# Vercy AI instruction - YAML 1.2 (JSON-compatible) { "vercy": "1.0-draft", "publication": { "status": "published", "adjudicationStatus": "reviewable-draft", "publishableCanonical": false, "generatedAt": "2026-10-21T15:53:30Z", "synthesisSha256": "6659c64565ba0b810abf5ab04dd9825f36203951ba403f55c86a9911f1b95486", "providerMode": "single-provider-waiver", "providers": [ "Codex" ], "waivedProviders": [ "Claude", "Grok" ] }, "metaModel": { "id": "WM-MEM-006", "registryId": "vr.wm-mem-006", "name": "Memory Formation Event", "version": "0.1.0", "previousVersions": [], "entryKind": "event", "family": "World Models", "category": "Information and virtual systems", "industry": [ "Cross-industry" ], "domain": [ "INF.MEM.FRM" ], "tags": [ "memory", "formation", "event", "inf.mem.frm" ], "status": "published" }, "canonicalUrl": "https://ver.cy/models/wm-mem-006-memory-formation-event/", "sourceUrl": "https://github.com/ver-cy/world-models/tree/feat/mega-model-registry/research/runs/wm-mem-006", "model": { "registry_id": "vr.wm-mem-006", "model_id": "WM-MEM-006", "name": "Memory Formation Event", "entry_kind": "event", "purpose": "Explain how one memory-item version came to exist through source lineage, method, time, responsibility and qualified confidence evidence.", "scope_statement": "A proposed format-neutral description of the occurrence completing creation of one agent-held memory-item version. The occurrence, its revisable description, generating activity and persistent item have separate identities. This is a reviewable research draft, not an execution engine or a biological memory model.", "in_scope": [ "Occurrence and output-version identity, source-use and influence references, method and participant declarations.", "Formation time, evidence state, qualified confidence and review references.", "Purpose, scope, correction provenance and policies for this description and its artifacts." ], "out_of_scope": [ "Memory store operation and item content or lifecycle management.", "Extraction execution, training or biological memory formation; failed attempts without a created version are activity records.", "Recall ranking, context assembly, consolidation, precedence decisions, trust evaluation, quarantine and incident response.", "Grant enforcement, source deletion, item erasure and portability execution." ], "boundary_notes": [ { "neighbor": "WM-MEM-002 Memory Item", "distinction": "The created item version is externally mastered. Registry parent_ids is interpreted as a required reference, not event inheritance from a persistent item.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "WM-MEM-001 Memory Store", "distinction": "Store context may be referenced; persistence, transaction and tenant administration remain at the store.", "source_refs": [ "SRC-001", "SRC-007" ] }, { "neighbor": "WM-MEM-003 Interaction Episode", "distinction": "An episode can be a versioned input; its participant and episode lifecycle remain external.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "WM-MEM-007 Memory Recall Event", "distinction": "Recall uses existing memory; it does not prove formation. Reference a triggering recall only when evidenced.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "WM-MEM-008 Memory Consolidation", "distinction": "Consolidation can generate a new version and linked formation occurrence; merging and retirement belong there.", "source_refs": [ "SRC-001", "SRC-002" ] }, { "neighbor": "WM-MEM-009 Memory Conflict and Precedence Rule", "distinction": "Reference conflict or precedence outcomes; do not choose winners here.", "source_refs": [ "SRC-005" ] }, { "neighbor": "WM-MEM-010 Memory Retention and Forgetting Policy", "distinction": "Policy and disposal execution stay external; bind rules and receipts for this description.", "source_refs": [ "SRC-007" ] }, { "neighbor": "WM-MEM-011 Memory Scope and Sharing Grant", "distinction": "Reference historical authority and current scope. This event never creates or enforces a grant.", "source_refs": [ "SRC-007" ] }, { "neighbor": "WM-MEM-012 Memory Portability Package", "distinction": "Import lineage and external portability receipts can be linked; packaging and transfer remain external.", "source_refs": [ "SRC-002", "SRC-006" ] }, { "neighbor": "WM-MEM-018 Memory Trust Assessment", "distinction": "Formation-time confidence is a recorded descriptor, not an owned trust assessment or its lifecycle.", "source_refs": [ "SRC-005" ] }, { "neighbor": "WM-MEM-019 Memory Poisoning Incident", "distinction": "Reference only an externally handled concern at policy level; investigation and remediation stay external.", "source_refs": [ "SRC-007" ] }, { "neighbor": "WM-MEM-020 Memory Quarantine and Redaction", "distinction": "Write-time review and quarantine outcomes are referenced, never executed by a formation description.", "source_refs": [ "SRC-007" ] } ] }, "sources": [ { "id": "SRC-001", "title": "PROV-DM: The PROV Data Model", "organization": "W3C", "url": "https://www.w3.org/TR/prov-dm/", "version_or_date": "Recommendation 2013-04-30", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:12Z", "relevance": "Sections 2.1 and 5.1-5.3 distinguish generation, activity, entity, derivation and responsible agent. Memory-specific fields and cardinalities are proposed profile choices." }, { "id": "SRC-002", "title": "PROV-O: The PROV Ontology", "organization": "W3C", "url": "https://www.w3.org/TR/prov-o/", "version_or_date": "Recommendation 2013-04-30", "source_type": "ontology", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:12Z", "relevance": "Qualified generation, activity, time, usage and association provide an optional graph alignment, not a memory schema or authority mechanism." }, { "id": "SRC-003", "title": "Constraints of the PROV Data Model", "organization": "W3C", "url": "https://www.w3.org/TR/prov-constraints/", "version_or_date": "Recommendation 2013-04-30", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:12Z", "relevance": "Constraint 24 keys generation by entity and activity; constraints 34, 37 and 39-42 address ordering. A valid graph does not establish factual truth." }, { "id": "SRC-004", "title": "RFC 3339: Date and Time on the Internet: Timestamps", "organization": "IETF", "url": "https://www.rfc-editor.org/rfc/rfc3339", "version_or_date": "RFC 3339, July 2002; base timestamp profile, later updates not adopted here", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:12Z", "relevance": "Section 5.6 supports seconds and explicit offsets. Timestamp syntax does not establish clock accuracy or causal order." }, { "id": "SRC-005", "title": "Data on the Web Best Practices: Data Quality Vocabulary", "organization": "W3C", "url": "https://www.w3.org/TR/vocab-dqv/", "version_or_date": "Working Group Note; exact dated edition pin pending", "source_type": "ontology", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T15:52:12Z", "relevance": "Sections 4.1 and 4.2 separate a quality measurement, metric, value and assessed resource. Use for a proposed confidence descriptor only; no universal confidence scale is defined." }, { "id": "SRC-006", "title": "CloudEvents Specification", "organization": "CNCF", "url": "https://github.com/cloudevents/spec/blob/v1.0.2/cloudevents/spec.md", "version_or_date": "v1.0.2; specversion attribute 1.0", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:12Z", "relevance": "Required attributes distinguish event identity and source context; source plus id can identify redelivery. Transport identity alone does not prove memory creation." }, { "id": "SRC-007", "title": "NIST Privacy Framework Version 1.0 Core", "organization": "NIST", "url": "https://www.nist.gov/document/nist-privacy-framework-version-1-core-pdf", "version_or_date": "Version 1.0 Core, 2020-01-16; selected historical baseline", "source_type": "public-authority", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T15:52:12Z", "relevance": "CT.PO-P, CT.DM-P, CT.DP-P and CM.AW-P6 support authorization, minimization, disposal and lineage considerations. Voluntary guidance, not a legal compliance determination." } ], "structure": { "bundles": [ { "id": "bundle-identity", "name": "Occurrence and output identity", "description": "Identify the formation occurrence and the memory version whose creation it describes.", "rationale": "Generation is separated from a persistent item and from the activity that produced it.", "source_refs": [ "SRC-001", "SRC-002", "SRC-006" ], "layers": [ { "id": "layer-occurrence", "name": "Occurrence identity", "description": "Proposed event root: the completed creation of exactly one identified memory-item version. The event description is a separate revisable record. An unconfirmed report remains a claim, not proof of formation.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ], "findings": [ { "id": "finding-occurrence", "name": "Formation occurrence key", "description": "Proposed event root: the completed creation of exactly one identified memory-item version. The event description is a separate revisable record. An unconfirmed report remains a claim, not proof of formation.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ], "questions": [ { "id": "occurrence-q01", "text": "Which master-scoped identifier denotes this formation occurrence?", "kind": "identity", "answer_data": [ "occurrence-event-key" ] }, { "id": "occurrence-q02", "text": "Which kind of creation does the occurrence describe?", "kind": "classification", "answer_data": [ "occurrence-creation-kind" ] }, { "id": "occurrence-q03", "text": "Which generating activity and attempt are associated with this occurrence?", "kind": "event", "answer_data": [ "occurrence-activity-binding" ] }, { "id": "occurrence-q04", "text": "How are repeated reports of the same occurrence distinguished from a new formation?", "kind": "constraint", "answer_data": [ "occurrence-deduplication-rule" ] } ], "data_elements": [ { "id": "occurrence-event-key", "name": "Event key", "description": "Required stable event identifier plus its governing namespace; never a date alone.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "occurrence-creation-kind", "name": "Creation kind", "description": "Proposed codes: extraction, explicit assertion, import, or derived version. Record vocabulary version and unknown if unsupported.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "occurrence-activity-binding", "name": "Activity binding", "description": "Activity master reference, attempt reference and role; unknown activity is explicit. One activity may generate multiple separately identified outputs.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "occurrence-deduplication-rule", "name": "Deduplication rule", "description": "Profile identity key, original event reference and duplicate decision evidence. Do not infer occurrence identity solely from content equality.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] } ], "artifacts": [ { "id": "artifact-occurrence", "name": "Occurrence identity record", "description": "A proposed versioned evidence view for formation occurrence key. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-output", "name": "Created version binding", "description": "A successful occurrence refers to one created item version. A batch has separate occurrences per version, optionally linked to one activity. Persistent memory contents, validity and item lifecycle are externally mastered.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ], "findings": [ { "id": "finding-output", "name": "Output version and source boundary", "description": "A successful occurrence refers to one created item version. A batch has separate occurrences per version, optionally linked to one activity. Persistent memory contents, validity and item lifecycle are externally mastered.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ], "questions": [ { "id": "output-q01", "text": "Which memory item and immutable version were created?", "kind": "relationship", "answer_data": [ "output-item-version" ] }, { "id": "output-q02", "text": "What evidence distinguishes creation of that version from an attempted write?", "kind": "evidence", "answer_data": [ "output-creation-evidence" ] }, { "id": "output-q03", "text": "Which batch or co-generation context links this output to other outputs?", "kind": "composition", "answer_data": [ "output-batch-reference" ] }, { "id": "output-q04", "text": "How is an imported version distinguished from its earlier origin formation?", "kind": "exception", "answer_data": [ "output-origin-binding" ] } ], "data_elements": [ { "id": "output-item-version", "name": "Item version", "description": "Required WM-MEM-002 master item ID and version identity. A mutable latest pointer is insufficient.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] }, { "id": "output-creation-evidence", "name": "Creation evidence", "description": "Authoritative creation receipt reference or an explicit missing or disputed evidence state.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] }, { "id": "output-batch-reference", "name": "Batch reference", "description": "Optional activity or batch reference; other item payloads are not contained here.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] }, { "id": "output-origin-binding", "name": "Origin binding", "description": "Original event and item-version identities, local creation or replica classification and unresolved mapping. A copied record is not automatically a new logical version.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] } ], "artifacts": [ { "id": "artifact-output", "name": "Created version binding record", "description": "A proposed versioned evidence view for output version and source boundary. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-derivation", "name": "Inputs and formation method", "description": "Describe what influenced this version and how its creation was reported.", "rationale": "Input availability, actual use, asserted influence and transformation method are distinct evidence.", "source_refs": [ "SRC-001", "SRC-002" ], "layers": [ { "id": "layer-inputs", "name": "Input lineage", "description": "Reference source versions and selected portions without copying source masters. An input read by an activity is not automatically a derivation source for every output.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ], "findings": [ { "id": "finding-inputs", "name": "Used source and influence evidence", "description": "Reference source versions and selected portions without copying source masters. An input read by an activity is not automatically a derivation source for every output.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ], "questions": [ { "id": "inputs-q01", "text": "Which source versions and portions influenced the created memory?", "kind": "provenance", "answer_data": [ "inputs-input-manifest" ] }, { "id": "inputs-q02", "text": "What distinguishes actual input use from merely available context?", "kind": "evidence", "answer_data": [ "inputs-use-evidence" ] }, { "id": "inputs-q03", "text": "Which source material was omitted or transformed in forming the item?", "kind": "quality", "answer_data": [ "inputs-transformation-loss" ] }, { "id": "inputs-q04", "text": "How can a reviewer inspect lineage when the original source is restricted or gone?", "kind": "access", "answer_data": [ "inputs-source-availability" ] } ], "data_elements": [ { "id": "inputs-input-manifest", "name": "Input manifest", "description": "Versioned source references with selectors, role, asserted influence and evidence; an empty set is justified for direct assertion.", "value_kind": "collection", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "inputs-use-evidence", "name": "Use evidence", "description": "Usage reference, observer, evidence state and output-specific influence rationale.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "inputs-transformation-loss", "name": "Transformation loss", "description": "Known omissions, paraphrase or normalization effects and uncertainty; unknown is preserved.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "inputs-source-availability", "name": "Source availability", "description": "Access class, authorized resolver, unavailable reason and permitted minimal locator; no access bypass or fabricated snapshot.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] } ], "artifacts": [ { "id": "artifact-inputs", "name": "Input lineage manifest", "description": "A proposed versioned evidence view for used source and influence evidence. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-method", "name": "Method and responsibility", "description": "Record a method and responsible actor binding as reported at formation. Method execution, actor identity management and process lifecycle remain external.", "source_refs": [ "SRC-001", "SRC-002" ], "findings": [ { "id": "finding-method", "name": "Formation method declaration", "description": "Record a method and responsible actor binding as reported at formation. Method execution, actor identity management and process lifecycle remain external.", "source_refs": [ "SRC-001", "SRC-002" ], "questions": [ { "id": "method-q01", "text": "Which method and configuration version produced the memory version?", "kind": "process", "answer_data": [ "method-method-binding" ] }, { "id": "method-q02", "text": "Which operator is accountable for this formation description?", "kind": "ownership", "answer_data": [ "method-accountable-role" ] }, { "id": "method-q03", "text": "Which actor performed or reviewed the formation under which delegation?", "kind": "authority", "answer_data": [ "method-participant-binding" ] }, { "id": "method-q04", "text": "What reproducibility limits accompany the recorded method?", "kind": "validation", "answer_data": [ "method-reproducibility" ] } ], "data_elements": [ { "id": "method-method-binding", "name": "Method binding", "description": "Method identifier, version, configuration reference, transformation steps and unknown fields; no commercial implementation is required.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "id": "method-accountable-role", "name": "Accountable role", "description": "Role-based responsible operator reference and ownership scope, distinct from authorship of the input.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002" ] }, { "id": "method-participant-binding", "name": "Participant binding", "description": "Actor references, roles, delegation evidence and association time; responsibility is not proof of permission.", "value_kind": "collection", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "id": "method-reproducibility", "name": "Reproducibility", "description": "Declared nondeterminism, unavailable inputs or configuration, and replay restrictions. Reproduction is not performed by this model.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] } ], "artifacts": [ { "id": "artifact-method", "name": "Method and participant declaration", "description": "A proposed versioned evidence view for formation method declaration. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-001", "SRC-002" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-observation", "name": "Time and occurrence evidence", "description": "Keep creation time, observation and persistence evidence separately interpretable.", "rationale": "A timestamp and a reported outcome need context before they can support a formation claim.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ], "layers": [ { "id": "layer-time", "name": "Temporal evidence", "description": "Formation is an occurrence, not the duration of an extraction run. Unknown event time remains unknown even when report ingestion time is known.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ], "findings": [ { "id": "finding-time", "name": "Formation and observation time", "description": "Formation is an occurrence, not the duration of an extraction run. Unknown event time remains unknown even when report ingestion time is known.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ], "questions": [ { "id": "time-q01", "text": "When was this memory version reported to have been completely created?", "kind": "temporal", "answer_data": [ "time-formation-time" ] }, { "id": "time-q02", "text": "When was the formation description observed and recorded?", "kind": "temporal", "answer_data": [ "time-recording-time" ] }, { "id": "time-q03", "text": "Which available causal evidence constrains the reported creation time?", "kind": "constraint", "answer_data": [ "time-ordering-evidence" ] }, { "id": "time-q04", "text": "What uncertainty or clock discrepancy affects the temporal claim?", "kind": "measurement", "answer_data": [ "time-time-uncertainty" ] } ], "data_elements": [ { "id": "time-formation-time", "name": "Formation time", "description": "RFC 3339 timestamp with seconds and explicit offset or Z, precision, evidence and unknown-time state; estimates identified as estimates.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] }, { "id": "time-recording-time", "name": "Recording time", "description": "Separate observation and ingestion timestamps with clock source and offsets; never backfill formation time from these.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] }, { "id": "time-ordering-evidence", "name": "Ordering evidence", "description": "Usage, activity interval and output-availability references with ordering consistency or unknown state. Clock skew is not repaired by inventing dates.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] }, { "id": "time-time-uncertainty", "name": "Time uncertainty", "description": "Precision, interval bounds, clock discrepancy and measurement basis when known; separate from duration of generating activity.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] } ], "artifacts": [ { "id": "artifact-time", "name": "Temporal evidence record", "description": "A proposed versioned evidence view for formation and observation time. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-confirmation", "name": "Occurrence confirmation", "description": "Proposed description states are reported, corroborated, disputed, superseded or retracted. These describe evidence, not whether the memory is trustworthy or permitted for recall. Failed attempts with no created version belong to the activity log.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ], "findings": [ { "id": "finding-confirmation", "name": "Creation evidence and report state", "description": "Proposed description states are reported, corroborated, disputed, superseded or retracted. These describe evidence, not whether the memory is trustworthy or permitted for recall. Failed attempts with no created version belong to the activity log.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ], "questions": [ { "id": "confirmation-q01", "text": "What evidence state applies to this occurrence description?", "kind": "state", "answer_data": [ "confirmation-report-state" ] }, { "id": "confirmation-q02", "text": "Which authoritative record confirms the output existed at the stated point?", "kind": "evidence", "answer_data": [ "confirmation-receipt-binding" ] }, { "id": "confirmation-q03", "text": "How is an ambiguous persistence result represented without inventing success?", "kind": "exception", "answer_data": [ "confirmation-ambiguity" ] }, { "id": "confirmation-q04", "text": "Which later report supersedes or retracts an incorrect formation description?", "kind": "lifecycle", "answer_data": [ "confirmation-successor-report" ] } ], "data_elements": [ { "id": "confirmation-report-state", "name": "Report state", "description": "Required proposed report-state code and vocabulary version; corroboration requires a receipt or equivalent evidence.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "confirmation-receipt-binding", "name": "Receipt binding", "description": "Creation receipt, version and issuer reference; acknowledgment of message delivery alone does not qualify.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "confirmation-ambiguity", "name": "Ambiguity", "description": "Unknown or disputed persistence claim, missing evidence and externally owned reconciliation task reference.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] }, { "id": "confirmation-successor-report", "name": "Successor report", "description": "Correction record, reason and observer; changing a description does not undo the historical occurrence or delete the item.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] } ], "artifacts": [ { "id": "artifact-confirmation", "name": "Occurrence confirmation statement", "description": "A proposed versioned evidence view for creation evidence and report state. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-001", "SRC-003", "SRC-006" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-quality", "name": "Confidence and review evidence", "description": "Expose what a reported confidence value measures and what review actually established.", "rationale": "Attribution and metric context support scrutiny without converting quality metadata into truth.", "source_refs": [ "SRC-005", "SRC-007" ], "layers": [ { "id": "layer-confidence", "name": "Confidence semantics", "description": "A reported extraction confidence is captured with its metric definition and assessed target. Trust, factual truth, policy permission and retrieval rank are different concepts.", "source_refs": [ "SRC-005" ], "findings": [ { "id": "finding-confidence", "name": "Formation-time confidence descriptor", "description": "A reported extraction confidence is captured with its metric definition and assessed target. Trust, factual truth, policy permission and retrieval rank are different concepts.", "source_refs": [ "SRC-005" ], "questions": [ { "id": "confidence-q01", "text": "What claim or output segment does the confidence assessment concern?", "kind": "measurement", "answer_data": [ "confidence-assessed-target" ] }, { "id": "confidence-q02", "text": "How is the confidence value defined and interpreted?", "kind": "definition", "answer_data": [ "confidence-metric-definition" ] }, { "id": "confidence-q03", "text": "What value and evaluator were reported at formation time?", "kind": "quality", "answer_data": [ "confidence-reported-assessment" ] }, { "id": "confidence-q04", "text": "What calibration evidence and limitations support interpreting that value?", "kind": "validation", "answer_data": [ "confidence-calibration-evidence" ] } ], "data_elements": [ { "id": "confidence-assessed-target", "name": "Assessed target", "description": "Memory version or identified claim segment and assessment scope; confidence is optional.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005" ] }, { "id": "confidence-metric-definition", "name": "Metric definition", "description": "Metric identifier and version, scale, unit, direction, expected type and meaning; a number without these is uninterpreted.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005" ] }, { "id": "confidence-reported-assessment", "name": "Reported assessment", "description": "Value or absent state, evaluator, assessment time and method reference. Absence is not zero and scores from different metrics are not pooled.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005" ] }, { "id": "confidence-calibration-evidence", "name": "Calibration evidence", "description": "Evaluation reference, population, conditions and limits or explicit uncalibrated state; no probability-of-truth claim without applicable evidence.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005" ] } ], "artifacts": [ { "id": "artifact-confidence", "name": "Confidence descriptor", "description": "A proposed versioned evidence view for formation-time confidence descriptor. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-005" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-review", "name": "Review and decision references", "description": "Capture already made reviews and write-time decisions as references. Assessment, conflict resolution and quarantine execution belong to separate owners.", "source_refs": [ "SRC-005", "SRC-007" ], "findings": [ { "id": "finding-review", "name": "Formation review evidence", "description": "Capture already made reviews and write-time decisions as references. Assessment, conflict resolution and quarantine execution belong to separate owners.", "source_refs": [ "SRC-005", "SRC-007" ], "questions": [ { "id": "review-q01", "text": "Which review decision was linked to creation of this version?", "kind": "decision", "answer_data": [ "review-decision-reference" ] }, { "id": "review-q02", "text": "What evidence did that review cite and what remained unresolved?", "kind": "evidence", "answer_data": [ "review-review-evidence" ] }, { "id": "review-q03", "text": "Which concern or quarantine record was associated with the formation?", "kind": "security", "answer_data": [ "review-concern-reference" ] }, { "id": "review-q04", "text": "What prevents a favorable review from being interpreted as blanket recall permission?", "kind": "constraint", "answer_data": [ "review-decision-scope" ] } ], "data_elements": [ { "id": "review-decision-reference", "name": "Decision reference", "description": "External decision identity and version, decision kind and issuer; no decision means unknown, not approval.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005", "SRC-007" ] }, { "id": "review-review-evidence", "name": "Review evidence", "description": "Evidence references, reviewed scope, reviewer and unresolved limitations; raw sensitive material excluded by default.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005", "SRC-007" ] }, { "id": "review-concern-reference", "name": "Concern reference", "description": "Policy-level reference to external trust, conflict, incident or quarantine record; no detection, remediation or exploitation procedure.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005", "SRC-007" ] }, { "id": "review-decision-scope", "name": "Decision scope", "description": "Decision purpose, time, scope and applicable grant reference; current recall authorization remains external.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-005", "SRC-007" ] } ], "artifacts": [ { "id": "artifact-review", "name": "Formation review reference record", "description": "A proposed versioned evidence view for formation review evidence. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-005", "SRC-007" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-governance", "name": "Purpose and controlled disclosure", "description": "Bind the occurrence description to purpose, authority and its own records policy.", "rationale": "Lineage can reveal sensitive information even when the created item is broadly readable.", "source_refs": [ "SRC-007" ], "layers": [ { "id": "layer-purpose", "name": "Formation authority context", "description": "The description records the applicable formation authority context without granting access or evaluating permission. Tenant and subject scopes cannot be inferred from source authorship.", "source_refs": [ "SRC-007" ], "findings": [ { "id": "finding-purpose", "name": "Purpose and scope binding", "description": "The description records the applicable formation authority context without granting access or evaluating permission. Tenant and subject scopes cannot be inferred from source authorship.", "source_refs": [ "SRC-007" ], "questions": [ { "id": "purpose-q01", "text": "Which policy or grant version authorized the relevant formation activity?", "kind": "authority", "answer_data": [ "purpose-authority-reference" ] }, { "id": "purpose-q02", "text": "For which declared purpose was this memory formed?", "kind": "privacy", "answer_data": [ "purpose-formation-purpose" ] }, { "id": "purpose-q03", "text": "Which tenant and subject scope constrain the event description?", "kind": "relationship", "answer_data": [ "purpose-scope-binding" ] }, { "id": "purpose-q04", "text": "How is missing or subsequently revoked authority recorded?", "kind": "exception", "answer_data": [ "purpose-authority-exception" ] } ], "data_elements": [ { "id": "purpose-authority-reference", "name": "Authority reference", "description": "External policy or grant identity, effective version and decision evidence, or explicit unresolved status.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-007" ] }, { "id": "purpose-formation-purpose", "name": "Formation purpose", "description": "Purpose declaration at formation and its owner; a purpose is not itself a legal basis.", "value_kind": "text", "cardinality": "1", "required": true, "source_refs": [ "SRC-007" ] }, { "id": "purpose-scope-binding", "name": "Scope binding", "description": "Required governing Dimension, tenant and subject references with confidentiality labels. No cross-tenant identity collapse.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-007" ] }, { "id": "purpose-authority-exception", "name": "Authority exception", "description": "Historical authorization state plus revocation or dispute reference. Current access decisions must use current external policy.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-007" ] } ], "artifacts": [ { "id": "artifact-purpose", "name": "Formation purpose and scope record", "description": "A proposed versioned evidence view for purpose and scope binding. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-007" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-disclosure", "name": "Description minimization and retention", "description": "Policy governs event metadata independently of source and output payloads. Correction history must not become a reason for unlimited retention of personal data.", "source_refs": [ "SRC-007" ], "findings": [ { "id": "finding-disclosure", "name": "Lineage disclosure and disposition", "description": "Policy governs event metadata independently of source and output payloads. Correction history must not become a reason for unlimited retention of personal data.", "source_refs": [ "SRC-007" ], "questions": [ { "id": "disclosure-q01", "text": "Which audience may inspect each lineage component?", "kind": "access", "answer_data": [ "disclosure-view-policy" ] }, { "id": "disclosure-q02", "text": "Which retention and disposition rule applies to this event description?", "kind": "retention", "answer_data": [ "disclosure-retention-binding" ] }, { "id": "disclosure-q03", "text": "Which identifying details can be replaced by restricted references?", "kind": "privacy", "answer_data": [ "disclosure-minimization" ] }, { "id": "disclosure-q04", "text": "What minimal evidence may remain after authorized description disposal?", "kind": "lifecycle", "answer_data": [ "disclosure-disposition-evidence" ] } ], "data_elements": [ { "id": "disclosure-view-policy", "name": "View policy", "description": "Policy references for event, selector, participant, metric and artifact views; deny by default and avoid existence leaks.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-007" ] }, { "id": "disclosure-retention-binding", "name": "Retention binding", "description": "External retention policy and version, trigger, lawful hold reference and disposition owner.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-007" ] }, { "id": "disclosure-minimization", "name": "Minimization", "description": "Field-level redaction or reference choices and residual linkability assessment. Digests can still disclose sensitive equality.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-007" ] }, { "id": "disclosure-disposition-evidence", "name": "Disposition evidence", "description": "Authorized minimal tombstone or no retained record, reason, actor and external execution receipt. Item, source and backup deletion are not implied.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-007" ] } ], "artifacts": [ { "id": "artifact-disclosure", "name": "Description access and disposition profile", "description": "A proposed versioned evidence view for lineage disclosure and disposition. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-007" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-continuity", "name": "Correction and exchange", "description": "Keep descriptions versioned and projections honest about what they retain.", "rationale": "Stable occurrence identity survives report revision; exchanged evidence needs explicit mappings and consistency checks.", "source_refs": [ "SRC-002", "SRC-003", "SRC-006", "SRC-007" ], "layers": [ { "id": "layer-revision", "name": "Description revision control", "description": "Correction changes the description of the event. A genuinely new item version has its own formation occurrence. The event model does not consolidate memory or choose which conflicting item is true.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ], "findings": [ { "id": "finding-revision", "name": "Correction provenance", "description": "Correction changes the description of the event. A genuinely new item version has its own formation occurrence. The event model does not consolidate memory or choose which conflicting item is true.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ], "questions": [ { "id": "revision-q01", "text": "Which immutable revision identifies this occurrence description?", "kind": "identity", "answer_data": [ "revision-revision-key" ] }, { "id": "revision-q02", "text": "Which prior description is corrected and on what evidence?", "kind": "provenance", "answer_data": [ "revision-correction-basis" ] }, { "id": "revision-q03", "text": "How are concurrent conflicting corrections surfaced?", "kind": "constraint", "answer_data": [ "revision-concurrency-basis" ] }, { "id": "revision-q04", "text": "Which separate formation occurrence describes a newly derived memory version?", "kind": "relationship", "answer_data": [ "revision-derived-event" ] } ], "data_elements": [ { "id": "revision-revision-key", "name": "Revision key", "description": "Master-scoped report revision tied to stable occurrence key; distinct from the memory-item version.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "revision-correction-basis", "name": "Correction basis", "description": "Prior revision, changed claims, reason, author and supporting evidence references.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "revision-concurrency-basis", "name": "Concurrency basis", "description": "Expected prior revision, observed competing revisions and conflict reference; reject stale replacement instead of silent last-write-wins.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "revision-derived-event", "name": "Derived event", "description": "New event and item-version references; consolidation or precedence behavior remains outside this model.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] } ], "artifacts": [ { "id": "artifact-revision", "name": "Description revision statement", "description": "A proposed versioned evidence view for correction provenance. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-exchange", "name": "Interchange and validation", "description": "Proposed PROV-O and CloudEvents bindings are conceptual. A transport envelope, a provenance graph and this description have different identities and constraints.", "source_refs": [ "SRC-002", "SRC-003", "SRC-004", "SRC-006" ], "findings": [ { "id": "finding-exchange", "name": "Projection and consistency evidence", "description": "Proposed PROV-O and CloudEvents bindings are conceptual. A transport envelope, a provenance graph and this description have different identities and constraints.", "source_refs": [ "SRC-002", "SRC-003", "SRC-004", "SRC-006" ], "questions": [ { "id": "exchange-q01", "text": "How does the selected profile map occurrence, activity and output into PROV-O?", "kind": "interoperability", "answer_data": [ "exchange-prov-mapping" ] }, { "id": "exchange-q02", "text": "Which transport identity carries a report of the occurrence?", "kind": "identity", "answer_data": [ "exchange-transport-binding" ] }, { "id": "exchange-q03", "text": "Which checks establish internal consistency of the exchanged description?", "kind": "validation", "answer_data": [ "exchange-validation-evidence" ] }, { "id": "exchange-q04", "text": "Which distinctions would be lost or unresolved in this projection?", "kind": "exception", "answer_data": [ "exchange-projection-loss" ] } ], "data_elements": [ { "id": "exchange-prov-mapping", "name": "Prov mapping", "description": "Profile version, qualifiedGeneration, activity and output entity mappings plus unmapped fields. Multiple activities may describe simultaneous co-generation under PROV constraints.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-004", "SRC-006" ] }, { "id": "exchange-transport-binding", "name": "Transport binding", "description": "CloudEvents source, id, type, specversion and explicit occurrence-key mapping; redelivery does not create another occurrence.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-004", "SRC-006" ] }, { "id": "exchange-validation-evidence", "name": "Validation evidence", "description": "Versioned validator reference and results for IDs, required bindings, references, temporal claims and access-safe projection. Schema validity is not fact verification.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-004", "SRC-006" ] }, { "id": "exchange-projection-loss", "name": "Projection loss", "description": "Unmapped claims, unknown values, redactions, unavailable targets and rejected conversions; do not silently discard these.", "value_kind": "collection", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-003", "SRC-004", "SRC-006" ] } ], "artifacts": [ { "id": "artifact-exchange", "name": "Projection validation report", "description": "A proposed versioned evidence view for projection and consistency evidence. Store only authorized minimum data; reference external masters.", "media_or_form": [ "structured record", "human-readable evidence view" ], "serial": true, "identity_strategy": "Authoritative master-system artifact ID, then governed IRI, then Dimension-assigned UUID or ULID. Bind event ID and revision; a timestamp or digest alone is not identity.", "source_refs": [ "SRC-002", "SRC-003", "SRC-004", "SRC-006" ] } ], "inline_only_rationale": null } ] } ] } ] }, "functions": [ { "id": "function-record", "name": "Record formation description", "description": "Proposed and unimplemented local operation. Record a claim about one created version; never execute extraction or create the memory item.", "inputs": [ "Occurrence key", "Output version binding", "Purpose, scope and accountable role", "Evidence state and observation time" ], "outputs": [ "Versioned description or refusal with reason" ], "preconditions": [ "Authorized writer and permitted purpose", "Resolvable version binding or explicitly disputed reference", "No failed attempt disguised as creation" ], "effects": [ "Creates only a local description revision; reported state does not grant recall permission" ], "source_refs": [ "SRC-001", "SRC-007" ] }, { "id": "function-lineage", "name": "Attach lineage and method evidence", "description": "Proposed and unimplemented local operation. Attach output-specific input influence and method declarations.", "inputs": [ "Event and expected revision", "Input and activity references", "Method declaration" ], "outputs": [ "New description revision or conflict report" ], "preconditions": [ "Authorized access to cited evidence", "Current expected revision", "Unknown influence remains unknown" ], "effects": [ "Adds scoped evidence pointers without copying source masters or rerunning the method" ], "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "function-confidence", "name": "Record confidence descriptor", "description": "Proposed and unimplemented local operation. Preserve reported metric context and assessment limits.", "inputs": [ "Event and expected revision", "Target, metric, value and evaluator", "Calibration reference or unknown state" ], "outputs": [ "Versioned descriptor or rejected incomplete interpretation" ], "preconditions": [ "Write authority", "Defined target and metric for interpretable numeric claims", "No automatic conversion to truth probability" ], "effects": [ "Records a reported assessment without executing a trust evaluation" ], "source_refs": [ "SRC-005" ] }, { "id": "function-review", "name": "Link formation review result", "description": "Proposed and unimplemented local operation. Bind an already made decision and its scope.", "inputs": [ "Event and expected revision", "Decision identity and issuer", "Evidence and scope references" ], "outputs": [ "Review linkage or unresolved-reference report" ], "preconditions": [ "Authorized writer", "Decision provenance and version available", "No implicit permission expansion" ], "effects": [ "Records decision evidence only; does not quarantine, release, rank or authorize memory" ], "source_refs": [ "SRC-005", "SRC-007" ] }, { "id": "function-correct", "name": "Correct formation description", "description": "Proposed and unimplemented local operation. Append a justified correction while preserving lawful minimum provenance.", "inputs": [ "Event and expected revision", "Changed claims and supporting evidence", "Correction authority and retention policy" ], "outputs": [ "New revision or stale-write refusal" ], "preconditions": [ "Authorized correction role", "Expected revision matches", "Retention and minimization rules resolved" ], "effects": [ "Supersedes the prior description; never reverses the occurrence or mutates the item" ], "source_refs": [ "SRC-001", "SRC-007" ] }, { "id": "function-project", "name": "Validate and project a permitted view", "description": "Proposed and unimplemented local operation. Check a description against a selected local profile and produce an access-filtered representation.", "inputs": [ "Description revision", "Mapping and validator version", "Audience and current policy" ], "outputs": [ "Consistency report and filtered projection, or refusal" ], "preconditions": [ "Read and projection authority", "Selected mapping declares losses", "Referenced records are not followed beyond access scope" ], "effects": [ "Produces local evidence only; no conformance certification, publication or external write" ], "source_refs": [ "SRC-002", "SRC-003", "SRC-004", "SRC-006", "SRC-007" ] } ], "composition": [ { "target": "WM-MEM-002", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. The created item version is externally mastered. Registry parent_ids is interpreted as a required reference, not event inheritance from a persistent item.", "required": true, "source_refs": [ "SRC-001", "SRC-002" ] }, { "target": "WM-MEM-001", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Store context may be referenced; persistence, transaction and tenant administration remain at the store.", "required": false, "source_refs": [ "SRC-001", "SRC-007" ] }, { "target": "WM-MEM-003", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. An episode can be a versioned input; its participant and episode lifecycle remain external.", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "target": "WM-MEM-007", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Recall uses existing memory; it does not prove formation. Reference a triggering recall only when evidenced.", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "target": "WM-MEM-008", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Consolidation can generate a new version and linked formation occurrence; merging and retirement belong there.", "required": false, "source_refs": [ "SRC-001", "SRC-002" ] }, { "target": "WM-MEM-009", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Reference conflict or precedence outcomes; do not choose winners here.", "required": false, "source_refs": [ "SRC-005" ] }, { "target": "WM-MEM-010", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Policy and disposal execution stay external; bind rules and receipts for this description.", "required": false, "source_refs": [ "SRC-007" ] }, { "target": "WM-MEM-011", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Reference historical authority and current scope. This event never creates or enforces a grant.", "required": false, "source_refs": [ "SRC-007" ] }, { "target": "WM-MEM-012", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Import lineage and external portability receipts can be linked; packaging and transfer remain external.", "required": false, "source_refs": [ "SRC-002", "SRC-006" ] }, { "target": "WM-MEM-018", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Formation-time confidence is a recorded descriptor, not an owned trust assessment or its lifecycle.", "required": false, "source_refs": [ "SRC-005" ] }, { "target": "WM-MEM-019", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Reference only an externally handled concern at policy level; investigation and remediation stay external.", "required": false, "source_refs": [ "SRC-007" ] }, { "target": "WM-MEM-020", "relation": "REFERENCE", "purpose": "Proposed local binding based on registry purpose; semantic grounding only, not external-standard endorsement of model IDs. Write-time review and quarantine outcomes are referenced, never executed by a formation description.", "required": false, "source_refs": [ "SRC-007" ] }, { "target": "W3C PROV-O", "relation": "ALIGN", "purpose": "Conceptually align an output version to an entity, the generating run to an activity and the occurrence to qualified generation. Conformance is not asserted.", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-003" ] }, { "target": "CloudEvents v1.0.2", "relation": "ALIGN", "purpose": "Optional envelope for a report; retain explicit occurrence identity and do not infer exactly-once creation. Conformance is not asserted.", "required": false, "source_refs": [ "SRC-006" ] }, { "target": "W3C Data Quality Vocabulary", "relation": "ALIGN", "purpose": "Optional measurement descriptor for confidence; no universal truth or trust scale. Conformance is not asserted.", "required": false, "source_refs": [ "SRC-005" ] } ], "serviceLayers": { "dimension": { "owner_package_requirements": [ "Declare a role-based memory-system owner, governing Dimension and tenant namespace.", "Pin the item master, event master, evidence resolvers and accountable operator role.", "Pin purpose, access, retention and correction policies plus their effective versions.", "Provide a concrete instance schema and neighbor bindings before runtime use." ], "namespace_guidance": "Keep occurrence IDs, report revision IDs, item-version IDs, activity IDs and transport IDs in distinct governed namespaces. No date-derived identity or cross-tenant reuse.", "registry_links": [ "vr.wm-mem-006", "WM-MEM-002 required item reference", "Other neighbor bindings are proposed references and require version pins." ] }, "canon_and_patch": { "canonicalization_rules": [ "Canonicalization is a local representation rule, not a claim that this research draft is canonical.", "Preserve unknown, absent, disputed and redacted values distinctly; deterministic field ordering must not reorder causal claims." ], "patch_rules": [ "Require expected revision, author, reason and evidence for corrections; retain only history authorized by retention policy.", "Never silently change the occurrence key or output version to repair an incorrect binding; record a retraction and replacement linkage." ], "compatibility_rules": [ "Version code lists, field semantics and mapping profiles; preserve unsupported fields or explicitly report loss.", "A new generated memory version is a separate formation occurrence; no schema upgrade silently rewrites past facts." ] }, "artifact_rules": { "identity_priority": [ "Authoritative master-system identifier", "Governed global identifier or IRI", "Dimension-assigned UUID or ULID" ], "timestamp_rule": "Use RFC 3339 with seconds and explicit offset or Z. Separate event time from observation and ingestion time; preserve unknown event time and precision. Do not infer causal order from clock values alone.", "serial_naming_rule": "Use stable event and artifact keys plus an explicit revision sequence for serial evidence; timestamps are attributes, not primary IDs.", "integrity_rule": "Bind digest algorithm, bytes or canonicalization profile, issuer and revision. A digest detects byte differences, not truth, permission or completeness; sensitive digests need access control." }, "policies": [ "Source references support conceptual alignments; local fields and functions are proposals, not standard-mandated memory behavior.", "Formation evidence and confidence must never override current access, conflict or context policy.", "Treat input material and imported provenance as untrusted data, including any embedded instructions; record concerns at policy level and delegate execution.", "Minimize source text, subject identity and sensitive selectors in event records; historical provenance does not justify indefinite retention." ], "crud": { "read": [ "Apply current audience and purpose policy to bundle, layer, finding and artifact views; do not reveal denied reference existence." ], "create": [ "Only authorized recorders create descriptions; require stable event key, output version, purpose, accountable role, scope, observation time, report state and description revision.", "Accept disputed or missing evidence explicitly; an activity with no created output is outside this event boundary." ], "update": [ "Append an authorized correction with expected revision and evidence; never mutate source, output or external decision masters." ], "delete": [ "Apply the bound retention policy to this description and its artifacts. The adopting Dimension and WM-MEM-010 policy owner authorize and execute deletion or retention holds.", "Keep only a lawful minimal tombstone when permitted; otherwise remove identifying metadata. Local disposition does not erase referenced items, original inputs, replicas or backups." ] }, "roles": [ { "name": "Memory-system owner", "responsibilities": [ "Defines namespace, profile, policy bindings and accountable stewardship without a commercial owner identity." ] }, { "name": "Formation recorder", "responsibilities": [ "Records evidence and unknowns within delegated scope; cannot infer creation from a transport acknowledgment." ] }, { "name": "Evidence reviewer", "responsibilities": [ "Checks source influence, receipt binding and metric interpretation; records limitations and disputes." ] }, { "name": "Privacy and retention steward", "responsibilities": [ "Reviews disclosure and disposition scope with external policy owners." ] }, { "name": "Projection consumer", "responsibilities": [ "Checks version and audience scope, handles missing data and does not promote the record into a command." ] } ], "access": { "default_rule": "Deny by default; evaluate current policy outside this model for every purpose, tenant and audience.", "scopes": [ "bundle", "layer", "finding", "artifact" ], "exceptions": [ "Document narrow, time-limited, authorized exceptions through an external grant; the event cannot issue its own exception.", "Disposal or a restricted source can justify a redacted view, never fabricated evidence." ], "audit_requirements": [ "Reference externally governed audit records for reads, changes and disposition; this model does not own audit-trail execution.", "Record actor, purpose, policy version, revision and result with minimum necessary detail and bounded retention." ] }, "agents_bootstrap": { "filename": "AGENTS.md", "required_fields": [ "Name", "Type", "Specification URL", "Storage type URL", "Interface URL", "Processes URL" ], "read_order": [ "Read AGENTS.md and the owning Dimension policy.", "Read spec.yaml, review holds and pinned item and policy references.", "Resolve authorized evidence before filling unknown fields; validate profile and access before writes." ] } }, "coverage": { "claim": "Source-grounded proposed structure for one agent-memory formation occurrence, with separate occurrence, report, activity and output-version identities. Separate local no-tools self-audit completed. Reviewable draft with source-verification, profile, executable-conformance and independent-review holds.", "confidence": "medium", "checklist": [ { "dimension": "identity", "status": "covered", "notes": "Occurrence, description revision, created item version and transport identity are distinct." }, { "dimension": "lifecycle", "status": "covered", "notes": "Description evidence states and corrections only; item lifecycle stays external." }, { "dimension": "relationships", "status": "covered", "notes": "Required item reference and optional neighbor bindings; no containment inferred from parent_ids." }, { "dimension": "temporal", "status": "covered", "notes": "Formation, observation, ingestion, precision and causal evidence are distinct." }, { "dimension": "provenance", "status": "covered", "notes": "Output-specific input influence, method and responsible participants are captured as evidence." }, { "dimension": "ownership", "status": "covered", "notes": "Role-based operator accountability and external master ownership remain explicit." }, { "dimension": "validation", "status": "gap", "notes": "Research structure is validated; executable instance rules and conformance mappings remain deferred." }, { "dimension": "access", "status": "covered", "notes": "Current externally evaluated purpose and tenant scope protect each evidence view." }, { "dimension": "retention and deletion", "status": "covered", "notes": "Description-specific disposal with external authority and minimal lawful history." }, { "dimension": "interoperability", "status": "gap", "notes": "Conceptual PROV-O, DQV and CloudEvents alignments require implementation and loss tests." }, { "dimension": "confidence", "status": "covered", "notes": "Optional value requires target, metric, evaluator and interpretation limits; no universal truth score." }, { "dimension": "physical properties", "status": "not-applicable", "notes": "An information formation occurrence has no intrinsic mass or geometry; any source observation location stays an external reference." }, { "dimension": "capabilities and actions", "status": "covered", "notes": "Six proposed description operations have authority preconditions and bounded local effects." }, { "dimension": "source verification", "status": "gap", "notes": "Selected official content accessible through web tooling; direct HTTP, hashes and latest-version assurance remain open." } ], "known_omissions": [ "Independent second-provider review is absent under the owner waiver.", "Direct HTTP checks are unattempted because the sandbox blocks them; HTTP status and body digests remain unmeasured. Browser-mediated selected content was reviewed, not independently verified.", "Dated DQV edition, current source versions and errata, licenses and profile applicability still need verification.", "Concrete nested instance schemas, executable mappings, conformance fixtures and pinned neighbor versions are not implemented.", "No validated calibration profile, identity federation scheme, exactly-once persistence guarantee or legal basis determination is supplied." ], "conflicts": [], "regional_assumptions": [ "No universal legal basis, consent rule or retention duration is assumed. Adopting jurisdictions require profile review.", "NIST Privacy Framework 1.0 is a selected voluntary historical baseline; it is not asserted to be the latest edition." ], "adversarial_checks": [ "A redelivered event message does not create a second formation occurrence.", "A failed write with no created version is an activity attempt, not a formation event.", "An input used by a batch is not automatically a derivation source for every output.", "A high extraction confidence does not authorize recall or prove truth.", "A correction of the event description does not create a new item version or erase history of an occurrence.", "Retention and privacy can remove sensitive lineage; immutable revision semantics do not require perpetual retention.", "PROV can allow simultaneous generation descriptions from different activities; no universal one-activity-per-item restriction is asserted." ] }, "researchAdjudication": { "providerMode": "single-provider-waiver", "activeProviders": [ "codex" ], "waivedProviders": [ "claude", "grok" ], "providerPolicy": { "contract_version": "1.0.0", "mode": "single-provider-waiver", "effective_at": "2026-09-06T00:00:00Z", "scope": "Canonical single-stream subject-model research after the six-workstream consolidation", "active_providers": [ "codex" ], "waived_providers": [ { "provider": "claude", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "Claude produced no result on prior 1800-second and 900-second attempts and again timed out on bounded 600-second Sonnet and 300-second Haiku passes. The owner prioritized completion over provider availability." }, { "provider": "grok", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "The repository owner authorized completion without Grok when Grok is unavailable, slow or schema-invalid. Grok may still be attempted as a bounded supplemental reviewer, but its failure never blocks a valid Claude plus no-tools result." } ], "review_rule": "Codex may complete source-grounded fallback research after bounded Claude and Grok attempts fail. It requires a separate no-tools adversarial audit and remains reviewable-draft with a visible absence-of-external-review hold.", "supplemental_provider_attempts": [ { "provider": "claude", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." }, { "provider": "grok", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." } ] }, "boundaryDecision": { "entry_kind": "event", "status": "accepted", "rationale": "The subject is the occurrence completing creation of one memory-item version, described through a separately revisable record. The registry parent identifies the item reference and does not make an event an entity subtype. Generating activities and persistent memory lifecycle remain separately mastered." }, "decisions": [ { "concept": "Event versus item and activity", "disposition": "accepted", "rationale": "The root describes creation of one output version, not the persistent item or duration of an extraction run. Unknown activity or time does not justify fabricating those values." }, { "concept": "Registry parent and source authority", "disposition": "qualified", "rationale": "WM-MEM-002 is a required externally mastered output reference. The standalone-mm registry plane is not the subject-kind enum. No relation-ledger row or legacy alias exists; proposed neighbor bindings are not externally ratified edges. Registry provenance text is historical metadata, not evidence of external review for this run." }, { "concept": "Failed and disputed creation claims", "disposition": "separated", "rationale": "A failed activity with no created output is outside the occurrence model. A reported occurrence may carry disputed or missing receipt evidence; consumers must not treat that report state as proof that an item exists." }, { "concept": "Batch and co-generation", "disposition": "accepted with qualification", "rationale": "One event root identifies one output version and can reference batch context. PROV uniqueness is scoped to entity and activity; simultaneous co-generation by multiple activities is not prohibited or collapsed into a false universal one-activity constraint." }, { "concept": "Transport duplicate and replay", "disposition": "separated", "rationale": "CloudEvents source and id can distinguish redelivery, but neither message acknowledgment nor equal payload proves creation or establishes exactly-once persistence. Explicit occurrence and item-version identities remain necessary." }, { "concept": "Lineage and imported records", "disposition": "accepted", "rationale": "Inputs require output-specific influence evidence rather than assuming every used input derived every output. Original formation, replica transport and creation of a new local version remain distinct; absent source evidence is visible." }, { "concept": "Time and report state", "disposition": "accepted", "rationale": "Formation, observation and ingestion times are separated. Unknown event time, clock discrepancy and causal consistency limits survive projection. Corroboration is an evidence state and does not imply trust or permission." }, { "concept": "Confidence semantics", "disposition": "accepted with hold", "rationale": "Target, metric, value, evaluator and calibration limits make the proposed descriptor inspectable. Optional and unknown confidence are legitimate. The pack provides no calibrated probability model or universal truth scale." }, { "concept": "Review and authority ownership", "disposition": "separated", "rationale": "Decision, trust, quarantine, sharing and retention records remain references. Historical formation authority is not current recall permission. The proposed functions only record evidence or prepare local views." }, { "concept": "Correction and disposal", "disposition": "accepted with policy dependency", "rationale": "Stable occurrence identity and report revisions are distinct from new item versions. Expected-revision checks prevent silent overwrite. Minimum lawful provenance and disposal rules constrain retained history; no perpetual personal-data retention follows from versioning." }, { "concept": "Security and privacy", "disposition": "bounded", "rationale": "Untrusted inputs stay data, concerns stay at policy level and external owners retain investigation and enforcement. Event metadata, selectors and equality-revealing digests need controlled views even if the item is readable." }, { "concept": "Sources and standards", "disposition": "limited", "rationale": "Seven primary records support selected conceptual distinctions across four organizations. Browser-mediated access is not a direct HTTP measurement or complete current-version audit. The source ledger discloses discovery failures, a pending DQV edition pin and the historical NIST baseline." }, { "concept": "Instance conformance and operational claims", "disposition": "deferred", "rationale": "The candidate object fields and functions are research proposals, not executable schemas. Nested constraints, neighbor pins, permission implementation, mappings and adversarial fixtures remain open before runtime adoption." }, { "concept": "Independent review", "disposition": "waived and held", "rationale": "Claude and Grok have zero attempts for this run. This separate phase is a Codex self-audit of frozen evidence and cannot substitute for an independent provider or justify canonical promotion." } ], "publicationHolds": [ "Independent external review is absent. Claude and Grok were skipped with zero attempts under the owner-authorized single-provider waiver. The separate Codex no-tools self-audit is not an independent second-provider review.", "Direct HTTP source checks were not attempted because of the sandbox restriction; statuses and response hashes are unmeasured. Selected browser content supports the cited concepts, but current versions, errata, exact DQV edition and licensing checks remain open. Run check_sources.py outside the sandbox and separately verify claims and versions.", "Adopting profiles must establish applicable authority, tenant scope, retention, disclosure rules, creation-receipt semantics and confidence calibration limits. No legal-compliance, factual-truth or exactly-once persistence assurance is provided.", "Concrete nested instance schemas, pinned neighbor bindings, executable PROV-O/DQV/CloudEvents mappings and adversarial conformance fixtures remain incomplete. Proposed operations are unimplemented and cannot be used as runtime certification.", "Independent external review was explicitly waived by the repository owner; this codex-only result remains a reviewable draft." ], "deferredResearch": [ "Restore independent provider review before any canonical or publishable-draft promotion.", "Verify source reachability, response integrity, editions, errata, licensing and selected claims; do not close semantic gates on HTTP success alone.", "Implement and test instance schemas and mappings with replay, batch outputs, simultaneous co-generation, denied lineage, unknown time, ambiguous writes, imported replicas, stale corrections and disposal scenarios.", "Develop adopting profiles for creation evidence, calibration, authorization and scoped retention using qualified review." ] }, "statistics": { "sources": 7, "bundles": 6, "layers": 12, "findings": 12, "questions": 48, "artifacts": 12, "functions": 6 } }