# Vercy AI instruction - YAML 1.2 (JSON-compatible) { "vercy": "1.0-draft", "publication": { "status": "published", "adjudicationStatus": "reviewable-draft", "publishableCanonical": false, "generatedAt": "2026-10-21T17:13:21Z", "synthesisSha256": "49bfb3acdac0bcce71f855f78a3e0eced6642d7e6f25f00e8cd5b56a743ddc54", "providerMode": "single-provider-waiver", "providers": [ "Codex" ], "waivedProviders": [ "Claude", "Grok" ] }, "metaModel": { "id": "WM-MEM-004", "registryId": "vr.wm-mem-004", "name": "Entity Profile Memory", "version": "0.1.0", "previousVersions": [], "entryKind": "entity", "family": "World Models", "category": "Information and virtual systems", "industry": [ "Cross-industry" ], "domain": [ "INF.MEM.PRF" ], "tags": [ "entity", "profile", "memory", "inf.mem.prf" ], "status": "published" }, "canonicalUrl": "https://ver.cy/models/wm-mem-004-entity-profile-memory/", "sourceUrl": "https://github.com/ver-cy/world-models/tree/feat/mega-model-registry/research/runs/wm-mem-004", "model": { "registry_id": "vr.wm-mem-004", "model_id": "WM-MEM-004", "name": "Entity Profile Memory", "entry_kind": "entity", "purpose": "Describe a durable, purpose-scoped record of what an agent remembers about one entity while retaining evidence, context, uncertainty and controls on use.", "scope_statement": "One persistent profile record in an adopting owner namespace, bound to one subject and purpose, with separately identified assertion revisions and derived views. Remembered assertions are not automatically true, current, authoritative or permitted for reuse.", "in_scope": [ "Profile-specific subject binding and assertion membership", "Typed assertions, preferences, context, evidence and qualified assessments", "Profile applicability, correction impact, recall restrictions and disposition evidence" ], "out_of_scope": [ "Authoritative subject identity resolution, identity proofing and account provisioning", "Generic memory-store lifecycle, storage engines, retrieval ranking algorithms and model training or unlearning", "Episodic narratives, general knowledge ontologies and operational relationship masters", "Authorization enforcement, legal-basis determination, external dispatch, deletion execution and safety-critical decisions" ], "boundary_notes": [ { "neighbor": "WM-MEM-002 Memory Item", "distinction": "Registry parent candidate describes an atomic record. This proposal describes a scoped profile with multiple assertion references, so structural inheritance is not ratified. ALIGN only pending versioned reconciliation; generic item lifecycle stays external.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "Subject master and identity resolver", "distinction": "The profile records a reviewed subject reference; names, embeddings and recalled preferences cannot establish identity or execute merges.", "source_refs": [ "SRC-002", "SRC-003" ] }, { "neighbor": "Episodic and general knowledge memory", "distinction": "Episodes and reusable knowledge are evidence references. The profile retains only entity-specific assertions and does not duplicate their full schemas or lifecycle.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "Authorization, retention and audit services", "distinction": "External services own policy decisions, enforcement, deletion and audit storage. This model binds and records those decisions for profile-specific use.", "source_refs": [ "SRC-005", "SRC-008" ] } ] }, "sources": [ { "id": "SRC-001", "title": "PROV-O: The PROV Ontology", "organization": "W3C", "url": "https://www.w3.org/TR/2013/REC-prov-o-20130430/", "version_or_date": "Recommendation, 2013-04-30", "source_type": "ontology", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:11:50Z", "relevance": "Sections 3.1-3.3: attribution, derivation and revision inform evidence references. Provenance is not a truth certificate." }, { "id": "SRC-002", "title": "RDF 1.1 Concepts and Abstract Syntax", "organization": "W3C", "url": "https://www.w3.org/TR/2014/REC-rdf11-concepts-20140225/", "version_or_date": "Recommendation, 2014-02-25", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:11:50Z", "relevance": "Sections 1.2, 1.6-1.7, 3-5 inform typed statements, subject references and language/datatype preservation. No storage format is mandated." }, { "id": "SRC-003", "title": "System for Cross-domain Identity Management: Core Schema", "organization": "IETF", "url": "https://www.rfc-editor.org/rfc/rfc7643", "version_or_date": "RFC 7643, September 2015; later updates not incorporated", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:11:50Z", "relevance": "Sections 2.2-2.5 and 3.1 inform stable resource identifiers and qualified attributes. User schema is an optional mapping, not an all-entity ontology or identity proof." }, { "id": "SRC-004", "title": "Data on the Web Best Practices: Data Quality Vocabulary", "organization": "W3C", "url": "https://www.w3.org/TR/2016/NOTE-vocab-dqv-20161215/", "version_or_date": "Working Group Note, 2016-12-15", "source_type": "ontology", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T17:11:50Z", "relevance": "Sections 1, 4 and 6 inform metric-qualified quality annotations. Adapting dataset quality to profile assertions is a local design proposal, not a specified confidence algorithm." }, { "id": "SRC-005", "title": "NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management, Version 1.0", "organization": "NIST", "url": "https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.01162020.pdf", "version_or_date": "Version 1.0, 2020-01-16; deliberately pinned baseline", "source_type": "public-authority", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T17:11:50Z", "relevance": "Control-P and Communicate-P inform review, alteration, deletion, permissions and minimal audit data. Voluntary risk guidance does not establish a legal basis or legal compliance." }, { "id": "SRC-006", "title": "Shapes Constraint Language (SHACL)", "organization": "W3C", "url": "https://www.w3.org/TR/2017/REC-shacl-20170720/", "version_or_date": "Recommendation, 2017-07-20", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:11:50Z", "relevance": "Sections 2-4 inform shape constraints and versioned validation reports. A valid shape result cannot establish the truth of remembered content." }, { "id": "SRC-007", "title": "Date and Time on the Internet: Timestamps", "organization": "IETF", "url": "https://www.rfc-editor.org/rfc/rfc3339", "version_or_date": "RFC 3339, July 2002; RFC 9557 update not incorporated", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:11:50Z", "relevance": "Section 5.6 supplies instant syntax with seconds and explicit offset. Validity intervals, freshness and uncertain dates are local profile semantics." }, { "id": "SRC-008", "title": "LLM Prompt Injection Prevention Cheat Sheet", "organization": "OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/LLM_Prompt_Injection_Prevention_Cheat_Sheet.html", "version_or_date": "Living guidance accessed 2026-10-21; revision unpinned", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T17:11:50Z", "relevance": "Agent-specific defenses, structured separation and least privilege inform policy-level handling of untrusted recalled content. No exploit instructions or assurance of complete prevention are included." } ], "structure": { "bundles": [ { "id": "bundle-identity-scope", "name": "Identity and profile scope", "description": "Keep subject identity, memory identity and profile membership distinct.", "rationale": "Proposed profile-specific design informed by the cited open sources; no source mandates this hierarchy.", "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ], "layers": [ { "id": "layer-subject-binding", "name": "Subject binding", "description": "One profile record refers to one resolved subject within an owner namespace and purpose scope. The subject master and the memory record have different identifiers; a shared name never establishes sameness.", "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ], "findings": [ { "id": "finding-subject-binding", "name": "Subject binding", "description": "One profile record refers to one resolved subject within an owner namespace and purpose scope. The subject master and the memory record have different identifiers; a shared name never establishes sameness.", "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ], "questions": [ { "id": "finding-subject-binding-q1", "text": "Which subject master reference and profile record identifier distinguish this memory from the entity it describes?", "kind": "identity", "answer_data": [ "subject_reference", "profile_id", "master_namespace" ] }, { "id": "finding-subject-binding-q2", "text": "Which entity class and permitted profile purpose constrain the attributes retained here?", "kind": "classification", "answer_data": [ "entity_class", "purpose_code", "schema_profile" ] }, { "id": "finding-subject-binding-q3", "text": "What reviewed evidence connects aliases to this subject without merging namesakes or crossing tenant boundaries?", "kind": "relationship", "answer_data": [ "alias_references", "binding_evidence", "binding_status" ] }, { "id": "finding-subject-binding-q4", "text": "How is unresolved or disputed subject binding quarantined until an authorized resolver responds?", "kind": "exception", "answer_data": [ "quarantine_state", "resolver_role", "resolution_reference" ] } ], "data_elements": [ { "id": "finding-subject-binding-binding", "name": "Subject binding", "description": "Profile ID, subject master reference, class, namespace and reviewed binding status; never identify a person solely by a display name.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] }, { "id": "finding-subject-binding-aliases", "name": "Alias evidence references", "description": "Scoped aliases with issuer and evidence links; no automatic identity equivalence.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] }, { "id": "finding-subject-binding-purpose", "name": "Profile purpose", "description": "Declared purpose and owner policy reference limiting collection and use.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] } ], "artifacts": [ { "id": "artifact-subject-binding", "name": "Subject binding record", "description": "Versioned evidence for subject binding. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-profile-boundary", "name": "Profile boundary and membership", "description": "A profile is a persistent information entity whose assertions may change. A view or summary selects assertion revisions; it does not acquire authority over the underlying entity, episodes or generic memory lifecycle.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ], "findings": [ { "id": "finding-profile-boundary", "name": "Profile boundary and membership", "description": "A profile is a persistent information entity whose assertions may change. A view or summary selects assertion revisions; it does not acquire authority over the underlying entity, episodes or generic memory lifecycle.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ], "questions": [ { "id": "finding-profile-boundary-q1", "text": "What separates this profile from an episodic record, a general knowledge item and the authoritative subject record?", "kind": "definition", "answer_data": [ "profile_boundary", "delegated_domains" ] }, { "id": "finding-profile-boundary-q2", "text": "Which assertion references and revision pins belong to the current profile view?", "kind": "composition", "answer_data": [ "assertion_membership", "revision_pins", "view_id" ] }, { "id": "finding-profile-boundary-q3", "text": "Which accountable role maintains this profile and which external masters retain subject and memory-item authority?", "kind": "ownership", "answer_data": [ "profile_steward", "master_bindings", "responsibility_map" ] }, { "id": "finding-profile-boundary-q4", "text": "What prevents membership changes from expanding the profile purpose or inheriting broader source permissions?", "kind": "constraint", "answer_data": [ "membership_policy", "purpose_check", "access_intersection" ] } ], "data_elements": [ { "id": "finding-profile-boundary-membership", "name": "Assertion membership", "description": "Assertion identifiers and revisions selected for a profile; an empty profile is permitted with an explicit no-assertions state.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "finding-profile-boundary-boundary", "name": "Boundary declaration", "description": "Purpose, delegated domains and candidate Memory Item mapping.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] }, { "id": "finding-profile-boundary-owner", "name": "Accountable steward reference", "description": "Role reference in the adopting Dimension; stewardship is not ownership of the subject.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] } ], "artifacts": [ { "id": "artifact-profile-boundary", "name": "Profile membership manifest", "description": "Versioned evidence for profile boundary and membership. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-content-context", "name": "Assertion content and context", "description": "Retain typed assertions and context without promoting preferences to authority.", "rationale": "Proposed profile-specific design informed by the cited open sources; no source mandates this hierarchy.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-008" ], "layers": [ { "id": "layer-assertion-semantics", "name": "Typed profile assertion", "description": "Represent each remembered proposition with a predicate, typed value, context and assertion class. Distinguish self-report, observation, imported assertion and inference. Unknown, withheld, absent and explicitly false are different states.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ], "findings": [ { "id": "finding-assertion-semantics", "name": "Typed profile assertion", "description": "Represent each remembered proposition with a predicate, typed value, context and assertion class. Distinguish self-report, observation, imported assertion and inference. Unknown, withheld, absent and explicitly false are different states.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ], "questions": [ { "id": "finding-assertion-semantics-q1", "text": "What predicate, typed value and context express the remembered proposition without replacing it with an ambiguous summary?", "kind": "definition", "answer_data": [ "predicate_ref", "value", "value_type", "context_ref" ] }, { "id": "finding-assertion-semantics-q2", "text": "Is the assertion self-reported, observed, imported or inferred, and how is that class evidenced?", "kind": "classification", "answer_data": [ "assertion_class", "classification_evidence" ] }, { "id": "finding-assertion-semantics-q3", "text": "Does a missing value mean unknown, uncollected, withheld, inapplicable or an explicit negative assertion?", "kind": "state", "answer_data": [ "value_state", "negative_assertion_basis" ] }, { "id": "finding-assertion-semantics-q4", "text": "For a quantitative property, which unit, method, conditions and uncertainty accompany the value?", "kind": "measurement", "answer_data": [ "unit_ref", "method_ref", "observation_conditions", "uncertainty" ] } ], "data_elements": [ { "id": "finding-assertion-semantics-proposition", "name": "Typed proposition", "description": "Predicate reference, typed value or explicit value state, language where applicable and context; mandatory within each assertion.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] }, { "id": "finding-assertion-semantics-class", "name": "Assertion class", "description": "Self-report, observation, import or inference with evidence.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] }, { "id": "finding-assertion-semantics-measurement", "name": "Measurement qualifiers", "description": "Required when a value represents a measured quantity; includes units and uncertainty rather than implying the profile itself is physical.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] } ], "artifacts": [ { "id": "artifact-assertion-semantics", "name": "Profile assertion record", "description": "Versioned evidence for typed profile assertion. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-contextual-preference", "name": "Preferences and contextual applicability", "description": "Retained preferences are qualified statements, not instructions or permanent personality facts. A role, relationship or preference can hold only in a stated setting and must not be generalized to unrelated tasks.", "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ], "findings": [ { "id": "finding-contextual-preference", "name": "Preferences and contextual applicability", "description": "Retained preferences are qualified statements, not instructions or permanent personality facts. A role, relationship or preference can hold only in a stated setting and must not be generalized to unrelated tasks.", "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ], "questions": [ { "id": "finding-contextual-preference-q1", "text": "Which preference was explicitly stated and which was inferred from behavior?", "kind": "requirement", "answer_data": [ "preference_origin", "source_assertion_ref" ] }, { "id": "finding-contextual-preference-q2", "text": "What location or setting limits this assertion and why is retaining that context necessary?", "kind": "spatial", "answer_data": [ "context_scope", "location_precision", "necessity_basis" ] }, { "id": "finding-contextual-preference-q3", "text": "What effective period or triggering condition limits the preference or role?", "kind": "temporal", "answer_data": [ "validity_interval", "applicability_condition" ] }, { "id": "finding-contextual-preference-q4", "text": "Which current task instruction or governing policy takes precedence over a remembered preference?", "kind": "authority", "answer_data": [ "instruction_reference", "policy_reference", "precedence_decision" ] } ], "data_elements": [ { "id": "finding-contextual-preference-scope", "name": "Applicability scope", "description": "Purpose and contextual limits; location is optional and minimized.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] }, { "id": "finding-contextual-preference-preference", "name": "Preference basis", "description": "Stated versus inferred origin, supporting assertion and applicable setting.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] }, { "id": "finding-contextual-preference-precedence", "name": "Precedence policy reference", "description": "External task and authorization policy; stored text cannot grant tool permission.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] } ], "artifacts": [ { "id": "artifact-contextual-preference", "name": "Context applicability note", "description": "Versioned evidence for preferences and contextual applicability. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-002", "SRC-005", "SRC-008" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-evidence-quality", "name": "Evidence and qualified quality", "description": "Make lineage, disputes and support limitations inspectable.", "rationale": "Proposed profile-specific design informed by the cited open sources; no source mandates this hierarchy.", "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ], "layers": [ { "id": "layer-evidence-lineage", "name": "Evidence and derivation lineage", "description": "Keep origin, attribution, derivation and review references per assertion. Summaries and repeated imports of one origin do not become independent corroboration. Missing or inaccessible evidence produces a visible limitation.", "source_refs": [ "SRC-001", "SRC-004" ], "findings": [ { "id": "finding-evidence-lineage", "name": "Evidence and derivation lineage", "description": "Keep origin, attribution, derivation and review references per assertion. Summaries and repeated imports of one origin do not become independent corroboration. Missing or inaccessible evidence produces a visible limitation.", "source_refs": [ "SRC-001", "SRC-004" ], "questions": [ { "id": "finding-evidence-lineage-q1", "text": "Which source record, asserting actor and capture activity support this assertion revision?", "kind": "provenance", "answer_data": [ "source_ref", "asserting_actor", "capture_activity_ref" ] }, { "id": "finding-evidence-lineage-q2", "text": "What evidence locator can an authorized reviewer inspect without copying unnecessary source content?", "kind": "evidence", "answer_data": [ "evidence_locator", "access_policy_ref", "minimal_excerpt_basis" ] }, { "id": "finding-evidence-lineage-q3", "text": "Which apparently corroborating records derive from the same origin and must not be counted independently?", "kind": "quality", "answer_data": [ "origin_groups", "derivation_links", "corroboration_basis" ] }, { "id": "finding-evidence-lineage-q4", "text": "How is broken, withdrawn or inaccessible source evidence reflected in downstream profile views?", "kind": "exception", "answer_data": [ "source_availability_state", "affected_views", "review_request" ] } ], "data_elements": [ { "id": "finding-evidence-lineage-lineage", "name": "Lineage references", "description": "Origin and derivation references with capture activity and asserting actor; unknown origin must be explicit and blocks verified status.", "value_kind": "collection", "cardinality": "1..n", "required": true, "source_refs": [ "SRC-001", "SRC-004" ] }, { "id": "finding-evidence-lineage-evidence", "name": "Evidence locator", "description": "Authorized source locator, revision and optional integrity metadata.", "value_kind": "reference", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-004" ] }, { "id": "finding-evidence-lineage-availability", "name": "Evidence availability", "description": "Available, restricted, unavailable, withdrawn or unknown; restricted content remains protected.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-004" ] } ], "artifacts": [ { "id": "artifact-evidence-lineage", "name": "Assertion provenance record", "description": "Versioned evidence for evidence and derivation lineage. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-004" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-quality-conflict", "name": "Quality and disputed assertions", "description": "Assess support and fitness for a stated use separately from structural validity and retrieval score. Preserve incompatible claims and a review disposition; neither majority repetition nor recency alone settles a conflict.", "source_refs": [ "SRC-004", "SRC-006", "SRC-001" ], "findings": [ { "id": "finding-quality-conflict", "name": "Quality and disputed assertions", "description": "Assess support and fitness for a stated use separately from structural validity and retrieval score. Preserve incompatible claims and a review disposition; neither majority repetition nor recency alone settles a conflict.", "source_refs": [ "SRC-004", "SRC-006", "SRC-001" ], "questions": [ { "id": "finding-quality-conflict-q1", "text": "Which metric, assessor and use context make the recorded confidence interpretable?", "kind": "quality", "answer_data": [ "metric_ref", "assessment_method", "assessor_ref", "use_context" ] }, { "id": "finding-quality-conflict-q2", "text": "What validation report distinguishes malformed data from a well-formed but unsupported assertion?", "kind": "validation", "answer_data": [ "shape_report_ref", "evidence_status", "truth_status" ] }, { "id": "finding-quality-conflict-q3", "text": "Which conflicting assertions remain unresolved and what evidence supports any preferred view?", "kind": "decision", "answer_data": [ "conflict_set", "disposition", "rationale_ref" ] }, { "id": "finding-quality-conflict-q4", "text": "When must a consumer abstain or request review instead of using a low-support profile assertion?", "kind": "exception", "answer_data": [ "abstention_rule", "review_role", "eligibility_status" ] } ], "data_elements": [ { "id": "finding-quality-conflict-assessment", "name": "Quality assessment", "description": "Named metric, value, method, assessor, time and use; no uncalibrated probability claim.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-004", "SRC-006", "SRC-001" ] }, { "id": "finding-quality-conflict-conflicts", "name": "Conflict references", "description": "Incompatible assertion IDs and preserved review dispositions.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-004", "SRC-006", "SRC-001" ] }, { "id": "finding-quality-conflict-eligibility", "name": "Use eligibility", "description": "Eligible, limited, withheld or review-required for a specified use, independent of retrieval ranking.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-004", "SRC-006", "SRC-001" ] } ], "artifacts": [ { "id": "artifact-quality-conflict", "name": "Quality and conflict assessment", "description": "Versioned evidence for quality and disputed assertions. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-004", "SRC-006", "SRC-001" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-time-continuity", "name": "Time and correction continuity", "description": "Track applicability, freshness and correction impact across views.", "rationale": "Proposed profile-specific design informed by the cited open sources; no source mandates this hierarchy.", "source_refs": [ "SRC-001", "SRC-005", "SRC-007" ], "layers": [ { "id": "layer-temporal-freshness", "name": "Validity and freshness", "description": "Record when a claim applies separately from when it was observed, captured or reviewed. A retrieval does not refresh the underlying evidence. Interval conventions and staleness policies are adopting-profile choices.", "source_refs": [ "SRC-007", "SRC-001", "SRC-004" ], "findings": [ { "id": "finding-temporal-freshness", "name": "Validity and freshness", "description": "Record when a claim applies separately from when it was observed, captured or reviewed. A retrieval does not refresh the underlying evidence. Interval conventions and staleness policies are adopting-profile choices.", "source_refs": [ "SRC-007", "SRC-001", "SRC-004" ], "questions": [ { "id": "finding-temporal-freshness-q1", "text": "What effective interval and boundary convention describe when the assertion applies?", "kind": "temporal", "answer_data": [ "valid_from", "valid_to", "interval_convention", "precision" ] }, { "id": "finding-temporal-freshness-q2", "text": "Which observation, ingestion and review instants are known and which remain uncertain?", "kind": "provenance", "answer_data": [ "observed_at", "ingested_at", "reviewed_at", "uncertainty_state" ] }, { "id": "finding-temporal-freshness-q3", "text": "Which predicate-specific freshness rule requires a new check before this assertion is reused?", "kind": "requirement", "answer_data": [ "freshness_policy", "review_due", "evaluation_time" ] }, { "id": "finding-temporal-freshness-q4", "text": "What changes when an assertion expires or becomes stale without treating it as proven false?", "kind": "state", "answer_data": [ "stale_state", "historical_use_rule", "refresh_request" ] } ], "data_elements": [ { "id": "finding-temporal-freshness-validity", "name": "Effective interval", "description": "Known boundaries or explicit unknown values, precision and endpoint convention; no invented midnight for a date-only fact.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-001", "SRC-004" ] }, { "id": "finding-temporal-freshness-times", "name": "Observation and capture instants", "description": "Known observation, ingestion and review instants with uncertainty; repeated recall is not evidence renewal.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-001", "SRC-004" ] }, { "id": "finding-temporal-freshness-freshness", "name": "Freshness policy reference", "description": "Predicate and purpose-specific policy; no universal expiry period.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-007", "SRC-001", "SRC-004" ] } ], "artifacts": [ { "id": "artifact-temporal-freshness", "name": "Temporal qualification record", "description": "Versioned evidence for validity and freshness. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-007", "SRC-001", "SRC-004" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-correction-continuity", "name": "Correction and subject rebinding", "description": "Corrections identify affected assertions and dependent views. Revision links preserve accountability only as retention allows. A subject split or erroneous merge requires authorized master resolution before affected profile material becomes eligible again.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ], "findings": [ { "id": "finding-correction-continuity", "name": "Correction and subject rebinding", "description": "Corrections identify affected assertions and dependent views. Revision links preserve accountability only as retention allows. A subject split or erroneous merge requires authorized master resolution before affected profile material becomes eligible again.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ], "questions": [ { "id": "finding-correction-continuity-q1", "text": "Which assertion revision is superseded, retracted or disputed by the correction request?", "kind": "lifecycle", "answer_data": [ "prior_revision", "correction_type", "replacement_ref" ] }, { "id": "finding-correction-continuity-q2", "text": "Who can approve the correction or subject rebinding and what review evidence is required?", "kind": "authority", "answer_data": [ "reviewer_role", "authority_ref", "resolution_evidence" ] }, { "id": "finding-correction-continuity-q3", "text": "Which summaries, exports and derived assertions depend on the affected record?", "kind": "relationship", "answer_data": [ "dependency_refs", "recipient_refs", "invalidation_scope" ] }, { "id": "finding-correction-continuity-q4", "text": "How is correction propagation tracked when an external recipient cannot yet confirm invalidation?", "kind": "process", "answer_data": [ "propagation_requests", "acknowledgments", "unresolved_recipients" ] } ], "data_elements": [ { "id": "finding-correction-continuity-correction", "name": "Correction disposition", "description": "Affected revision, reason, approver and replacement or retraction reference; required for each correction event.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "finding-correction-continuity-rebind", "name": "Master resolution reference", "description": "Reviewed master decision for split, merge reversal or rebinding; this model does not execute identity resolution.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "finding-correction-continuity-dependencies", "name": "Affected dependency references", "description": "Derived views and recipient acknowledgments, with unknown dependencies explicitly reported.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] } ], "artifacts": [ { "id": "artifact-correction-continuity", "name": "Correction impact record", "description": "Versioned evidence for correction and subject rebinding. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-governed-use", "name": "Governed collection and recall", "description": "Bind use to purpose, access and untrusted-data policies.", "rationale": "Proposed profile-specific design informed by the cited open sources; no source mandates this hierarchy.", "source_refs": [ "SRC-005", "SRC-008" ], "layers": [ { "id": "layer-purpose-access", "name": "Purpose, sensitivity and access", "description": "Record the permitted processing purpose, sensitivity and external authorization policy at assertion granularity. A fact being available publicly or already stored does not authorize every reuse. Third-party and sensitive attributes need qualified profile review.", "source_refs": [ "SRC-005", "SRC-008" ], "findings": [ { "id": "finding-purpose-access", "name": "Purpose, sensitivity and access", "description": "Record the permitted processing purpose, sensitivity and external authorization policy at assertion granularity. A fact being available publicly or already stored does not authorize every reuse. Third-party and sensitive attributes need qualified profile review.", "source_refs": [ "SRC-005", "SRC-008" ], "questions": [ { "id": "finding-purpose-access-q1", "text": "What necessity and sensitivity assessment justifies retaining this attribute for the declared purpose?", "kind": "privacy", "answer_data": [ "necessity_assessment", "sensitivity_class", "minimized_representation" ] }, { "id": "finding-purpose-access-q2", "text": "Which policy basis permits this collection and use, and what is the scope of any recorded consent?", "kind": "authority", "answer_data": [ "processing_basis_ref", "consent_scope_ref", "jurisdiction_profile" ] }, { "id": "finding-purpose-access-q3", "text": "Which caller, tenant, purpose and field-level restrictions govern the requested profile view?", "kind": "access", "answer_data": [ "caller_ref", "tenant_ref", "permitted_fields", "policy_decision_ref" ] }, { "id": "finding-purpose-access-q4", "text": "How are revoked permission, third-party data and exceptional access handled without exposing restricted assertions?", "kind": "exception", "answer_data": [ "revocation_state", "third_party_policy", "exception_approval" ] } ], "data_elements": [ { "id": "finding-purpose-access-controls", "name": "Processing controls", "description": "Purpose, basis reference, sensitivity and recipient constraints; absence means ineligible for release.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-008" ] }, { "id": "finding-purpose-access-consent", "name": "Consent reference", "description": "Where applicable, scope, revision and withdrawal state; consent is not presumed or universal.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005", "SRC-008" ] }, { "id": "finding-purpose-access-authorization", "name": "Authorization decision reference", "description": "Current external decision tied to caller, action and view; the model is not an authorization engine.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005", "SRC-008" ] } ], "artifacts": [ { "id": "artifact-purpose-access", "name": "Profile use policy binding", "description": "Versioned evidence for purpose, sensitivity and access. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-005", "SRC-008" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-retrieval-integrity", "name": "Controlled recall and untrusted content", "description": "Recall yields a bounded view of eligible assertion revisions with evidence and uncertainty. Stored text remains data, including purported instructions. Retrieval similarity is not truth, permission or a reason to expand collection.", "source_refs": [ "SRC-008", "SRC-005", "SRC-004" ], "findings": [ { "id": "finding-retrieval-integrity", "name": "Controlled recall and untrusted content", "description": "Recall yields a bounded view of eligible assertion revisions with evidence and uncertainty. Stored text remains data, including purported instructions. Retrieval similarity is not truth, permission or a reason to expand collection.", "source_refs": [ "SRC-008", "SRC-005", "SRC-004" ], "questions": [ { "id": "finding-retrieval-integrity-q1", "text": "How is remembered content kept separate from instructions and denied authority to change tool permissions?", "kind": "security", "answer_data": [ "data_instruction_boundary", "enforcement_policy_ref" ] }, { "id": "finding-retrieval-integrity-q2", "text": "Which authorized purpose and assertion filters determine the recall view before it reaches a consumer?", "kind": "process", "answer_data": [ "request_purpose", "filter_policy", "eligible_revision_refs" ] }, { "id": "finding-retrieval-integrity-q3", "text": "Which missing, stale or conflicting evidence must accompany the recalled claims?", "kind": "quality", "answer_data": [ "limitations", "omitted_claim_reasons", "uncertainty_annotations" ] }, { "id": "finding-retrieval-integrity-q4", "text": "How does the consumer avoid revealing restricted existence, values or provenance through summaries and refusal messages?", "kind": "access", "answer_data": [ "disclosure_policy", "redaction_rules", "recipient_view" ] } ], "data_elements": [ { "id": "finding-retrieval-integrity-view", "name": "Recall view manifest", "description": "Purpose, recipient, eligible revisions, policy revision and output limitations.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-008", "SRC-005", "SRC-004" ] }, { "id": "finding-retrieval-integrity-trust", "name": "Content trust classification", "description": "Untrusted data by default; recall never upgrades stored content into authority.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-008", "SRC-005", "SRC-004" ] }, { "id": "finding-retrieval-integrity-trace", "name": "Minimal recall trace", "description": "External audit reference without unnecessary sensitive payload; absence must not be misreported as an audited use.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-008", "SRC-005", "SRC-004" ] } ], "artifacts": [ { "id": "artifact-retrieval-integrity", "name": "Bounded recall manifest", "description": "Versioned evidence for controlled recall and untrusted content. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-008", "SRC-005", "SRC-004" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-disposition-mapping", "name": "Disposition and interoperability", "description": "Track disposal and mapping limitations without claiming runtime enforcement.", "rationale": "Proposed profile-specific design informed by the cited open sources; no source mandates this hierarchy.", "source_refs": [ "SRC-002", "SRC-003", "SRC-005", "SRC-006" ], "layers": [ { "id": "layer-retention-disposal", "name": "Retention and disposition evidence", "description": "Durable means retained across interactions under policy, not retained forever. Disposition covers payloads and dependent projections. Deleting local records cannot prove erasure from external recipients or model parameters.", "source_refs": [ "SRC-005", "SRC-001" ], "findings": [ { "id": "finding-retention-disposal", "name": "Retention and disposition evidence", "description": "Durable means retained across interactions under policy, not retained forever. Disposition covers payloads and dependent projections. Deleting local records cannot prove erasure from external recipients or model parameters.", "source_refs": [ "SRC-005", "SRC-001" ], "questions": [ { "id": "finding-retention-disposal-q1", "text": "Which purpose-specific schedule or hold determines the next disposition review?", "kind": "retention", "answer_data": [ "retention_policy", "review_trigger", "hold_reference" ] }, { "id": "finding-retention-disposal-q2", "text": "Which caches, summaries, indexes, exports and backups may still carry derived profile information?", "kind": "composition", "answer_data": [ "copy_inventory", "derivation_refs", "backup_policy" ] }, { "id": "finding-retention-disposal-q3", "text": "Which authorized custodian executes disposal and what completion evidence is returned?", "kind": "process", "answer_data": [ "custodian_ref", "disposal_request", "completion_evidence" ] }, { "id": "finding-retention-disposal-q4", "text": "What minimal lawful tombstone remains and how are incomplete external erasure or restore-time risks disclosed?", "kind": "exception", "answer_data": [ "tombstone_basis", "remaining_copies", "restoration_control" ] } ], "data_elements": [ { "id": "finding-retention-disposal-schedule", "name": "Retention binding", "description": "Purpose, policy revision, triggers and hold basis, reviewed by the adopting owner.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-001" ] }, { "id": "finding-retention-disposal-copies", "name": "Copy and derivative inventory", "description": "Known copies and dependencies plus explicit unknown coverage; includes backup and restore requirements.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-005", "SRC-001" ] }, { "id": "finding-retention-disposal-disposition", "name": "Disposition evidence", "description": "Requested, acknowledged, completed or incomplete status per custodian; no claim of model unlearning.", "value_kind": "object", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-005", "SRC-001" ] } ], "artifacts": [ { "id": "artifact-retention-disposal", "name": "Disposition tracking record", "description": "Versioned evidence for retention and disposition evidence. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-005", "SRC-001" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-interop-conformance", "name": "Mappings and acceptance evidence", "description": "Bindings preserve assertion identity, context, access restrictions and epistemic qualifiers. Lossy exports require an explicit profile decision. Conceptual alignment with open specifications is not implemented conformance.", "source_refs": [ "SRC-002", "SRC-003", "SRC-006" ], "findings": [ { "id": "finding-interop-conformance", "name": "Mappings and acceptance evidence", "description": "Bindings preserve assertion identity, context, access restrictions and epistemic qualifiers. Lossy exports require an explicit profile decision. Conceptual alignment with open specifications is not implemented conformance.", "source_refs": [ "SRC-002", "SRC-003", "SRC-006" ], "questions": [ { "id": "finding-interop-conformance-q1", "text": "Which pinned vocabulary and target profile preserve identifiers, predicates and assertion qualifiers on export?", "kind": "interoperability", "answer_data": [ "mapping_profile", "target_version", "field_map" ] }, { "id": "finding-interop-conformance-q2", "text": "Which qualifiers would be lost and when must the export be refused?", "kind": "constraint", "answer_data": [ "loss_report", "refusal_rule", "explicit_restrictions" ] }, { "id": "finding-interop-conformance-q3", "text": "Which fixture set covers namesakes, conflicting claims, stale facts, revoked access and correction propagation?", "kind": "validation", "answer_data": [ "fixture_manifest", "expected_outcomes", "validation_report_ref" ] }, { "id": "finding-interop-conformance-q4", "text": "What compatibility and migration decision governs a changed predicate meaning or neighbor binding?", "kind": "lifecycle", "answer_data": [ "schema_revision", "migration_plan_ref", "compatibility_decision" ] } ], "data_elements": [ { "id": "finding-interop-conformance-mapping", "name": "Mapping profile", "description": "Pinned mapping with loss accounting; RFC 7643 user attributes are not compulsory for other entity classes.", "value_kind": "reference", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-006" ] }, { "id": "finding-interop-conformance-reports", "name": "Validation report references", "description": "Processor, shapes, inputs and result revisions; no claim of semantic truth.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-006" ] }, { "id": "finding-interop-conformance-compatibility", "name": "Compatibility decision", "description": "Semantic version and migration requirements; executable instance schemas are deferred.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-003", "SRC-006" ] } ], "artifacts": [ { "id": "artifact-interop-conformance", "name": "Mapping and acceptance dossier", "description": "Versioned evidence for mappings and acceptance evidence. Contents remain subject to the assertion access and retention policy.", "media_or_form": [ "structured record", "human-readable projection" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first, governed global IRI second, Dimension UUID or ULID third; stable artifact ID plus revision, never a timestamp as identity.", "source_refs": [ "SRC-002", "SRC-003", "SRC-006" ] } ], "inline_only_rationale": null } ] } ] } ] }, "functions": [ { "id": "function-register-profile", "name": "Register scoped profile", "description": "Proposed, unimplemented local operation. Create the local profile binding after external subject resolution.", "inputs": [ "resolved subject reference", "owner namespace", "purpose binding" ], "outputs": [ "profile identifier and binding revision", "refusal with reason" ], "preconditions": [ "Verified external subject binding", "No duplicate profile within declared scope", "Caller authority and tenant scope checked", "Expected revision matches before any local mutation" ], "effects": [ "Adds only a local profile record; never creates or merges the subject master" ], "source_refs": [ "SRC-002", "SRC-003", "SRC-005" ] }, { "id": "function-propose-assertion", "name": "Propose typed assertion", "description": "Proposed, unimplemented local operation. Stage a proposed assertion with its source, context and explicit epistemic class.", "inputs": [ "profile revision", "typed proposition", "origin references", "validity qualifiers" ], "outputs": [ "staged assertion revision", "validation limitations or refusal" ], "preconditions": [ "Purpose permits this attribute", "Origin and value state recorded", "Caller authority and tenant scope checked", "Expected revision matches before any local mutation" ], "effects": [ "Adds a staged assertion; no automatic promotion to verified or recall-eligible status" ], "source_refs": [ "SRC-001", "SRC-002", "SRC-006" ] }, { "id": "function-record-review", "name": "Record assertion review", "description": "Proposed, unimplemented local operation. Record an authorized review disposition, keeping contrary evidence visible.", "inputs": [ "assertion revisions", "external evidence review", "metric definition", "reviewer authority" ], "outputs": [ "qualified assessment", "conflict or abstention disposition" ], "preconditions": [ "Review authority confirmed", "Metric semantics and scope supplied", "Caller authority and tenant scope checked", "Expected revision matches before any local mutation" ], "effects": [ "Records review evidence without certifying truth or resolving a subject master" ], "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ] }, { "id": "function-prepare-recall", "name": "Prepare bounded recall view", "description": "Proposed, unimplemented local operation. Propose a minimal profile view using a current external permission decision and declared freshness rules.", "inputs": [ "recipient and purpose", "policy decision reference", "eligible assertion revisions", "evaluation time" ], "outputs": [ "bounded view with evidence and limitations", "empty or refused view" ], "preconditions": [ "External permission decision is current", "Untrusted content handling enforced by caller", "Stale, restricted and unresolved claims excluded or explicitly limited by policy", "Caller authority and tenant scope checked", "Expected revision matches before any local mutation" ], "effects": [ "Constructs a local view; does not dispatch it or grant tool authority" ], "source_refs": [ "SRC-005", "SRC-008", "SRC-004" ] }, { "id": "function-record-correction", "name": "Record correction impact", "description": "Proposed, unimplemented local operation. Register a reviewed correction and list affected profile projections.", "inputs": [ "correction request", "review disposition", "expected revision", "dependency references" ], "outputs": [ "new correction record", "invalidation requests and incomplete propagation report" ], "preconditions": [ "Authorized reviewer and current revision", "Master resolution supplied if subject binding changes", "Caller authority and tenant scope checked", "Expected revision matches before any local mutation" ], "effects": [ "Updates local eligibility and dependency status; external propagation remains the custodians responsibility" ], "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "function-record-disposition", "name": "Record disposition progress", "description": "Proposed, unimplemented local operation. Track approved disposal requests and custodian acknowledgments for profile data and derivatives.", "inputs": [ "retention decision", "hold resolution", "copy inventory", "custodian evidence" ], "outputs": [ "disposition tracking record", "remaining-copy limitations" ], "preconditions": [ "Authorized disposition decision", "Retention and hold policy checked by responsible custodian", "Caller authority and tenant scope checked", "Expected revision matches before any local mutation" ], "effects": [ "Records disposal evidence; does not execute deletion or claim erasure of external copies or model parameters" ], "source_refs": [ "SRC-005", "SRC-001" ] } ], "composition": [ { "target": "WM-MEM-002", "relation": "ALIGN", "purpose": "Candidate registry parent reconciliation only. Atomic Memory Item semantics do not automatically become inheritance for a profile of multiple assertions; no mandatory runtime dependency.", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "target": "PROV-O", "relation": "ALIGN", "purpose": "Conceptual evidence and derivation mapping; not a truth or authority model.", "required": false, "source_refs": [ "SRC-001" ] }, { "target": "RDF 1.1", "relation": "ALIGN", "purpose": "Typed subject-predicate-value and context mapping; storage remains format-neutral.", "required": false, "source_refs": [ "SRC-002" ] }, { "target": "RFC 7643", "relation": "ALIGN", "purpose": "Optional identity-attribute mapping for appropriate user profiles, not all entity classes.", "required": false, "source_refs": [ "SRC-003" ] }, { "target": "DQV", "relation": "ALIGN", "purpose": "Qualified quality annotation mapping; assertion-level adaptation is proposed.", "required": false, "source_refs": [ "SRC-004" ] }, { "target": "SHACL", "relation": "ALIGN", "purpose": "Candidate instance-shape validation mapping; no executable conformance delivered.", "required": false, "source_refs": [ "SRC-006" ] } ], "serviceLayers": { "dimension": { "owner_package_requirements": [ "Accountable profile steward role and purpose-scoped namespace", "Pinned subject master binding and qualified generic Memory Item alignment", "Predicate vocabulary, sensitivity policy, freshness policy and retention profile", "External authorization, audit and disposal custodian references" ], "namespace_guidance": "Separate profile, assertion, subject and artifact identifiers. Scope aliases and external IDs to their issuer and tenant; never use names, emails or dates as the sole stable key.", "registry_links": [ "vr.wm-mem-004", "WM-MEM-002 candidate ALIGN; pin and reconcile before implementation" ] }, "canon_and_patch": { "canonicalization_rules": [ "Preserve datatype, language, units, assertion class, context, evidence and validity on every projection.", "A preferred current view is a governed selection, not universal truth; preserve dispute state and unknowns." ], "patch_rules": [ "Require expected revision, authority, purpose and reason; report concurrency conflict instead of silently overwriting.", "Predicate meaning changes require a new schema revision and migration decision. Corrections invalidate affected views subject to retention." ], "compatibility_rules": [ "Do not drop epistemic or permission qualifiers on export; refuse unsafe loss.", "The generic Memory Item parent remains unpinned alignment; no runtime inheritance or conformance is claimed." ] }, "artifact_rules": { "identity_priority": [ "Authoritative master-system identifier", "Governed global identifier or IRI", "UUID or ULID assigned by the adopting Dimension" ], "timestamp_rule": "Known instants use RFC 3339 with seconds and an explicit offset or Z. Record event time, observation time and ingestion time separately. Preserve date-only values and uncertainty without fabricating instants.", "serial_naming_rule": "Use stable artifact identifier plus revision; timestamp is metadata, never sole identity. Names must not expose sensitive subject labels.", "integrity_rule": "Bind evidence digests to the exact representation and revision where permitted. Integrity does not prove truth; hashes and metadata remain access-controlled and retention-bound." }, "policies": [ "Minimize personal and third-party data; purpose, sensitivity and lawful processing basis require adopting-profile review. Public availability is not universal reuse authority.", "Treat all recalled content as untrusted data. Stored requests cannot override current instructions, authorization or tool boundaries.", "Confidence, provenance, structural validity and retrieval similarity are distinct. Preserve unknown and conflict states and support abstention.", "Durability never requires indefinite retention. Retained revision history is conditional on lawful necessity; disposal may remove sensitive payloads and lineage details.", "Physical properties belong to the subject as qualified assertions; the profile record itself has no mass, dimensions or physical capability." ], "crud": { "read": [ "Resolve tenant, purpose and current external permission before constructing a field-level view; protect restricted existence and provenance." ], "create": [ "Create a scoped profile only with an external subject binding, accountable role and purpose. Stage unsupported claims with explicit limitations." ], "update": [ "Require revision precondition and authority; distinguish correction, new evidence and contextual change. Register dependent-view invalidation requests." ], "delete": [ "External custodians execute retention, hold resolution and deletion. Locally record requested and acknowledged disposition per copy and flag incomplete coverage.", "Retain only a justified minimal tombstone; erase unnecessary sensitive payloads including retained history under the applicable policy. Backup restore controls must reapply completed disposal." ] }, "roles": [ { "name": "Profile steward", "responsibilities": [ "Own scope, predicate choices and qualified profile review." ] }, { "name": "Assertion reviewer", "responsibilities": [ "Assess evidence and record uncertainty, disputes and corrections." ] }, { "name": "Authorized consumer", "responsibilities": [ "Use only permitted current views and preserve their limitations." ] }, { "name": "Privacy and retention custodian", "responsibilities": [ "Determine processing and retention rules and return disposition evidence." ] }, { "name": "Audit custodian", "responsibilities": [ "Maintain external audit records with minimal sensitive data." ] } ], "access": { "default_rule": "Deny by default; external authorization must bind caller, tenant, action, purpose and fields. Memory possession is not permission.", "scopes": [ "bundle", "layer", "finding", "artifact" ], "exceptions": [ "Time-limited exceptional access requires a recorded approver, purpose and expiry; it cannot silently broaden future recall.", "Subject access and correction routes must protect other subjects and confidential provenance under the adopting profile." ], "audit_requirements": [ "Record actor, purpose, policy revision, affected identifiers, disposition and time with minimal payload.", "Audit recall, correction, export refusal and disposal acknowledgments through the external audit service; do not copy sensitive assertions into unrestricted logs." ] }, "agents_bootstrap": { "filename": "AGENTS.md", "required_fields": [ "Name", "Type", "Specification URL", "Storage type URL", "Interface URL", "Processes URL" ], "read_order": [ "Adopting Dimension owner policies and AGENTS.md", "This profile specification and publication holds", "Pinned subject, memory-item and policy bindings", "Authorized assertion evidence and current revision" ] } }, "coverage": { "claim": "Source-grounded proposed entity-profile memory structure with separately traced assertions, scoped use and explicit uncertainty. A separate frozen local no-tools self-audit found no critical conflict. This reviewable draft is not a universal profile ontology, independent external review or an implemented memory runtime; source, policy-profile and conformance holds remain open.", "confidence": "medium", "checklist": [ { "dimension": "identity", "status": "covered", "notes": "Separate subject, profile, assertion and view identities; unresolved binding quarantined." }, { "dimension": "lifecycle", "status": "covered", "notes": "Profile revisions, correction impact and disposition references; generic memory lifecycle delegated." }, { "dimension": "relationships", "status": "covered", "notes": "Candidate parent alignment, assertion membership, alias evidence and dependent-view links." }, { "dimension": "temporal", "status": "covered", "notes": "Effective interval, observed and ingested time, uncertainty and freshness separated." }, { "dimension": "provenance", "status": "covered", "notes": "Origin and derivation links, availability limits and correlated sources represented." }, { "dimension": "ownership", "status": "covered", "notes": "Accountable roles and external master responsibilities; no proprietary owner names." }, { "dimension": "validation", "status": "covered", "notes": "Proposed validation report references and fixture requirements; executable shapes deferred." }, { "dimension": "access", "status": "covered", "notes": "Purpose, tenant, field and artifact scopes with external authorization decisions." }, { "dimension": "retention and deletion", "status": "covered", "notes": "Custodian evidence, derivative coverage, holds, minimal tombstones and restore controls." }, { "dimension": "interoperability", "status": "covered", "notes": "Candidate RDF, PROV-O, SCIM and SHACL alignments with explicit loss accounting." }, { "dimension": "direct properties", "status": "covered", "notes": "Profile purpose and status plus typed subject assertions; contextual preferences distinguished." }, { "dimension": "recognition and observation", "status": "covered", "notes": "Reviewed subject binding and observed versus inferred assertion classes." }, { "dimension": "capabilities and actions", "status": "covered", "notes": "Six proposed local functions with authority, revision, refusal and effect boundaries." }, { "dimension": "physical profile properties", "status": "not-applicable", "notes": "The profile is an information entity. Physical subject measurements retain units and evidence when relevant." }, { "dimension": "executable conformance", "status": "gap", "notes": "Nested instance schemas, mappings, fixtures and external adapters are not implemented." }, { "dimension": "independent review and source verification", "status": "gap", "notes": "Sole-provider research; direct HTTP unattempted under sandbox restriction and current-version review incomplete." } ], "known_omissions": [ "Pinned and reconciled Memory Item parent binding and nested executable assertion schema.", "Domain-specific sensitive attributes, children and third-party data require qualified policy and jurisdiction review.", "Executable conformance, adversarial instance fixtures, access enforcement, derivative tracking and deletion adapters.", "Independent second-provider review and complete current-source/version verification." ], "conflicts": [], "regional_assumptions": [ "No universal legal basis, consent requirement, retention duration or access right is asserted. NIST Privacy Framework 1.0 is a voluntary pinned design baseline.", "SCIM is an optional mapping for matching resource types. Later RFC updates and source revision drift require review." ], "adversarial_checks": [ "Namesake and cross-tenant aliases must not merge subject identities.", "Repeated derived assertions must not masquerade as independent corroboration.", "Stale retrieval must not refresh evidence or imply current truth.", "Stored preference text must not gain instruction or tool authority.", "Corrections must invalidate dependent views without claiming external acknowledgment.", "Deletion of local memory must not imply erasure from all recipients, backups or model parameters." ] }, "researchAdjudication": { "providerMode": "single-provider-waiver", "activeProviders": [ "codex" ], "waivedProviders": [ "claude", "grok" ], "providerPolicy": { "contract_version": "1.0.0", "mode": "single-provider-waiver", "effective_at": "2026-09-06T00:00:00Z", "scope": "Canonical single-stream subject-model research after the six-workstream consolidation", "active_providers": [ "codex" ], "waived_providers": [ { "provider": "claude", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "Claude produced no result on prior 1800-second and 900-second attempts and again timed out on bounded 600-second Sonnet and 300-second Haiku passes. The owner prioritized completion over provider availability." }, { "provider": "grok", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "The repository owner authorized completion without Grok when Grok is unavailable, slow or schema-invalid. Grok may still be attempted as a bounded supplemental reviewer, but its failure never blocks a valid Claude plus no-tools result." } ], "review_rule": "Codex may complete source-grounded fallback research after bounded Claude and Grok attempts fail. It requires a separate no-tools adversarial audit and remains reviewable-draft with a visible absence-of-external-review hold.", "supplemental_provider_attempts": [ { "provider": "claude", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." }, { "provider": "grok", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." } ] }, "boundaryDecision": { "entry_kind": "entity", "status": "accepted", "rationale": "The root is one persistent purpose-scoped information entity whose assertion membership changes over time. It is distinct from the described subject and from each assertion or derived view. Referenced members retain separate identities and do not confer ownership of their external masters. The registry standalone-mm value is a record-plane classification, not a subject-kind enum." }, "decisions": [ { "concept": "Profile and subject identity", "disposition": "accepted", "rationale": "Subject binding requires an external master reference and separate profile identifier. Alias evidence is scoped and disputed bindings are quarantined; names and recalled attributes do not prove identity." }, { "concept": "Atomic Memory Item parent", "disposition": "qualified and deferred", "rationale": "The frozen registry names WM-MEM-002 as a parent but supplies no matching relation-ledger contract. Its atomic purpose does not establish inheritance for a multi-assertion profile. The admitted ALIGN preserves the lead and defers a pinned subtype or composition decision without requiring runtime dependency." }, { "concept": "Profile record versus aggregate ownership", "disposition": "accepted", "rationale": "Persistent profile identity and purpose justify entity classification. Membership references do not make the profile the master of subject records, episodes, generic memory items or their lifecycles." }, { "concept": "Remembered facts and assertion classes", "disposition": "qualified", "rationale": "The registry's facts wording cannot make imported or inferred content true. The draft distinguishes assertion class, typed values, unknown states, validity and evidence, and never upgrades an unsupported claim automatically." }, { "concept": "Contextual preferences and measured properties", "disposition": "accepted", "rationale": "Preferences and roles remain conditional assertions rather than instructions or permanent traits. Physical measurements describe subjects with qualifiers; the profile itself remains an information entity." }, { "concept": "Lineage and corroboration", "disposition": "accepted", "rationale": "Origin, asserting actor and derivation references preserve evidence context. Related imports and summaries cannot silently become independent corroboration; unavailable evidence remains a visible limitation." }, { "concept": "Quality, validity and truth", "disposition": "separated", "rationale": "Metric-qualified assessment, structural validation, evidence support and retrieval ranking are distinct. DQV assertion-level use is labeled a local adaptation and the draft supplies no unjustified confidence formula." }, { "concept": "Temporal freshness", "disposition": "accepted", "rationale": "Effective intervals and observation, ingestion and review instants remain distinct. Unknown or date-only values are preserved, and recall alone does not refresh evidence or convert stale material into false material." }, { "concept": "Corrections and rebinding", "disposition": "accepted with external authority", "rationale": "Correction impact identifies dependent views and unresolved propagation. Subject merge or split resolution remains an external master decision, while history preservation is expressly constrained by retention and privacy policy." }, { "concept": "Purpose and access", "disposition": "accepted with profile hold", "rationale": "The draft requires purpose and external authority bindings, field-level disclosure limits and qualified treatment of third-party data. It does not claim that public availability, possession or consent alone permits every use." }, { "concept": "Recall and stored instructions", "disposition": "accepted at policy level", "rationale": "Recalled text remains untrusted data. Local view preparation depends on current external permissions and cannot grant tool authority, dispatch data or claim implementation of injection prevention." }, { "concept": "Disposition and immutable history", "disposition": "qualified", "rationale": "Durability is not indefinite retention. External custodians execute disposal and return per-copy evidence; minimal tombstones and histories remain policy-bound. Local deletion cannot certify recipient erasure, backup removal or model unlearning." }, { "concept": "Functions and service boundaries", "disposition": "accepted as proposed only", "rationale": "All six operations are explicitly unimplemented local record operations with authority and revision preconditions, refusals or limitations and bounded effects. External enforcement, audit storage and generic memory lifecycle are not silently acquired." }, { "concept": "Source status and conformance", "disposition": "limited and deferred", "rationale": "Eight readable web-service sources support selected concepts, but direct HTTP was unattempted and no status codes were measured. Pinned older sources, listed RFC updates, a living guidance revision, nested schemas, fixtures and mappings remain explicit verification or implementation gaps." }, { "concept": "Independent review", "disposition": "waived and held", "rationale": "Only Codex research is admitted. This separate local tool-free semantic assessment is a self-audit, not an independent provider pass. Claude and Grok were skipped with zero attempts under the owner override." } ], "publicationHolds": [ "Independent external review is absent under the owner-authorized single-provider waiver. Claude and Grok were skipped with zero attempts; the separate local Codex no-tools self-audit is not independent second-provider review.", "Live source and version verification remains incomplete. Eight URLs supplied selected readable web-service evidence, but direct HTTP checks were not attempted under the reported sandbox restriction: zero measured HTTP 200 responses, not eight failed sources. Listed RFC updates, newer privacy guidance, living guidance revision, complete source support and licensing/applicability review remain open; coordinator check_sources.py is prepared.", "Purpose, sensitivity, third-party data, processing basis, subject participation, jurisdiction, retention and exceptional access require qualified adopting-profile review. No universal legal requirements or operational compliance are asserted.", "Nested executable instance schemas, pinned and reconciled WM-MEM-002 binding, loss-aware mappings, conformance fixtures and external authorization, correction and disposal adapters remain incomplete. No runtime enforcement, identity proof, truth guarantee or external-erasure certification is claimed.", "Independent external review was explicitly waived by the repository owner; this codex-only result remains a reviewable draft." ], "deferredResearch": [ "Restore independent external review before canonical or publishable-draft promotion.", "Run the prepared HTTP checker outside the sandbox and review exact source revisions, updates, licensing and substantive applicability; HTTP success alone is insufficient.", "Reconcile the atomic Memory Item parent with the scoped profile root and pin a tested relation without duplicating generic memory lifecycle semantics.", "Develop nested schemas, mappings and fixtures for namesakes, contradictory or stale assertions, revoked access, correction propagation, derivative disposal and restore-time controls.", "Define qualified domain and jurisdiction profiles for sensitive attributes, third-party data, processing authority, retention and subject requests." ] }, "statistics": { "sources": 8, "bundles": 6, "layers": 12, "findings": 12, "questions": 48, "artifacts": 12, "functions": 6 } }