# Vercy AI instruction - YAML 1.2 (JSON-compatible) { "vercy": "1.0-draft", "publication": { "status": "published", "adjudicationStatus": "reviewable-draft", "publishableCanonical": false, "generatedAt": "2026-10-21T15:53:29Z", "synthesisSha256": "f008ca1d670fe50bdcbd5aa342d3a85afd54f2005552c68eefcf1181f58ab3ea", "providerMode": "single-provider-waiver", "providers": [ "Codex" ], "waivedProviders": [ "Claude", "Grok" ] }, "metaModel": { "id": "WM-MEM-002", "registryId": "vr.wm-mem-002", "name": "Memory Item", "version": "0.1.0-reviewable", "previousVersions": [], "entryKind": "entity", "family": "World Models", "category": "Information and virtual systems", "industry": [ "Cross-industry" ], "domain": [ "INF.MEM.ITM" ], "tags": [ "memory", "item", "inf.mem.itm" ], "status": "published" }, "canonicalUrl": "https://ver.cy/models/wm-mem-002-memory-item/", "sourceUrl": "../../research/runs/wm-mem-002/", "model": { "registry_id": "vr.wm-mem-002", "model_id": "WM-MEM-002", "name": "Memory Item", "entry_kind": "entity", "purpose": "Describe one atomic agent-held record with source provenance, applicability, accountable ownership and record lifecycle.", "scope_statement": "One retained memory item envelope and its revisions, independent of storage, transport or retrieval implementation. This is a proposed research profile, not a normative universal memory format.", "in_scope": [ "Logical record identity, content binding, attribution and source evidence.", "Applicability and recording times, revision and externally authorized status.", "Item-level references to permissions, assessments, restrictions, retention and derived representations." ], "out_of_scope": [ "Memory-store administration, retrieval, ranking, embedding generation and context assembly.", "Generic claim truth evaluation, trust scoring, conflict precedence, formation and consolidation execution.", "Grant approval, incident investigation, quarantine decisions, redaction production and physical erasure.", "Full person profiles, episode chronology, learned procedures and portability packaging." ], "boundary_notes": [ { "neighbor": "WM-KNW-007", "distinction": "Registry parent Claim / Proposition is conceptual alignment only. A retained assertion is not proof of truth; generic claim evaluation remains external.", "source_refs": [ "SRC-001", "SRC-005" ] }, { "neighbor": "WM-MEM-001", "distinction": "Memory Store owns tenancy infrastructure and storage execution; the item carries a store binding.", "source_refs": [ "SRC-005", "SRC-006" ] }, { "neighbor": "WM-MEM-003", "distinction": "Interaction Episode owns session chronology and participants; the item may reference an episode.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "WM-MEM-004", "distinction": "Entity Profile Memory owns the accumulated profile; aboutness links do not import its aggregation lifecycle.", "source_refs": [ "SRC-002", "SRC-005" ] }, { "neighbor": "WM-MEM-005", "distinction": "Procedural Memory owns learned ways of acting; retained descriptive content does not execute a procedure.", "source_refs": [ "SRC-002", "SRC-005" ] }, { "neighbor": "WM-MEM-006", "distinction": "Memory Formation Event owns extraction method and event lifecycle; the item carries its formation reference.", "source_refs": [ "SRC-001" ] }, { "neighbor": "WM-MEM-007", "distinction": "Memory Recall Event owns query, ranking and use trace; the item carries optional use references.", "source_refs": [ "SRC-001", "SRC-006" ] }, { "neighbor": "WM-MEM-008", "distinction": "Memory Consolidation owns merge and summary decisions; the item records authorized lineage and replacement references.", "source_refs": [ "SRC-001" ] }, { "neighbor": "WM-MEM-009", "distinction": "Memory Conflict and Precedence Rule owns conflict evaluation and precedence; the item retains contrary evidence links.", "source_refs": [ "SRC-001", "SRC-006" ] }, { "neighbor": "WM-MEM-010", "distinction": "Memory Retention and Forgetting Policy owns decay and erasure rules; the store executes disposal and the item records receipts.", "source_refs": [ "SRC-006" ] }, { "neighbor": "WM-MEM-011", "distinction": "Memory Scope and Sharing Grant owns permission lifecycle; the item carries scoped grants without granting access.", "source_refs": [ "SRC-005", "SRC-006" ] }, { "neighbor": "WM-MEM-012", "distinction": "Memory Portability Package owns export and import packaging; this item declares mapping and transfer references.", "source_refs": [ "SRC-005", "SRC-006" ] }, { "neighbor": "WM-MEM-013", "distinction": "Context Assembly owns budget and context selection; remembered content is not an instruction to that assembly.", "source_refs": [ "SRC-002", "SRC-006" ] }, { "neighbor": "WM-MEM-014", "distinction": "Retrieval Index owns embeddings, index refresh and search; the item references derived representations only.", "source_refs": [ "SRC-001", "SRC-005" ] }, { "neighbor": "WM-MEM-015", "distinction": "Retrieval Passage owns retrieved segment lineage; an item may reference it without becoming a retrieval unit by default.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "WM-MEM-016", "distinction": "Answer Grounding owns answer-to-evidence bindings; item identity does not depend on answer generation.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "WM-MEM-017", "distinction": "Context Policy owns precedence over ordinary memory during recall; this item never establishes higher-priority instruction authority.", "source_refs": [ "SRC-006" ] }, { "neighbor": "WM-MEM-018", "distinction": "Memory Trust Assessment owns scoring and trust evaluation; this item stores qualified assessment references.", "source_refs": [ "SRC-001", "SRC-006" ] }, { "neighbor": "WM-MEM-019", "distinction": "Memory Poisoning Incident owns investigation and remediation; this item only references incident-related restrictions.", "source_refs": [ "SRC-006" ] }, { "neighbor": "WM-MEM-020", "distinction": "Memory Quarantine and Redaction owns restriction decisions and redacted-view production; this item records their bindings.", "source_refs": [ "SRC-002", "SRC-006" ] }, { "neighbor": "Registry entry kind", "distinction": "standalone-mm is a registry record-plane label. The subject is an entity because its identity persists across record revisions, not a formation or recall event.", "source_refs": [ "SRC-001", "SRC-005" ] } ] }, "sources": [ { "id": "SRC-001", "title": "PROV-O: The PROV Ontology", "organization": "W3C", "url": "https://www.w3.org/TR/2013/REC-prov-o-20130430/", "version_or_date": "Recommendation 2013-04-30", "source_type": "ontology", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:21Z", "relevance": "Entity, attribution, derivation, revision and invalidation alignments. These do not establish truth or memory runtime behavior." }, { "id": "SRC-002", "title": "Web Annotation Data Model", "organization": "W3C", "url": "https://www.w3.org/TR/2017/REC-annotation-model-20170223/", "version_or_date": "Recommendation 2017-02-23", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:21Z", "relevance": "Bodies, targets, selectors and source states support content anchoring. A memory item need not be a conforming annotation." }, { "id": "SRC-003", "title": "Time Ontology in OWL", "organization": "W3C", "url": "https://www.w3.org/TR/2017/REC-owl-time-20171019/", "version_or_date": "Recommendation 2017-10-19", "source_type": "ontology", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:21Z", "relevance": "Instants, intervals and temporal reference systems inform applicability metadata; memory validity and expiry semantics are proposed local design." }, { "id": "SRC-004", "title": "RFC 3339: Date and Time on the Internet: Timestamps", "organization": "IETF", "url": "https://www.rfc-editor.org/rfc/rfc3339", "version_or_date": "July 2002; RFC 9557 update noted, not adopted", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:21Z", "relevance": "Timestamp syntax only. Event, observation, ingestion and expiry roles are separately defined by this proposed profile." }, { "id": "SRC-005", "title": "DCMI Metadata Terms", "organization": "DCMI", "url": "https://www.dublincore.org/specifications/dublin-core/dcmi-terms/2020-01-20/", "version_or_date": "Recommendation 2020-01-20", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:21Z", "relevance": "Identifier, type, subject, language, rights, validity and version terms inform descriptive alignments, not a memory system ontology." }, { "id": "SRC-006", "title": "NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management, Version 1.0", "organization": "NIST", "url": "https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.01162020.pdf", "version_or_date": "Version 1.0, 2020-01-16; deliberately pinned baseline", "source_type": "public-authority", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:21Z", "relevance": "Appendix A Control-P and Protect-P inform permission, minimization, correction and disposal questions. Voluntary framework, not jurisdictional law or compliance certification." } ], "structure": { "bundles": [ { "id": "b-identity-content", "name": "Identity and content", "description": "Proposed grouping of identity and content for one memory item; source alignments are not a normative memory ontology.", "rationale": "Keep identity and content answerable at item level while delegating store, event and policy operations through typed references.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ], "layers": [ { "id": "l-record", "name": "Record definition", "description": "Proposed item-level concern: record definition. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ], "findings": [ { "id": "f-identity", "name": "Item identity and revision", "description": "Proposed local design: One addressable retained record has a stable item identity and distinguishable revisions. Equal payloads do not establish identity across owners or stores.", "source_refs": [ "SRC-001", "SRC-005" ], "questions": [ { "id": "q-identity-1", "text": "Which authoritative identifier distinguishes this memory item from its copies and revisions?", "kind": "identity", "answer_data": [ "item_identity: Master identifier and namespace; separate revision token; aliases retain issuer scope." ] }, { "id": "q-identity-2", "text": "Which store and owner namespace currently govern this item?", "kind": "composition", "answer_data": [ "store_binding: Store reference and namespace binding; unresolved binding must be explicit." ] }, { "id": "q-identity-3", "text": "What evidence supports an alias or duplicate relationship without merging different owners?", "kind": "validation", "answer_data": [ "identity_links: Typed candidate links, issuer, evidence and review state; no automatic equality from a hash." ] } ], "data_elements": [ { "id": "d-identity-1", "name": "item_identity", "description": "Master identifier and namespace; separate revision token; aliases retain issuer scope.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-005" ] }, { "id": "d-identity-2", "name": "store_binding", "description": "Store reference and namespace binding; unresolved binding must be explicit.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-005" ] }, { "id": "d-identity-3", "name": "identity_links", "description": "Typed candidate links, issuer, evidence and review state; no automatic equality from a hash.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-005" ] } ], "artifacts": [ { "id": "a-identity", "name": "Item identity and revision record", "description": "Optional governed evidence projection for this finding; a storage file is not the subject identity.", "media_or_form": [ "structured record", "human-readable view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact identifier, then governed IRI, then Dimension-assigned UUID or ULID; bind item ID and revision, never use a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-005" ] } ], "inline_only_rationale": null }, { "id": "f-content", "name": "Remembered content and assertion mode", "description": "Proposed local design: The item retains content or a reference plus interpretation metadata. It may record a claim, observation or preference; storage is not endorsement and source text is never execution authority.", "source_refs": [ "SRC-002", "SRC-005" ], "questions": [ { "id": "q-content-1", "text": "What single remembered unit is retained, and what prevents it becoming a whole profile or episode aggregate?", "kind": "definition", "answer_data": [ "content_binding: Payload or governed payload reference and declared atomic boundary; tombstones may omit payload." ] }, { "id": "q-content-2", "text": "Is the content asserted, quoted, inferred, disputed or unknown in the declared profile?", "kind": "classification", "answer_data": [ "assertion_mode: Profile-qualified mode with attribution; unknown is distinct from false." ] }, { "id": "q-content-3", "text": "Which media type, language and encoding are needed to interpret the retained content?", "kind": "interoperability", "answer_data": [ "representation: Media type, language and encoding or explicit unknown; translation is a derived revision." ] } ], "data_elements": [ { "id": "d-content-1", "name": "content_binding", "description": "Payload or governed payload reference and declared atomic boundary; tombstones may omit payload.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-005" ] }, { "id": "d-content-2", "name": "assertion_mode", "description": "Profile-qualified mode with attribution; unknown is distinct from false.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-005" ] }, { "id": "d-content-3", "name": "representation", "description": "Media type, language and encoding or explicit unknown; translation is a derived revision.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-005" ] } ], "artifacts": [ { "id": "a-content", "name": "Remembered content and assertion mode record", "description": "Optional governed evidence projection for this finding; a storage file is not the subject identity.", "media_or_form": [ "structured record", "human-readable view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact identifier, then governed IRI, then Dimension-assigned UUID or ULID; bind item ID and revision, never use a timestamp as identity.", "source_refs": [ "SRC-002", "SRC-005" ] } ], "inline_only_rationale": null } ] }, { "id": "l-context", "name": "Subject context", "description": "Proposed item-level concern: subject context. External operations remain referenced.", "source_refs": [ "SRC-002", "SRC-005" ], "findings": [ { "id": "f-aboutness", "name": "Subject and applicability context", "description": "Proposed local design: Remembered aboutness is separate from the actor who stores it. Context qualifies meaning without copying an entity profile or inferring physical properties of an abstract record.", "source_refs": [ "SRC-002", "SRC-005" ], "questions": [ { "id": "q-aboutness-1", "text": "Which entities or source targets is the memory about?", "kind": "relationship", "answer_data": [ "subject_refs: Scoped target identifiers and unresolved identity markers; no forced global person matching." ] }, { "id": "q-aboutness-2", "text": "Within what task, conversation or domain context may this content be interpreted?", "kind": "constraint", "answer_data": [ "context_binding: Purpose and context references; missing scope is not global applicability." ] }, { "id": "q-aboutness-3", "text": "Does the remembered assertion depend on a place, and how is that place distinguished from storage location?", "kind": "spatial", "answer_data": [ "place_qualifier: Optional subject location reference and evidence, not physical dimensions of the memory item." ] } ], "data_elements": [ { "id": "d-aboutness-1", "name": "subject_refs", "description": "Scoped target identifiers and unresolved identity markers; no forced global person matching.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-005" ] }, { "id": "d-aboutness-2", "name": "context_binding", "description": "Purpose and context references; missing scope is not global applicability.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-005" ] }, { "id": "d-aboutness-3", "name": "place_qualifier", "description": "Optional subject location reference and evidence, not physical dimensions of the memory item.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-005" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." } ] } ] }, { "id": "b-origin-evidence", "name": "Origin and evidence", "description": "Proposed grouping of origin and evidence for one memory item; source alignments are not a normative memory ontology.", "rationale": "Keep origin and evidence answerable at item level while delegating store, event and policy operations through typed references.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ], "layers": [ { "id": "l-lineage", "name": "Source lineage", "description": "Proposed item-level concern: source lineage. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ], "findings": [ { "id": "f-origin", "name": "Source and formation references", "description": "Proposed local design: Trace retained content to identified source revisions and externally mastered formation events. No local extraction algorithm or source-truth certification is specified.", "source_refs": [ "SRC-001", "SRC-002" ], "questions": [ { "id": "q-origin-1", "text": "Which source revision and formation event produced this item revision?", "kind": "provenance", "answer_data": [ "origin_links: Source ID and revision, formation-event reference, and explicit gaps in lineage." ] }, { "id": "q-origin-2", "text": "Which segment or selector locates the supporting material without retaining unnecessary source content?", "kind": "evidence", "answer_data": [ "source_anchors: Source URI, selector and representation state; protected content stays protected." ] }, { "id": "q-origin-3", "text": "How is the item qualified when its source is missing, inaccessible or changed?", "kind": "exception", "answer_data": [ "source_availability: Observed availability, observation time and limitation; unavailability does not erase the recorded claim." ] } ], "data_elements": [ { "id": "d-origin-1", "name": "origin_links", "description": "Source ID and revision, formation-event reference, and explicit gaps in lineage.", "value_kind": "collection", "cardinality": "1..n", "required": true, "source_refs": [ "SRC-001", "SRC-002" ] }, { "id": "d-origin-2", "name": "source_anchors", "description": "Source URI, selector and representation state; protected content stays protected.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "id": "d-origin-3", "name": "source_availability", "description": "Observed availability, observation time and limitation; unavailability does not erase the recorded claim.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002" ] } ], "artifacts": [ { "id": "a-origin", "name": "Source and formation references record", "description": "Optional governed evidence projection for this finding; a storage file is not the subject identity.", "media_or_form": [ "structured record", "human-readable view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact identifier, then governed IRI, then Dimension-assigned UUID or ULID; bind item ID and revision, never use a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-002" ] } ], "inline_only_rationale": null }, { "id": "f-attribution", "name": "Attribution and accountable roles", "description": "Proposed local design: Keep source author, formation actor, custodian and rights holder distinct. The operator is a role reference, never a commercial name or a claim of unlimited ownership.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ], "questions": [ { "id": "q-attribution-1", "text": "Who is accountable for this item under the adopting Dimension?", "kind": "ownership", "answer_data": [ "custodian_ref: Role or principal reference and effective assignment; not ownership of a person described by the item." ] }, { "id": "q-attribution-2", "text": "Who asserted the remembered content and who recorded it?", "kind": "provenance", "answer_data": [ "actor_refs: Source speaker or author and recording actor with distinct role labels and unknown markers." ] }, { "id": "q-attribution-3", "text": "Which mandate or permission reference authorizes this item to be retained?", "kind": "authority", "answer_data": [ "authority_binding: Permission or other policy basis, issuer, version and scope; absent authority prevents admission." ] } ], "data_elements": [ { "id": "d-attribution-1", "name": "custodian_ref", "description": "Role or principal reference and effective assignment; not ownership of a person described by the item.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "d-attribution-2", "name": "actor_refs", "description": "Source speaker or author and recording actor with distinct role labels and unknown markers.", "value_kind": "collection", "cardinality": "1..n", "required": true, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "d-attribution-3", "name": "authority_binding", "description": "Permission or other policy basis, issuer, version and scope; absent authority prevents admission.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." } ] }, { "id": "l-qualification", "name": "Evidence qualification", "description": "Proposed item-level concern: evidence qualification. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-006" ], "findings": [ { "id": "f-assessment", "name": "Evidence qualification and trust references", "description": "Proposed local design: Carry assessment references and interpretation limits. The trust model owns scoring; confidence, similarity and frequency are not interchangeable and cannot prove truth.", "source_refs": [ "SRC-001", "SRC-006" ], "questions": [ { "id": "q-assessment-1", "text": "Which assessment qualifies this specific revision and what limitations does it report?", "kind": "quality", "answer_data": [ "assessment_refs: Trust-assessment IDs bound to item revision and evidence; unknown assessment is explicit." ] }, { "id": "q-assessment-2", "text": "If a confidence value is retained, what scale, method and calibration make it interpretable?", "kind": "measurement", "answer_data": [ "confidence_annotation: Optional external score with scale, method version and calibration context; no default numeric certainty." ] }, { "id": "q-assessment-3", "text": "What contrary evidence remains linked without selecting a winning assertion locally?", "kind": "evidence", "answer_data": [ "contrary_refs: Evidence references and conflict-case reference; precedence is decided externally." ] } ], "data_elements": [ { "id": "d-assessment-1", "name": "assessment_refs", "description": "Trust-assessment IDs bound to item revision and evidence; unknown assessment is explicit.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "id": "d-assessment-2", "name": "confidence_annotation", "description": "Optional external score with scale, method version and calibration context; no default numeric certainty.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "id": "d-assessment-3", "name": "contrary_refs", "description": "Evidence references and conflict-case reference; precedence is decided externally.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." } ] } ] }, { "id": "b-time-state", "name": "Time and record state", "description": "Proposed grouping of time and record state for one memory item; source alignments are not a normative memory ontology.", "rationale": "Keep time and record state answerable at item level while delegating store, event and policy operations through typed references.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-005", "SRC-006" ], "layers": [ { "id": "l-time", "name": "Temporal qualifiers", "description": "Proposed item-level concern: temporal qualifiers. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-005" ], "findings": [ { "id": "f-validity", "name": "Temporal applicability", "description": "Proposed local design: Represent when content is claimed applicable separately from when it was learned. Unknown bounds, open bounds and a known instant are distinct; no universal end-bound convention is assumed.", "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ], "questions": [ { "id": "q-validity-1", "text": "During which interval or instant is the remembered assertion claimed to apply?", "kind": "temporal", "answer_data": [ "validity: Start and end or instant, temporal reference system, endpoint inclusion, and unknown or unbounded indicators." ] }, { "id": "q-validity-2", "text": "What should consumers do when applicability bounds are incomplete or contradictory?", "kind": "constraint", "answer_data": [ "temporal_limits: Qualification or rejection reason; no conversion of unknown bounds into unlimited validity." ] }, { "id": "q-validity-3", "text": "Which evidence or external rule justifies a change to the applicability interval?", "kind": "relationship", "answer_data": [ "validity_basis: Evidence and rule references with affected revision; recording a correction does not overwrite prior evidence." ] } ], "data_elements": [ { "id": "d-validity-1", "name": "validity", "description": "Start and end or instant, temporal reference system, endpoint inclusion, and unknown or unbounded indicators.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] }, { "id": "d-validity-2", "name": "temporal_limits", "description": "Qualification or rejection reason; no conversion of unknown bounds into unlimited validity.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] }, { "id": "d-validity-3", "name": "validity_basis", "description": "Evidence and rule references with affected revision; recording a correction does not overwrite prior evidence.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-004", "SRC-005" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." }, { "id": "f-recorded-time", "name": "Observation and recording times", "description": "Proposed local design: Keep asserted event time, source observation, ingestion and revision recording separate. Representation precision must not manufacture measurement precision.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ], "questions": [ { "id": "q-recorded-time-1", "text": "When was the source observed and when was this item ingested?", "kind": "temporal", "answer_data": [ "capture_times: Separate observation and ingestion timestamps with explicit unknowns and clock provenance." ] }, { "id": "q-recorded-time-2", "text": "Which occurrence time belongs to the remembered event rather than to its recording?", "kind": "event", "answer_data": [ "event_time: Optional event instant or interval with precision and source; not inferred from insertion time." ] }, { "id": "q-recorded-time-3", "text": "What clock uncertainty or date-only precision limits temporal comparison?", "kind": "quality", "answer_data": [ "time_quality: Precision, uncertainty and conversion notes; exact timestamps use RFC 3339, dates remain dates." ] } ], "data_elements": [ { "id": "d-recorded-time-1", "name": "capture_times", "description": "Separate observation and ingestion timestamps with explicit unknowns and clock provenance.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] }, { "id": "d-recorded-time-2", "name": "event_time", "description": "Optional event instant or interval with precision and source; not inferred from insertion time.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] }, { "id": "d-recorded-time-3", "name": "time_quality", "description": "Precision, uncertainty and conversion notes; exact timestamps use RFC 3339, dates remain dates.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." } ] }, { "id": "l-status", "name": "Record status", "description": "Proposed item-level concern: record status. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ], "findings": [ { "id": "f-state", "name": "Record status and freshness", "description": "Proposed local design: Proposed statuses describe record availability, not truth or permission. Active, superseded, withdrawn and tombstoned states are profile choices; expiry and quarantine are separate policy bindings.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ], "questions": [ { "id": "q-state-1", "text": "What is the current record status and which evidence authorizes that status?", "kind": "state", "answer_data": [ "status_record: Profile-qualified status, revision and external authorization or decision reference." ] }, { "id": "q-state-2", "text": "What review or expiry condition qualifies further use of the record?", "kind": "lifecycle", "answer_data": [ "freshness_binding: Review time or external policy reference; expiry is distinct from falsehood and from physical deletion." ] }, { "id": "q-state-3", "text": "How is an unknown or stale status communicated to a consumer?", "kind": "exception", "answer_data": [ "status_limits: Last verified state, verification time and fail-closed use constraint where authorization is unresolved." ] } ], "data_elements": [ { "id": "d-state-1", "name": "status_record", "description": "Profile-qualified status, revision and external authorization or decision reference.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "d-state-2", "name": "freshness_binding", "description": "Review time or external policy reference; expiry is distinct from falsehood and from physical deletion.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "d-state-3", "name": "status_limits", "description": "Last verified state, verification time and fail-closed use constraint where authorization is unresolved.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." } ] } ] }, { "id": "b-continuity-reuse", "name": "Continuity and reuse", "description": "Proposed grouping of continuity and reuse for one memory item; source alignments are not a normative memory ontology.", "rationale": "Keep continuity and reuse answerable at item level while delegating store, event and policy operations through typed references.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ], "layers": [ { "id": "l-continuity", "name": "Revision continuity", "description": "Proposed item-level concern: revision continuity. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ], "findings": [ { "id": "f-revision", "name": "Correction and supersession", "description": "Proposed local design: Track item-local revisions and externally authorized supersession links. Consolidation decisions and conflict precedence are not computed here.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ], "questions": [ { "id": "q-revision-1", "text": "Which prior revision is corrected and why is this a revision rather than a new item?", "kind": "lifecycle", "answer_data": [ "revision_relation: Previous revision ID, reason, scope and governing identity rule." ] }, { "id": "q-revision-2", "text": "Which external consolidation or conflict decision explains a replacement link?", "kind": "relationship", "answer_data": [ "replacement_refs: Decision reference and target item revision; no silent winner selection." ] }, { "id": "q-revision-3", "text": "Which expected revision token prevents a stale update from silently replacing newer content?", "kind": "validation", "answer_data": [ "concurrency_basis: Expected current revision, change request ID and rejection or conflict receipt." ] } ], "data_elements": [ { "id": "d-revision-1", "name": "revision_relation", "description": "Previous revision ID, reason, scope and governing identity rule.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "d-revision-2", "name": "replacement_refs", "description": "Decision reference and target item revision; no silent winner selection.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "d-revision-3", "name": "concurrency_basis", "description": "Expected current revision, change request ID and rejection or conflict receipt.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] } ], "artifacts": [ { "id": "a-revision", "name": "Correction and supersession record", "description": "Optional governed evidence projection for this finding; a storage file is not the subject identity.", "media_or_form": [ "structured record", "human-readable view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact identifier, then governed IRI, then Dimension-assigned UUID or ULID; bind item ID and revision, never use a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] } ], "inline_only_rationale": null }, { "id": "f-derivatives", "name": "Derived representation references", "description": "Proposed local design: Connect summaries, embeddings, copies and selectors to their source revision as externally mastered derivatives. The item does not own indexing, retrieval or portability execution.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ], "questions": [ { "id": "q-derivatives-1", "text": "Which derived representations refer to this exact item revision?", "kind": "composition", "answer_data": [ "derivative_refs: Index, passage, summary or copy identifiers with lineage and version; absence is not proof that no copies exist." ] }, { "id": "q-derivatives-2", "text": "Which lossy transformation limits interpretation of a derivative?", "kind": "quality", "answer_data": [ "transformation_notes: External transformation reference, known loss and source revision; vector similarity is not semantic equality." ] }, { "id": "q-derivatives-3", "text": "Which external systems must acknowledge invalidation after a correction or disposal request?", "kind": "process", "answer_data": [ "propagation_refs: Dependent-system references and receipt states; local status never certifies global propagation." ] } ], "data_elements": [ { "id": "d-derivatives-1", "name": "derivative_refs", "description": "Index, passage, summary or copy identifiers with lineage and version; absence is not proof that no copies exist.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "d-derivatives-2", "name": "transformation_notes", "description": "External transformation reference, known loss and source revision; vector similarity is not semantic equality.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "d-derivatives-3", "name": "propagation_refs", "description": "Dependent-system references and receipt states; local status never certifies global propagation.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." } ] }, { "id": "l-consumption", "name": "Consumer bindings", "description": "Proposed item-level concern: consumer bindings. External operations remain referenced.", "source_refs": [ "SRC-002", "SRC-005", "SRC-006" ], "findings": [ { "id": "f-reuse", "name": "Reuse and recall constraints", "description": "Proposed local design: Expose item-level applicability and policy references for consumers. Recall, context assembly and answer grounding remain separate records and operations.", "source_refs": [ "SRC-002", "SRC-005", "SRC-006" ], "questions": [ { "id": "q-reuse-1", "text": "Which policy references must a consumer resolve before reusing this item?", "kind": "requirement", "answer_data": [ "reuse_requirements: Scope, purpose, freshness and context-policy version references; missing permission is not authorization." ] }, { "id": "q-reuse-2", "text": "Which recall or grounding records cite this revision without becoming part of its identity?", "kind": "relationship", "answer_data": [ "use_refs: Optional external recall, context-assembly and answer-grounding references; access governed separately." ] }, { "id": "q-reuse-3", "text": "How is remembered instruction-like content kept from becoming higher-priority authority?", "kind": "security", "answer_data": [ "content_authority_limit: Explicit data-only interpretation and external policy binding; dangerous subjects stay at policy level." ] } ], "data_elements": [ { "id": "d-reuse-1", "name": "reuse_requirements", "description": "Scope, purpose, freshness and context-policy version references; missing permission is not authorization.", "value_kind": "collection", "cardinality": "1..n", "required": true, "source_refs": [ "SRC-002", "SRC-005", "SRC-006" ] }, { "id": "d-reuse-2", "name": "use_refs", "description": "Optional external recall, context-assembly and answer-grounding references; access governed separately.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-005", "SRC-006" ] }, { "id": "d-reuse-3", "name": "content_authority_limit", "description": "Explicit data-only interpretation and external policy binding; dangerous subjects stay at policy level.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-005", "SRC-006" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." } ] } ] }, { "id": "b-governance", "name": "Governance and disposition", "description": "Proposed grouping of governance and disposition for one memory item; source alignments are not a normative memory ontology.", "rationale": "Keep governance and disposition answerable at item level while delegating store, event and policy operations through typed references.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ], "layers": [ { "id": "l-control", "name": "Scope and retention", "description": "Proposed item-level concern: scope and retention. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ], "findings": [ { "id": "f-access", "name": "Scope and access bindings", "description": "Proposed local design: Store recipient, purpose and grant references at item level. The external access service enforces them on both payload and metadata; tenancy must survive copies and imports.", "source_refs": [ "SRC-005", "SRC-006" ], "questions": [ { "id": "q-access-1", "text": "Which tenant, agent and recipient scope constrains this memory revision?", "kind": "access", "answer_data": [ "access_scope: Owner namespace and scope or sharing-grant reference; default deny on unresolved binding." ] }, { "id": "q-access-2", "text": "Which parts of the payload and metadata require restricted or redacted views?", "kind": "privacy", "answer_data": [ "sensitivity_binding: Classification and redaction references, including selectors, source identities and existence metadata." ] }, { "id": "q-access-3", "text": "What evidence permits an exceptional disclosure without turning it into a permanent grant?", "kind": "exception", "answer_data": [ "exception_refs: Externally approved exception, expiry, purpose and audit reference; no local approval function." ] } ], "data_elements": [ { "id": "d-access-1", "name": "access_scope", "description": "Owner namespace and scope or sharing-grant reference; default deny on unresolved binding.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-006" ] }, { "id": "d-access-2", "name": "sensitivity_binding", "description": "Classification and redaction references, including selectors, source identities and existence metadata.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-006" ] }, { "id": "d-access-3", "name": "exception_refs", "description": "Externally approved exception, expiry, purpose and audit reference; no local approval function.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-005", "SRC-006" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." }, { "id": "f-retention", "name": "Retention and disposal evidence", "description": "Proposed local design: Carry item-specific policy applicability and disposal receipt references. The retention policy and store execute deletion, including replicas and derivatives, with residual limitations visible.", "source_refs": [ "SRC-001", "SRC-006" ], "questions": [ { "id": "q-retention-1", "text": "Which retention rule and hold currently apply to this item and its revisions?", "kind": "retention", "answer_data": [ "retention_binding: Policy version, retention trigger, due condition and explicit hold reference; reviewable and jurisdiction-qualified." ] }, { "id": "q-retention-2", "text": "Which external receipts distinguish requested erasure from completed or partial disposal?", "kind": "process", "answer_data": [ "disposal_receipts: Store and derivative-system receipts, affected revisions, residual copies and pending failures." ] }, { "id": "q-retention-3", "text": "What minimum tombstone is permitted after payload erasure without preserving the erased personal content?", "kind": "privacy", "answer_data": [ "tombstone_profile: Allowed identifiers, reason category and policy evidence; hashes and audit records may themselves require deletion." ] } ], "data_elements": [ { "id": "d-retention-1", "name": "retention_binding", "description": "Policy version, retention trigger, due condition and explicit hold reference; reviewable and jurisdiction-qualified.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-006" ] }, { "id": "d-retention-2", "name": "disposal_receipts", "description": "Store and derivative-system receipts, affected revisions, residual copies and pending failures.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "id": "d-retention-3", "name": "tombstone_profile", "description": "Allowed identifiers, reason category and policy evidence; hashes and audit records may themselves require deletion.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-006" ] } ], "artifacts": [ { "id": "a-retention", "name": "Retention and disposal evidence record", "description": "Optional governed evidence projection for this finding; a storage file is not the subject identity.", "media_or_form": [ "structured record", "human-readable view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact identifier, then governed IRI, then Dimension-assigned UUID or ULID; bind item ID and revision, never use a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-006" ] } ], "inline_only_rationale": null } ] }, { "id": "l-restriction", "name": "Restricted views", "description": "Proposed item-level concern: restricted views. External operations remain referenced.", "source_refs": [ "SRC-002", "SRC-006" ], "findings": [ { "id": "f-quarantine", "name": "Restriction and redaction references", "description": "Proposed local design: Record the effect of an external quarantine or redaction decision without implementing detection, incident investigation or sanitization logic.", "source_refs": [ "SRC-002", "SRC-006" ], "questions": [ { "id": "q-quarantine-1", "text": "Which external restriction decision makes this item unavailable for ordinary recall?", "kind": "security", "answer_data": [ "restriction_refs: Quarantine or redaction case and decision version; missing review does not imply safety." ] }, { "id": "q-quarantine-2", "text": "How is a redacted view tied to its source revision and permitted audience?", "kind": "validation", "answer_data": [ "redacted_view_refs: View identity, source revision, audience and transformation evidence; never overwrite source identity silently." ] }, { "id": "q-quarantine-3", "text": "Who may record release from restriction and what decision supports it?", "kind": "authority", "answer_data": [ "release_basis: External authorized release reference and current revision; this model cannot approve release." ] } ], "data_elements": [ { "id": "d-quarantine-1", "name": "restriction_refs", "description": "Quarantine or redaction case and decision version; missing review does not imply safety.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-006" ] }, { "id": "d-quarantine-2", "name": "redacted_view_refs", "description": "View identity, source revision, audience and transformation evidence; never overwrite source identity silently.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-006" ] }, { "id": "d-quarantine-3", "name": "release_basis", "description": "External authorized release reference and current revision; this model cannot approve release.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-006" ] } ], "artifacts": [], "inline_only_rationale": "These are fields or references of the item revision. Referenced records remain externally mastered; a separate local artifact would duplicate their authority." } ] } ] }, { "id": "b-exchange-assurance", "name": "Exchange and assurance", "description": "Proposed grouping of exchange and assurance for one memory item; source alignments are not a normative memory ontology.", "rationale": "Keep exchange and assurance answerable at item level while delegating store, event and policy operations through typed references.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003", "SRC-005", "SRC-006" ], "layers": [ { "id": "l-exchange", "name": "Representation exchange", "description": "Proposed item-level concern: representation exchange. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ], "findings": [ { "id": "f-mapping", "name": "Exchange and vocabulary alignment", "description": "Proposed local design: Document item-level mappings and losses. Open specifications are alignments; portability packaging and transport belong elsewhere.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ], "questions": [ { "id": "q-mapping-1", "text": "Which versioned mapping preserves item identity, provenance, scope and temporal qualifications during exchange?", "kind": "interoperability", "answer_data": [ "mapping_profile: Mapping identifier, vocabulary versions and field correspondence; no conformance claim from a citation." ] }, { "id": "q-mapping-2", "text": "Which required semantics cannot be represented by the destination?", "kind": "exception", "answer_data": [ "mapping_losses: Explicit dropped or weakened fields; block admission where scope or authority cannot be preserved." ] }, { "id": "q-mapping-3", "text": "Which portability package or import receipt binds the transferred item to its original namespace?", "kind": "composition", "answer_data": [ "transfer_refs: External package and import receipt references, original identity and destination alias." ] } ], "data_elements": [ { "id": "d-mapping-1", "name": "mapping_profile", "description": "Mapping identifier, vocabulary versions and field correspondence; no conformance claim from a citation.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ] }, { "id": "d-mapping-2", "name": "mapping_losses", "description": "Explicit dropped or weakened fields; block admission where scope or authority cannot be preserved.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ] }, { "id": "d-mapping-3", "name": "transfer_refs", "description": "External package and import receipt references, original identity and destination alias.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ] } ], "artifacts": [ { "id": "a-mapping", "name": "Exchange and vocabulary alignment record", "description": "Optional governed evidence projection for this finding; a storage file is not the subject identity.", "media_or_form": [ "structured record", "human-readable view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact identifier, then governed IRI, then Dimension-assigned UUID or ULID; bind item ID and revision, never use a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-006" ] } ], "inline_only_rationale": null }, { "id": "f-integrity", "name": "Representation integrity and artifact identity", "description": "Proposed local design: Use byte-level integrity evidence for a specified representation without claiming semantic truth. A new encoding can change a digest while preserving the logical item.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ], "questions": [ { "id": "q-integrity-1", "text": "Which artifact identifier and revision distinguish each retained representation?", "kind": "identity", "answer_data": [ "artifact_bindings: Authoritative artifact ID, item ID, revision and representation role." ] }, { "id": "q-integrity-2", "text": "What bytes and algorithm were used for the integrity check?", "kind": "evidence", "answer_data": [ "integrity_evidence: Digest algorithm, representation boundary and verification receipt; absent verification stays unknown." ] }, { "id": "q-integrity-3", "text": "How is a mismatched or missing representation reported without inventing replacement evidence?", "kind": "validation", "answer_data": [ "integrity_limits: Mismatch or missing-content status and external review reference; prevent silent reuse as verified." ] } ], "data_elements": [ { "id": "d-integrity-1", "name": "artifact_bindings", "description": "Authoritative artifact ID, item ID, revision and representation role.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "d-integrity-2", "name": "integrity_evidence", "description": "Digest algorithm, representation boundary and verification receipt; absent verification stays unknown.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "d-integrity-3", "name": "integrity_limits", "description": "Mismatch or missing-content status and external review reference; prevent silent reuse as verified.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] } ], "artifacts": [ { "id": "a-integrity", "name": "Representation integrity and artifact identity record", "description": "Optional governed evidence projection for this finding; a storage file is not the subject identity.", "media_or_form": [ "structured record", "human-readable view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact identifier, then governed IRI, then Dimension-assigned UUID or ULID; bind item ID and revision, never use a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] } ], "inline_only_rationale": null } ] }, { "id": "l-assurance", "name": "Acceptance limits", "description": "Proposed item-level concern: acceptance limits. External operations remain referenced.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ], "findings": [ { "id": "f-acceptance", "name": "Profile validation and operational limits", "description": "Proposed local design: Define a research acceptance surface with adversarial examples; executable schemas and deployed operations remain unfinished.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ], "questions": [ { "id": "q-acceptance-1", "text": "Which profile checks must pass before the record can be admitted for its declared purpose?", "kind": "validation", "answer_data": [ "validation_profile: Identity, lineage, time, revision, scope and permission checks with explicit pass, fail or unknown outcomes." ] }, { "id": "q-acceptance-2", "text": "Which unimplemented mappings, unresolved references or evidence gaps prevent operational assurance?", "kind": "constraint", "answer_data": [ "assurance_limits: Named limitations and owners by role; never convert structural validation into truth or compliance." ] }, { "id": "q-acceptance-3", "text": "Which review evidence is needed before promoting this draft to an operational profile?", "kind": "decision", "answer_data": [ "acceptance_evidence: Independent review, version checks and adversarial fixture results with responsible role." ] } ], "data_elements": [ { "id": "d-acceptance-1", "name": "validation_profile", "description": "Identity, lineage, time, revision, scope and permission checks with explicit pass, fail or unknown outcomes.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "d-acceptance-2", "name": "assurance_limits", "description": "Named limitations and owners by role; never convert structural validation into truth or compliance.", "value_kind": "collection", "cardinality": "1..n", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "d-acceptance-3", "name": "acceptance_evidence", "description": "Independent review, version checks and adversarial fixture results with responsible role.", "value_kind": "collection", "cardinality": "1..n", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] } ], "artifacts": [ { "id": "a-acceptance", "name": "Profile validation and operational limits record", "description": "Optional governed evidence projection for this finding; a storage file is not the subject identity.", "media_or_form": [ "structured record", "human-readable view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact identifier, then governed IRI, then Dimension-assigned UUID or ULID; bind item ID and revision, never use a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] } ], "inline_only_rationale": null } ] } ] } ] }, "functions": [ { "id": "fn-register", "name": "Register an item envelope", "description": "Proposed, unimplemented local operation. Record an already authorized item and its source binding.", "inputs": [ "Item payload or reference", "Owner/store binding", "Formation and authority references" ], "outputs": [ "New item ID and revision or explicit rejection" ], "preconditions": [ "Identity namespace resolved", "External authority permits retention", "Minimum provenance present or explicitly unknown under approved profile" ], "effects": [ "Create the local item envelope; no extraction or policy approval" ], "source_refs": [ "SRC-001", "SRC-002", "SRC-006" ] }, { "id": "fn-qualify", "name": "Record temporal qualification", "description": "Proposed, unimplemented local operation. Attach supported applicability metadata to a known revision.", "inputs": [ "Item and expected revision", "Temporal qualification and evidence" ], "outputs": [ "New qualified revision or conflict receipt" ], "preconditions": [ "Authorized editor", "Bounds and unknown markers satisfy selected profile" ], "effects": [ "Record qualification; do not infer truth, freshness or deletion from an interval" ], "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] }, { "id": "fn-correct", "name": "Record an authorized correction", "description": "Proposed, unimplemented local operation. Preserve revision relationships for a supplied correction.", "inputs": [ "Item and expected revision", "Correction and external decision reference" ], "outputs": [ "Corrected revision or rejected update" ], "preconditions": [ "External correction authority validated", "Expected revision matches", "Retention policy permits retained history" ], "effects": [ "Create revision and link predecessor; do not resolve conflicts or merge items" ], "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "fn-bind", "name": "Attach a governed external reference", "description": "Proposed, unimplemented local operation. Record an assessment, grant or restriction binding without performing its decision.", "inputs": [ "Item revision", "Typed external reference and version", "Evidence of binding authority" ], "outputs": [ "Updated envelope revision or unresolved-binding report" ], "preconditions": [ "Target purpose is within model boundary", "Access permits reference disclosure", "Expected revision matches" ], "effects": [ "Record external binding only; no scoring, granting access or releasing quarantine" ], "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "fn-project", "name": "Produce a permitted item view", "description": "Proposed, unimplemented local operation. Select fields from a supplied authorized view decision.", "inputs": [ "Item revision", "External recipient/purpose decision", "Projection profile" ], "outputs": [ "Scoped item view or denial with minimal reason" ], "preconditions": [ "Decision current and applicable", "Payload and metadata rules resolved", "Untrusted content treated as data" ], "effects": [ "Return permitted fields only; no recall ranking or external disclosure is performed by this proposed function" ], "source_refs": [ "SRC-002", "SRC-005", "SRC-006" ] }, { "id": "fn-dispose-receipt", "name": "Record disposal evidence", "description": "Proposed, unimplemented local operation. Reflect receipts from externally executed disposal.", "inputs": [ "Item revision", "Store and derivative disposal receipts", "Retention and tombstone profile" ], "outputs": [ "Disposition record or pending/partial status" ], "preconditions": [ "Authorized disposition recorder", "Receipts bound to revisions", "Minimal retained metadata permitted" ], "effects": [ "Record confirmed scope and residual limitations; never claim all copies erased from a local tombstone" ], "source_refs": [ "SRC-001", "SRC-006" ] } ], "composition": [ { "target": "WM-KNW-007", "relation": "ALIGN", "purpose": "Proposed binding pending neighbor version review. Registry parent Claim / Proposition is conceptual alignment only. A retained assertion is not proof of truth; generic claim evaluation remains external.", "required": false, "source_refs": [ "SRC-001", "SRC-005" ] }, { "target": "WM-MEM-001", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Store owns tenancy infrastructure and storage execution; the item carries a store binding.", "required": false, "source_refs": [ "SRC-005", "SRC-006" ] }, { "target": "WM-MEM-003", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Interaction Episode owns session chronology and participants; the item may reference an episode.", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "target": "WM-MEM-004", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Entity Profile Memory owns the accumulated profile; aboutness links do not import its aggregation lifecycle.", "required": false, "source_refs": [ "SRC-002", "SRC-005" ] }, { "target": "WM-MEM-005", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Procedural Memory owns learned ways of acting; retained descriptive content does not execute a procedure.", "required": false, "source_refs": [ "SRC-002", "SRC-005" ] }, { "target": "WM-MEM-006", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Formation Event owns extraction method and event lifecycle; the item carries its formation reference.", "required": false, "source_refs": [ "SRC-001" ] }, { "target": "WM-MEM-007", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Recall Event owns query, ranking and use trace; the item carries optional use references.", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "target": "WM-MEM-008", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Consolidation owns merge and summary decisions; the item records authorized lineage and replacement references.", "required": false, "source_refs": [ "SRC-001" ] }, { "target": "WM-MEM-009", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Conflict and Precedence Rule owns conflict evaluation and precedence; the item retains contrary evidence links.", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "target": "WM-MEM-010", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Retention and Forgetting Policy owns decay and erasure rules; the store executes disposal and the item records receipts.", "required": false, "source_refs": [ "SRC-006" ] }, { "target": "WM-MEM-011", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Scope and Sharing Grant owns permission lifecycle; the item carries scoped grants without granting access.", "required": false, "source_refs": [ "SRC-005", "SRC-006" ] }, { "target": "WM-MEM-012", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Portability Package owns export and import packaging; this item declares mapping and transfer references.", "required": false, "source_refs": [ "SRC-005", "SRC-006" ] }, { "target": "WM-MEM-013", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Context Assembly owns budget and context selection; remembered content is not an instruction to that assembly.", "required": false, "source_refs": [ "SRC-002", "SRC-006" ] }, { "target": "WM-MEM-014", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Retrieval Index owns embeddings, index refresh and search; the item references derived representations only.", "required": false, "source_refs": [ "SRC-001", "SRC-005" ] }, { "target": "WM-MEM-015", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Retrieval Passage owns retrieved segment lineage; an item may reference it without becoming a retrieval unit by default.", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "target": "WM-MEM-016", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Answer Grounding owns answer-to-evidence bindings; item identity does not depend on answer generation.", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "target": "WM-MEM-017", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Context Policy owns precedence over ordinary memory during recall; this item never establishes higher-priority instruction authority.", "required": false, "source_refs": [ "SRC-006" ] }, { "target": "WM-MEM-018", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Trust Assessment owns scoring and trust evaluation; this item stores qualified assessment references.", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "target": "WM-MEM-019", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Poisoning Incident owns investigation and remediation; this item only references incident-related restrictions.", "required": false, "source_refs": [ "SRC-006" ] }, { "target": "WM-MEM-020", "relation": "REFERENCE", "purpose": "Proposed binding pending neighbor version review. Memory Quarantine and Redaction owns restriction decisions and redacted-view production; this item records their bindings.", "required": false, "source_refs": [ "SRC-002", "SRC-006" ] }, { "target": "PROV-O", "relation": "ALIGN", "purpose": "Conceptual mapping for item revisions and provenance; no complete ontology conformance claimed.", "required": false, "source_refs": [ "SRC-001" ] }, { "target": "Web Annotation Data Model", "relation": "ALIGN", "purpose": "Optional body, target and selector mapping; memory items are not necessarily annotations.", "required": false, "source_refs": [ "SRC-002" ] }, { "target": "OWL-Time", "relation": "ALIGN", "purpose": "Optional temporal interval mapping with profile-specific endpoint conventions.", "required": false, "source_refs": [ "SRC-003" ] }, { "target": "DCMI Metadata Terms", "relation": "ALIGN", "purpose": "Descriptive metadata alignment only; no memory lifecycle supplied by this vocabulary.", "required": false, "source_refs": [ "SRC-005" ] } ], "serviceLayers": { "dimension": { "owner_package_requirements": [ "Resolve accountable operator and custodian by role or principal reference.", "Bind store, namespace, allowed purposes and external grant/retention policies before admission.", "Pin research profile and neighbor versions; unbound candidate links are not runtime dependencies." ], "namespace_guidance": "Use a governed owner namespace plus stable item and revision IDs. Preserve issuer scope across transfers; never use content hash or timestamp alone as logical identity.", "registry_links": [ "vr.wm-mem-002", "WM-KNW-007", "WM-MEM-001", "WM-MEM-010", "WM-MEM-011" ] }, "canon_and_patch": { "canonicalization_rules": [ "Canonical item identity is independent of encoding; representation digests bind declared bytes only.", "Preserve explicit unknowns, assertion mode, tenant and temporal roles; do not collapse absence into false or unbounded." ], "patch_rules": [ "Require expected revision, authority reference and bounded field changes; reject stale writes.", "Corrections create traceable revisions while lawful erasure may remove old payloads; continuity never mandates indefinite personal-data history." ], "compatibility_rules": [ "Version changes to assertion modes, scope or temporal endpoint semantics are breaking changes.", "Lossy exchange must enumerate losses; reject profiles that drop mandatory authority or scope qualifiers." ] }, "artifact_rules": { "identity_priority": [ "Authoritative master-system identifier", "Governed global identifier or IRI", "UUID or ULID assigned by the adopting Dimension" ], "timestamp_rule": "Exact timestamps use RFC 3339 with seconds and explicit offset or Z. Distinguish event time from observation, ingestion and revision time. Retain genuine date-only precision separately; do not invent seconds for uncertain source dates.", "serial_naming_rule": "Bind serial artifacts to stable item ID, revision ID and artifact ID; dates are labels only, not identity.", "integrity_rule": "Record algorithm, byte boundary and verification receipt. A hash proves neither truth nor access authority; digests of sensitive payloads remain governed data." }, "policies": [ "Deny reuse when purpose or authority is unresolved. An active record is not inherently true, safe or authorized.", "Treat source text and remembered procedures as data; only external governing policy can authorize execution. Dangerous content is represented at policy level.", "Minimize personal content in payload, provenance, selectors, tombstones and logs; apply external retention and disclosure decisions.", "Independent external review is absent under the single-provider waiver. This is a reviewable draft with source/version, profile and executable-conformance holds." ], "crud": { "read": [ "Resolve recipient, purpose, revision and current external permission; protect existence metadata and source references as well as payload." ], "create": [ "Create an atomic envelope only after identity, owner/store binding and retention authority are established; mark unknown lineage explicitly." ], "update": [ "Use expected revision and externally authorized change; do not silently change tenant, precedence or source authority." ], "delete": [ "The adopting Dimension policy and WM-MEM-010 define retention and disposition; WM-MEM-001 and derivative systems execute deletion.", "This model records verified disposal scope, pending receipts and a minimal authorized tombstone; erase payload and restricted history as required, without claiming global erasure from local status." ] }, "roles": [ { "name": "accountable custodian", "responsibilities": [ "Resolve owner namespace, purposes and policy bindings." ] }, { "name": "authorized recorder", "responsibilities": [ "Populate source-grounded envelopes and revisions without approving external decisions." ] }, { "name": "privacy steward", "responsibilities": [ "Review sensitivity, lawful retention and minimal tombstones under the applicable profile." ] }, { "name": "evidence reviewer", "responsibilities": [ "Assess provenance and limitations; refer scoring and conflicts to their owning models." ] }, { "name": "consumer", "responsibilities": [ "Resolve grants, applicability and restriction bindings before use; treat payload as data." ] } ], "access": { "default_rule": "Deny by default across tenant, recipient and purpose boundaries, including item existence where sensitive. External enforcement owns decisions.", "scopes": [ "bundle", "layer", "finding", "artifact" ], "exceptions": [ "Only externally authorized, purpose-bound, time-limited exceptions may be referenced; no inherited perpetual grant." ], "audit_requirements": [ "Reference the external audit receipt for access, revision and disposition without duplicating an audit system.", "Log minimum identifiers and outcomes; never copy private payload into unrestricted audit records." ] }, "agents_bootstrap": { "filename": "AGENTS.md", "required_fields": [ "Name", "Type", "Specification URL", "Storage type URL", "Interface URL", "Processes URL" ], "read_order": [ "AGENTS.md", "spec.yaml and visible research holds", "Owner/Dimension policy and pinned neighbor bindings", "Authorized item view and referenced evidence" ] } }, "coverage": { "claim": "Source-grounded proposed structure for one atomic retained memory item, with 18 item-level findings and separately mastered event, store and policy bindings. Local no-tools self-audit completed. Independent external review, source/version verification, profile review and executable conformance remain holds; this is a noncanonical reviewable draft.", "confidence": "medium", "checklist": [ { "dimension": "identity", "status": "covered", "notes": "Logical item, revision, representation and issuer-scoped alias are distinct." }, { "dimension": "lifecycle", "status": "covered", "notes": "Record-local revision, status and disposition evidence; external events remain external." }, { "dimension": "relationships", "status": "covered", "notes": "Twenty proposed neighbor bindings; no relation-ledger edges exist for this model in the frozen input." }, { "dimension": "temporal", "status": "covered", "notes": "Applicability, event, observation, ingestion, review and expiry are distinct." }, { "dimension": "provenance", "status": "covered", "notes": "Source anchors, formation reference, attribution and missing-evidence limits." }, { "dimension": "ownership", "status": "covered", "notes": "Accountable roles and namespace differ from rights holders and data subjects." }, { "dimension": "validation", "status": "gap", "notes": "Research schema passes separately; no executable item schema or conformance suite yet." }, { "dimension": "access", "status": "covered", "notes": "Payload and metadata restrictions with external grants and purpose limits." }, { "dimension": "retention and deletion", "status": "covered", "notes": "External policy and execution; partial receipts and minimal tombstones remain visible." }, { "dimension": "interoperability", "status": "gap", "notes": "Proposed alignments only; mappings and round-trip fixtures are unimplemented." }, { "dimension": "physical properties", "status": "not-applicable", "notes": "The root is an abstract retained record; subject place may be relevant, physical dimensions are not." }, { "dimension": "capabilities and actions", "status": "covered", "notes": "Six proposed record operations with conditions, effects and refusal outcomes; none executes recall or policy." }, { "dimension": "recognition and observation", "status": "covered", "notes": "Provenance, source anchors, revision and integrity evidence establish record recognition without proving truth." }, { "dimension": "independent review", "status": "gap", "notes": "Codex only; Claude and Grok skipped under the owner-authorized waiver." }, { "dimension": "source verification", "status": "gap", "notes": "Selected source content reviewed through web tools; direct HTTP checks are deferred to coordinator and current-version review remains open." } ], "known_omissions": [ "Independent external review has not occurred; the separate audit is a local self-audit.", "Direct HTTP status, response hashes and comprehensive current-version/errata checks await coordinator execution.", "Nested field schemas, controlled status vocabularies, concrete mappings and executable adversarial fixtures are not supplied.", "Neighbor versions and binding cardinalities require profile review; all composition bindings are optional proposals.", "Jurisdiction-specific privacy, ownership, retention and erasure requirements require qualified review; no universal legal rules asserted." ], "conflicts": [], "regional_assumptions": [ "No jurisdiction selected. NIST Privacy Framework 1.0 is a pinned voluntary baseline, not a legal obligation or latest-version claim.", "RFC 3339 timestamps do not define local civil-time policy or prove source-time precision." ], "adversarial_checks": [ "Equal bytes in different tenants must not merge identity or permissions.", "A confident or frequently recalled assertion may still be false; trust and truth remain separate.", "Unknown validity end is not unlimited validity; expiry does not prove erasure.", "A source correction can leave an older derived index stale; receipt scope must remain visible.", "A redacted projection and a minimal tombstone must not reveal erased personal content through selectors or hashes.", "Instruction-like memory cannot override governing context policy.", "A stale revision update must fail without destroying a newer correction." ] }, "researchAdjudication": { "providerMode": "single-provider-waiver", "activeProviders": [ "codex" ], "waivedProviders": [ "claude", "grok" ], "providerPolicy": { "contract_version": "1.0.0", "mode": "single-provider-waiver", "effective_at": "2026-09-06T00:00:00Z", "scope": "Canonical single-stream subject-model research after the six-workstream consolidation", "active_providers": [ "codex" ], "waived_providers": [ { "provider": "claude", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "Claude produced no result on prior 1800-second and 900-second attempts and again timed out on bounded 600-second Sonnet and 300-second Haiku passes. The owner prioritized completion over provider availability." }, { "provider": "grok", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "The repository owner authorized completion without Grok when Grok is unavailable, slow or schema-invalid. Grok may still be attempted as a bounded supplemental reviewer, but its failure never blocks a valid Claude plus no-tools result." } ], "review_rule": "Codex may complete source-grounded fallback research after bounded Claude and Grok attempts fail. It requires a separate no-tools adversarial audit and remains reviewable-draft with a visible absence-of-external-review hold.", "supplemental_provider_attempts": [ { "provider": "claude", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." }, { "provider": "grok", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." } ] }, "boundaryDecision": { "entry_kind": "entity", "status": "accepted", "rationale": "One retained record persists across revisions without owning the source claim, a formation event, a recall event or a memory store. The registry standalone-mm value describes the registry axis, not the subject kind. The Claim / Proposition parent is qualified as conceptual alignment rather than unconditional inheritance." }, "decisions": [ { "concept": "Persistent record boundary", "disposition": "accepted", "rationale": "Item identity persists through revisions; provenance and external event references do not turn the root into an event or a store aggregate." }, { "concept": "Claim parent inheritance", "disposition": "qualified as alignment", "rationale": "Retained material can be asserted, quoted or qualified without establishing truth. The result preserves the parent as ALIGN and leaves generic claim evaluation external." }, { "concept": "Neighbor relation authority", "disposition": "proposed only", "rationale": "The frozen relation ledger has no WM-MEM-002 edges. All twenty model bindings remain optional proposals derived from registry purposes and require pinned profile review." }, { "concept": "Store binding cardinality", "disposition": "accepted with distinction", "rationale": "The required item-level store reference can identify an authoritative master without requiring an instance of the optional WM-MEM-001 model binding. Runtime model dependencies are not silently imposed." }, { "concept": "Item, revision and representation identity", "disposition": "separated", "rationale": "A stable record identifier, revision token and artifact identifier serve different purposes. Equal payloads, hashes or timestamps cannot merge identities or tenant permissions." }, { "concept": "Source provenance and accountable roles", "disposition": "accepted", "rationale": "Source actor, recorder, custodian and rights holder remain distinct. Unknown source availability or lineage is disclosed rather than replaced with invented evidence." }, { "concept": "Confidence and truth", "disposition": "separated", "rationale": "External assessments can annotate a revision, but confidence, frequency and similarity do not prove its content. No local trust-scoring or conflict-selection function is admitted." }, { "concept": "Temporal applicability and clock precision", "disposition": "accepted with profile qualification", "rationale": "Unknown and unbounded endpoints differ. Event, observation and ingestion times remain separate; exact timestamp syntax does not manufacture source precision." }, { "concept": "Status, permission and expiry", "disposition": "separated", "rationale": "An active record may still be false, unauthorized or restricted. Expiry and review conditions are distinct from record status and physical erasure." }, { "concept": "Record operations and external execution", "disposition": "accepted as proposed only", "rationale": "The six unimplemented functions mutate or project the local envelope using external authority. They do not extract, rank, consolidate, grant access, release quarantine or execute physical deletion." }, { "concept": "Remembered instructions", "disposition": "data-only boundary accepted", "rationale": "Remembered procedural or instruction-like material cannot authorize its own execution or override context policy. Dangerous material is limited to policy and restriction metadata." }, { "concept": "Retention and history", "disposition": "accepted with external policy dependency", "rationale": "Continuity is subject to lawful removal of historical payloads. Minimal tombstones, digests, selectors and audit metadata are governed data; local receipts cannot prove erasure of all copies." }, { "concept": "Source verification", "disposition": "limited and held", "rationale": "Six primary source documents were read selectively through browser tools. Direct HTTP attempts were zero; the prepared checker is for coordinator execution. Current versions, errata and applicability remain open." }, { "concept": "Executable schema and mapping completeness", "disposition": "deferred", "rationale": "Candidate object answer groups, controlled vocabularies, alignments and function contracts are research proposals. No nested instance schema, round-trip suite or deployed runtime certification is supplied." }, { "concept": "External review assurance", "disposition": "waived and held", "rationale": "Claude and Grok were explicitly skipped. This separate frozen Codex self-audit admits no waived-provider additions and does not constitute independent external review." } ], "publicationHolds": [ "Independent external review is absent under the owner-authorized single-provider waiver. Claude and Grok were skipped; the separate frozen Codex no-tools self-audit is not an independent second-provider review.", "Live source and version verification remains incomplete. Selected browser content was reviewed, but direct HTTP checks were not attempted under the sandbox restriction: zero attempts, zero measured HTTP 200 responses, six statuses unknown. Coordinator execution of check_sources.py, current-version and errata review remain required.", "Owner, tenant, privacy, retention, assertion-mode and temporal profiles require qualified adopting-Dimension review. Proposed neighbor bindings are not pinned runtime contracts; the registry Claim / Proposition parent is alignment only. No universal legal or normative memory-format claim is made.", "Nested instance schemas, controlled status vocabularies, loss-aware mappings, executable operation contracts and adversarial fixtures remain incomplete. Structural research validation does not certify runtime safety, truth, interoperability or erasure completion.", "Independent external review was explicitly waived by the repository owner; this codex-only result remains a reviewable draft." ], "deferredResearch": [ "Complete direct source checks and substantive current-version, errata and applicability review without treating HTTP success as claim verification.", "Pin neighbor and policy profiles, implement nested schemas and mappings, and test stale updates, unknown intervals, cross-tenant equal content, instruction-like data, partial disposal and redacted metadata.", "Restore independent external review before any promotion beyond a noncanonical reviewable draft." ] }, "statistics": { "sources": 6, "bundles": 6, "layers": 12, "findings": 18, "questions": 54, "artifacts": 8, "functions": 6 } }