Registry Pattern
Give an agent the format-neutral context needed to understand, constitute, inspect and operate an authoritative register: what subject matter a register admits, how entries are composed and identified, what status and ordering they carry, what effect registration produces in the world, and what may be inspected, searched or certified — while delegating identifier, provenance, ownership, access, audit, evidence, status, version, application, decision, event, federation, projection, mandate and dispute semantics to sibling models.
Bundle → Layer → Finding → Questions Filled
6 bundles · 13 layers · 26 findings · 103 questions
Register constitution What brings a register into existence and fixes what it may contain: its identity as a book, the subject matter it admits, who may submit, and the item classes and entry model it publishes.
Register definition
The register as a governed object: its identity and constitution, the boundary of what it covers, and the policy controlling who may cause entries to exist.
Register identity and constituting act
A register is a named, individually identified book of entries constituted by an instrument that names an accountable keeper and, where public, derives its powers from a referenced mandate. ISO/TC 211 separates the register owner from the register manager and the control body; UNIDROIT separates the Supervisory Authority from the Registrar; INSPIRE shows the operator can change while item URIs persist. The constitution is therefore distinct from both the operator and the storage.
- Which instrument constitutes this register and what does it authorise the register to contain? authority
- What identifier distinguishes this register from every other register, including from the registry that operates it? identity
- Which distinct parties hold register ownership, register management and control-body review for this register? ownership
- What happens to register identity and item references if the operating organisation changes? lifecycle
Field of application and completeness claim
The register's declared subject-matter boundary, its territorial or jurisdictional reach, and how strong a completeness claim it makes. A register that claims to hold every instance of its subject supports negative inference ('not registered means not existing'); one that does not must say so, because search results are otherwise misread.
- What classes of item does this register admit, and what closely similar items does it explicitly exclude? classification
- Over which jurisdiction, territory or namespace does this register claim authority? spatial
- Does absence of an entry permit a negative inference, and under what conditions? constraint
- What events compel registration, and what remains voluntary? requirement
Registration policy and submission rights
The rule fixing who may cause an entry to exist and how much review precedes it. RFC 8126 sets out an explicit strictness ladder from Private Use through First Come First Served and Expert Review to Standards Action, advises choosing the least strict policy that suits the register, and requires a named change controller; UNCITRAL by contrast permits registration by any authorised registrant without document lodgement.
- Which registration policy governs each range or class of this register, and why is that strictness chosen? decision
- Who is entitled to submit a registration request, and must the submitter be the affected subject? authority
- Who controls later changes to an individual registered value once it exists? ownership
- May an entry be registered provisionally and later converted to permanent status? state
Item class and entry model
The typed shape of what may be registered: item classes with their required attributes, and the identifier binding that gives each entry its place in the book.
Item class and required attribute set
ISO 19135 organises a register into item classes, each fixing the attributes a conforming item must carry; RFC 8126 likewise requires a registry definition to state the required information, size, format and syntax of entries plus initial assignments and reservations. Item classes are the register's contract with submitters and consumers alike.
- For each item class, which attributes are mandatory, which are optional, and what syntax constrains them? composition
- Which values in this register are reserved, pre-assigned or set aside for private use? constraint
- May an item class be extended by adopters, and what stays fixed under extension? interoperability
- In which languages must item names and definitions be supplied, and which language is authoritative? quality
Entry identifier binding and reuse rule
Every entry carries an identifier that locates it in the book. ISO/TC 211 treats identifier assignment as the minimum service delegated to the register manager; ISO/IEC 11179-6 requires internationally unique item identification. What is register-owned here is the binding, the uniqueness scope and the reuse-after-retirement rule — RFC 8126 warns that reclaiming assigned values breaks deployed consumers.
- From which governed identifier scheme is an entry identifier drawn, and who assigns the value? identity
- Within what scope must an entry identifier be unique — the register, the registry, or globally? constraint
- May an identifier be reassigned after its entry is retired or cancelled? exception
- Is an entry identifier resolvable to a published representation, and does resolution survive operator change? interoperability
Entry record The entry as the atomic authoritative record: what it contains, what it is about, what state and validity period it holds, and how entries relate to and rank against one another.
Entry content and subject binding
What an entry says and what it is about, including which of its fields are authoritative and which are merely carried.
Entry composition and subject binding
An entry binds a content payload to a subject. UNCITRAL notices carry grantor and secured-creditor identifiers plus a collateral description sufficient for identification, without the underlying agreement; company registers hold a file of prescribed particulars per company. Not every field is equally authoritative: some are the registered fact, others are contact or administrative carriage.
- What real-world subject is this entry about, and how is that subject identified? identity
- Which fields of the entry are the registered fact and which are administrative carriage? classification
- May one entry cover an aggregate of subjects, and how is the aggregate delimited? composition
- Does the entry restate content from a lodged instrument or only reference it? provenance
Entry state and time
The status an entry holds, what that status means for use and publication, and the several distinct times an entry carries.
Entry status binding and publication consequence
ISO 19135 distinguishes notValid, valid, superseded, retired and invalid, exposes valid, superseded and retired publicly, keeps proposed and unaccepted items for management only, and retains no-longer-valid items so that data produced earlier can still be interpreted. INSPIRE similarly retains deprecated items for backward compatibility. The status vocabulary and its transitions are governed by WM-XCT-021; what is register-owned is the mapping from state to publication and to permitted use.
- Which governed status vocabulary does this register bind to, and which of its values does it actually use? state
- For each status value, is the entry exposed in the public face of the register? access
- For each status value, may the entry still be used to produce new data or new reliance? constraint
- Who may cause an entry's status to change, and does that differ by status value? authority
Entry temporal model
An entry carries several times that must not be collapsed: when the act was received and stamped, when the entry became effective in the register, the period for which registration remains effective, and when the fact it records took place. UNCITRAL limits effectiveness to a stated period extendable by amendment; Cape Town makes registrations searchable in chronological order of receipt.
- Which distinct time values does an entry carry, and which of them is decisive for effect? temporal
- Does registration lapse after a fixed period, and how is it extended? lifecycle
- Can an entry take effect from a time earlier than its registration, and on what basis? exception
- Can the register state as at a past instant be reconstructed, and to what granularity? evidence
Entry relations and ordering
How entries succeed one another over time and how they rank against one another at a moment.
Supersession, retirement and continuity chains
ISO 19135 distinguishes replacement by an alternative (supersession) from simple withdrawal (retirement), and keeps both in the register. Continuity must be traceable in both directions, and registers of composite subjects additionally need split and merge relations so that a successor entry can be reached from any predecessor.
- When an entry is superseded, how is the successor entry linked and is the link bidirectional? relationship
- What distinguishes retirement from supersession and from invalidation in this register? classification
- How are split and merge of a registered subject represented across entries? composition
- Are closed entries still retrievable, and by which access route? retention
Registration ordering and priority rank
Where a register allocates rank, the order of registration is decisive: a registered interest takes priority over later registrations and over unregistered interests regardless of knowledge, and registrations are searchable in chronological order of receipt. Priority protection windows let a search freeze rank for a short period before the act is lodged. This ordering is register-owned and must not be confused with event-log ordering.
- Does this register allocate rank, and is rank derived from time of registration or from another criterion? constraint
- At what granularity is the ordering stamp recorded, and how are simultaneous receipts broken? measurement
- Can a search or notice reserve rank before the substantive act is lodged? process
- What happens to rank when an entry is amended, corrected or superseded? exception
Registration act The act that changes the book: its typology, who may perform it, and the admission criteria and evidentiary requirements it must satisfy.
Act typology and authority
What kinds of change to the register exist, and who is competent to make each.
Registration act typology
The closed set of operations that can change a register: addition, clarification (a change that does not alter meaning), amendment, supersession, retirement, invalidation, cancellation, correction of registry error and lapse on expiry. Distinguishing clarification from amendment matters because only one of them disturbs reliance.
- Which act types can change this register, and which are unavailable by design? classification
- How does this register distinguish a clarification that preserves meaning from an amendment that changes it? definition
- What makes a submitted act a duplicate of one already applied? validation
- How does an applied act reference the request and the decision that authorised it? provenance
Act authority and role binding
Competence to apply an act is distributed across roles. ISO/TC 211 separates the register manager from the control body that reviews proposals and constrains the manager's delegated authority; UNIDROIT separates the Supervisory Authority that appoints the Registrar and approves regulations from the Registrar that operates the registry. This model records the binding, not the mandate lifecycle.
- Which role is competent to apply each act type in this register? authority
- Which registrar functions are delegated, and which are reserved to the constituting authority? ownership
- What bounded time is allowed for review before an act must be applied or refused? process
- How is a reviewer's conflict of interest handled for a specific proposal? exception
Admission and evidentiary requirements
How deeply a register examines what is submitted before it becomes authoritative, and what evidence classes it demands.
Examination depth and rejection grounds
Registers differ sharply in how much they check. A notice-filing registry accepts a notice without the underlying agreement and rejects only on narrow formal grounds; a title register examines substance before conferring a conclusive effect; a protocol registry may accept on first-come-first-served or require a permanent public specification. Examination depth is the single strongest predictor of how far an entry may be relied on.
- How far does this register examine a submission before the entry becomes authoritative? process
- On what grounds may a submission be refused, and is that list exhaustive? constraint
- How does examination depth constrain the effect the register may claim for an entry? decision
- Are admitted entries ever re-examined after registration, and on what trigger? quality
Evidentiary requirement specification
What a register demands as grounds for an entry, expressed per item class: which evidence classes are required, whether originals or references suffice, and whether the register restates or merely points at them. Custody, verification workflow, sufficiency challenge and rationale are owned by WM-XCT-028; only the requirement and the binding sit here.
- Which evidence classes must accompany an act for each item class in this register? requirement
- Is lodged evidence retained inside the register, held elsewhere, or returned? retention
- Is supporting evidence inspectable to the same extent as the entry it grounds? access
- What may be registered when the required evidence cannot be produced? exception
Effect and assurance What registration changes in the world, how far third parties may rely on it, and what happens when the register is wrong.
Effect and opposability
The kind of effect registration produces, when it commences, and how far a third party may rely on the register against the registered subject.
Effect kind and commencement
Registration may be constitutive (the right exists only once registered), declaratory (registration records a right that already exists), evidentiary (registration raises a presumption), priority-conferring (registration fixes rank), or a notice function (registration makes an interest effective against third parties). These are not mutually exclusive and each has its own commencement instant.
- Which effects does registration in this register produce, and are they cumulative? definition
- From which instant does each effect run, and can it differ from the registration instant? temporal
- What becomes of an effect when the entry is cancelled, retired or lapses? lifecycle
- In which jurisdictions or contexts is the registered effect recognised? interoperability
Third-party reliance and its limits
Company-law disclosure makes documents opposable to third parties only once properly disclosed, and permits reliance on voluntarily published translations unless the company proves knowledge of the original; title registration makes registered proprietorship conclusive; Cape Town gives a registered interest priority irrespective of knowledge. Every regime nevertheless carries carve-outs — overriding interests, undisclosed particulars, and content the register expressly does not warrant.
- Which register content may a third party rely on, and which content is expressly unwarranted? constraint
- What binds a subject despite not appearing in the register? exception
- Must a relying party act in good faith or without notice for reliance to hold? requirement
- Where content is published in several languages, which version governs a reliance claim? quality
Rectification and liability
How a wrong register is put right, what compensation follows, and how a contested entry is marked while a challenge is pending.
Error classification and rectification regime
Registers separate registry error (introduced by the registry itself) from submitted error (introduced by the requester), because only the first typically triggers the register's own liability. Title regimes provide for alteration and rectification with defined protection for the proprietor in possession; notice-filing regimes provide registrar correction of registry errors and amendment notices for the rest.
- How does the register classify an inaccuracy as registry error, submitted error or a change of underlying facts? validation
- Who may initiate rectification, and can the registrar act without a request? process
- Does a rectification take effect retroactively, and what protects a party who relied in the interim? exception
- Is the erroneous content preserved and visible after rectification? retention
Liability posture, indemnity and contested marking
A register that invites reliance must state what it answers for. Cape Town makes the Registrar liable in compensatory damages for loss directly resulting from registry error, omission or malfunction, while excluding liability for inaccurate information received; title regimes provide a statutory indemnity for loss from rectification or from an uncorrected mistake. Separately, an entry under challenge carries a contested marking that points at a case handled elsewhere.
- For what failures does the register accept liability, and what is expressly excluded? authority
- Who may claim indemnity for loss caused by the register, and how is entitlement reduced? requirement
- How is an entry marked while it is under challenge, and what does the marking change? state
- On what basis is a contested marking removed? event
Publicity and disclosure What the register shows to whom, on what terms, how it can be searched, and how an authenticated extract is issued.
Publicity regime
The classification of register content by who may see it, and the terms on which access is priced.
Publicity classification and restriction
Publicity is graded, not binary, and is set per attribute rather than per register. The Court of Justice held that opening beneficial-ownership data to any member of the public was a serious interference with Charter rights that went beyond what was strictly necessary, and pointed to legitimate-interest gating, defined data categories, case-by-case exemptions and accountability for accessors as the safeguards that were missing. Access decisions themselves are evaluated by WM-XCT-002 and shaped by WM-XCT-003.
- Which publicity tier applies to each attribute of an entry? access
- Where access is gated on legitimate interest, how is that interest defined for this register? privacy
- Can a registered subject obtain suppression of otherwise public content, and on what showing? exception
- Does bulk or machine access carry different publicity limits from individual inspection? security
Fee and cost-recovery basis
Access to a public register is typically priced at cost rather than at value: company-law rules cap fees for copies at administrative cost and require core particulars to be free of charge, while registry regimes elsewhere set fees to sustain operation without unduly burdening users. Fee design is part of publicity because a prohibitive fee is a restriction by other means.
- On what basis is a fee for register access or registration set? constraint
- Which register content must be obtainable without charge? requirement
- Do fees differ by requester class, channel or product type? classification
Search surface and extracts
The index through which the register is interrogated and the authenticated products issued from it.
Index, search criteria and result completeness
A register is only as usable as its index. UNCITRAL requires the registry record to be indexed and searchable by the criteria that make notices findable — chiefly the grantor identifier — and Cape Town requires registrations to be searchable in chronological order of receipt. Where matching is exact, a small error in the indexed key can hide an entry entirely, so the register must state its matching rule and what a nil result means.
- By which keys can the register be searched, and which key is authoritative for a definitive search? identity
- Is matching exact, normalised or fuzzy, and who bears the risk of a near-miss? validation
- What does an empty search result assert, and what does it not assert? evidence
- To which instant is a search result current, and is there a gap for pending acts? temporal
Certified extract attestation and as-at instant
A certified extract is the registrar's attestation that stated content corresponded to the register at a stated instant. Company-law rules entitle a requester to certified or uncertified copies obtainable electronically; title regimes make official copies admissible in evidence to the same extent as the original. The shape and field selection of the extract are owned by WM-XCT-003; what is register-owned is the attestation, the as-at instant and the evidential claim.
- What exactly does the registrar attest when certifying an extract? evidence
- To which instant does a certified extract speak, and how long does it remain usable? temporal
- What evidential status does the extract carry before a court or counterparty? authority
- How can a recipient verify that an extract is genuine and unmodified? security
Registry operation and interoperability The registry that holds and serves registers, the measures by which its quality is judged, and the bindings that let it work with other registers.
Registry instance, continuity and quality
The operating instance, its continuity commitments, and the measures by which the register's fitness is assessed.
Registry instance and register hosting
A registry is the operating environment that holds one or more registers and offers registration and search services. Its properties — availability, service hours, operating language, publication endpoints and the commitment that references keep resolving after an operator change — are separable from the constitution of any register it hosts.
- Which registers does this registry hold, and can a register move between registries? composition
- What availability and service-hour commitments does the registry make? quality
- What continuity commitments protect published references if the operator changes? lifecycle
- Through which stable endpoints is register content published, and in what representations? interoperability
Register quality and currency measures
An authoritative record is expected to be authentic, reliable, complete and unaltered, and usable — locatable and interpretable for as long as needed. For a register these general properties become measurable: coverage against the declared field of application, lag between a real-world change and its registration, backlog of unapplied acts, and rate of established registry error.
- How is the lag between a real-world change and its appearance in the register measured and reported? measurement
- How is coverage against the declared field of application quantified? quality
- Is the rate of established registry error tracked and published? validation
- What ensures register content remains interpretable after schema or vocabulary change? retention
Interoperability and alignment
How this register refers to and is referred to by others, and how it aligns with external registry vocabularies without claiming conformance.
Cross-register reference and federation binding
Registers reference one another: an entry in one register may cite an identifier maintained in another, and independent registers may participate in an interconnection that distributes information in a standard message format. This model records which external register a reference resolves against and what freshness is expected; topology, routing, mirroring and drift are owned by WM-XCT-018.
- Which external registers does this register cite, and for which fields? relationship
- When a locally held value conflicts with the external register that owns it, which prevails? decision
- Does this register participate in an interconnection or mirroring arrangement, and in what role? interoperability
- Which identifier allows this register's entries to be matched unambiguously across borders or systems? identity
External registry vocabulary alignment
Several standards describe registers in overlapping but non-identical terms: ISO 19135 uses register manager, control body and item status; ISO/IEC 11179-6 separates registration status from administrative status and adds submitting organization and stewardship; RFC 8126 uses registration policy and change controller. These are alignments, not conformance claims, and their disagreements must be recorded rather than smoothed over.
- Which external registry vocabularies does this register align to, and at which version? interoperability
- How do local role and status terms map onto each aligned vocabulary? definition
- Where aligned vocabularies disagree, which disagreement is recorded and how is it resolved locally? exception
- What evidence would be needed before a conformance claim to an aligned standard could be made? evidence
Classifiers Filled
- Family
- World Models
- Category
- Cross-cutting context
- Entry kind
- pattern
- Navigation path
- NAV.XCT.REG
- Domain
- XCT.REG
- Industry
- Cross-industry
- Tags
- registrypatternxct.reg
- Also called
- R1
What it is Filled
The pattern covers the register as an authoritative book and the registry that operates it. It owns register constitution (field of application, item classes, entry model, registration policy), the entry record and its supersession and priority ordering, the registration act that changes the book, the effect and reliance regime attached to registration, the publicity/search/extract surface, and register-level assurance and currency measures. It does not own any machinery that a linked model already governs; where a concern is target-owned this model carries only the binding, the subject-specific parameters and the reference.
In scope
- Constitution of a register: field of application, item classes, entry content model and registration policy strictness
- Register entries as authoritative records: composition, subject binding, status binding and temporal validity
- Registration acts (addition, clarification, amendment, supersession, retirement, invalidation, correction, cancellation, lapse) and their authority basis
- Registration ordering and priority stamp, including the rule that order of registration can determine rank
- Effect of registration: constitutive, declaratory, evidentiary-presumption, priority-conferring or opposability effect and its commencement instant
- Publicity regime classification per register and per attribute, index and search surface, certified extract attestation, and fee/cost-recovery basis
- Register-level assurance: rectification regime, liability and indemnity posture, contested marking, coverage and currency measures
- Registry instance hosting one or more registers, registrar continuity and succession, and alignment bindings to external registry vocabularies
Out of scope
- Identifier scheme syntax, allocation, lifecycle and resolution (WM-XCT-011)
- Provenance agents, derivations and source lineage semantics (WM-XCT-012)
- Ownership transfer, delegation and stewardship lifecycle (WM-XCT-001)
- Authorization, purpose, consent, party and grant lifecycle, and runtime access decisions (WM-XCT-002)
- Audit event schema, ordering, integrity and audit retention (WM-XCT-004)
- Evidence custody, verification workflow, support, challenge and rationale semantics (WM-XCT-028)
- Generic status vocabulary, transition rules and lifecycle history (WM-XCT-021)
- Version identity, diffs and change-history semantics (WM-XCT-022)
- Application intake, applicant payload and request lifecycle (WM-REC-009)
- Decision outcome, reasons, approval evidence and signoff (WM-REC-010)
- Event ordering, replay, integrity proof and event retention (WM-XCT-015)
- Federation authority topology, routing, mirroring, freshness and drift (WM-XCT-018)
- Projection selection, transformation, grain, compilation and runtime disclosure enforcement (WM-XCT-003)
- Registry mandate issuance, jurisdiction and mandate lifecycle (WM-POL-013)
- Dispute forum procedure, hearings and adjudication (WM-POL-010)
- Domain-specific register content such as parcel geometry, civil-status facts or licence conditions
Why it exists Filled
Give an agent the format-neutral context needed to understand, constitute, inspect and operate an authoritative register: what subject matter a register admits, how entries are composed and identified, what status and ordering they carry, what effect registration produces in the world, and what may be inspected, searched or certified — while delegating identifier, provenance, ownership, access, audit, evidence, status, version, application, decision, event, federation, projection, mandate and dispute semantics to sibling models.
Distinguishing features Filled
- A register is an authoritative list whose entries change only through recorded registration acts, unlike an ordinary database table.
- It differs from an identifier scheme (WM-XCT-011), which defines how identifiers are formed, while the register records items and their status.
- The legal or practical effect of an entry is limited by the register's declared examination depth.
- Superseded and retired entries stay retrievable, so data produced under them can still be interpreted.
What robots and AI may and may not do Filled
Must not
- Create, alter or close an entry without a recorded registration act naming its authority.
- Present an entry as having an effect stronger than its examination supports.
- Bulk harvest or expose personal data from a register beyond its declared publicity tier.
- Delete closed entries instead of marking them superseded or retired.
- Issue an extract as certified without the register's certification procedure.
Only with a human decision
- Applying a registration, supersession or retirement act.
- Rectifying an entry after a complaint or court order.
- Constituting a new register or changing its publicity rules.
May
- Search a register and return results with the register's currency date and examination depth.
- Prepare a registration application with the evidence the register requires.
- Request a certified extract through the register's own procedure.
- Subscribe to and report published register changes.
Moral aspects Filled
- Public registers often expose names and addresses; publicity should be graded per attribute and justified.
- Register errors can deprive people of property, legal status or market access, so rectification must be reachable.
- Open registers support transparency and fight fraud, which must be balanced against personal safety.
Who is affected
- Registrants
- People named in entries
- Parties relying on the register for decisions
Owners Filled
Steward
An adopting Dimension must name a single accountable owner package for each register it constitutes, and that package must reference the constituting instrument or mandate rather than asserting registrar powers on its own authority.
Roles
- Register owner
- Hold accountability for the register's existence and its field of application under the constituting instrument; Appoint and, where necessary, replace the register manager; Approve changes to the register definition, publicity schedule and fee basis
- Register manager / registrar
- Operate the register: receive acts, stamp ordering, apply authorised acts and bind entry identifiers; Issue certified extracts and search certificates and answer for registry error within the declared liability posture; Maintain continuity of published references and hand over completely on succession
- Control body or designated expert
- Review proposals against the item class specification and registration policy within the register's published deadlines; Recuse where conflicted and record the recusal against the affected act; Advise on whether a change is a clarification or an amendment when the distinction is contested
- Submitting organization or registrant
- Lodge acts that conform to the item class specification and supply the required evidence references; Maintain accurate change-controller contact details for entries they control; Bear responsibility for submitted error as distinct from registry error
- Inspection consumer
- Request access at the tier appropriate to the content and the stated purpose; Read result completeness statements and as-at instants before relying on a result; Report suspected inaccuracies through the register's rectification route
Links to other meta-models Filled
references
- WM-XCT-011 - Bind register and entry identifiers to governed identifier schemes and record the reuse-after-retirement rule. Scheme syntax, allocation procedure, lifecycle and resolution stay in the target; this model carries only the scheme reference, the uniqueness scope and the subject-specific reuse parameter.
- WM-XCT-002 - Route inspection, extract issuance and bulk access through access contracts. Authorization, purpose, consent, parties and grant lifecycle remain in the target; this model supplies only the publicity tier of each attribute and the legitimate-interest definition as input to the grant decision.
- WM-XCT-028 - Point entries and registration acts at the evidence grounding them. Evidence custody, verification workflow, support, challenge and rationale remain in the target; this model owns only the per-item-class evidentiary requirement and a sufficiency marking.
- WM-REC-009 - Reference the generic application record behind a filing, amendment or cancellation request. Intake, applicant payload and request lifecycle remain in the target; this model retains only the receipt instant and ordering stamp, because those determine rank inside the register.
- WM-REC-010 - Reference the decision record authorising acceptance, refusal, correction or cancellation. Outcome, reasons, approval evidence and signoff remain in the target; this model owns only the resulting mutation of the book.
- WM-XCT-018 - Record participation in interconnection or controlled mirroring and the expected freshness of a mirrored copy. Authority topology, routing, mirroring mechanics and drift handling remain in the target.
- WM-XCT-003 - Bind public views, certified extracts and bulk views to governed disclosure shapes. Projection selection, transformation, grain, compilation and runtime enforcement remain in the target and its evaluator; this model contributes the publicity classification and the registrar's attestation and as-at instant.
- WM-POL-013 - Reference the mandate defining registrar powers and the subject scope a public register may cover. Mandate issuance, authority, jurisdiction and mandate lifecycle remain in the target; this model records the derivation of its field of application from that mandate.
- WM-POL-010 - Reference the competent forum for objections, appeals and contested entries. Case procedure, jurisdiction, hearings and adjudication remain in the target; this model owns only the contested marking on an entry and its removal trigger.
composes
- WM-XCT-012 - Attach provenance references to entries and registration acts so their source lineage can be traced. Provenance agents, derivations and lineage semantics remain in the target; this model neither defines provenance records nor asserts derivation.
- WM-XCT-001 - Resolve register owner, register manager, control body and change controller to accountable parties. Ownership transfer, delegation and stewardship lifecycle remain in the target; this model records only the role-to-party binding and the competence matrix that uses it.
- WM-XCT-004 - Let registration acts and disclosures contribute audit events. Audit event schema, ordering, integrity and audit retention remain in the target; referencing audit here confers no ownership of audit-trail semantics and this model defines no audit record.
- WM-XCT-021 - Bind registers, entries and registry cases to governed lifecycle states. Status vocabulary, transition legality and lifecycle history remain in the target; this model adds only the mapping from a bound state to publication exposure and permitted use.
- WM-XCT-022 - Expose governed versions and change history for register definitions and entries. Version identity, diffs and change-history semantics remain in the target; this model relies on it for as-at reconstruction and pre-correction states rather than storing history locally.
- WM-XCT-015 - Publish register changes to an append-only event register. Event ordering, replay, integrity proof and event retention remain in the target; this model produces a change notification and a hand-off, and derives its own priority ordering independently rather than from the event log.
aligned
- ISO 19135-1:2015 Procedures for item registration - Align register, register item, item class, register manager, control body, submitting organization and item status vocabulary. Alignment only: no conformance is claimed without assessment evidence, and the standard's newer edition is tracked as a conflict.
- ISO/IEC 11179-6:2023 Metadata registries — Registration - Align registration authority, submitting organization, stewardship and the separation of registration status from administrative status. Alignment only; the two ISO vocabularies disagree on status naming and that disagreement is recorded rather than reconciled silently.
- RFC 8126 / BCP 26 registration policy framework - Align the registration policy ladder, required registry definition fields, change controller, provisional registration and deprecation practice. Alignment only; IETF change-control semantics apply to IETF-stream registries and are not asserted for legal registers.
neighbor
- WM-XCT-011 Identifier scheme - This model states which governed scheme an entry identifier is drawn from, whether values may be reused after retirement, and how the identifier is bound to an entry; syntax, allocation procedure and resolution stay in WM-XCT-011. RFC 8126 treats reclamation of assigned values as a change-control question, which reinforces that the reuse rule is register policy while the value space is scheme-owned.
- WM-XCT-028 Evidence - This model owns only the evidentiary requirement specification — which evidence classes an item class demands before an act may be applied — and the reference from entry to evidence. Custody, verification workflow, sufficiency challenge and rationale remain WM-XCT-028. The previous R1 'evidence' bundle with a verification layer is therefore deliberately removed.
- WM-REC-009 Application record and WM-REC-010 Decision record - Lodgement payload, applicant identity and request lifecycle belong to WM-REC-009; outcome, reasons and signoff belong to WM-REC-010. What remains here is the registration act itself — the mutation of the book — plus the ordering stamp attached at lodgement, because that stamp is what confers rank inside the register.
- WM-XCT-003 Projection and disclosure shape - The shape, field selection and grain of a public view, extract or bulk view, and its runtime enforcement, are WM-XCT-003 and its evaluator. This model carries only the publicity classification of register content and the registrar's attestation that an extract corresponds to the register at a stated instant.
- WM-XCT-021 Status and lifecycle - Status vocabulary, transition legality and lifecycle history are WM-XCT-021. This model binds register-specific meanings to those states — notably which states remain publicly exposed and which cease to support new use while being retained for interpreting older data, as ISO 19135 requires for superseded, retired and invalid items.
- WM-XCT-004 Audit and WM-XCT-015 Event register - Registration acts and disclosures generate audit and domain events, but this model neither defines their schema nor guarantees their ordering, integrity proof or retention; it only hands off the change notification and the disclosure signal.
- WM-POL-013 Registry mandate and WM-POL-010 Dispute forum - Registrar powers, jurisdiction and mandate lifecycle sit in WM-POL-013; objection and appeal procedure sits in WM-POL-010. Here the register records only that its field of application is derived from a referenced mandate, and that an entry carries a contested marking pointing to a case.
- Domain registers that specialize this pattern - Cadastres, civil registers, identity registers, licence books, security-rights registries and protocol-parameter registries inherit this skeleton inbound. Domain payload — parcel geometry, civil-status facts, collateral descriptions, protocol semantics — stays in the domain model; only the register skeleton is factored here.
- ISO 15489 records management - Authenticity, reliability, integrity and usability are general record properties applying to any records system. This model uses them as assurance criteria for register content but does not restate general records-management process or disposition-authority machinery.
What else AI and robots need to interact with it Filled
Identity and identifiers required Filled
- Authoritative master-system identifier: the entry, act or extract identifier assigned by the register manager of record in the register that is the master system for the subject.
- Governed global identifier or IRI: a persistent resolvable identifier published by the register under a scheme governed by WM-XCT-011, used when the master-system identifier is not exposed to consumers.
- UUID or ULID assigned by the adopting Dimension: used only where neither of the above exists, and recorded as locally assigned so that it is never mistaken for an authoritative reference.
- A date, a filing period, a version label or a file name is never an identifier; where an identifier appears to embed a date it must be treated as opaque and never parsed for temporal meaning.
Direct properties not applicable Not applicable
Not applicable
Institutional or informational subject: no invented physical properties.
Recognition optional Filled
- A register is recognised by a named register owner and manager, defined item classes, registration numbers and a public status for each entry.
- Confused with a directory, a catalog, a simple list and the identifier scheme it may use.
Capabilities and actions required Filled
- Constitute register: Bring a register into existence by fixing its identity, field of application, role bindings, registration policy and publicity schedule under a referenced constituting instrument.
- Define item class: Add or revise an item class in a register, fixing its required attributes, syntax constraints, reserved ranges, extensibility and language rules.
- Apply registration act: Apply an authorised change to the register — addition, clarification, amendment, supersession, retirement, invalidation or cancellation — creating or altering an entry and binding its identifier.
- Stamp registration order: Assign the receipt instant and monotonic sequence position that fix an act's place in the register's ordering, and derive priority rank where the register allocates rank.
- Apply supersession or retirement: Close an entry by replacing it with a named successor or withdrawing it without replacement, preserving both directions of the continuity chain and the register's retention obligation.
- Record rectification: Correct an inaccuracy in the register, classifying it as registry error, submitted error or a change of underlying facts, and record whether the correction operates retroactively.
- Issue certified extract: Produce an authenticated reproduction of specified register content as at a stated instant, bearing the registrar's attestation and an integrity value.
- Execute register search: Interrogate the register index by declared search keys and return a result set with an explicit as-at instant and completeness bounds, or an express nil statement.
- Publish register change: Hand a completed registration act to the register's change-notification channel so that downstream consumers and the append-only event register can take it up.
- Assess register currency: Compute and publish coverage, currency lag, backlog and established error rate for a register against its declared field of application.
Hazards and failure modes required Filled
- Fraudulent or mistaken registration that others rely on.
- Over-reliance on entries that were never examined.
- Scraping of personal data from open registers.
Standards and interfaces required Filled
- ISO/IEC 11179 metadata registries.
- W3C Data Catalog Vocabulary (DCAT) Version 3.
- INSPIRE registry and register guidelines.
Context of use required Filled
- Legal grounding is drawn predominantly from EU instruments, one UK statute and UN/UNIDROIT model instruments; no source from Asia, Africa or Latin America was read in the original during this research.
- Title registration with statutory indemnity is a common-law-influenced pattern; deeds-registration systems, which record instruments rather than guarantee title, are represented only by inference from the examination-depth parameter and were not separately sourced.
- Cost-based fee ceilings and free core particulars reflect an EU statutory choice, not a universal rule; jurisdictions that fund registries from user fees at market rates are not represented.
- Legitimate-interest gating as a safeguard reflects the EU Charter analysis; jurisdictions applying freedom-of-information presumptions may reach the opposite default for the same content.
- The assumption that registration ordering can be made monotonic presumes a single logical registry clock; genuinely distributed registers with no such clock are not addressed and are deferred to WM-XCT-018.
Sources Filled
- ISO 19135-1:2015 Geographic information — Procedures for item registration — Part 1: Fundamentals - International Organization for Standardization (ISO/TC 211)
- ISO/TC 211 good practice: How to set up an ISO register based on ISO 19135 - ISO/TC 211 Geographic information/Geomatics
- RFC 8126 / BCP 26 — Guidelines for Writing an IANA Considerations Section in RFCs - Internet Engineering Task Force (IETF)
- Directive (EU) 2017/1132 relating to certain aspects of company law (codification) - European Parliament and Council of the European Union (EUR-Lex)
- UNCITRAL Model Law on Secured Transactions with Guide to Enactment (including the Model Registry Provisions) - United Nations Commission on International Trade Law (UNCITRAL)
- Judgment of the Court (Grand Chamber), Joined Cases C-37/20 and C-601/20, WM and Sovim SA v Luxembourg Business Registers - Court of Justice of the European Union (via EUR-Lex)
- IANA — Protocol Registration and Requests - Internet Assigned Numbers Authority / Public Technical Identifiers
- INSPIRE Registry (EU Vocabularies) - Publications Office of the European Union / European Commission
- Land Registration Act 2002 (c. 9) - United Kingdom Parliament (legislation.gov.uk)
- ISO/IEC 11179-6:2023 Information technology — Metadata registries (MDR) — Part 6: Registration - ISO/IEC JTC 1/SC 32
- ISO 15489-1:2016 Information and documentation — Records management — Part 1: Concepts and principles - ISO/TC 46/SC 11
- Convention on International Interests in Mobile Equipment (Cape Town Convention) and the International Registry - International Institute for the Unification of Private Law (UNIDROIT)
Open questions
- Retrieve EN ISO 19135:2026 and determine whether it supersedes or merely parallels ISO 19135-1:2015 for register roles, item classes and item status, then re-pin SRC-001 and re-check every finding that binds to the 2015 status vocabulary.
- Verify whether EU instruments adopted after the 22 November 2022 judgment in Joined Cases C-37/20 and C-601/20 changed the beneficial-ownership access position, before the draft treats legitimate-interest gating as the current EU default rather than as one jurisdiction's proportionality outcome.
- Sample a domain-name or IP-address registry with registry-registrar-registrant separation and escrow obligations to test whether the model's collapse of roles into registrar plus submitter hides a third commercial party and an escrow continuity duty.
- Source at least one non-EU/UK legal family (Asia, Africa or Latin America) and one deeds-registration system that records instruments without guaranteeing title, to test whether examination depth as a declared parameter really absorbs the difference or whether a distinct register family is missing.
- Settle whether registry-operation-and-interoperability should become a separate registry-instance model: this audit accepted the combined boundary for continuity with legacy R1 and the frozen record, but did not resolve it, and the inverted containment defect is the symptom that would justify revisiting it.
- Test the registration-ordering model against a genuinely distributed register with no single logical clock, and record whether monotonic ordering and priority stamping must move to WM-XCT-018 or survive as a declared register parameter with a stated clock assumption.
- Decide whether the dropped mu-registry-doctrine internal alignment needs a successor relation or catalogue-level doctrine model, since the shared meaning of entry, evidence and effect across sibling registers is currently unanchored.
- Full normative text of ISO 19135-1:2015, ISO/IEC 11179-6:2023 and ISO 15489-1:2016 is paywalled; the model relies on the ISO/TC 211 good-practice page, published abstracts and secondary summaries for their content, so clause-level citation is not available and specific clause numbers are deliberately not asserted.
- Article numbers within the UNCITRAL Model Registry Provisions were not verified individually against the source text; the model cites the Provisions at the level of their mechanisms (notice-based registration, indexing, effectiveness periods, removal and archival, registrar liability) rather than by article.
- UNECE land administration guidelines and the FAO Voluntary Guidelines on tenure were sought but their PDFs were not text-extractable during research; land-registration content therefore rests on the UK Land Registration Act 2002 alone, which narrows the legal-family base.
- Blockchain and distributed-ledger registries, and the question of whether an immutable ledger can satisfy a rectification and indemnity regime, are not modelled.
- Domain-name and IP-address registries with registry-registrar-registrant separation and escrow obligations were not sampled; that three-party commercial topology may reveal roles this model collapses into registrar plus submitter.
- Registers whose entries are machine-generated at high volume (telemetry, observation registers) are not represented; the sampled sources are all human- or application-mediated and the ordering and examination model may not transfer.
- Cost, staffing and organisational-capacity aspects of running a register are excluded as operational rather than semantic.
- Insolvency, beneficial-ownership and land-register interconnection regimes beyond the company-law instance were not examined in detail.
Machine files
Provenance
world-models research · reviewable-draft
Built from: models/wm-xct-013-registry-pattern/spec.yaml, ver-cy/world-models/card-supplements/wm-xct-013-registry-pattern.json