-Q30", "text": "Which current eligibility and discovery scopes stop?", "kind": "decision", "answer_data": [ "Withdrawal notice" ] } ], "artifacts": [ { "id": "MRA-A15", "name": "Withdrawal notice record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X15", "name": "Verify withdrawal notice", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] }, { "id": "MRA-F16", "name": "Non-destructive retention", "description": "Keep non-destructive retention explicit, immutable where required, and independently verifiable.", "questions": [ { "id": "MRA-Q31", "text": "Are release bytes, evidence and the transitive closure retained?", "kind": "evidence", "answer_data": [ "Non-destructive retention" ] }, { "id": "MRA-Q32", "text": "Can exact historical locks still resolve after withdrawal?", "kind": "decision", "answer_data": [ "Non-destructive retention" ] } ], "artifacts": [ { "id": "MRA-A16", "name": "Non-destructive retention record", "description": "Digest-addressed record or reference governed by this profile." } ], "actions": [ { "id": "MRA-X16", "name": "Verify non-destructive retention", "description": "Validate the governed record and retain its evidence without conferring operational permission." } ] } ] } ] } ] }, "functions": [ { "id": "MRA-FN1", "name": "Register release coordinate", "description": "Accept a model/version only when it binds exactly one verified package digest and pinned registry/resolution references." }, { "id": "MRA-FN2", "name": "Assess release", "description": "Record a profile-, tool-, fixture- and evidence-pinned assessment without mutating release bytes." }, { "id": "MRA-FN3", "name": "Derive release status", "description": "Compute existence, installability, assurance, canonical status, new-install eligibility and discoverability for a target context and time." }, { "id": "MRA-FN4", "name": "Dispose publication hold", "description": "Append an authorized resolution, waiver or supersession while retaining the hold history." }, { "id": "MRA-FN5", "name": "Withdraw new use", "description": "Reference a WM-XCT-013 withdrawal act, stop selected new-use scopes and preserve all exact historical locks." } ], "composition": { "runtimeImports": [], "semanticReferences": [ { "id": "WM-XCT-013", "version": "0.3.0-research.1", "relation": "REFERENCE", "url": "https://ver.cy/models/enterprise-model-release-acceptance/versions/0.1.0/upstream/wm-xct-013-registry-pattern/spec.yaml", "specDigest": "sha256:d546f2d9da5bd1a2faf476ef13df0c2507f24587e558f98f63e2c4d95331726e" }, { "id": "WM-XCT-040", "version": "0.1.1", "relation": "REFERENCE", "url": "https://ver.cy/models/enterprise-model-release-acceptance/versions/0.1.0/upstream/wm-xct-040-model-composition-resolution/spec.yaml", "specDigest": "sha256:59101cc3a205e54e3f8a7f296896016f2eb4fe5ae535135fba68fcd083c34597" } ], "projection": "model-publication/v1", "alignments": [ "Semantic Versioning 2.0.0", "SLSA 1.2", "OCI Image Specification 1.1.1", "SPDX 3.0.1" ], "limits": "Semantic references only; no executable parent import or standards conformance claim." }, "invariants": [ "A registered (modelId, version) maps to exactly one packageByteDigest.", "A package byte digest and a semantic fingerprint are different claims and never substitute for one another.", "A mutable branch, tag, wildcard, latest token or unbound URL is never an exact lock.", "Installability is derived for one target context from verified bytes and a successful WM-XCT-040 receipt; it does not imply assurance or approval.", "Assurance binds one package digest to a pinned assessment profile, pinned tool artifacts, a frozen fixture set and retained evidence.", "Canonical status is a derived predicate at time t and is never a user-set field on ModelRelease.", "An open blocking hold affects only its declared scopes and overrides a stale catalogue projection.", "Assessment revocation or supersession is append-only and cannot rewrite prior evidence.", "Withdrawal references a WM-XCT-013 act and never becomes a competing history ledger.", "Withdrawal never deletes released bytes, evidence, receipts or the transitive closure required by a prior exact lock.", "Release existence survives withdrawal; current canonical status, new-install eligibility and discoverability are separate predicates.", "A dependency withdrawal does not rewrite dependants; prior locks remain reproducible and new closures must be re-evaluated." ], "sources": [ { "id": "SRC-001", "title": "WM-XCT-013 Registry Pattern", "url": "https://ver.cy/models/wm-xct-013-registry-pattern/", "role": "semantic upstream", "limitation": "Published reviewable draft with visible upstream holds." }, { "id": "SRC-002", "title": "WM-XCT-040 Model Composition Resolution", "url": "https://ver.cy/models/wm-xct-040-model-composition-resolution/", "role": "semantic upstream", "limitation": "Bounded reference implementation; current package pin verified locally before release." }, { "id": "SRC-003", "title": "Semantic Versioning 2.0.0", "url": "https://semver.org/spec/v2.0.0.html", "role": "versioning precedent", "verified": "2026-09-22" }, { "id": "SRC-004", "title": "SLSA specification 1.2", "url": "https://slsa.dev/spec/v1.2/", "role": "provenance and attestation precedent", "verified": "2026-09-22" }, { "id": "SRC-005", "title": "OCI Image Specification 1.1.1", "url": "https://specs.opencontainers.org/image-spec/?v=v1.1.1", "role": "content-addressing precedent", "verified": "2026-09-22" }, { "id": "SRC-006", "title": "SPDX Specification 3.0.1 profileConformance", "url": "https://spdx.github.io/spdx-spec/v3.0.1/model/Core/Properties/profileConformance/", "role": "profile declaration precedent", "verified": "2026-09-22" } ], "researchAdjudication": { "providerMode": "multi-provider", "providers": [ "Claude Opus 5 High", "Grok Heavy", "Codex synthesis" ], "providerVerdicts": { "claude": "ACCEPT WITH LIMITS", "grok": "ACCEPT WITH LIMITS" }, "publicationHolds": [ "This is a bounded Vercy companion and reference gate, not universal package-manager, supply-chain or standards conformance.", "The first release has no native V3 Dimension binding; consumers use the JSON schema and reference evaluator.", "Semantic fingerprints require an adopting canonicalization profile; this package supplies a fixture profile, not a universal semantic hashing standard.", "Registry, resolver, storage, signer, IAM and catalogue authority remain external and must be independently authenticated.", "WM-XCT-013 upstream source-version and historic single-provider holds remain visible; this profile does not cure them." ] }, "statistics": { "sources": 6, "bundles": 4, "layers": 8, "findings": 16, "questions": 32, "artifacts": 16, "functions": 5 } }