# Vercy AI instruction - YAML 1.2 (JSON-compatible) { "vercy": "1.0-draft", "publication": { "status": "published", "adjudicationStatus": "reviewable-draft", "publishableCanonical": false, "generatedAt": "2026-10-21T17:20:06Z", "synthesisSha256": "cfa1e20f7832ba40667a60a32745c2863db6802e80e5c4fdc26f95a3c0541879", "providerMode": "single-provider-waiver", "providers": [ "Codex" ], "waivedProviders": [ "Claude", "Grok" ] }, "metaModel": { "id": "WM-MEM-007", "registryId": "vr.wm-mem-007", "name": "Memory Recall Event", "version": "0.1.0", "previousVersions": [], "entryKind": "event", "family": "World Models", "category": "Information and virtual systems", "industry": [ "Cross-industry" ], "domain": [ "INF.MEM.RCL" ], "tags": [ "memory", "recall", "event", "inf.mem.rcl" ], "status": "published" }, "canonicalUrl": "https://ver.cy/models/wm-mem-007-memory-recall-event/", "sourceUrl": "https://github.com/ver-cy/world-models/tree/feat/mega-model-registry/research/runs/wm-mem-007", "model": { "registry_id": "vr.wm-mem-007", "model_id": "WM-MEM-007", "name": "Memory Recall Event", "entry_kind": "event", "purpose": "Describe one agent-memory retrieval attempt: its query, authorized scope, observed candidates and ranking, and evidence of downstream selection or use.", "scope_statement": "Format-independent event record for a bounded recall attempt, including failed, denied, empty or partial outcomes. It captures observations and references to external decisions rather than performing retrieval or certifying answer grounding.", "in_scope": [ "Occurrence identity, request intent and query transformation references.", "Reported authority, searched state, retrieval stages and completion qualifiers.", "Returned item/passage representations, ranks, score meanings and candidate lineage.", "Selection, handoff and attributed downstream-use evidence, including explicit unknowns.", "Governance, correction, disclosure and disposition of the recall trace itself." ], "out_of_scope": [ "Biological memory, psychological recall or claims about a model internal cognitive state.", "Memory item formation, consolidation, trust judgment, conflict precedence and memory-store lifecycle.", "Index construction, embedding generation, retrieval/reranking execution and context packing.", "Answer generation, statement entailment, factual truth and causal attribution of private model reliance.", "Grant creation, policy enforcement, generic audit infrastructure and incident response execution." ], "boundary_notes": [ { "neighbor": "WM-MEM-001", "distinction": "Memory Store remains the master for tenancy, storage and store lifecycle; this event references the searched store and observed scope.", "source_refs": [ "SRC-001", "SRC-008" ] }, { "neighbor": "WM-MEM-002", "distinction": "Memory Item remains the durable record master. Registry parent_ids is a candidate navigation relation, not event inheritance or mandatory containment. Empty and denied attempts can reference no item.", "source_refs": [ "SRC-001", "SRC-002", "SRC-004" ] }, { "neighbor": "WM-MEM-006", "distinction": "Memory Formation Event owns creation lineage; recall reads prior records and does not form or revise them.", "source_refs": [ "SRC-001" ] }, { "neighbor": "WM-MEM-009", "distinction": "Memory Conflict and Precedence Rule owns conflict resolution policy. The recall trace records external decision references without resolving contradictions.", "source_refs": [ "SRC-008" ] }, { "neighbor": "WM-MEM-010", "distinction": "Memory Retention and Forgetting Policy owns schedule and erasure rules; this event records its own disposition binding and executor receipt.", "source_refs": [ "SRC-008" ] }, { "neighbor": "WM-MEM-011", "distinction": "Memory Scope and Sharing Grant owns access authority. Recall records reported decisions and never creates grants.", "source_refs": [ "SRC-008" ] }, { "neighbor": "WM-MEM-013", "distinction": "Context Assembly owns context packing and actual inclusion. A selected or delivered candidate is not automatically included.", "source_refs": [ "SRC-001" ] }, { "neighbor": "WM-MEM-014", "distinction": "Retrieval Index owns indexing, chunking, embeddings and refresh lifecycle. Recall references configuration and observed snapshot only.", "source_refs": [ "SRC-003", "SRC-005" ] }, { "neighbor": "WM-MEM-015", "distinction": "Retrieval Passage owns passage identity and source lineage. Recall carries a versioned passage locator and candidate role.", "source_refs": [ "SRC-006" ] }, { "neighbor": "WM-MEM-016", "distinction": "Answer Grounding owns claim-to-evidence support assessment. Recall links use receipts and grounding records without inferring entailment or causal model reliance.", "source_refs": [ "SRC-001", "SRC-006" ] }, { "neighbor": "WM-MEM-017", "distinction": "Context Policy owns overriding context rules. Recall records applicable version and external decision receipt.", "source_refs": [ "SRC-008" ] }, { "neighbor": "WM-MEM-018", "distinction": "Memory Trust Assessment owns trust judgments; retrieval rank and score never substitute for trust.", "source_refs": [ "SRC-003", "SRC-008" ] }, { "neighbor": "WM-MEM-019", "distinction": "Memory Poisoning Incident owns incident handling; this record provides restricted evidence links only.", "source_refs": [ "SRC-008" ] }, { "neighbor": "WM-MEM-020", "distinction": "Memory Quarantine and Redaction owns quarantine decisions; the recall trace records referenced exclusion or redaction receipts.", "source_refs": [ "SRC-008" ] } ] }, "sources": [ { "id": "SRC-001", "title": "PROV-DM: The PROV Data Model", "organization": "W3C", "url": "https://www.w3.org/TR/prov-dm/", "version_or_date": "Recommendation, 2013-04-30", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:18:43Z", "relevance": "Sections 5.1 and 5.2 distinguish activities, versioned entities, usage and derivation. Proposed recall lineage applies these concepts; it is not evidence of answer correctness." }, { "id": "SRC-002", "title": "CloudEvents Specification", "organization": "CNCF", "url": "https://raw.githubusercontent.com/cloudevents/spec/v1.0.2/cloudevents/spec.md", "version_or_date": "1.0.2", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:18:43Z", "relevance": "Occurrence and event distinction; source plus id identifies duplicate delivery; event envelope is an optional alignment rather than the recall subject itself." }, { "id": "SRC-003", "title": "Apache Lucene TopDocs", "organization": "Apache Software Foundation", "url": "https://lucene.apache.org/core/10_3_1/core/org/apache/lucene/search/TopDocs.html", "version_or_date": "10.3.1", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T17:18:43Z", "relevance": "Returned top hits, sorted merge, tie breaking and reciprocal rank fusion motivate separate stage ranks and score meanings. Implementation example, not a universal recall schema." }, { "id": "SRC-004", "title": "Apache Lucene TotalHits", "organization": "Apache Software Foundation", "url": "https://lucene.apache.org/core/10_3_1/core/org/apache/lucene/search/TotalHits.html", "version_or_date": "10.3.1", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T17:18:43Z", "relevance": "Exact counts and lower bounds differ. A returned hit count alone cannot establish full corpus coverage or retrieval recall quality." }, { "id": "SRC-005", "title": "Apache Solr Common Query Parameters", "organization": "Apache Software Foundation", "url": "https://solr.apache.org/guide/solr/latest/query-guide/common-query-parameters.html", "version_or_date": "Page labels 10.0 at review; moving latest URL, immutable pin unresolved", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T17:18:43Z", "relevance": "Query parser, filters, limits, sorting, debug evidence and partial-result indicators support request and completion records. API behavior is illustrative and version dependent." }, { "id": "SRC-006", "title": "Web Annotation Data Model", "organization": "W3C", "url": "https://www.w3.org/TR/annotation-model/", "version_or_date": "Recommendation, 2017-02-23", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:18:43Z", "relevance": "Specific resources, selectors and states support version-aware passage references. An annotation locates content but does not prove that an answer used it." }, { "id": "SRC-007", "title": "RFC 3339: Date and Time on the Internet: Timestamps", "organization": "IETF", "url": "https://www.rfc-editor.org/rfc/rfc3339", "version_or_date": "RFC 3339, July 2002; errata and update review pending", "source_type": "standard", "primary_source": true, "authority_tier": 1, "accessed_at": "2026-10-21T17:18:43Z", "relevance": "Section 5.6 supplies timestamp grammar with seconds and offset. The local profile separately records occurrence and observation time and does not derive duration from unsynchronized clocks." }, { "id": "SRC-008", "title": "OWASP LLM08:2025 Vector and Embedding Weaknesses", "organization": "OWASP", "url": "https://genai.owasp.org/llmrisk/llm082025-vector-and-embedding-weaknesses/", "version_or_date": "2025 edition, living web page", "source_type": "first-party-doc", "primary_source": true, "authority_tier": 2, "accessed_at": "2026-10-21T17:18:43Z", "relevance": "Policy-level guidance on permission-aware retrieval, cross-context leakage, source validation and retrieval logging. It does not certify a deployment or mandate perpetual payload retention." } ], "structure": { "bundles": [ { "id": "bundle-request", "name": "Recall request", "description": "Occurrence identity and submitted retrieval intent.", "rationale": "Local research grouping for occurrence identity and submitted retrieval intent. The cited distinctions motivate this proposal; no external specification mandates these nodes.", "source_refs": [ "SRC-001", "SRC-002", "SRC-005", "SRC-007", "SRC-008" ], "layers": [ { "id": "layer-occurrence", "name": "Recall occurrence identity", "description": "One bounded agent-memory retrieval attempt is an event even when it runs for an interval. A repeated execution gets a new attempt identity; redelivery and corrections refer to the original occurrence. The recorded trace is an artifact of that occurrence.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ], "findings": [ { "id": "finding-occurrence", "name": "Recall occurrence identity", "description": "One bounded agent-memory retrieval attempt is an event even when it runs for an interval. A repeated execution gets a new attempt identity; redelivery and corrections refer to the original occurrence. The recorded trace is an artifact of that occurrence.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ], "questions": [ { "id": "question-occurrence-1", "text": "Which master identifier and producer scope identify this recall attempt?", "kind": "identity", "answer_data": [ "event_id", "producer_scope", "record_revision" ] }, { "id": "question-occurrence-2", "text": "Is this a new attempt, a transport duplicate, or a correction of an existing event?", "kind": "classification", "answer_data": [ "occurrence_relation", "prior_event_ref", "duplicate_basis" ] }, { "id": "question-occurrence-3", "text": "Which request, session and optional retry chain connect the event to its caller?", "kind": "relationship", "answer_data": [ "request_ref", "session_ref", "retry_of", "parent_attempt_ref" ] }, { "id": "question-occurrence-4", "text": "When did the attempt start and end, and when was its evidence observed?", "kind": "temporal", "answer_data": [ "started_at", "ended_at_or_unknown", "observed_at", "clock_uncertainty" ] } ], "data_elements": [ { "id": "data-occurrence-1", "name": "Event key", "description": "Master occurrence id and producer namespace; never the query text or date.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "data-occurrence-2", "name": "Occurrence relations", "description": "Typed request, retry, parent and duplicate references; a new retry is not an overwrite.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "data-occurrence-3", "name": "Event times", "description": "RFC 3339 occurrence start/end and separate observation times with explicit unknown state.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] }, { "id": "data-occurrence-4", "name": "Record revision", "description": "Version of the descriptive record; does not create another retrieval occurrence.", "value_kind": "identifier", "cardinality": "1", "required": true, "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] } ], "artifacts": [ { "id": "artifact-occurrence", "name": "Recall occurrence record", "description": "Versioned, access-controlled evidence for recall occurrence identity. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-007" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-query", "name": "Query and retrieval intent", "description": "Capture the effective retrieval request and its declared transformation path. Text, identifier, vector or mixed inputs are possible; opaque or redacted inputs are explicit. No confidential query or embedding is required in general logs.", "source_refs": [ "SRC-005", "SRC-008" ], "findings": [ { "id": "finding-query", "name": "Query and retrieval intent", "description": "Capture the effective retrieval request and its declared transformation path. Text, identifier, vector or mixed inputs are possible; opaque or redacted inputs are explicit. No confidential query or embedding is required in general logs.", "source_refs": [ "SRC-005", "SRC-008" ], "questions": [ { "id": "question-query-1", "text": "What retrieval purpose and input form were declared by the caller?", "kind": "definition", "answer_data": [ "purpose", "query_kind", "query_ref_or_redaction" ] }, { "id": "question-query-2", "text": "How does the effective query differ from the submitted query?", "kind": "provenance", "answer_data": [ "original_query_ref", "effective_query_ref", "transformation_ref", "unknown_transformations" ] }, { "id": "question-query-3", "text": "Which requested limits, filters and ranking profile constrained the attempt?", "kind": "constraint", "answer_data": [ "requested_k", "filters_ref", "ranking_profile_version", "budget" ] }, { "id": "question-query-4", "text": "Which query fields may be retained and which must be minimized or withheld?", "kind": "privacy", "answer_data": [ "field_classification", "retention_basis", "redaction_reason" ] } ], "data_elements": [ { "id": "data-query-1", "name": "Query descriptor", "description": "Input kind, purpose, controlled query reference and unavailable/redacted state.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-008" ] }, { "id": "data-query-2", "name": "Transformation references", "description": "Versioned external rewrite or embedding procedure references; no procedure ownership.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-005", "SRC-008" ] }, { "id": "data-query-3", "name": "Requested controls", "description": "Requested filters, limits, ordering and retrieval profile version, distinct from observed behavior.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-008" ] }, { "id": "data-query-4", "name": "Query disclosure", "description": "Field-level retention and access classification for raw text, vectors and references.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-005", "SRC-008" ] } ], "artifacts": [ { "id": "artifact-query", "name": "Query intent record", "description": "Versioned, access-controlled evidence for query and retrieval intent. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-005", "SRC-008" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-scope", "name": "Authorized search context", "description": "Recorded authority and observed searchable state.", "rationale": "Local research grouping for recorded authority and observed searchable state. The cited distinctions motivate this proposal; no external specification mandates these nodes.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006", "SRC-008" ], "layers": [ { "id": "layer-authorization", "name": "Scope and authority evidence", "description": "Record the caller, tenant and purpose scope plus externally issued authorization decisions for this attempt. Policy and grant masters decide eligibility. A retrieval result neither grants access nor licenses subsequent use.", "source_refs": [ "SRC-008" ], "findings": [ { "id": "finding-authorization", "name": "Scope and authority evidence", "description": "Record the caller, tenant and purpose scope plus externally issued authorization decisions for this attempt. Policy and grant masters decide eligibility. A retrieval result neither grants access nor licenses subsequent use.", "source_refs": [ "SRC-008" ], "questions": [ { "id": "question-authorization-1", "text": "Whose caller and tenant scope applied when retrieval was requested?", "kind": "ownership", "answer_data": [ "caller_ref", "tenant_scope", "delegation_ref" ] }, { "id": "question-authorization-2", "text": "Which policy and grant revisions authorized, denied or left this attempt unresolved?", "kind": "authority", "answer_data": [ "policy_refs", "grant_refs", "decision_ref", "decision_state" ] }, { "id": "question-authorization-3", "text": "At which retrieval and handoff stages were authorization checks evidenced?", "kind": "access", "answer_data": [ "check_stage", "decision_time", "scope_snapshot", "recheck_ref" ] }, { "id": "question-authorization-4", "text": "How are denied identifiers and counts concealed from recipients without disclosure authority?", "kind": "security", "answer_data": [ "disclosure_view", "count_visibility", "reason_redaction" ] } ], "data_elements": [ { "id": "data-authorization-1", "name": "Scope binding", "description": "Caller, tenant, purpose and delegated authority references, with unknowns explicit.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-008" ] }, { "id": "data-authorization-2", "name": "Authority receipts", "description": "Externally mastered decisions and applicable policy/grant revisions.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-008" ] }, { "id": "data-authorization-3", "name": "Authority state", "description": "Reported allowed, denied, unresolved or not-observed status; no implicit allow.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-008" ] }, { "id": "data-authorization-4", "name": "Recipient view", "description": "Disclosure scope for query, candidate identities, reasons and counts.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-008" ] } ], "artifacts": [ { "id": "artifact-authorization", "name": "Scope decision receipt", "description": "Versioned, access-controlled evidence for scope and authority evidence. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-008" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-snapshot", "name": "Store and index observation", "description": "Reference each queried store and index revision, observation boundary and freshness claim. Index refresh, memory validity and record trust remain external. Reproducibility is qualified when the snapshot or implementation state is unavailable.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ], "findings": [ { "id": "finding-snapshot", "name": "Store and index observation", "description": "Reference each queried store and index revision, observation boundary and freshness claim. Index refresh, memory validity and record trust remain external. Reproducibility is qualified when the snapshot or implementation state is unavailable.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ], "questions": [ { "id": "question-snapshot-1", "text": "Which stores, indexes and namespaces were actually queried?", "kind": "composition", "answer_data": [ "store_refs", "index_refs", "namespace_refs", "unreached_targets" ] }, { "id": "question-snapshot-2", "text": "Which versions or observation boundaries identify the searched state?", "kind": "provenance", "answer_data": [ "snapshot_refs", "index_revision", "observation_boundary", "unknown_snapshot" ] }, { "id": "question-snapshot-3", "text": "What freshness or validity constraints were requested and observed?", "kind": "temporal", "answer_data": [ "as_of_time", "requested_validity", "freshness_receipt", "known_staleness" ] }, { "id": "question-snapshot-4", "text": "Which dependencies prevent another reviewer from reproducing this attempt?", "kind": "quality", "answer_data": [ "missing_versions", "nondeterministic_steps", "unavailable_inputs", "replay_limit" ] } ], "data_elements": [ { "id": "data-snapshot-1", "name": "Search targets", "description": "Store/index reference pairs including version and namespace, without copying their lifecycle.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "data-snapshot-2", "name": "Snapshot evidence", "description": "Snapshot or observed-state references and reasons where unavailable.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "data-snapshot-3", "name": "Temporal selection", "description": "Requested as-of/validity filters and externally reported freshness evidence.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] }, { "id": "data-snapshot-4", "name": "Reproduction limits", "description": "Missing inputs, changing indexes and nondeterministic execution constraints.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] } ], "artifacts": [ { "id": "artifact-snapshot", "name": "Search state manifest", "description": "Versioned, access-controlled evidence for store and index observation. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-001", "SRC-005", "SRC-006" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-execution", "name": "Observed execution", "description": "Stage evidence and qualified completion.", "rationale": "Local research grouping for stage evidence and qualified completion. The cited distinctions motivate this proposal; no external specification mandates these nodes.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-005" ], "layers": [ { "id": "layer-stages", "name": "Observed retrieval stages", "description": "Record the observed path through retrieval, merge, filtering and optional reranking. Stage identity preserves branch and retry attribution. This model records runtime evidence; it does not execute search, build indexes or implement ranking.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ], "findings": [ { "id": "finding-stages", "name": "Observed retrieval stages", "description": "Record the observed path through retrieval, merge, filtering and optional reranking. Stage identity preserves branch and retry attribution. This model records runtime evidence; it does not execute search, build indexes or implement ranking.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ], "questions": [ { "id": "question-stages-1", "text": "Which retrieval, merge and reranking stages were observed for this attempt?", "kind": "process", "answer_data": [ "stage_ids", "stage_types", "parent_stage_refs", "observation_coverage" ] }, { "id": "question-stages-2", "text": "Which implementation and parameter revisions were reported for each stage?", "kind": "provenance", "answer_data": [ "implementation_ref", "parameter_ref", "method_version", "unreported_fields" ] }, { "id": "question-stages-3", "text": "How were parallel branches and cached results linked to their original evidence?", "kind": "relationship", "answer_data": [ "branch_refs", "cache_origin_ref", "reuse_scope", "cache_age" ] }, { "id": "question-stages-4", "text": "What latency and resource observations are available with units and measurement basis?", "kind": "measurement", "answer_data": [ "duration", "duration_unit", "clock_method", "budget_consumption", "uncertainty" ] } ], "data_elements": [ { "id": "data-stages-1", "name": "Stage graph", "description": "Observed stage ids and typed dependencies; unknown stages are not inferred.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "data-stages-2", "name": "Stage configuration", "description": "External implementation/version/parameter bindings as reported.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "data-stages-3", "name": "Reuse lineage", "description": "Cache origin, branch and prior-result references with scope evidence.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] }, { "id": "data-stages-4", "name": "Stage measurements", "description": "Reported latency and resource quantities with units, method and observation time.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] } ], "artifacts": [ { "id": "artifact-stages", "name": "Retrieval stage trace", "description": "Versioned, access-controlled evidence for observed retrieval stages. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-001", "SRC-003", "SRC-005" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-completion", "name": "Completion and result completeness", "description": "Completion, coverage and delivered cardinality are separate observations. Empty, denied, failed, cancelled, timed out, partial and unobserved outcomes remain distinguishable. A successful transport response is not proof of exhaustive search.", "source_refs": [ "SRC-004", "SRC-005" ], "findings": [ { "id": "finding-completion", "name": "Completion and result completeness", "description": "Completion, coverage and delivered cardinality are separate observations. Empty, denied, failed, cancelled, timed out, partial and unobserved outcomes remain distinguishable. A successful transport response is not proof of exhaustive search.", "source_refs": [ "SRC-004", "SRC-005" ], "questions": [ { "id": "question-completion-1", "text": "What completion state and terminal evidence were reported for the attempt?", "kind": "state", "answer_data": [ "completion_state", "terminal_receipt", "ended_at_or_unknown" ] }, { "id": "question-completion-2", "text": "Was the result complete within the declared scope, partial, or of unknown completeness?", "kind": "quality", "answer_data": [ "completeness", "scope_ref", "partial_reason", "unreached_branches" ] }, { "id": "question-completion-3", "text": "Are reported match counts exact, lower bounds, estimates, withheld or unknown?", "kind": "measurement", "answer_data": [ "hit_count", "count_relation", "count_scope", "count_visibility" ] }, { "id": "question-completion-4", "text": "How are timeout, cancellation and failure distinguished from a verified empty result?", "kind": "exception", "answer_data": [ "failure_code", "cancel_receipt", "timeout_budget", "empty_result_basis" ] } ], "data_elements": [ { "id": "data-completion-1", "name": "Completion state", "description": "Local vocabulary: started, succeeded, denied, failed, cancelled, timed-out or unknown.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-004", "SRC-005" ] }, { "id": "data-completion-2", "name": "Completeness qualifier", "description": "Complete within declared scope, partial or unknown; orthogonal to completion.", "value_kind": "code", "cardinality": "1", "required": true, "source_refs": [ "SRC-004", "SRC-005" ] }, { "id": "data-completion-3", "name": "Count observation", "description": "Count, exact/lower-bound/estimated/unknown/withheld relation and scope. Empty delivered list alone is insufficient.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-004", "SRC-005" ] }, { "id": "data-completion-4", "name": "Terminal evidence", "description": "Outcome receipt, reason, limits reached and missing branch observations.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-004", "SRC-005" ] } ], "artifacts": [ { "id": "artifact-completion", "name": "Completion receipt", "description": "Versioned, access-controlled evidence for completion and result completeness. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-004", "SRC-005" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-results", "name": "Returned results", "description": "Candidate identity and stage-specific ordering.", "rationale": "Local research grouping for candidate identity and stage-specific ordering. The cited distinctions motivate this proposal; no external specification mandates these nodes.", "source_refs": [ "SRC-001", "SRC-003", "SRC-004", "SRC-005", "SRC-006" ], "layers": [ { "id": "layer-candidates", "name": "Returned candidate identity and lineage", "description": "Candidate membership identifies a specific returned memory item or passage representation at an observed stage. Store and version scope prevent collision. Passage selectors locate content; snapshots do not duplicate authoritative memory ownership.", "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ], "findings": [ { "id": "finding-candidates", "name": "Returned candidate identity and lineage", "description": "Candidate membership identifies a specific returned memory item or passage representation at an observed stage. Store and version scope prevent collision. Passage selectors locate content; snapshots do not duplicate authoritative memory ownership.", "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ], "questions": [ { "id": "question-candidates-1", "text": "Which candidate entries were returned at each observed stage?", "kind": "identity", "answer_data": [ "candidate_key", "stage_ref", "item_ref", "store_scope" ] }, { "id": "question-candidates-2", "text": "Which item or passage version and locator identify the returned representation?", "kind": "provenance", "answer_data": [ "item_revision", "passage_ref", "selector", "representation_ref" ] }, { "id": "question-candidates-3", "text": "How are repeated passages and multiple representations linked without collapsing their lineage?", "kind": "relationship", "answer_data": [ "duplicate_group", "representation_relation", "source_item_ref" ] }, { "id": "question-candidates-4", "text": "What does a missing candidate payload mean for inspection of this trace?", "kind": "evidence", "answer_data": [ "payload_state", "redaction_basis", "unavailable_reference", "integrity_ref" ] } ], "data_elements": [ { "id": "data-candidates-1", "name": "Candidate entries", "description": "Per-stage keys scoped to this event with store, item or passage reference and revision where known.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ] }, { "id": "data-candidates-2", "name": "Representation locators", "description": "Version-bound selectors with encoding/offset convention; avoid copying source text by default.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ] }, { "id": "data-candidates-3", "name": "Duplicate relationships", "description": "Typed references between entries; repeated occurrences preserve their stage membership.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ] }, { "id": "data-candidates-4", "name": "Payload states", "description": "Available, reference-only, redacted, deleted or unknown per candidate.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ] } ], "artifacts": [ { "id": "artifact-candidates", "name": "Candidate manifest", "description": "Versioned, access-controlled evidence for returned candidate identity and lineage. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-001", "SRC-004", "SRC-006" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-ranking", "name": "Rank and score interpretation", "description": "Keep stage-specific rank, score scale, ordering direction and tie behavior. Raw similarity, distance, reranker values and fused ranks are not interchangeable. A high rank is not a truth, permission, trust or calibrated confidence judgment.", "source_refs": [ "SRC-003", "SRC-005" ], "findings": [ { "id": "finding-ranking", "name": "Rank and score interpretation", "description": "Keep stage-specific rank, score scale, ordering direction and tie behavior. Raw similarity, distance, reranker values and fused ranks are not interchangeable. A high rank is not a truth, permission, trust or calibrated confidence judgment.", "source_refs": [ "SRC-003", "SRC-005" ], "questions": [ { "id": "question-ranking-1", "text": "What order and tie policy were reported for the returned candidates?", "kind": "classification", "answer_data": [ "ordered_candidate_keys", "rank_origin", "tie_policy", "tie_group" ] }, { "id": "question-ranking-2", "text": "What does each score measure and in which direction is it ordered?", "kind": "measurement", "answer_data": [ "score_value", "score_kind", "direction", "scale", "method_ref" ] }, { "id": "question-ranking-3", "text": "How did reranking or fusion change candidate order between stages?", "kind": "process", "answer_data": [ "input_stage_refs", "output_stage_ref", "rank_changes", "fusion_profile_ref" ] }, { "id": "question-ranking-4", "text": "Where are score values missing, incomparable or unsupported by an explanation?", "kind": "quality", "answer_data": [ "score_absence_reason", "comparison_scope", "explanation_ref", "uncalibrated_flag" ] } ], "data_elements": [ { "id": "data-ranking-1", "name": "Rank observations", "description": "Candidate key, stage id, rank position and declared origin or tie group.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] }, { "id": "data-ranking-2", "name": "Score observations", "description": "Named score, method/version, scale and direction; absence differs from zero.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] }, { "id": "data-ranking-3", "name": "Ordering method", "description": "External sort, fusion or reranking configuration and tie treatment.", "value_kind": "reference", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] }, { "id": "data-ranking-4", "name": "Explanation references", "description": "Optional evidence for score interpretation; never proof of truth or answer reliance.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] } ], "artifacts": [ { "id": "artifact-ranking", "name": "Ranking observation record", "description": "Versioned, access-controlled evidence for rank and score interpretation. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-003", "SRC-005" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-downstream", "name": "Selection and use evidence", "description": "Separate handoff records from attributed downstream use.", "rationale": "Local research grouping for separate handoff records from attributed downstream use. The cited distinctions motivate this proposal; no external specification mandates these nodes.", "source_refs": [ "SRC-001", "SRC-006", "SRC-008" ], "layers": [ { "id": "layer-handoff", "name": "Selection and downstream handoff", "description": "Record selection or exclusion from the observed candidate set and receipts of downstream handoff. Context Assembly owns packing, budget allocation and actual context membership. Selection, delivery and acknowledgement are distinct from use.", "source_refs": [ "SRC-001", "SRC-008" ], "findings": [ { "id": "finding-handoff", "name": "Selection and downstream handoff", "description": "Record selection or exclusion from the observed candidate set and receipts of downstream handoff. Context Assembly owns packing, budget allocation and actual context membership. Selection, delivery and acknowledgement are distinct from use.", "source_refs": [ "SRC-001", "SRC-008" ], "questions": [ { "id": "question-handoff-1", "text": "Which returned entries were selected or excluded for downstream handoff?", "kind": "decision", "answer_data": [ "selected_keys", "excluded_keys", "selection_state", "selection_receipt" ] }, { "id": "question-handoff-2", "text": "What externally reported reasons account for selection or exclusion?", "kind": "evidence", "answer_data": [ "reason_codes", "policy_decision_refs", "budget_decision_ref", "unknown_reason" ] }, { "id": "question-handoff-3", "text": "Which Context Assembly or consumer revision acknowledged which candidate representations?", "kind": "relationship", "answer_data": [ "assembly_ref", "consumer_ref", "handoff_receipt", "representation_refs" ] }, { "id": "question-handoff-4", "text": "Was access eligibility rechecked when cached or delayed results were handed off?", "kind": "authority", "answer_data": [ "handoff_check_ref", "check_time", "policy_revision", "unobserved_recheck" ] } ], "data_elements": [ { "id": "data-handoff-1", "name": "Selection ledger", "description": "Per-candidate selected, excluded or unknown disposition with attributed decision evidence.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-008" ] }, { "id": "data-handoff-2", "name": "Selection reasons", "description": "External decisions only; this event does not choose conflict precedence or change trust.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-008" ] }, { "id": "data-handoff-3", "name": "Handoff receipts", "description": "Destination master reference, revision, sent representation and acknowledgement status.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-008" ] }, { "id": "data-handoff-4", "name": "Recheck evidence", "description": "Authority check at handoff, or explicit absence; prior access is not perpetual.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-008" ] } ], "artifacts": [ { "id": "artifact-handoff", "name": "Selection and handoff ledger", "description": "Versioned, access-controlled evidence for selection and downstream handoff. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-001", "SRC-008" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-use", "name": "Evidenced downstream use", "description": "Record attributed use assertions with their evidence and destination revision. Context inclusion, an emitted citation and assessed support are different claims. Answer Grounding owns statement-to-source support assessment; recall cannot infer private model reliance.", "source_refs": [ "SRC-001", "SRC-006" ], "findings": [ { "id": "finding-use", "name": "Evidenced downstream use", "description": "Record attributed use assertions with their evidence and destination revision. Context inclusion, an emitted citation and assessed support are different claims. Answer Grounding owns statement-to-source support assessment; recall cannot infer private model reliance.", "source_refs": [ "SRC-001", "SRC-006" ], "questions": [ { "id": "question-use-1", "text": "Which downstream output or activity is claimed to have used a recalled representation?", "kind": "relationship", "answer_data": [ "output_ref", "output_revision", "activity_ref", "candidate_key" ] }, { "id": "question-use-2", "text": "Who asserted use and what observation or receipt supports that assertion?", "kind": "evidence", "answer_data": [ "assertor_ref", "assertion_kind", "evidence_ref", "observation_time" ] }, { "id": "question-use-3", "text": "Does the evidence show inclusion, citation, assessed support, or only unknown use?", "kind": "classification", "answer_data": [ "use_evidence_class", "grounding_ref", "assessment_status" ] }, { "id": "question-use-4", "text": "How are absent, disputed or retracted use assertions represented without rewriting retrieval history?", "kind": "lifecycle", "answer_data": [ "assertion_status", "supersedes_ref", "dispute_ref", "retraction_reason" ] } ], "data_elements": [ { "id": "data-use-1", "name": "Use assertions", "description": "Zero or more attributed statements linking a candidate representation to an output/activity revision.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "id": "data-use-2", "name": "Evidence classification", "description": "Per assertion: inclusion receipt, citation observation, support assessment reference, or unknown.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "id": "data-use-3", "name": "Grounding references", "description": "External statement support records; a citation alone is not a support judgment.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "id": "data-use-4", "name": "Assertion continuity", "description": "Revision and retraction links; absence of telemetry is not evidence of non-use.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] } ], "artifacts": [ { "id": "artifact-use", "name": "Downstream use evidence record", "description": "Versioned, access-controlled evidence for evidenced downstream use. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-001", "SRC-006" ] } ], "inline_only_rationale": null } ] } ] }, { "id": "bundle-governance", "name": "Trace governance", "description": "Integrity, review, disclosure and lawful disposition.", "rationale": "Local research grouping for integrity, review, disclosure and lawful disposition. The cited distinctions motivate this proposal; no external specification mandates these nodes.", "source_refs": [ "SRC-001", "SRC-002", "SRC-008" ], "layers": [ { "id": "layer-assurance", "name": "Trace integrity and review", "description": "Assess completeness and consistency of this event record using recorded evidence. Record checks do not certify retriever quality, establish factual truth or reproduce unavailable runs. Safety issues are routed by reference at policy level.", "source_refs": [ "SRC-001", "SRC-002", "SRC-008" ], "findings": [ { "id": "finding-assurance", "name": "Trace integrity and review", "description": "Assess completeness and consistency of this event record using recorded evidence. Record checks do not certify retriever quality, establish factual truth or reproduce unavailable runs. Safety issues are routed by reference at policy level.", "source_refs": [ "SRC-001", "SRC-002", "SRC-008" ], "questions": [ { "id": "question-assurance-1", "text": "Which recorder, source receipts and integrity checks support this trace revision?", "kind": "provenance", "answer_data": [ "recorder_ref", "receipt_refs", "digest_algorithm", "verification_status" ] }, { "id": "question-assurance-2", "text": "Which checks found unresolved identifiers, inconsistent ranks or unsupported use links?", "kind": "validation", "answer_data": [ "check_profile_ref", "violations", "unknowns", "reviewer_ref" ] }, { "id": "question-assurance-3", "text": "Which external assessment or incident record addresses disputed retrieval behavior?", "kind": "security", "answer_data": [ "assessment_ref", "incident_ref", "restricted_reason_code" ] }, { "id": "question-assurance-4", "text": "Which record corrections supersede earlier statements and who authorized them?", "kind": "lifecycle", "answer_data": [ "patch_ref", "prior_revision", "correction_reason", "approval_ref" ] } ], "data_elements": [ { "id": "data-assurance-1", "name": "Integrity evidence", "description": "Receipt identities, optional digest/signature metadata and verification outcome; a digest is not source authentication.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-008" ] }, { "id": "data-assurance-2", "name": "Consistency review", "description": "Local record validation report, checked revision and unresolved observations.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-008" ] }, { "id": "data-assurance-3", "name": "External review links", "description": "References to assessment or incident masters; no attack implementation or response execution.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-008" ] }, { "id": "data-assurance-4", "name": "Correction chain", "description": "Authorized revision links for factual corrections without changing occurrence identity.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-008" ] } ], "artifacts": [ { "id": "artifact-assurance", "name": "Trace review record", "description": "Versioned, access-controlled evidence for trace integrity and review. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-001", "SRC-002", "SRC-008" ] } ], "inline_only_rationale": null } ] }, { "id": "layer-disclosure", "name": "Trace disclosure and disposition", "description": "Queries, candidate identifiers, counts and use assertions may reveal sensitive material even without payload. Govern this trace with field-level views and external retention policy. Durable references do not require indefinite personal-data retention.", "source_refs": [ "SRC-002", "SRC-008" ], "findings": [ { "id": "finding-disclosure", "name": "Trace disclosure and disposition", "description": "Queries, candidate identifiers, counts and use assertions may reveal sensitive material even without payload. Govern this trace with field-level views and external retention policy. Durable references do not require indefinite personal-data retention.", "source_refs": [ "SRC-002", "SRC-008" ], "questions": [ { "id": "question-disclosure-1", "text": "Which roles may inspect each part of the trace and for what purpose?", "kind": "access", "answer_data": [ "role_scope", "recipient_view", "purpose", "expiry" ] }, { "id": "question-disclosure-2", "text": "Which query, score, candidate or use fields require redaction in each view?", "kind": "privacy", "answer_data": [ "restricted_fields", "redaction_policy_ref", "withheld_count_policy" ] }, { "id": "question-disclosure-3", "text": "What retention schedule, hold and disposition authority apply to this event record?", "kind": "retention", "answer_data": [ "retention_policy_ref", "hold_ref", "disposition_authority", "review_due" ] }, { "id": "question-disclosure-4", "text": "How will authorized erasure preserve only permitted tombstones and avoid resurrecting source data?", "kind": "constraint", "answer_data": [ "erasure_receipt", "minimal_tombstone", "cache_reference_status", "remaining_limitations" ] } ], "data_elements": [ { "id": "data-disclosure-1", "name": "Disclosure policy", "description": "Versioned field-level view policy for trace and artifacts, separate from memory-source access.", "value_kind": "reference", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-008" ] }, { "id": "data-disclosure-2", "name": "Retention binding", "description": "External schedule, authorized hold and disposition reference; no hard-coded universal duration.", "value_kind": "object", "cardinality": "1", "required": true, "source_refs": [ "SRC-002", "SRC-008" ] }, { "id": "data-disclosure-3", "name": "Disposition receipts", "description": "External executor evidence for payload removal and cache treatment, with unresolved limits.", "value_kind": "collection", "cardinality": "0..n", "required": false, "source_refs": [ "SRC-002", "SRC-008" ] }, { "id": "data-disclosure-4", "name": "Minimal continuity", "description": "Lawfully permitted tombstone and unresolved-reference state without retained sensitive payload.", "value_kind": "object", "cardinality": "0..1", "required": false, "source_refs": [ "SRC-002", "SRC-008" ] } ], "artifacts": [ { "id": "artifact-disclosure", "name": "Trace disposition record", "description": "Versioned, access-controlled evidence for trace disclosure and disposition. Keep references and declared unknowns; retain payload only where authorized.", "media_or_form": [ "structured record", "governed evidence reference" ], "serial": true, "identity_strategy": "Authoritative master-system identifier first; governed IRI second; Dimension-assigned UUID or ULID third. Bind event, artifact role and revision; timestamps and digests are not primary identity.", "source_refs": [ "SRC-002", "SRC-008" ] } ], "inline_only_rationale": null } ] } ] } ] }, "functions": [ { "id": "function-register", "name": "Register recall occurrence", "description": "Proposed local record operation, not implemented. Record a new observed attempt or recognize duplicate delivery.", "inputs": [ "Occurrence receipt", "Producer scope", "Request reference" ], "outputs": [ "Event key and revision", "Refusal or unresolved-evidence report" ], "preconditions": [ "Authorized record role, current policy and expected revision supplied.", "Evidence distinguishes new execution from redelivery." ], "effects": [ "Creates a trace record or returns existing delivery mapping; conflicting duplicate evidence is flagged.", "No retrieval execution, source-memory mutation or access grant." ], "source_refs": [ "SRC-001", "SRC-002" ] }, { "id": "function-attach-stages", "name": "Attach execution observations", "description": "Proposed local record operation, not implemented. Add externally observed stages and completion evidence.", "inputs": [ "Stage receipts", "Search state references", "Completion qualifiers" ], "outputs": [ "Versioned stage trace", "Refusal or unresolved-evidence report" ], "preconditions": [ "Authorized record role, current policy and expected revision supplied.", "Stage and event references resolve or carry explicit unresolved status." ], "effects": [ "Preserves failure, partial results and unknowns without converting them into success.", "No retrieval execution, source-memory mutation or access grant." ], "source_refs": [ "SRC-001", "SRC-004", "SRC-005" ] }, { "id": "function-attach-results", "name": "Attach candidate and rank evidence", "description": "Proposed local record operation, not implemented. Bind returned representations and stage-specific ordering.", "inputs": [ "Candidate manifest", "Rank/score observations", "Locator evidence" ], "outputs": [ "Versioned result manifest", "Refusal or unresolved-evidence report" ], "preconditions": [ "Authorized record role, current policy and expected revision supplied.", "Each scored entry identifies stage and candidate; incompatible score scales stay separate." ], "effects": [ "Records membership and ordering without asserting truth, relevance calibration or permission.", "No retrieval execution, source-memory mutation or access grant." ], "source_refs": [ "SRC-003", "SRC-004", "SRC-006" ] }, { "id": "function-link-use", "name": "Link selection and use receipts", "description": "Proposed local record operation, not implemented. Record attributed downstream evidence.", "inputs": [ "Selection receipt", "Handoff receipt", "Use assertion or grounding reference" ], "outputs": [ "Versioned downstream evidence links", "Refusal or unresolved-evidence report" ], "preconditions": [ "Authorized record role, current policy and expected revision supplied.", "Evidence class and destination revision are supplied; missing evidence is explicitly unknown." ], "effects": [ "Keeps selected, delivered, included, cited and assessed-support claims distinct; no answer creation.", "No retrieval execution, source-memory mutation or access grant." ], "source_refs": [ "SRC-001", "SRC-006", "SRC-008" ] }, { "id": "function-review", "name": "Review trace consistency", "description": "Proposed local record operation, not implemented. Check this record, not runtime retrieval quality.", "inputs": [ "Trace revision", "Local check profile", "Referenced receipts" ], "outputs": [ "Consistency report", "Refusal or unresolved-evidence report" ], "preconditions": [ "Authorized record role, current policy and expected revision supplied.", "Reviewer has field-level access to inspected evidence." ], "effects": [ "Flags contradictions, missing references and unsupported use links; source truth and hidden model reliance remain unproven.", "No retrieval execution, source-memory mutation or access grant." ], "source_refs": [ "SRC-001", "SRC-003", "SRC-008" ] }, { "id": "function-record-disposition", "name": "Record correction or disposition receipt", "description": "Proposed local record operation, not implemented. Link an authorized correction, redaction or erasure outcome.", "inputs": [ "Expected revision", "Authority receipt", "Patch or external disposition receipt" ], "outputs": [ "Superseding revision or permitted tombstone", "Refusal or unresolved-evidence report" ], "preconditions": [ "Authorized record role, current policy and expected revision supplied.", "Retention/hold authority and payload scope are resolved before local mutation; unknown authority causes refusal." ], "effects": [ "Corrects the trace or records disposition while preserving only permitted continuity; source deletion is delegated to its master.", "No retrieval execution, source-memory mutation or access grant." ], "source_refs": [ "SRC-001", "SRC-008" ] } ], "composition": [ { "target": "WM-MEM-001", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Store remains the master for tenancy, storage and store lifecycle; this event references the searched store and observed scope.", "required": false, "source_refs": [ "SRC-001", "SRC-008" ] }, { "target": "WM-MEM-002", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Item remains the durable record master. Registry parent_ids is a candidate navigation relation, not event inheritance or mandatory containment. Empty and denied attempts can reference no item.", "required": false, "source_refs": [ "SRC-001", "SRC-002", "SRC-004" ] }, { "target": "WM-MEM-006", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Formation Event owns creation lineage; recall reads prior records and does not form or revise them.", "required": false, "source_refs": [ "SRC-001" ] }, { "target": "WM-MEM-009", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Conflict and Precedence Rule owns conflict resolution policy. The recall trace records external decision references without resolving contradictions.", "required": false, "source_refs": [ "SRC-008" ] }, { "target": "WM-MEM-010", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Retention and Forgetting Policy owns schedule and erasure rules; this event records its own disposition binding and executor receipt.", "required": false, "source_refs": [ "SRC-008" ] }, { "target": "WM-MEM-011", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Scope and Sharing Grant owns access authority. Recall records reported decisions and never creates grants.", "required": false, "source_refs": [ "SRC-008" ] }, { "target": "WM-MEM-013", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Context Assembly owns context packing and actual inclusion. A selected or delivered candidate is not automatically included.", "required": false, "source_refs": [ "SRC-001" ] }, { "target": "WM-MEM-014", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Retrieval Index owns indexing, chunking, embeddings and refresh lifecycle. Recall references configuration and observed snapshot only.", "required": false, "source_refs": [ "SRC-003", "SRC-005" ] }, { "target": "WM-MEM-015", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Retrieval Passage owns passage identity and source lineage. Recall carries a versioned passage locator and candidate role.", "required": false, "source_refs": [ "SRC-006" ] }, { "target": "WM-MEM-016", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Answer Grounding owns claim-to-evidence support assessment. Recall links use receipts and grounding records without inferring entailment or causal model reliance.", "required": false, "source_refs": [ "SRC-001", "SRC-006" ] }, { "target": "WM-MEM-017", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Context Policy owns overriding context rules. Recall records applicable version and external decision receipt.", "required": false, "source_refs": [ "SRC-008" ] }, { "target": "WM-MEM-018", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Trust Assessment owns trust judgments; retrieval rank and score never substitute for trust.", "required": false, "source_refs": [ "SRC-003", "SRC-008" ] }, { "target": "WM-MEM-019", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Poisoning Incident owns incident handling; this record provides restricted evidence links only.", "required": false, "source_refs": [ "SRC-008" ] }, { "target": "WM-MEM-020", "relation": "REFERENCE", "purpose": "Proposed optional neighbor binding pending version pin: Memory Quarantine and Redaction owns quarantine decisions; the recall trace records referenced exclusion or redaction receipts.", "required": false, "source_refs": [ "SRC-008" ] }, { "target": "W3C PROV-DM", "relation": "ALIGN", "purpose": "Optional conceptual mapping of attempt to activity, record to entity and evidenced usage; mapping tests remain pending.", "required": false, "source_refs": [ "SRC-001" ] }, { "target": "CloudEvents 1.0.2", "relation": "ALIGN", "purpose": "Optional transport envelope. Keep source/id delivery deduplication separate from attempt, retry and record revision identities.", "required": false, "source_refs": [ "SRC-002" ] }, { "target": "W3C Web Annotation Data Model", "relation": "ALIGN", "purpose": "Optional passage selector/state mapping; preserve representation and timestamp profile differences.", "required": false, "source_refs": [ "SRC-006" ] } ], "serviceLayers": { "dimension": { "owner_package_requirements": [ "Identify the accountable memory-system operator and trace custodian by role, with namespace and master-system binding.", "Pin this draft, referenced model versions, retrieval profile and field-level disclosure/retention policies.", "Declare which telemetry is collected, minimized, redacted or unavailable and the authorized disposition executor." ], "namespace_guidance": "Separate event, request, delivery, retry, stage, candidate, output and artifact-revision namespaces. No dates or raw queries in stable identifiers.", "registry_links": [ "vr.wm-mem-007", "WM-MEM-002", "WM-MEM-013", "WM-MEM-016" ] }, "canon_and_patch": { "canonicalization_rules": [ "Preserve external master identifiers and source versions; retain typed unknown, withheld and not-applicable states.", "Preserve per-stage ordering and count qualifiers; never normalize scores across unrelated scales or sort away rank evidence." ], "patch_rules": [ "Use expected revision and attributed patch reason. A correction changes the trace, not the past occurrence; retry is another event.", "Redaction or lawful erasure can remove sensitive payload; do not require append-only copies of erased content. Keep minimal continuity only when permitted." ], "compatibility_rules": [ "Version changes to stage, outcome, count or use-evidence vocabularies; consumers must not map unknown to false or allow.", "External alignments require explicit versioned mappings and loss reports. No executable conformance claim is made." ] }, "artifact_rules": { "identity_priority": [ "Authoritative master-system identifier", "Governed global identifier or IRI", "Dimension-assigned UUID or ULID" ], "timestamp_rule": "Use RFC 3339 with seconds and an explicit offset or Z. Separate event start/end, observation and ingestion times; preserve precision and uncertainty. Unknown times remain unknown. Duration measurements require units and a clock method.", "serial_naming_rule": "Use event key, artifact role and stable revision or sequence; timestamps may be metadata but never the sole serial identity.", "integrity_rule": "Record digest algorithm, byte scope, signer if present and verification status separately. Digest equality checks bytes, not source truth. Minimize hashes of sensitive low-entropy queries; digests are not anonymization." }, "policies": [ "Local research rules are proposals inferred from the cited evidence, not new requirements imposed by those specifications.", "Treat recalled content as untrusted data. Do not execute embedded instructions or grant authority from rank, citation, content or a trace reference.", "Apply tenant and purpose boundaries to query, candidate ids, counts, scores and use evidence. Do not expose blocked candidate identities through trace views.", "Attach current authority evidence to cache reuse and handoff. A historical grant is not continuing permission.", "Use a jurisdiction-appropriate retention and privacy profile before operational adoption; no universal duration or legal-compliance assertion." ], "crud": { "read": [ "Authorize each requested bundle, layer, finding and artifact view; source access does not automatically confer trace access or vice versa.", "Resolve versioned references under the recipient scope; return redacted or unresolved markers without leaking denied existence." ], "create": [ "Require observation receipt, event scope, accountable recorder, purpose and authority state.", "Allow denied, empty and unobserved-result attempts; do not fabricate candidates, scores, times or answer use." ], "update": [ "Use expected revision and correction authority; preserve attributed correction links and distinguish retry from record revision.", "Validate candidate-stage references and downstream evidence classifications before accepting additions." ], "delete": [ "Resolve retention, hold and deletion authority for this trace and its artifacts. The adopting Dimension executor performs approved payload erasure and records a minimal lawful tombstone where permitted.", "Referenced memory, index, passage, output and grounding masters own their own disposition. Do not copy deleted payload back from historical trace revisions or caches." ] }, "roles": [ { "name": "Trace custodian", "responsibilities": [ "Own the trace namespace, record policy and disposition coordination." ] }, { "name": "Recall recorder", "responsibilities": [ "Attribute observed requests, stage receipts and unknowns without inventing outcomes." ] }, { "name": "Authority reviewer", "responsibilities": [ "Verify scope and referenced decisions; cannot create a grant through a trace patch." ] }, { "name": "Evidence reviewer", "responsibilities": [ "Inspect consistency, score interpretation and downstream-use evidence within granted scope." ] }, { "name": "Disposition executor", "responsibilities": [ "Apply authorized trace retention or erasure policy and return scoped completion receipts." ] } ], "access": { "default_rule": "Deny by default; require caller, tenant, purpose and current policy for every trace view and mutation.", "scopes": [ "bundle", "layer", "finding", "artifact" ], "exceptions": [ "Emergency or audit access requires an explicit, time-bounded policy decision and recorded authority; no automatic bypass.", "Redacted views may withhold identifiers and counts; absence of visible data does not imply no underlying candidate." ], "audit_requirements": [ "Record viewer/actor role, purpose, policy revision, object revision and decision with minimal necessary identifiers.", "Keep generic audit storage and enforcement outside this model; link their receipts without copying sensitive query or payload into audit metadata." ] }, "agents_bootstrap": { "filename": "AGENTS.md", "required_fields": [ "Name", "Type", "Specification URL", "Storage type URL", "Interface URL", "Processes URL" ], "read_order": [ "Read nearest owner and Dimension policy and this AGENTS.md.", "Read spec.yaml, visible holds and pinned neighbor contracts.", "Resolve current access and retention authority, then inspect evidence before proposing local changes." ] } }, "coverage": { "claim": "Source-grounded proposed structure for one agent-memory recall attempt, covering query, authority evidence, observed results and ranking, and attributed downstream use. Separate frozen local no-tools self-audit completed. Independent review, source/version verification, adoption profiles and executable conformance remain holds; this is a noncanonical reviewable draft.", "confidence": "medium", "checklist": [ { "dimension": "identity", "status": "covered", "notes": "Occurrence, delivery, retry and artifact revision are distinct." }, { "dimension": "lifecycle", "status": "covered", "notes": "Completion, correction, assertion retraction and trace disposition are explicit." }, { "dimension": "relationships", "status": "covered", "notes": "Proposed optional neighbor references preserve external masters; binding versions remain pending." }, { "dimension": "temporal", "status": "covered", "notes": "Occurrence and observation time, search state, freshness and unknown clocks are separate." }, { "dimension": "provenance", "status": "covered", "notes": "Query transformations, candidate lineage, stage receipts and attributed use evidence are recorded." }, { "dimension": "ownership", "status": "covered", "notes": "Accountable operator, custodian and referenced memory owners remain role based." }, { "dimension": "validation", "status": "gap", "notes": "Research schema validation is available; nested instance schemas and runtime fixtures remain incomplete." }, { "dimension": "access", "status": "covered", "notes": "Tenant, purpose, staged authority evidence and recipient trace views are explicit." }, { "dimension": "retention and deletion", "status": "covered", "notes": "Trace payload disposition is governed externally; minimal lawful continuity does not require perpetual storage." }, { "dimension": "interoperability", "status": "gap", "notes": "Conceptual PROV-DM, CloudEvents and annotation alignments require tested mappings." }, { "dimension": "direct properties", "status": "covered", "notes": "Query kind, stage, completion, completeness, cardinality and rank have scoped meanings." }, { "dimension": "recognition and observation", "status": "covered", "notes": "Recorder and evidence completeness distinguish observation from inferred or unknown use." }, { "dimension": "capabilities and actions", "status": "covered", "notes": "Only proposed local record operations; retrieval, ranking execution and answer generation remain external." }, { "dimension": "physical properties", "status": "not-applicable", "notes": "An information retrieval event has no intrinsic mass or dimensions; timing and resource observations require units." }, { "dimension": "quality and truth", "status": "covered", "notes": "Rank, count and provenance do not establish truth, trust, authorization or answer correctness." } ], "known_omissions": [ "Nested candidate, stage, score and use-assertion schemas with executable semantic constraints are pending.", "Pinned sibling specifications, transport mappings, replay fixtures and multimodal locator profiles are pending.", "No independent second-provider review; a separate local no-tools self-audit is required.", "Direct HTTP checks are unattempted under the owner-reported sandbox restriction; web-service readings do not establish origin HTTP status or current version completeness.", "No benchmark establishes retrieval quality, factual accuracy or causal answer reliance." ], "conflicts": [], "regional_assumptions": [ "No jurisdiction or sector is assumed. Adopters must review privacy, records, licensing, retention and cross-border rules for their own profile.", "Open specifications are conceptual alignments; Apache API examples are not mandatory runtime choices." ], "adversarial_checks": [ "A denied or timed-out attempt must not be encoded as verified zero matches.", "Same query and timestamp must not merge distinct attempts; duplicate delivery must not create fictitious retrieval work.", "A high score must not imply truth, trust, permission or answer use.", "A delivered candidate without inclusion evidence remains unproven context membership; citation without support assessment remains citation only.", "Cached results require current authority evidence; erased or redacted payload must not reappear through historical trace views." ] }, "researchAdjudication": { "providerMode": "single-provider-waiver", "activeProviders": [ "codex" ], "waivedProviders": [ "claude", "grok" ], "providerPolicy": { "contract_version": "1.0.0", "mode": "single-provider-waiver", "effective_at": "2026-09-06T00:00:00Z", "scope": "Canonical single-stream subject-model research after the six-workstream consolidation", "active_providers": [ "codex" ], "waived_providers": [ { "provider": "claude", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "Claude produced no result on prior 1800-second and 900-second attempts and again timed out on bounded 600-second Sonnet and 300-second Haiku passes. The owner prioritized completion over provider availability." }, { "provider": "grok", "authorized_by": "repository owner", "authorized_at": "2026-09-06T00:00:00Z", "reason": "The repository owner authorized completion without Grok when Grok is unavailable, slow or schema-invalid. Grok may still be attempted as a bounded supplemental reviewer, but its failure never blocks a valid Claude plus no-tools result." } ], "review_rule": "Codex may complete source-grounded fallback research after bounded Claude and Grok attempts fail. It requires a separate no-tools adversarial audit and remains reviewable-draft with a visible absence-of-external-review hold.", "supplemental_provider_attempts": [ { "provider": "claude", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." }, { "provider": "grok", "required": false, "maximum_attempts": 1, "failure_policy": "record-and-continue", "admission_rule": "Use only a locally schema-valid result whose sources and boundaries survive adjudication." } ] }, "boundaryDecision": { "entry_kind": "event", "status": "accepted", "rationale": "The subject is a bounded retrieval occurrence, including denied or failed attempts. Its trace can be revised without changing the occurrence. Registry standalone-mm is a record category; parent_ids WM-MEM-002 does not establish event inheritance or mandatory item containment. The draft keeps memory, index, context and grounding masters external." }, "decisions": [ { "concept": "Occurrence, delivery and trace revision", "disposition": "accepted", "rationale": "The draft separates a bounded attempt from its artifact, duplicate transport delivery, correction and retry. An interval does not prevent event classification, and optional CloudEvents mapping does not collapse occurrence identity into envelope identity." }, { "concept": "Registry parent and adjacent ownership", "disposition": "qualified", "rationale": "The parent item is a proposed optional reference rather than inheritance. Denied and empty attempts need no item. No relation-ledger rows or legacy specification were frozen. All proposed neighbor links preserve external ownership and require future version binding. Registry historical provider provenance is not admitted evidence for this run." }, { "concept": "Query and searched-state observability", "disposition": "accepted with limits", "rationale": "Submitted and effective queries, external transformations, requested filters and observed snapshots are distinguished. Redacted and unavailable inputs remain explicit; the record does not promise replay when configurations or state were not captured." }, { "concept": "Stage execution versus local record operations", "disposition": "separated", "rationale": "The six proposed functions register or inspect evidence and have authority and revision preconditions plus refusal outputs. They do not execute retrieval, build indexes, rank content, pack context or generate answers. Runtime evaluation and enforcement remain outside the boundary." }, { "concept": "Partial, empty and denied outcomes", "disposition": "accepted", "rationale": "Completion state, coverage completeness and count interpretation are orthogonal. A timeout or denial with zero visible candidates is not a verified empty search. Exact, lower-bound, estimated, withheld and unknown counts require their declared scope." }, { "concept": "Candidate lineage and rank semantics", "disposition": "accepted", "rationale": "Candidate keys are scoped to event and stage, with item/store/version references. Ranks, score direction and scale, ties, fusion and missing explanations remain explicit. No inference turns a score into truth, trust, calibrated confidence or authority." }, { "concept": "Access authority and cached handoff", "disposition": "accepted as evidence only", "rationale": "Grant and policy masters issue decisions. The trace records stage-specific evidence and unknown checks; historical authorization does not authorize later cache reuse. Restricted candidate identities and counts are subject to recipient view policy." }, { "concept": "Selection and context inclusion", "disposition": "separated", "rationale": "Selection, transmission and acknowledgement remain separate from actual inclusion. Context Assembly owns packing and context membership; the recall event carries receipts and does not duplicate its operations or budget decisions." }, { "concept": "Answer use and support claims", "disposition": "qualified", "rationale": "An attributed use assertion identifies an output/activity revision and evidence class. Citation is not assessed support, inclusion is not proof of private causal reliance, and missing telemetry is not evidence of non-use. Answer Grounding remains the support-assessment master." }, { "concept": "Retention, redaction and history", "disposition": "accepted with policy dependency", "rationale": "The service rules explicitly permit authorized payload erasure and retain only lawful minimal continuity. Integrity hashes are not anonymization. Generic artifact history language must be interpreted through these model-specific retention rules, not as perpetual storage of query or candidate payload." }, { "concept": "Evidence base and source status", "disposition": "limited", "rationale": "Eight primary URLs supplied selected web-service readings from five organizations. Direct HTTP checks were not attempted under the owner-reported sandbox restriction. No measured status or body digest exists. Moving documentation, errata, version applicability and independent claim verification remain unresolved." }, { "concept": "Instance schemas and interoperability", "disposition": "deferred", "rationale": "Candidate fields provide a research design, not executable nested instance constraints. Stage joins, observation coverage, score vocabularies, multimodal locators and reference states need tested profiles. PROV-DM, CloudEvents and Web Annotation are conceptual alignments; their identity and time requirements require explicit mapping tests." }, { "concept": "Independent review and confidence", "disposition": "waived and held", "rationale": "Claude and Grok were skipped with zero external attempts under the owner override. This separate phase is a local Codex self-audit of frozen evidence without tool use or new facts during semantic assessment. It is not independent provider agreement and cannot justify canonical promotion." } ], "publicationHolds": [ "Independent external review is absent under the owner-authorized single-provider waiver. Claude and Grok were skipped with zero attempts; the separate local Codex no-tools self-audit is not a second-provider review.", "Source and version verification remains incomplete. Eight selected primary-source documents were readable through the web service; direct HTTP checks were not attempted under the owner-reported sandbox restriction, so origin statuses and body hashes are unmeasured. Run check_sources.py outside the sandbox and review claims, moving pages, version pins and errata separately.", "Adopting operators must review tenant boundaries, authority rechecks, query and embedding minimization, retention and erasure, source rights and jurisdiction-specific requirements. No privacy, security, retrieval-quality or factual-correctness certification is claimed.", "Nested instance schemas, sibling version bindings, observation-coverage rules, stage/candidate/use constraints, score profiles, multimodal locators, transport mappings and adversarial runtime fixtures remain incomplete. Conceptual alignments do not establish executable conformance.", "Independent external review was explicitly waived by the repository owner; this codex-only result remains a reviewable draft." ], "deferredResearch": [ "Run coordinator source checks and independently verify cited claims, current applicable versions, immutable documentation pins and errata.", "Develop pinned neighbor contracts, nested instance schemas and fixtures for duplicate delivery, retry, denial, timeout, lower-bound counts, rank fusion, revoked cache access, absent use evidence and lawful erasure.", "Test PROV-DM, CloudEvents and Web Annotation projections with explicit identity and timestamp rules and declared projection losses.", "Restore independent external review before any canonical or publishable-draft promotion." ] }, "statistics": { "sources": 8, "bundles": 6, "layers": 12, "findings": 12, "questions": 48, "artifacts": 12, "functions": 6 } }