Part A - Kernel Architecture Cluster
Preface node
heading:part-a-kernel-architecture-cluster:1151
What this page is
This is generated FPF reference text from the specification preface or supporting sections. It helps interpret FPF; it is not FPF Reference product documentation.
Methodology
Use it to understand how the specification wants to be read, then return to a route, pattern, or work packet for active work. Cite generated IDs only when the wording changes the task decision.
Content
Onboarding Glossary (NQD & E/E‑LOG)
One‑screen purpose (manager‑first). This pattern gives newcomers a plain‑language starter kit for FPF’s generative engine so they can run an admissible problem-solving or search loop on day one. It explains the few terms you must publish when you generate, select, and ship declared set results or typed portfolio publications (not single “winners”), and points to the formal anchors you’ll use later. (OEE is a Pillar; NQD/E/E‑LOG are the engine parts.)
Builds on. E.2 (P‑10 Open‑Ended Evolution; P‑2 Didactic Primacy), A.5, C.17–C.19 - Coordinates with. E.7, E.8, E.10; F.17 (UTS); G.5, G.9–G.12 - Constrains. Any pattern/UTS row that describes a generator, selector, typed portfolio publication, or set-return publication surface.
Keywords & queries. novelty, quality‑diversity (NQD), explore/exploit (E/E‑LOG), declared set result, typed portfolio publication, illumination map (report‑only telemetry), parity run, comparability, ReferencePlane, CL^plane, ParetoOnly default
Problem Frame
Engineer‑managers meeting FPF for the first time need a plain, on‑ramp vocabulary for the framework’s generative engine so they can run an informed problem‑solving/search loop on day one—before formal specifications. Without that, Part G and Part F read as assurance/alignment only, and teams default to single “best” options. This undercuts P‑10 Open‑Ended Evolution and harms adoption.
Problem
In current practice:
- Single‑winner bias. Teams look for “the best” option and publish a leaderboard, suppressing coverage & diversity signals essential to search.
- Metric confusion. “Novelty” and “quality” are used informally; units and scales are omitted; ordinal values are averaged, breaking comparability.
- Hidden policies. Explore/exploit budgets and governor rules are implicit; results are irreproducible and refresh‑unsafe (no edition/policy pins).
- Tool lock‑in. Implementation terms (pipelines, file formats) leak into the Core, violating Guard‑Rails.
FPF needs a short, normative glossary that names the generative primitives in Plain register and ties each to its formal anchor—so declared set results and typed portfolio publications, not single scores, become the default publication.
Forces
Solution - Normative onboarding glossary and publication hooks
4.1 Plain one‑liners (normative on‑ramp; formal anchors in C.17–C.19)
(Registers & forbidden forms per LEX‑BUNDLE; avoid “axis/dimension/validity/process” for measurement and scope.)
4.2 Publication & telemetry duties (where these terms show up)
- UTS surface (Part F). When a UTS row describes a generator, selector, typed portfolio publication, or set-return publication surface, it MUST surface N, U, C, Diversity_P, E/E‑LOG
policy‑id,ReferencePlane, with units, scale, and polarity typed under MM‑CHR and CG‑Spec, and admissible references toDescriptorMapRefandDistanceDefRef. (Row schema: F.17; shipping via G.10.) - Parity & edition pins (Part G). When QD/OEE is in scope, pin
DescriptorMapRef.editionandDistanceDefRef.edition(and, where applicable,CharacteristicSpaceRef.edition,TransferRulesRef.edition) and recordpolicy‑id+PathSliceId. Treat illumination/coverage as report‑only telemetry; publish an Illumination Map where G‑kit mandates parity records. Declare S (Scale Variables) and run at least one scale‑probe (two points along S) when claiming scale‑amenability. Dominance policy defaults toParetoOnly; including illumination in dominance MUST cite a CAL policy‑id. - Tell‑Show‑Show (E.7/E.8). Any architectural pattern that claims generative behaviour MUST embed both a U.System and a U.Episteme illustration using this glossary (manager‑first didactics).
4.3 Minimal first-day construction
- Declare CG‑Frame (what “quality” means; admissible units and scales) and ReferencePlane.
- Pick 2–4 Q components + a simple DescriptorMap (≥2 dims) for N/D; publish editions.
- Choose an E/E‑LOG policy (explore↔exploit budget); record policy‑id.
- Apply G.5 selection/dispatch with parity pins; return a declared set result (
Front,Archive,Shortlist, orRankedShortlistas appropriate), not a single score or an unnamed "portfolio". - Publish to UTS + PathIds/PathSliceId; Illumination Map is report‑only telemetry by default.
Archetypal Grounding
Informative; manager‑first (E.7/E.8 Tell‑Show‑Show).
Show‑A - SRE capacity plan (selector returns a set).
Frame. We must raise service commitment headroom for Q4 without breaking latency SLOs.
Declared retained set. {cache‑expansion, read‑replicas, query‑shaping, circuit‑breaker tuning, schema‑denorm}.
Glossary in action. U = latency@p95 & error‑rate, C = budget ≤ $X, risk ≤ R, N = dissimilarity to current playbook, Diversity_P = adds a previously empty niche in our archive (e.g., “shifts load to edge”). E/E‑LOG starts Explore‑heavy, flips Exploit‑heavy once ≥ K distinct niches are lit. (Publish UTS row + parity pins; illumination stays report‑only telemetry.)
Show‑B - Policy search with QD archive (MAP‑Elites‑class).
Frame. Robotics team explores gaits that trade stability vs energy use.
Glossary in action. CharacteristicSpace = {step‑frequency, lateral‑stability}, ArchiveConfig = CVT grid, N from descriptor distance, U = task reward, Diversity_P = coverage gain; PortfolioMode=Archive. Families include MAP‑Elites (2015), CMA‑ME/MAE (2020–), Differentiable QD/MEGA (2022–), QDax (2024); publish editions and policy‑ids; treat illumination as report‑only telemetry.
(Optional) Show‑C - OEE parity (POET/Enhanced‑POET).
Co‑evolve declared {environment, method} sets; publish coverage/regret as telemetry metrics; pin TransferRulesRef.edition; return sets, not a single winner.
Show‑Epi - Evidence synthesis (U.Episteme).
Frame. A living review compares rival causal identification methods (e.g., IV vs. DiD vs. RCT‑adjacent surrogates) across policy domains.
Glossary in action. U = external‑validity gain @ F/G‑declared lanes, C = ethics & data‑licence constraints, N = dissimilarity in **ClaimGraph** transformations, D_P = coverage of identification niches in the archive. ReferencePlane = episteme. Illumination/coverage stays report‑only telemetry; selection returns a declared retained-set result or portfolio-publication view of methods per niche. (Publish UTS rows; cite Bridges + CL for cross‑domain reuse; edition‑pin Descriptor/Distance defs where QD applies.)
Bias-Annotation
Scope. Trans‑disciplinary; glossary applies to both System and Episteme work. Known risks & mitigations. Over‑aggregation: forbid mixed‑scale sums; use CG‑frame and MM‑CHR. Terminology drift: enforce LEX‑BUNDLE registers; ban tool jargon in Core. Optimization monoculture: require declared set-result or typed portfolio publication where G‑kit mandates parity; illumination stays report‑only telemetry unless a CAL policy promotes it (policy‑id cited).
Conformance Checklist (SCR/RSCR stubs)
Consequences
Benefits. • Immediate usability for engineer‑managers (plain one‑liners) with formal anchors for auditors. • Declared-set-first / typed portfolio-publication culture (typed set results & illumination) instead of brittle leaderboards. • Edition‑aware comparability; parity/refresh is routine, not ad‑hoc.
Trade‑offs & mitigations. • Slightly longer UTS rows → mitigated by consistent schema and copy‑paste snippets. • Requires discipline on units and scales → mitigated by CG‑frame templates.
Rationale
This pattern instantiates P‑10 Open‑Ended Evolution by making generation‑selection‑publication operational at the on‑ramp: readers get just enough shared vocabulary to run search as standard practice. It aligns with Didactic Primacy (P‑2) and LEX‑BUNDLE (E.10) by keeping definitions plain‑first and scale‑lawful, and with Patterns Layering (P‑5) by pointing to C.17–C.19 for formal anchors without tool lock‑in. The post‑2015 line (MAP‑Elites → CMA‑ME/MAE → Differentiable QD/MEGA → QDax; POET/Enhanced‑POET/Darwinian Goedel Machine) normalised quality‑diversity and open‑endedness as first‑class search objectives; this glossary surfaces those ideas as publication standards, not tool recipes.
Relations
Builds on. E.2 Pillars (P-10, P-2, P-6), A.5 (Open-Ended Kernel), B.5/B.5.2.1 (Abductive loops + NQD integration), C.17–C.19 (Creativity-CHR, NQD-CAL, E/E-LOG).
Coordinates with. E.7/E.8 (Archetypal Grounding; Authoring template), E.10 (LEX‑BUNDLE), F.17 (UTS), G.5/G.9–G.12 (set‑returning selectors, iso‑scale parity, shipping & refresh). Constrains. Any generator/selector/typed portfolio publication on the Core surface: N‑U‑C‑Diversity_P + policy‑ids; S/Scale‑probe where applicable; parity pins; lawful scales; declared-set publication where mandated. (Ties into UTS rows and parity records.) Editor’s cross‑reference. For agentic orchestration of scalable tool‑calls under BLP/SLL, see C.24 (Agent‑Tools‑CAL).
Scope of this glossary
This pattern is an on‑ramp: it does not replace C.17–C.19. It binds Plain definitions to publication/telemetry expectations so newcomers can use NQD/E/E‑LOG immediately while experts follow the formal trails.
Early set-result and metric-kind vocabulary
- Use
Palettefor a plurality-preserving set with no dominance semantics yet. - Use
TraditionPaletteonly when the members are traditions gathered before later comparison or choice semantics are declared. - For methods, hypotheses, environment-method pairs, candidate explanations, or other member kinds, use
Paletteplus explicitSubjectKindinstead of borrowing theTraditionPalettehead. - Use
Frontonly for a non-dominated set under one declaredDominanceSet. - Use
Q-Frontwhen the declaredDominanceSetis the declaredQcomponents. - Use
Archivefor a retained set whose purpose is coverage, stepping-stone retention, or frontier expansion rather than current non-domination. - Use
ExplorationArchivefor the broad retained exploration surface; it is the exploration-specific specialization ofArchive. - Use
SteppingStoneSetonly for one narrower retained subset whose stated purpose is future frontier reach rather than the whole archive. It is not part of the ordinary first-pass public-head family for retained exploration. - Use
Shortlistfor the set chosen from one declared source set by one named lens. - Use
RankedShortlistonly when that shortlist is explicitly rank-ordered. - Use
ShortlistIdfor the stable public token of one emitted shortlist; it is not the shortlist itself. - Use
ChoiceSetonly when the mathematical set object underlying one shortlist must be named explicitly; do not let it replace the public shortlist head. - Use
Q-setfor the declared current objective tuple that may ground the currentDominanceSet. - Use
LearningProgressSignalfor an optional policy-side signal that says further exploration is expected to improve capability or competence; it is not part ofQor dominance by default. - Use
CompetenceModelReffor the cited model or evidence surface that makes a capability or competence estimate reviewable. - Use
GoalSpaceExpansionCuefor a declared reason to widen the goal or task palette; it is a pool-policy/probe cue, not proof that one candidate is already on the current front. - Use
GoalSpaceExpansionPolicyReffor the declared pool policy that says when learning-progress or competence evidence justifies widening goals, tasks, or curricula; it governs archive/curriculum growth, not default dominance. - When future reach depends on transition or transfer potential, cite that reachability or transfer rule together with
LearningProgressSignal,CompetenceModelRef, orGoalSpaceExpansionCue; keep that bridge on the archive/pool-policy side unless one explicit policy promotes it. - If one front is meant to be current-
Qby default, say so asQ-Frontor asFront over the declared Q componentsrather than leaving the relation betweenQ-setandDominanceSetimplicit. Use-Valuemay be one member of theQ-setonly when the current Context declares it there; it is not the wholeQ-setor the defaultQ-setby itself.- Metric-kind doctrine: the
Q-setis the candidate/front-facing objective tuple;Novelty@contextis one context-relative candidate signal;DeltaDiversity_Pis one set-relative marginal diversity contribution;IlluminationSummaryis one report-only archive telemetry summary unless one explicit policy promotes it. - Minimal mathematical lens: the current front lives in one declared comparison or outcome space, while the exploration archive may depend on one declared search, niche, or reachability space. Keep both spaces explicit when they differ.
- Keep
Novelty@context,DeltaDiversity_P,Surprise, andIlluminationSummaryoutside the defaultQ-setunless one declaredPromotionPolicysays otherwise. - A reader should be able to tell whether one sentence is talking about a
Palette, aFront, anArchive, aSteppingStoneSet, aShortlist, or one explicitRankedShortlist, and whether one selected set came from one declared source set, before later policy or geometry detail arrives. - Use
portfolioonly when the portfolio or set-result field is a declared retained set plus a selection/retention rule or a portfolio-publication posture. Do not use bareportfoliowhenPalette,Front,Archive,SteppingStoneSet,Shortlist, orRankedShortlistis already recoverable.
Helper declarations for set-result language
- Ordinary public set-result family heads are
Palette,TraditionPalette,Front,Q-Front,Archive,ExplorationArchive,Shortlist, andRankedShortlist. ExplorationArchiveis the exploration-specific specialization ofArchive; useArchiveas the wider family head only when that exploration-specific subtype does not matter.SteppingStoneSetis one narrow retained-subset head only when that subset itself is the visible published surface; do not treat it as the ordinary public head for retained exploration.ShortlistIdis the stable public token or id companion for one emitted shortlist; it is not a set-result family head.ChoiceSetis only the mathematical set gloss for a shortlist when that object itself must be named.SetResultFamilyis a declaration field naming which public set-result family is being emitted; it is not another public head, not a publication face, not a publication form, not an interop publication form, and not a carrier kind.SourceSetFamilyis a declaration field naming the immediate source-set family acted on by a lens, such asQ-Front,ExplorationArchive,Front,Archive, orTraditionPalette; it does not carry derivation, composition, or object-id load, it does not rename the emittedShortlistorRankedShortlist, and it is not a publication face kind, publication form kind, interop publication form kind, or carrier kind.SourceSetCompositionis an optional declaration field naming a multi-source composition such asFront+Archivewhen one lens genuinely acts over more than one declared source-set family; it is not itself a kind.SubjectKindis a declaration field naming what the members are, such as traditions, methods, hypotheses, environment-method pairs, candidate explanations, or other subject-kinded alternatives.EligibilitySet,DominanceSet,TieBreakerSet, andTelemetrySetare the comparison-bundle sets behind the published set result, not rival publication heads:EligibilitySetsays what may enter,DominanceSetsays what counts for current non-domination,TieBreakerSetsays what may order or choose among survivors, andTelemetrySetsays what may be reported without changing dominance.PromotionPolicyis the policy pin that authorizes one tie-breaker or telemetry signal to move into dominance. Without that pin, novelty, diversity, surprise, illumination, or similar signals remain outside the currentDominanceSet.DerivedViewKindis an optional declaration field for a derived view, such as one tradition view used for interpretation or publication. It must leave the baseSourceSetFamily,SetResultFamily, and emitted shortlist family recoverable.BasePaletteRefis an optional cited id/ref for the base palette when one derived tradition view or shortlist depends on that palette; it is a ref, not a kind.- Stable values for
SetResultFamily,SourceSetFamily,SourceSetComposition,SubjectKind, andDerivedViewKindshould come from controlled tokens, cited ids, or already-declared head labels; do not let one ad hoc local prose label become a de facto field value. - When the upstream object is
SoTAPaletteDescriptionand its members are traditions,TraditionPalettemay be used as the reader-facing tradition-only palette head for that same palette declaration. It is an aliasing head over the same palette declaration, not a separate palette declaration with its own authority-reference relation. When the members are not traditions, keepSoTAPaletteDescriptionorPalette + SubjectKindexplicit instead of wideningTraditionPalette. RetentionIntent=steppingStoneis a field value on retained archive membership when the purpose is future frontier reach; it is not the same publication move as publishing aSteppingStoneSet, which names a narrower retained subset only when that subset itself is the published set result being discussed and not the default archive head.
First public wording for shortlisted results
- When one reader needs the visible selected set, say
Shortlist from <SourceSetFamily> under <LensId>rather than one genericchoice setorportfolio. - When the selected set must be cited as one stable emitted object, say
ShortlistIdand keep one nearby line that names the shortlist and its source set. - When the shortlist is ordered, say
RankedShortlistand keep the underlying shortlisted set result recoverable rather than jumping straight fromFrontto ranking. - Use
choice set underlying that shortlistonly when the mathematical set object itself is the point of the sentence. - A reader should be able to recover on first pass what source set was acted on, what shortlist came out, and whether the text is naming the published set result, the token, or the mathematical set object.
Set/space reading reading glosses
The current set/space reading terms should read plainly as follows:
SearchSpaceRef- one declared reference to the
CharacteristicSpacecurrently used to search, compare, or navigate candidate possibilities - it is one role-named ref field over the existing
CharacteristicSpaceRef/SpaceRefidiom, not one brand-new space kind
- one declared reference to the
OutcomeSpaceRef- one declared reference to the
CharacteristicSpacecurrently used to judge outcomes, effects, or realized value - it is one role-named ref field over that same idiom, not one synonym for
SearchSpaceRef
- one declared reference to the
DeclaredSubstrateInterpretiveView- the ordinary/common head of one optional interpretive-view family laid over one already-declared substrate-bearing line or one source set or one set result whose substrate remains recoverable
- it helps the reader see the current inspection question; it does not replace the base source set or silently invent one new substrate
DeclaredSubstrateAtlasView- one richer optional interpretive view that keeps several declared views, spaces, mappings, or qualifiers visible together
- use it only when the current reading truly needs that composite interpretation, and say why thinner interpretation is not enough; it is not the default meaning of palette, front, archive, shortlist, or candidate set
TypedSetViews- one explicit list of which declared set-view heads the current atlas/support reading is holding together
- use it when several declared views must stay visible together; it does not create one new set result and should not hide the active source set or active set result
OutcomeMapRef- one explicit
OutcomeMapRefor named map ref that shows how one declared source or set result bears on into one outcome-side or effect-side declared space/ref when that map materially matters - it qualifies the reading; it does not rename the source set into the outcome-side declared space/ref
- one explicit
SpaceMetricRef- one explicit metric-ref qualifier for the metric, neighborhood, distance, density, or reachability discipline being used inside one declared space
- it qualifies how the reader is comparing positions in that space; it is not the space itself and not one substitute for
SearchSpaceReforOutcomeSpaceRef
TransitionRelationRef- one explicit transition-ref qualifier for the transition, cross-scale state-change, dynamic-coupling, or phase-change basis that the reading depends on
- it explains why motion or cross-scale state change is being read a certain way; it does not by itself decide policy, planning, or publication
BridgeDistortionNote- one explicit note that a bridge, projection, aggregation, or derived reading is useful but not perfectly faithful
- it tells the reader where comparability bends or information is lost, so a reading that claims bridge, substitution, or reliance beyond the declared note does not over-claim
Practitioner-facing reading cue
- If the question is “Which space are we searching or navigating?”, look for
SearchSpaceRef. - If the question is “Which space are we judging outcomes in?”, look for
OutcomeSpaceRef. - If the question is “What optional overlay helps me read several declared views or set results together?”, look for
DeclaredSubstrateInterpretiveView. - If that overlay also keeps several declared views, spaces, mappings, or qualifiers together, it is the richer
DeclaredSubstrateAtlasView. - If the atlas/support reading must keep several declared set views visible at once, look for
TypedSetViews. - If the overlay depends on one explicit source-to-outcome mapping, look for
OutcomeMapRef. - If the overlay depends on one metric, neighborhood, or reachability discipline inside one declared space, look for
SpaceMetricRef. - If the overlay depends on one transition, cross-scale state-change, or dynamic-coupling basis, look for
TransitionRelationRef. - If the overlay depends on one bridge or projection that may lose fidelity, look for
BridgeDistortionNote.
First-use classification check
- Start with
DeclaredSubstrateInterpretiveViewwhen the NQD/OEE task is simply to keep one declared palette, front, shortlist, or archive readable while comparing candidate material. - Start with it only when any cited
SearchSpaceRef,OutcomeSpaceRef, mappings, or qualifiers are already declared elsewhere and remain recoverable through the base substrate, source set, or set result. - Escalate to
DeclaredSubstrateAtlasViewonly when the reading must hold several declared views, spaces, mappings, or qualifiers together to explain why one specialization, evaluation, or boundary judgement stays admissible, and state why thinner interpretation is insufficient. - If the reading keeps several declared set views together, name
TypedSetViewsexplicitly instead of letting atlas wording hide that view-set choice. - If the reading depends on one source-to-outcome map, name
OutcomeMapRefexplicitly instead of letting the overlay silently stand in for that map. - If the reading depends on one metric or neighborhood discipline, name
SpaceMetricRefexplicitly instead of letting the space name stand in for that metric. - If the reading depends on one transition, cross-scale state-change, or dynamic-coupling basis, name
TransitionRelationRefexplicitly instead of letting the overlay silently absorb that transition-support requirement. - Not this glossary-side interpretive-view stack when the real move is to invent one new search doctrine, one new outcome metric family, or one new publication surface. Those decisions stay with the governing patterns for the object itself.
A.0:End
Holon Ontic Foundation (U.Holon and Admitted Holon Kinds)
Type: Part A architectural ontology pattern Status: Stable Normativity: Normative unless a section is explicitly informative
Use This When
Use this pattern when a project must say what kind of thing is under concern before it can rely on parts, wholes, boundaries, acting systems, roles, methods, work, architecture, or descriptions.
Typical moments:
- a team calls everything a "system" and then asks physical or operational questions about theories, documents, models, dashboards, or descriptions;
- an episteme is treated as an acting agent that decides, performs work, authorizes, promises, or revises itself;
- a product, organization, machine, document family, research program, discipline, work occurrence, or model family must be treated as a whole with parts;
- a list, batch, fleet, pool, clientele, community, or supplier base is expected to act, but no acting system has been constructively recognized;
- architecture or selected-structure claims need the holon whose structure is being selected.
Primary EntityOfConcern. One exact U.Entity candidate whose actual construction may or may not satisfy the constructive recognition criterion for one already admitted holon kind.
Primary working reader. A practitioner or modeler who must decide whether part-whole, acting-system, or claim-bearing-holon reasoning is admissible for the exact entity under concern before relying on neighboring work, architecture, evidence, or publication claims.
First useful move. Name the exact U.Entity under concern. Then test whether its actual construction satisfies the A.1 holon-recognition criterion under an already admitted public holon kind. E.24.UK admits the public kind once at ontology level; A.1 does not repeat that decision for each candidate.
What goes wrong if missed. A document edits itself, a theory gets ports, a list becomes an organization, a lathe becomes the super-holon of the workpiece it changes, and architecture is discussed without naming the holon whose structure is selected.
What this buys. FPF gets one compact part-whole foundation without turning every whole into a physical system: identity starts at U.Entity; part-whole treatment starts at U.Holon; acting work attaches to U.System; claim-bearing knowledge is carried by U.Episteme; method holonhood is governed by U.Method; other admitted holon kinds keep their own governing patterns.
Not this pattern when.
- If the current question is a selected bounded model-use relation organization, use
A.1.1. - If the current question is episteme identity, constitution, or neighboring-relation discipline, use
C.2.1. - If the current question is relation vocabulary or component, portion, aspect, and phase discipline, use
A.14. - If the current question is constructive part-whole grounding, use
C.13; useB.3.5for Working-Model assurance grounding. - If the current question is selected structure over a holon, use
A.22. - If the current question is architecture of a holon, use
C.30. - If the current question is transformation, method, role, work, capability, or functioning, use the direct governing pattern before relying on A.1.
Problem Frame
FPF cannot use system as its universal root. A pump, theory, software product, legal code, dashboard, research program, work occurrence, discipline, and team can all be objects under concern, but they do not all act, exchange matter, execute methods, or carry physical ports.
A.1 separates four questions that are often collapsed:
- reference: what can be individuated as
U.Entity; - part-whole treatment: which exact candidates satisfy the constructive recognition criterion for
U.Holonor another already admitted public holon kind; - acting eligibility: which recognized holons also satisfy the kind-specific criterion for the already admitted
U.Systemkind; - claim-bearing knowledge: which recognized holons also satisfy the kind-specific criterion for the already admitted
U.Epistemekind.
Entity identity and world-side holon recognition have a context-independent base. Claim scope, effective reference scheme, and selected model-use structure can qualify a particular assertion or use, but none identifies the candidate, makes the constructive criterion true, or admits a public U-kind.
Other admitted holon kinds are not created by title, by filling one locally named slot, or by ordinary-language label. They remain governed by their direct patterns. Current accepted examples include U.Method under A.3.1, U.Work under A.15.1, and U.Discipline under C.20. BoundedModelUseStructure under A.1.1 is U.Structure, not a holon kind.
Problem
Without A.1:
- System-bias spreads. Physical and operational assumptions are projected onto epistemes, descriptions, theories, documents, dashboards, and source records.
- Epistemes become agents. A document, model, theory, pattern, or report is said to decide, promise, authorize, perform work, or revise itself.
- Collections become collectives by wording. A set of people, services, files, claims, assets, or suppliers is treated as an acting whole without boundary, coordination, role assignment, capability, method, or work evidence.
- Transformation becomes containment. A system that changes another holon is treated as that holon's super-holon or as a part-whole relation by the fact of interaction.
- Architecture loses its grounding holon. A structure, view, graph, diagram, or architecture claim floats free of the holon whose selected structure is under concern.
- Slot filling creates false kinds. A system, episteme, holon, relation occurrence, or other value is given a new intrinsic kind merely because it fills one slot of a role-assignment, evidence, publication, description, or another direct relation.
Forces
Solution
Use A.1 to distinguish an exact referenceable entity from a candidate that satisfies the constructive holon criterion under an already admitted public holon kind.
This is not a classical taxonomic ladder and not a publication hierarchy. [E.24.UK](/generated/patterns/E.24.UK) owns public U-kind admission; A.1 owns recognition of exact candidates under the admitted holon kinds and the kind-specific patterns shown above. A selected U.Structure, including BoundedModelUseStructure, remains dependent relation organization rather than a holon kind.
U.Entity
U.Entity is anything that can be individuated and referenced. It carries no part-whole, acting, claim-bearing, model-use, or architecture assumption by itself.
Use U.Entity when the current move only needs to point to something: a number, claim, named product, material batch, data value, legal clause, role value, reference, document, or another object under concern.
Do not apply holon aggregation, part-whole grounding, acting-system roles, or architecture claims to a bare U.Entity unless its actual construction satisfies the A.1 criterion for U.Holon or a kind-specific criterion for another already admitted public holon kind.
U.Holon And Context-Independent Recognition
U.Holon is the broad part-whole EntityOfConcern: an exact U.Entity whose actual construction supports treatment as a whole with parts and as a possible part of a larger whole.
Keep ontology admission and candidate recognition separate. E.24.UK owns the one-time FPF decision that admits U.Holon and every other public holon kind. A.1 owns the constructive criterion by which an exact candidate is recognized under an already admitted kind. C.3.2 supplies three-valued discipline only for project-local kind membership; it does not own recognition under an admitted public holon kind. Candidate classification is a judgment about that exact entity; it is not a direct relation to a pattern edition, criterion episteme, evaluator, evidence set, or status value.
For one exact candidate, recover six distinct constructive components. Do not let one component stand in for another:
- Exact candidate. Identify one exact
U.Entityunder its direct identity rule. - Exact constituents. Identify the entities claimed to constitute this candidate. Nearby entities, members of a set, sampled points, and arbitrary slices are not constituents by inclusion or wording.
- Constructive part relations and assembly. Recover the exact obtaining part-relation occurrences under their direct patterns and the assembly by which those constituents compose this candidate. A list, diagram, or shared boundary does not establish those relations.
- Reidentification rule. State the rule that distinguishes this whole and says which constituent, relation, boundary, or phase changes preserve or end its identity.
- Composition-grounded whole-level characteristic. Recover at least one exact characteristic whose value or state is produced or sustained by the composition and is not attributable to one constituent alone.
- Possible participation in a larger constructive assembly. Recover the candidate's actual boundary, interfaces, relevant characteristics, and identity-preservation conditions. Those facts must satisfy the applicability and compatibility conditions of at least one governed larger-assembly construction method or rule under which an admissible construction would include this candidate as a constituent while preserving its identity. One exact episteme may describe that method or state that rule and its conditions; the episteme does not create applicability, compatibility, or possibility.
Name the already admitted holon kind and its direct kind-specific pattern separately from those six components. The candidate satisfies the A.1 criterion when all six world-side components hold and any kind-specific condition is satisfied; it fails when a required component or condition does not hold. Satisfaction or failure does not vary with current evidence availability or evaluator access. Replacing a constituent or part-relation occurrence preserves the same holon only when the reidentification rule admits that change. An unassembled collection fails even when a project card calls it a holon.
Exact dated classification work belongs to A.15.1. When a reusable typed recognition-evaluation operation is current, A.6.1 governs its declared arguments and result plus the actual application bindings. The evaluation returns true when its governed inputs determine satisfaction, false when they determine failure, and unknown when missing evidence or an unavailable dependency prevents either determination. unknown is an evaluation result, not a third candidate state: the same candidate can satisfy or fail the criterion while the current evaluation remains unable to determine which.
When another use must inspect or cite the judgment, identify an optional C.2.1 classification-assertion or evaluation-result episteme whose exact EntityOfConcern is the candidate. Its claim content names the admitted kind, the A.1 criterion, the constituent and part-relation facts, reidentification rule, whole-level characteristic, candidate-side compatibility facts, exact construction-method-or-rule episteme, evaluation frame, and true | false | unknown judgment needed by that use. The assertion creates none of the candidate, constituents, part relations, assembly, characteristic, compatibility facts, method or rule, larger-assembly possibility, or holonhood.
Exact evidence and assurance relations support or warrant assertion claim content. G.11 separately governs whether the selected assertion edition is current. Receiving work separately decides whether to rely, decline to rely, defer, or reopen. B.2 owns the different question whether the existing whole is no longer the right EntityOfConcern for a receiving use. A.1 satisfaction, failure, or evaluation uncertainty supplies neither warrant for a B.2 claim nor grounds for selecting B.2.
In ordinary use, stop after naming the candidate, six constructive components, admitted kind, kind-specific condition, and resulting judgment needed by the work. Materialize a classification assertion only when a specific downstream task must inspect or cite that judgment.
Admitted Holon Kinds
Current accepted holon-kind examples are:
U.System, governed here as the acting physical or operational holon kind;U.Episteme, governed here only as a non-agentive claim-bearing holon, with full slot discipline inC.2.1;U.Work, governed byA.15.1as the admitted kind for dated 4D occurrence holons;U.Discipline, governed byC.20as a field-level practice-and-knowledge holon;U.Method, governed byA.3.1and method-composition patterns such asB.1.5as a non-agentive method holon whose submethods compose into a whole method across levels.
No blank "other kind" escape hatch is selected. A project-local holon classification names its concrete C.3 U.Kind, the A.1 criterion, any kind-specific criterion, and the direct patterns for the construction facts it uses. A proposed public U.* holon kind first passes E.24.UK and gains one direct governing pattern. Neither route may rely on part-whole, architecture, role, work, evidence, or source-use claims before the candidate-side criterion is recoverable.
Candidate recognition is decided by the six candidate-side constructive components in A.1:4.2, not by agentivity, wording, evidence availability, or a B.2 whole-reidentification result. Grounding work selects the participating objects from the surrounding practice or world, fixes their boundaries, identifies constituents and exact part relations, recovers the assembly and reidentification rule, and tests the resulting whole-level characteristic and larger-assembly compatibility. Relations may arrange, constrain, assign, qualify, or describe constituents; those relations do not become constituents by that fact.
U.Role and U.Method are therefore not decided by whether they act. U.Episteme already shows that a non-agentive object can be a holon. The ontology decision is: U.Method is a non-agentive holon kind, and U.Role is not a holon kind. A method can have submethods composing into whole methods with whole-level preconditions, effects, invariants, interfaces, constraints, and assurance hooks; the resulting method can participate in a larger method. A step label or step description is not a method part by label: it is first recovered as a U.Method submethod rather than a method-description node, order relation, work-plan item, or work occurrence. A role value states what a holder is being under one assignment relation and role-taxonomy interpretation; assignment, state, capability, responsibility, permission, commitment, obligation, method participation, and role relation structure remain neighboring objects or relations rather than role parts.
U.System
U.System is an acting physical or operational holon kind. It can participate in work-facing role assignments, capability relations, method enactment, mechanism realization, work occurrences, transformations, functioning relations, and responsibility-bearing claims when their direct patterns make those claims current.
Its kind-specific condition is acting eligibility: the recognized whole has an actual physical or operational organization through which it can causally participate in work or transformation while preserving its identity. Capability evidence or actual participation can support a classification assertion; a role assignment, work occurrence, or capability relation does not create the system by participation alone.
Keep those relations separate:
A.2.1governs the role-assignment occurrence whoseHolderSystemSlotis filled by the system.A.2.2governs capability claims about that system.A.3.1,A.3.2, and the mechanism family govern method, method description, and mechanism realization.A.15.1governs performed work and the exact relation through which the system is attributed as performer.A.3.4governs the bounded transformation; the exact direct subject-relation pattern governs the system's participation in it.- Functioning, evidence, assurance, temporal, and dynamics claims remain with their direct patterns.
A.1 introduces no omnibus participation relation over references to all those occurrences. Listing them together in a worked case creates no additional world-side relation. If the selected organization among several direct relations changes an engineering decision, select that organization as U.Structure under A.22 and keep every constituent occurrence under its direct identity. Claim scope, effective reference scheme, and optional model-use structure qualify each dependent assertion only where its direct pattern makes them current.
U.Episteme
U.Episteme is a claim-bearing, non-agentive holon kind. It can be changed, used, cited, published, represented, versioned, structured, compared, interpreted, or relied on by acting systems, but it does not act by itself.
Use C.2.1 for episteme identity, EpistemeConstitutionRelation, and the direct empirical-grounding and edition relations declared there. Use the neighboring direct patterns for viewpoint, view, claim scope, bounded model use, evidence, publication, source use, carrier, and representation. A.1 only says that an episteme can be treated as a holon when part-whole treatment of the claim-bearing object is current.
A system in role decides, approves, performs work, promises, revises, authorizes, or bears responsibility with or about an episteme. The episteme does not perform those acts by itself.
Recover Holon Delimitation And Boundary Crossing
When a claim concerns where a holon is delimited, recover the exact delimitation relation, criterion, or selected structure supplied by the direct holon, mereology, architecture, or domain pattern. Do not force an identity rule, membership relation, environment relation, selected structure, and boundary condition into one universal relation signature. Those objects have different kinds and predicates.
When one direct relation crosses that delimitation, keep the direct relation occurrence under its own pattern and use F.9 for the exact crossing or bridge claim. State the delimited holon, the direct crossing relation, direction, fit, loss, scope, and qualification window that are current for that use. A crossing classification does not replace the signal, control, measurement, transformation, source-use, publication-use, evidence-use, coupling, or other direct relation occurrence.
Do not call every boundary an interface. Use interface language only when a governing signature, module, architecture, port, or interface pattern makes interface meaning current.
External holon vocabularies do not admit FPF kinds or establish candidate holonhood by label. Recover the current FPF claim first. Acting-agent and organization claims test the U.System criterion; data, document, and projected-content claims usually use U.Episteme, publication, source-use, evidence, or description patterns; process-holon wording uses work, method, work-plan, or transformation patterns; portal or traversal wording uses an access, crossing, policy, or evidence relation. A.1 recognizes only the exact candidate-side holon or system claim when its criterion is satisfied.
A Markov blanket is not a holon boundary by name. First recover whether the source names accepted local Markov dynamics, a mathematical or probabilistic lens, an exact holon-delimitation claim, a physical interface module or component, a functional element, a boundary description, or an agency-threshold claim. Apply the direct governing pattern. A.1 recognizes the exact holon candidate only when its constructive criterion is satisfied; it does not turn the neighboring delimitation claim into holonhood.
Collections, Collection-As-Whole, And Acting Collectives
A list, set, batch, fleet, pool, clientele, community, supplier base, or coverage zone does not become a U.System by wording.
First recover the current claim: membership under A.14; collection-as-whole constructive grounding under C.13 and B.3.5 when assurance is current; whole-level characteristic under C.16; acting collective recognition under the U.System criterion plus A.15.1 work; or whole reidentification under B.2.
An acting collective U.System has a boundary, coordination, role assignments, capability or method evidence, and work-facing participation. If those are not current, keep the object as a collection or collection-as-whole claim under direct governing patterns.
Constructional Grounding
A.1 governs constructive holon recognition. It does not replace exact part-relation patterns, C.13 constructional grounding, or E.24.UK public-kind admission.
Use A.14 and the direct part-relation patterns to identify the exact obtaining component, portion, aspect, phase, member, or other part relations. Use C.13 to show how those independently grounded constituents and relations assemble the candidate. If a C.13 trace is materialized, it is a C.2.1 episteme about that construction; writing or publishing the trace creates neither the constituents, the obtaining part relations, the assembly, nor the whole. Use B.3.5 only when a named assurance use needs grounding or warrant for a structural assertion.
Systems, epistemes, methods, dated work occurrences, and disciplines are admitted holon kinds under their direct patterns. C.13 may describe their construction only after those patterns supply exact parts and whole-forming relations for the candidate. A selected U.Structure, including BoundedModelUseStructure, organizes already identified relations for a use; selection or a diagram gives it no constituents, parthood, agency, holonhood, or B.2 transition.
FPF avoids unrestricted composition. A set of nearby objects, graph, diagram, role bundle, method algebra, work breakdown, or source table does not become a holon merely because it can be listed or represented as a whole. Several independently identified transformations likewise do not become parts of one composite transformation from shared timing, a changed referent, a method or work decomposition, or a C.13 trace. When the work requires positive transformation composition or transformation holonhood and no direct composition governor supplies the candidate whole, constituents, contribution, compatibility, and reidentification rule, retain the exact blocker and stop before A.1 classification.
Slot Filling Does Not Create A Kind
A system that fills HolderSystemSlot of a role-assignment occurrence remains a system. An episteme that participates as the EntityOfConcern in an EpistemeConstitutionRelation remains an episteme. A system can participate in a transformation through an exact governed direct relation without becoming the changed holon's super-holon. A holon that participates as the EntityOfConcern of a structure-description episteme remains that holon rather than becoming the description.
The SlotSpec belongs to the direct relation declaration. Its SlotKind names the local participant slot; its ValueKind constrains admissible fillers. Filling that slot establishes neither a new intrinsic kind for the filler nor a new relation occurrence unless the direct obtaining predicate and identity rule are also satisfied. Use the direct governing pattern before introducing any durable kind name.
Archetypal Grounding (Worked Cases)
Pump As Acting System
Pump #37 is first an exact U.Entity. Its actual construction satisfies the A.1 criterion for the already admitted U.System kind:
- the casing, impeller, seal, motor, and flanges are exact constituent entities;
- exact fastening, enclosure, shaft-coupling, sealing, and connection occurrences constructively assemble those constituents as Pump #37 under their direct part-relation patterns;
- the installed-assembly reidentification rule distinguishes Pump #37 and permits specified maintenance replacements;
- pump-level flow, pressure, and operating characteristics arise from the composition rather than from one constituent;
- its actual boundary, inlet and outlet interfaces, load envelope, and identity-preservation conditions satisfy the applicability and compatibility conditions of the governed plant-installation method by which the pump can remain one constituent of a larger cooling-water system;
E.24.UKalready admitsU.System, while A.1 supplies the common holon criterion and itsU.Systemclause supplies acting eligibility.
Those world-side facts make the criterion true whether or not the current project has enough evidence to determine it. Classification work with adequate inputs can return true and support a separate C.2.1 assertion. If evidence or one dependency is unavailable, evaluation returns unknown; Pump #37 and its criterion satisfaction do not change. Replacing the seal preserves Pump #37 only when the reidentification rule admits that maintenance phase.
If instead an exact coupling, load-envelope, or boundary-interface fact violates a condition of the governed plant-installation method, the candidate fails the criterion even when the drawing and rule-description episteme are current. Governed evaluation returns false when that incompatibility is available to it and unknown when the needed input is unavailable; neither result changes the world-side failure. Renaming or republishing the cited criterion pattern changes its episteme designation, edition, or currentness, not Pump #37 or the candidate-side facts.
Separate direct relations then state that Pump #37 fills the holder-system slot of its cooling-water circulation role assignment, has a flow-rate capability envelope, is attributed as performer of inspection work WO-1842, and participates in the water-moving transformation. No omnibus participation or candidate-classification relation is added. The pump can have selected structures; its maintenance model may participate in a separately selected BoundedModelUseStructure, but that structure neither identifies the pump nor makes it a holon.
Scientific Theory As Episteme Holon
Newtonian gravitation in one exact selected edition is first a C.2.1 U.Episteme candidate. Its actual claim-bearing constitution can satisfy the A.1 criterion for the already admitted U.Episteme kind:
- exact law, definition, derivation, diagram, exercise, and evidence-relation epistemes are the candidate constituents;
- exact claim-composition and episteme part relations organize those constituents as one governed claim-bearing whole;
- the selected-edition reidentification rule distinguishes the theory episteme and states which revisions preserve or end that identity;
- inferential and explanatory characteristics arise from the organized claim-bearing whole rather than from one constituent;
- its actual inferential interfaces, effective reference scheme, applicability conditions, and identity-preservation conditions satisfy the applicability and compatibility conditions of at least one governed method for composing it as a constituent of a larger explanatory or educational episteme;
E.24.UKalready admitsU.Episteme, while C.2.1 supplies the kind-specific constitution condition.
A textbook publication can make this edition available, but the publication form and the episteme that describes the composition method do not create the theory's compatibility or holonhood. Classification work may evaluate the criterion and a separate C.2.1 assertion may state the result; evidence, warrant, edition currentness, receiving reliance, and any B.2 whole-reidentification question remain separately governed.
The theory does not teach itself, revise itself, or authorize laboratory work. A system under an exact role assignment may explain, revise, publish, compare, or use the episteme through separately governed work and relation occurrences.
Fleet As Collection Or Acting Collective
A fleet list is a membership claim. Fleet availability is a whole-level characteristic. A fleet-coordination organization that coordinates vehicles, drivers, rules, and work can be an acting collective U.System only after boundary, coordination, role assignments, capability or method evidence, and work-facing participation are recovered.
If a source says "the fleet responded", recover the actual claim: individual vehicle work, fleet-coordination system work, collection-as-whole characteristic, or B.2 whole reidentification.
Lathe Changing A Workpiece
A lathe can change a workpiece during manufacturing without becoming the workpiece's super-holon.
Use A.3.4 to identify the bounded transformation from the exact changed referent, extent, boundary conditions, actual change facts, and continuity rule. Use the direct subject patterns for the lathe's participation, method, dated work, work-to-change facts, and evidence. Use A.14 or C.13 for part-whole only when an exact grounded part relation independently obtains.
Stop Before A Whole Is Constructed
A pallet holding an unconnected pump, motor, baseframe, and manifold is a collection of exact entities. The list and physical proximity do not supply the fastening, coupling, enclosure, connection, assembly, or reidentification facts needed to recognize a skid holon. A construction drawing is an episteme about a possible assembly; it does not turn the collection into that assembly.
A selected BoundedModelUseStructure may organize model-applicability, delimitation, maintenance, and crossing relations for an engineering use. It remains dependent U.Structure; selecting it, naming it, or drawing it supplies no part relations, whole-level characteristic, acting eligibility, or B.2 whole reidentification.
Mounting, wiring, and fluid-connection changes may each be exact U.Transformation occurrences. Their participation in one work episode or one flow description does not identify a composite transformation. Without a direct transformation-composition governor, retain the separate changes and stop before transformation parthood, composite identity, or A.1 holon recognition. This stop does not say that the changes are atomic or have no finer parts.
Bias-Annotation
Lenses tested: Onto, Arch, Epist, Prag, Gov, Did.
This pattern intentionally resists:
- system-bias: treating all objects as acting physical systems;
- episteme-agent bias: assigning work, authority, or decision to claim-bearing epistemes;
- collection-bias: treating any collection as an acting collective;
- boundary-bias: treating boundary words, diagrams, folders, or sections as holon delimitation by appearance;
- interaction-bias: using one word for transformation, signal, source use, publication use, evidence relation, probe relation, and control relation;
- math-lens drift: treating graph, algebra, matrix, tuple, or embedding expressions as the ontology-side structure by spelling;
- publication-form bias: treating a document, dashboard, model, register, or digital twin as the holon it describes.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Positive consequences:
- FPF can talk about physical systems, organizations, documents, theories, models, work occurrences, disciplines, research programs, and selected structures without making them all systems or holons.
- Acting work stays attached to systems in roles.
- Epistemes can be changed, described, compared, published, and relied on without becoming agents.
- Architecture and selected-structure claims gain a grounding holon.
- Collection-as-whole and acting collective claims become inspectable instead of lexical.
Costs:
- Practitioners pay the cost of replacing umbrella uses of "system", "boundary", "interaction", "level", "emergence", and "collection" with exact governed claims.
- A reviewable holon-recognition claim states the exact constituents, construction, reidentification, larger-assembly compatibility, whole-level characteristic, admitted kind, and direct governing pattern on which it relies.
- Some familiar sentences need repair: "the document decided" becomes a claim about a system in role, a decision relation, and an episteme or publication.
Rationale
A.1 prevents category errors by separating individuation, constructive part-whole recognition, acting eligibility, and claim-bearing. U.Entity gives the minimal referenceable object. U.Holon adds six separately recoverable constructive components: exact candidate, exact constituents, exact part relations and assembly, reidentification, a composition-grounded whole-level characteristic, and compatible possible participation in a governed larger assembly. U.System adds acting eligibility. U.Episteme adds claim-bearing structure without agentivity. U.Work and U.Discipline are holon-kind examples only through their governing patterns; BoundedModelUseStructure is selected U.Structure, not another holon kind.
The recognition base cannot depend on a prior context object without recursion. It begins with the exact candidate and world-side construction facts. Public-kind admission is the separate one-time E.24.UK decision. Classification work may evaluate the criterion, but its true | false | unknown result, a C.2.1 assertion, evidence, currentness, and receiving disposition neither participate in a candidate-side relation nor alter the candidate's identity.
This also prevents ontology duplication. A theory under concern, a theory description, a publication of that description, and the system that edits the publication can all be named without turning the filling of one participant slot into a new kind. Architecture likewise starts from the exact holon recognized under an admitted kind whose selected structures matter; diagrams and structure descriptions remain epistemes.
The constructional stance is conservative: FPF avoids unrestricted composition and uses A.14, C.13, and B.3.5 before a part-whole claim is relied on for another claim or work occurrence. This keeps holonic thinking useful without letting every collection, expression, graph, selected structure, or source label become a holon.
SoTA-Echoing
A.1 draws on current constructional-ontology, applied-foundational-ontology, and physics-side construction traditions for different questions. None of these sources admits an FPF kind, establishes a candidate's construction, or replaces the direct patterns that govern part relations, work, evidence, or publication.
For the Pump #37 and scientific-theory cases in A.1:5, the practical consequence is the same: recover the candidate and its subject-side construction first; use a governed method or rule only to test larger-assembly compatibility; keep evaluation, evidence, assertion, description, and publication as separately governed neighboring objects.
Treat a stronger source as current only when it changes the root split among U.Entity, U.Holon, U.System, admitted holon kinds, delimitation, boundary crossing, or publication-form separation. A new tool, notation, or diagram style is not enough unless it changes that ontology-side claim.
Relations
- Builds on:
E.24.UKfor one-time public U-kind admission,A.14andC.13for exact part relations and constructive assembly, andB.3.5when Working-Model assurance grounding is current. - Coordinates with:
A.15.1for dated classification work;A.6.1for a current typed evaluation operation and actual bindings;C.2.1for classification-assertion or evaluation-result episteme identity;A.10andB.3for evidence and warrant;G.11for assertion-edition currentness;B.2for the separate whole-reidentification question;A.1.1for bounded model-use structure;A.22for selected structure;C.30for architecture;A.3.4for transformation;C.20for discipline; andE.10.ARCHfor wording-use restoration. - Used by: patterns that need an exact recognized holon, an already admitted holon kind, an acting system, a non-agentive episteme, a grounded part-whole claim, a collection-versus-collective distinction, a delimitation relation, or a boundary-crossing relation.
A.1:End
Bounded Model-Use Structure and DDD Bounded-Context Recovery
Type: Part A architectural ontology pattern Status: Stable Normativity: Normative unless marked informative
Practitioner entry
Working reader and current decision. This pattern is for a domain architect, systems engineer, or service owner deciding whether several facts about one model must be treated together for the next engineering move. The reader starts from that decision—change scope, release scope, ownership boundary, integration boundary, or whether two uses belong together—not from a team name, repository, diagram, or the word context.
Governed object in plain language. A.1.1 governs the selected organization of where one exact model applies, how it is actually used in assigned Work, and whether concrete expressions still agree with it. The Tech name is BoundedModelUseStructure; the familiar Plain retrieval name is bounded context. It is a U.Structure, not a container for systems, teams, Work, documents, or publications.
First useful move — take the smallest branch.
- Name one exact model edition and one exact place or thing about which it is used.
- Ask what the present decision needs. If applicability alone answers it, recover
ModelApplicabilityRelationand stop. If actual use is current, recover the exact role assignment, performed Work, andModelUseRelationand stop. If maintained expression content is current, recover the fixed model content, fixed expression content, declared coherence predicate, and comparison scheme, then decideModelExpressionCoherenceRelationand stop. - Recover the remaining direct relations only when their joint organization changes the decision. Select
BoundedModelUseStructureonly then. - Keep every boundary crossing separate. A proposed source, target, direction, required fit, permitted loss, and claim scope is useful planning content, but it is not an occurrence and cannot identify either endpoint structure.
First-minute success case. A press-control team must decide whether a controller-code change may be handled as a local code edit or must enter the independently governed release review together with model applicability and operating use.
PressControlModel-5is the exact claim-bearing model edition,Press-3is the use locus, and the model applies withinSafetyControlClaimScope; this is oneModelApplicabilityRelationoccurrence.- Exact F.6
performedUnderAssignment(PressOperationWork-91, OperatorAssignment-8)obtains. The assignment holder actually usesPressControlModel-5during that Work concerningPress-3; this is oneModelUseRelationoccurrence. ControllerImplementsControlModelPredicatechecks the fixed contents ofPressControlModel-5andPressControllerCode-17underPlantControlReferenceScheme. It returns true, so oneModelExpressionCoherenceRelationoccurrence obtains. The predicate is the test value, not the occurrence or an evaluation procedure.- Because independently governed
PlantReleaseRule-3needs model applicability, operating use, and fixed-content coherence together when each is material, select their organization and present those three facts jointly to the release review. This selection supplies the review's subject matter; it neither requires the review nor authorizes release.
This row names the selection-use frame reconstructed in the full assurance replay in section 5.1; the first-minute action does not require unpacking its A.22 identity proof. If the decision asked only whether the model applies to Press-3, stop after step 1. If PlantReleaseRule-3 were absent or did not require the three facts together, stop at the direct relations: the structure grants no review obligation. No crossing is asserted.
Three quick recognition situations.
Short glosses. A model episteme is one exact claim-bearing model edition. A model-use holon is one already admitted system or other concrete whole about which the model applies or is used; it is not a context container. Work (U.Work) is one exact dated doing, not its method, plan, or result. A claim scope (U.ClaimScope) is the set-valued boundary of context slices for one claim. A relation occurrence is a world-side relation actually obtaining under its predicate; an assertion, name, or diagram does not create it. A reference scheme is the interpretation basis for claim content. A structure here is a selected organization of already governed constituents, obtaining relations, applied constraints, and one exact selection-use frame; it is not another whole.
Adoption test. After applying A.1.1, name the exact organization that changes the present decision and the nearest overread that remains unavailable. If either is missing, stop at the direct relation or direct owner.
Names for retrieval. The Plain label is bounded context and the Tech label is BoundedModelUseStructure. F.18 and F.17 own their designation history, public row, lineage, and refresh evidence; A.1.1 keeps only the names needed to apply this pattern. Authors MUST NOT publish U.BoundedContext as a U-kind. The retained labels create neither a structure individual nor any applicability, use, coherence, or crossing occurrence.
Problem frame
Use this when. Use this pattern when a current decision depends on the organization of three distinguishable facts about one exact model edition: where it applies, how it is actually used in assigned Work, and whether maintained expression content remains coherent with it. Physical location, team ownership, a document title, or the word context is not enough.
First useful move. State the decision, model, and use locus; recover only the direct relation that answers the question and stop when it suffices. Select the wider structure only when several already governed relations, applied constraints, and one exact selection-use frame together change the decision.
What goes wrong if missed. Systems, Work, epistemes, and publications are merged into a context-shaped proxy. One subsystem under two models is treated as one context by location, while one model used coherently across several loci is split by an implementation boundary. Local vocabulary, rules, units, status, or evidence use is also forced into a context object even when a direct semantic-locality owner answers the question.
What this buys. Actual participants retain their identities. Applicability, use, and fixed-content coherence remain inspectable direct relations; their decision-relevant organization can be selected as U.Structure; and ordinary semantic locality is returned to its exact value, relation, and governing pattern.
Not this pattern when. If only a term sense, role value, rule or invariant, admissible inference, unit or measurement basis, status, evidence use, claim scope, description, publication, or direct relation is current, use the A.1.1:4.4 triage and stop at that direct result. Do not select BoundedModelUseStructure unless the relation organization itself changes the decision.
Problem
DDD bounded-context practice couples several real concerns: a model is defined and applicable within a boundary; actual systems in assigned roles use it; code and descriptions contain expressions of it; integration and maintenance work aims to keep those expressions consistent; and maps describe relationships among model uses. These are practical prompts to recover exact FPF claims, not evidence that maintenance caused coherence or that a described crossing obtains. Their objects are related, but they are not parts of one additional whole by that fact.
FPF needs this joint model-use relation organization selectable as U.Structure so it can serve as EntityOfConcern for comparison and maintenance work without becoming a heterogeneous holon, a description, or one universal semantic-locality reference.
Forces
Solution
Recover the Plain bounded context as one BoundedModelUseStructure, governed as a U.Structure. Identify it from one exact model episteme, exact already-admitted model-use holons, the selected organization of obtaining model-applicability, actual model-use, and fixed-content model-expression-coherence occurrences, exact applied constraint claims used by the selection judgment, and one exact selection-use frame. Each U.ClaimScope remains only a participant of its selected ModelApplicabilityRelation; a separate applied constraint claim may refer to that scope or its A.2.6 membership predicate. A bare scope, slice, membership outcome, boundary display, or carrier enters no A.22 discriminator. No boundary crossing participates in this identity. A later model edition has another C.2.1 episteme identity; continuity across it additionally requires exact EpistemeEditionRelation(earlierModelEpisteme, laterModelEpisteme) and the A.1.1 continuity rule.
Select structure, not another holon
Use the four A.22 identity discriminators. The following sketch is a description of the selected organization, not the structure itself and not a relation signature:
A selection-use frame is this exact three-part plain value; it is not a new kind, card, or record. A phrase such as current use, appropriate structure, or bounded-model-use frame does not fill it. Changing the question, admissible action, or nearest overread changes that identity discriminator.
The structure depends on its constituents and selected relation organization. It is not a holon whose parts are the substrate systems, Work, methods, or epistemes. Their identities, direct part relations, and any construction or whole-reidentification questions remain separately governed.
Recover the direct relations
A.1.1 states each direct predicate and its occurrence-identity rule. An obtaining occurrence is an instance of a relation kind already admitted under U.Relation; its existence does not depend on a project deciding to expose it. A named receiving use may justify explicit individuation and reference under A.6.REL. A reusable RelationSignature episteme declares the participant SlotSpecs. An assertion or occurrence description may designate the actual participants by value or reference. Each table below is a readable presentation of one signature declaration. Its rows and cells are neither relation participants nor occurrences; they make neither the relation predicate true nor a relation occurrence obtain.
The two named temporal-extent ValueKinds below are local to A.1.1, not U-kinds. They can type a temporal extent stated in an assertion or occurrence description; they are not participant ValueKinds in either RelationSignature. For ModelApplicabilityRelation and ModelUseRelation, the direct obtaining history determines the maximal continuous extent used by the occurrence-identity rule. A filled assertion may state an open or closed extent, but that epistemic statement makes neither the relation predicate true nor a relation occurrence obtain and supplies no additional world-side participant.
For these two temporally varying relation kinds, continued obtaining extends the same open occurrence; a demonstrated gap ends it, and later resumption begins another occurrence. ModelExpressionCoherenceRelation instead has the participant-determined identity declared below: it has no temporal-extent discriminator. Revising an assertion changes the episteme, not any world-side occurrence.
ModelApplicabilityRelation. Its participants are one model episteme, one exact holon, and one declared claim scope. Its predicate asks whether that model applies to that holon over the exact U.ContextSlice values delimited by that scope. The model episteme's C.2.1 effective reference scheme supplies the interpretation basis; it is not a fourth participant.
Well-formedness constraint WF-A1.1-APP. ModelApplicabilityRelation(M,H,S) obtains exactly when S is the model-declared applicability scope or scopeSubset(S, modelDeclaredScope(M)), both scope expressions are interpreted under effectiveReferenceScheme(M), and the model's declared applicability conditions hold for H over every slice x for which member(x,S) is true. coversSet(S,T) applies only when T is an exact finite ContextSliceSet.
When S imports a local sense from another semantic setting, the interpretation branch exists exactly when the source and receiving F.17 SchemeSenseCell values are resolved and an F.9 Bridge obtains in the source-to-model orientation. Different schemes, shared spelling, or a Bridge Card does not establish that branch.
Well-formedness constraint WF-A1.1-APP-USE. A positive applicability assertion or structure selection that relies on the imported branch is admissible only when a separate current C.2.1 claim affirmatively states that the Bridge is suitable for this named scope-comparison use, direction, rule, and loss tolerance. For a use below the B.3 material-reliance threshold that makes no assurance claim, the same use must have an exact A.10 evidence-provenance graph relation with RelianceDisposition=pass. If an assurance claim is made or the threshold is met, a current positive B.3 assurance claim must carry the same bounded use and have a sufficient minimum reliance safety assurance record.
Use guidance. If the Bridge, bounded-use claim, or selected reliance branch is missing, return respectively missing claim-scope interpretation bridge, missing claim-scope interpretation use claim, or missing claim-scope interpretation reliance. These stops block the receiving assertion or selection; they do not make an otherwise obtaining Bridge false. Any membership judgment, operation application, assertion, or Work remains under A.2.6, A.6.1, C.2.1, or A.15.1.
The occurrence is reidentified from the actual identities of the model episteme, holon, and claim scope together with the derived maximal continuous ModelApplicabilityInterval. Repeating the model's effective scheme adds no independent discriminator.
ModelUseRelation. Its participants are one exact role-assignment occurrence, one model episteme, one performed Work occurrence, and one exact use-locus holon. Its predicate is actual use of that model content by the assignment holder while that system performs the same Work concerning that holon.
Well-formedness constraint WF-A1.1-USE. ModelUseRelation(A,M,W,H) obtains exactly when F.6 performedUnderAssignment(W,A) obtains and HolderSystem(A) actually uses the content of M while performing W concerning H. The holder system is derived, not copied as a fifth participant. A method, if current, remains related to W under A.3.1.
The occurrence is reidentified from the four participant identities and the derived maximal continuous ModelUseInterval. A useful probe holds those participants fixed and asks whether a relevant model-content change can change how the Work is performed; availability or mention alone is not actual use.
Scope delimitation is not another direct relation kind here. The U.ClaimScope participating in ModelApplicabilityRelation is a set-valued scope over U.ContextSlice; A.2.6 governs its primitive membership predicate. A membership assertion or an evaluation result is an episteme about that predicate. Neither creates a separate delimitation occurrence.
Local predicate-value declaration. ModelExpressionCoherencePredicate is an A.1.1-local ValueKind, not a U-kind and not an evaluation procedure. A by-value candidate belongs to this kind only when it declares (1) the ordered model-content and expression-content input meanings, (2) the exact comparison domain and local senses, (3) a Boolean truth condition, (4) the treatment of required congruence and permitted loss, and (5) every dependency whose absence makes application stop rather than return false. Two predicate values are identical exactly when those five by-value components are identical. A changed input meaning, domain, truth condition, congruence or loss rule, or dependency identifies another predicate value; a changed label, evaluator, evidence set, result episteme, representation, or publication does not. A label or procedure lacking the complete five-part declaration is not a member.
ModelExpressionCoherenceRelation. Its participants are one exact model episteme, one exact expression episteme, one by-value criterion admitted as ModelExpressionCoherencePredicate, and one exact U.ReferenceScheme used as the comparison basis.
Well-formedness constraint WF-A1.1-COH. ModelExpressionCoherenceRelation(M,E,P,R) obtains exactly when either (a) R equals the C.2.1 effective schemes of both epistemes, or (b) P resolves every differing source and receiving F.17 SchemeSenseCell pair and names an obtaining F.9 Bridge for each required correspondence; and, after that semantic branch is established, the fixed predicate value P returns true for the fixed claim contents of M and E under R. An unresolved cell, missing Bridge, shared spelling, common label, Bridge Card, or mere interpretability establishes no bridged branch.
The Bridge profile carries relation semantics only. Comparison direction, use-specific rule, permitted loss, and reliance belong to the separate bounded-use claim and reliance path.
Well-formedness constraint WF-A1.1-COH-USE. A receiving assertion or structure selection that relies on a bridged coherence occurrence is admissible only when a separate current C.2.1 claim affirmatively states that the Bridge is suitable for this fixed-content comparison use, direction, rule, and loss tolerance compatible with P. For a use below the B.3 material-reliance threshold that makes no assurance claim, the same use must have an exact A.10 evidence-provenance graph relation with RelianceDisposition=pass. If an assurance claim is made or the threshold is met, a current positive B.3 assurance claim must carry the same bounded use and have a sufficient minimum reliance safety assurance record.
Use guidance. Return missing model-expression interpretation bridge, missing model-expression interpretation use claim, or missing model-expression interpretation reliance for the corresponding missing condition. A use stop does not make the Bridge or predicate false and does not erase or reidentify an otherwise obtaining coherence occurrence. Comparison Work, an assertion episteme, and an A.22 selection use remain separate.
One occurrence is participant-determined by <M,E,P,R>; it has no temporal-extent discriminator and no later recurrence for the same tuple. Changed claim content identifies another episteme and tuple. Changed predicate value or comparison scheme likewise changes the tuple. Changed evidence, bounded-use claim, reliance result, card, publication, evaluator, or timestamp does not.
Maintenance remains one separate dated Work individual admitted under U.Work, performed by an admitted system under an exact obtaining U.RoleAssignment. Its affected-referent, resource, parameter, premise, method-enactment, and operation-application facts use their direct relations or A.6.1 bindings. C.2.1 identifies any report or repaired episteme separately; only an exact A.15.PROD entity-inception claim may relate that episteme's first existence to the performed maintenance. An admitted system under an exact obtaining role assignment may separately perform evaluation Work. C.2.1 identifies any result episteme asserting whether the coherence predicate holds, and only its exact A.15.PROD inception basis may relate its first existence to that performed Work. Neither that result episteme nor its provenance is the coherence occurrence. Failed maintenance work remains actual work even when the changed episteme tuple has no obtaining coherence occurrence.
BoundedModelUseStructure selects obtaining participant-determined ModelExpressionCoherenceRelation occurrences. Maintenance methods and Work remain separate objects even when they change the receiving decision; if their organization must itself be selected, that is a distinct A.22 structure and does not enter this bounded-model-use identity.
Coherence-work stress cases. Coherence can obtain before any selected maintenance episode. Successful maintenance that leaves both episteme identities fixed leaves the same participant tuple; maintenance that changes expression claim content gives another C.2.1 episteme and a different tuple to evaluate. Failed maintenance may leave a changed expression episteme and a separately identified evaluation result while the new tuple has no obtaining coherence occurrence. Automated integration work and non-software maintenance use the same separation among fixed-content correspondence, work, result, evaluation, evidence, and provenance.
Occurrence-identity stress case. Exact F.6 performedUnderAssignment(InspectionWork-42, InspectorAssignment-17) obtains, and its holder Robot-7 uses DefectModel-3 concerning Pump-6 during that work. An observation at 10:00 supports continued obtaining of the same occurrence whose ModelUseInterval began at 09:00 and remains open; it does not create another occurrence. If model use demonstrably stops at 10:15 and resumes at 10:30 during the same work occurrence and assignment attribution, the resumption begins a second model-use occurrence. Correcting an assertion's timestamp without evidence of a world-side gap changes only that assertion.
Use guidance — unsupported crossing. First identify both endpoint BoundedModelUseStructure values without the crossing and state source, target, direction, required fit, permitted loss, and claim scope. Well-formedness constraint WF-A1.1-CROSS. A positive cross-structure member exists only when a current direct pattern supplies compatible endpoint SlotKinds, an obtaining crossing predicate, an occurrence-identity rule, and all four A.22 discriminators; the proposal, F.9 sense Bridge, label, diagram, or card supplies none of them. Otherwise preserve the six-part proposal, omit it from both endpoint identities and every positive cross-structure member, and return missing CROSS-LOCALITY-BRIDGE governor.
A.1.1 is the direct governing pattern for these three relation kinds. A.6.0 governs their RelationSignature epistemes, A.6.5 governs the SlotSpecs inside those declarations, and A.6.REL governs progressive explicit individuation. A.2.6 separately governs claim-scope membership. BoundedModelUseStructure is the selected organization of the resulting occurrences under those scope values; no context record copies their participants.
Use the settled public relation names
The direct definitions, SlotSpecs, obtaining constraints, and occurrence-identity rules above govern the three relation kinds. A.1.1 uses only the settled Tech labels and their shortest Plain relation sentences:
F.18 and F.17 carry candidate-name history, public-row state, lineage, and refresh evidence. Those naming epistemes create neither a relation kind nor an obtaining occurrence, assertion, Work, interval, or structure. ModelExpressionCoherencePredicate remains an A.1.1-local five-part criterion ValueKind; it has no public F.17 row unless a later durable naming use independently reopens F.18.
Identify continuity through model use
At one observation time, the structure has the four A.22 discriminators:
- exact independently identified constituents—the selected model episteme and admitted model-use holons;
- exact selected obtaining applicability, use, and coherence occurrences;
- exact applied constraint claims used by this selection, each with a recoverable proposition and C.2.1 identity; a claim may refer to one
U.ClaimScopeor its membership predicate, but the bare scope, membership outcome, boundary display, or carrier is not this discriminator; and - one exact named selection-use frame containing its question, admissible action or stop, and nearest non-admissible overread.
No crossing or proposed six-part crossing record enters those discriminators.
At a later observation time, reidentify the same structure only when every continuing constituent is reidentified under its direct rule; any replacement model is connected by exact C.2.1 EpistemeEditionRelation and admitted by the declared continuity rule; every continuing relation occurrence retains its direct identity; every replacement occurrence is explicitly admitted; and all four A.22 discriminators remain the same under that rule.
The continuity rule therefore compares the exact constituents, selected occurrence organization, exact applied constraint claims, and the complete selection-use frame. A changed constraint proposition reopens the third discriminator; changing only a membership assertion, boundary rendering, carrier, or evidence about an unchanged constraint claim does not. A changed question/action/overread frame reopens structure identity even when every substrate and relation occurrence remains unchanged. A changed page, wording, rendering, carrier, description edition, or publication does not. File history, edition labels, publication order, a shared name, or membership in an edition collection establishes neither EpistemeEditionRelation nor bounded-model-use continuity; A.14 governs any separately selected collection of editions.
Missing evidence creates uncertainty about a continuity claim; it does not by itself end a world-side relation or structure. Any selected substrate holon may separately participate in a larger whole under A.14 and C.13; that is not parthood of BoundedModelUseStructure.
Resolve semantic locality through direct values and relations
When the question is local meaning rather than joint model-use organization, recover the smallest direct result and stop:
For movement between local meanings, resolve the exact source and receiving F.17 sense cells and then apply F.9. An obtaining Bridge states correspondence between those readings; the separate bounded-use claim states direction, rule, and tolerance, and A.10 or B.3 governs reliance. The Bridge is not the rule, unit, status use, inference, or receiving action.
If a direct owner still asks for a generic U.BoundedContext or BoundedContextRef instead of the exact values above, do not fabricate that participant. Preserve the exact value or relation already recovered and stop at the owner's unresolved interface. The transfer is not complete merely because A.1.1 names a destination.
Heterogeneous semantic-locality replays
Hospital operating-room replay. No context holon is created.
This replay selects no BoundedModelUseStructure unless one exact model's applicability, assigned-Work use, fixed-content coherence, applied constraints, and selection-use frame also become current.
Two further retained uses.
Keep descriptions and publications separate
A bounded-context description is a U.Episteme. Under its C.2.1 declaration, the description's entityOfConcernRef designates the exact EntityOfConcern named by the description's claims. EntityOfConcernSlot is the SlotKind in that declaration; it does not itself point to the world-side object. A meta-description designates that description episteme through ordinary C.2.1 recursion.
When a description claim needs empirical grounding, recover one exact C.2.1 EpistemeEmpiricalGroundingRelation between the description episteme and the admitted grounding holon. GroundingHolonSlot is only the signature-local participant meaning in that relation's declaration; a groundingHolonRef in a card or description merely designates the participant and does not make the relation obtain. The selected structure cannot fill that participant because it is not a holon. Viewpoint, claim scope, effective reference scheme, publication use, rendering, and presentation carrier remain separately governed.
A stale description has another episteme edition or an obsolete currentness claim. Neither condition by itself changes the model-use structure or its world-side relations.
Recover DDD context mapping by direct object
Start with three questions: what reusable way of mapping was used, what work actually happened, and what claim-bearing product resulted? Identify that product under C.2.1. Call the same episteme a view only after it passes one exact E.17.0 viewpoint-conformance test. Keep the relation structure it describes and every diagram, page, or publication separate.
Code/schema split. Start from the exact claim, not the source phrase. Claim-bearing source-code or schema content such as PressControllerCode-18 is a C.2.1 episteme with an exact EntityOfConcern and effective scheme. A repository, file, publication form, or presentation carrier that bears that content remains under its direct representation/publication/carrier pattern. A deployed controller, database, or software organization remains an actual system or selected structure under its direct owner. The phrase code base or database schema grants none of those identities and never supplies one universal kind.
Positive case: the fixed claims expressed by PressControllerCode-18 participate as the expression episteme in ModelExpressionCoherenceRelation. Near misses: PressControllerRepository-2 is only the repository or carrier being referred to, and DeployedPressDatabase-4 is the deployed database system or structure. Neither near miss may fill an episteme participant merely because source practice calls it a code base or schema.
This dispatch table is a reading aid for selecting the governing FPF object and pattern. Only that direct pattern supplies object identity, relation obtaining, or dependent-kind membership. If a separately current claim says that the candidate episteme first existed through the performed mapping Work, apply A.15.PROD only to that exact local inception claim. If an earlier episteme participates as source, use C.2.P to recover the exact source expression and route the source-use relation to its direct governor. Evaluation Work and any result episteme remain separate. None of those facts, and no product name, representation, rendering, publication occurrence, form, or carrier, grants U.View membership.
FPF Map remains the mapping-method head for mapping subjects to coordinates in a declared Space. The quoted DDD product name stays a retrieval cue; by itself it grants neither dependent U.View membership, the FPF Map reading, nor identity with the structure.
BoundedModelUseStructure and A.22's conditional cross-structure rule concern different structures. First identify every bounded model-use structure from its own model, admitted holons, three direct relation families—including each applicability occurrence's exact U.ClaimScope participant—exact applied constraint claims, and named frame. A scope or membership result is not copied into the constraint discriminator. Only then may a distinct A.22 structure select several such endpoints and independently governed obtaining crossings among them. Until those crossing occurrences and all four A.22 base discriminators exist, no member of that conditional specialization is asserted and its A.22-local label remains pending. Maintenance Work remains separate from both structures. A candidate context-mapping episteme may carry claims about a proposed crossing organization without designating an exact structure. Once the direct crossing and A.22 identity exist, a corresponding C.2.1 episteme may designate that exact cross-structure and its participants without becoming any of them. Only an explicit C.29 representation may show the structure or proposal; the episteme is a U.View only after exact E.17.0 conformance obtains.
Preserve the lightweight path
Most local claims need no bounded model-use structure declaration. Name the exact current participant, semantic-locality value, role-assignment occurrence, or direct relation occurrence under its governing pattern and stop.
Select and expose BoundedModelUseStructure only when the joint organization of independently governed model applicability, actual model use, fixed-content model-expression coherence, exact applied constraint claims, and the named frame changes the next engineering move. Keep each claim scope solely in its applicability occurrence unless a distinct applied constraint proposition refers to it. If a crossing matters, open the separate A.22 cross-structure question only after its direct governor makes that exact crossing obtain between already identified endpoint structures; never add it to either endpoint identity. Recognize an episteme as U.View only after exact E.17.0 conformance. Publish that already recognized view under E.24.PUB only when a declared audience and use need it.
Archetypal Grounding
Full control-model assurance replay
The first-minute case in section 0 is enough for ordinary entry. This longer replay checks the ontology and stop conditions without turning them into the first-use path.
- Applicability decision.
ModelApplicabilityRelationobtains among model epistemePressControlModel-5, systemPress-3, and claim scopeSafetyControlClaimScope. C.2.1 fixesPlantControlReferenceSchemeas the model episteme's effective scheme, so it supplies the interpretation basis without becoming a fourth participant. The derivedModelApplicabilityIntervalremains open while the model's declared applicability conditions hold forPress-3over the exactU.ContextSlicevalues admitted bymember(slice, SafetyControlClaimScope)under that scheme. - Actual-use decision. Exact F.6
performedUnderAssignment(PressOperationWork-91, OperatorAssignment-8)obtains. The assignment holder isOperator-12 : U.System; that system actually usesPressControlModel-5concerningPress-3during the samePressOperationWork-91 : U.Work. Those four relation participants plus the derived maximal continuousModelUseIntervalreidentify oneModelUseRelationoccurrence. - Scope boundary. Under the A.2.6 membership predicate,
EmergencyStopContextSlicebelongs toSafetyControlClaimScope. This membership claim explains part of the applicability boundary; it is not another relation occurrence selected into the structure. - Fixed-content coherence decision.
ControllerImplementsControlModelPredicateis an admitted local predicate value. Its ordered inputs are the fixed claim contents ofPressControlModel-5andPressControllerCode-17; it returns true exactly when the code expresses every controller-command and feedback distinction required by the model, and false when a required distinction is missing. Both epistemes havePlantControlReferenceSchemeas their C.2.1 effective scheme, so the relation-side comparison scheme is that same value and no Bridge is inferred. The predicate returns true for these participants, so their participant-determinedModelExpressionCoherenceRelationoccurrence obtains before any selected maintenance episode. - Maintenance and change stay separate.
- Work:
Engineer-4 : U.SystemperformsControllerCoherenceWork-22 : U.Workunder exact obtainingControllerEngineerAssignment-7 : U.RoleAssignment; exactperformedUnderAssignment(ControllerCoherenceWork-22, ControllerEngineerAssignment-7)andenactsMethod(ControllerCoherenceWork-22, ControllerAlignmentMethod-2)obtain. - Transformation and later episteme: A.3.4 independently identifies
PressControllerCodeCarrierChange-24 : U.Transformationas the bounded change of continuingPressControllerCodeCarrier-6 : U.PresentationCarrier, using the exact edit boundary, before-and-after code-expression facts, and the carrier-continuity rule. Changed claim content identifies later epistemePressControllerCode-18under C.2.1. - Stop: No current FPF relation says that
ControllerCoherenceWork-22caused or realizedPressControllerCodeCarrierChange-24, so returnmissing work-to-change governor; temporal overlap and a shared code referent do not supply it. A.15.PROD remains closed for a claim that the Work first constitutedPressControllerCode-18until its exact entity-inception basis, including that missing link, is governed.
- Work:
- Evaluation and result stay separate.
- Evaluation Work:
Evaluator-2 : U.SystemperformsCoherenceEvaluationWork-23 : U.Workunder exact obtainingCoherenceEvaluatorAssignment-5 : U.RoleAssignment; exactperformedUnderAssignment(CoherenceEvaluationWork-23, CoherenceEvaluatorAssignment-5)andenactsMethod(CoherenceEvaluationWork-23, CoherenceEvaluationMethod-4)obtain. State any needed operation application through its exact A.6.1 binding. - Result: C.2.1 separately identifies result episteme
CoherenceEvaluation-23, which asserts whether the coherence predicate holds; only an exact A.15.PROD inception basis may relate that episteme's first existence to the evaluation Work. The result's assertion, evidence-use relation, and provenance remain distinct. - Next tuple: Because
PressControllerCode-18has different claim content, it forms another participant tuple withPressControlModel-5; predicate truth for that tuple decides whether another coherence occurrence obtains. Maintenance, method enactment, changed referent, evaluation, result, evidence, and provenance neither substitute for that truth nor enter the relation's participant set or identity.
- Evaluation Work:
- Crossing stop. If a diagnostics crossing matters, first retain the independently identified source and target structures, then record direction, required fit, permitted loss, and claim scope. Current F.9 cannot turn that record into a relation over those structures. Omit it from any positive cross-structure member and return
missing CROSS-LOCALITY-BRIDGE governor. The already governed endpoint relations remain available for their own selections.
Filled A.22 basis for the press-control structure. Its exact constituents are model episteme PressControlModel-5, use-locus system Press-3, and expression episteme PressControllerCode-17. Its selected occurrences are ModelApplicabilityRelation(PressControlModel-5, Press-3, SafetyControlClaimScope), ModelUseRelation(OperatorAssignment-8, PressControlModel-5, PressOperationWork-91, Press-3), and ModelExpressionCoherenceRelation(PressControlModel-5, PressControllerCode-17, ControllerImplementsControlModelPredicate, PlantControlReferenceScheme) as established in steps 1–4. OperatorAssignment-8 and PressOperationWork-91 remain actual participants used to establish the selected ModelUseRelation; they are not copied into the constituent plurality. Its exact applied constraint claims are PressSafetyScopeUseConstraintClaim, whose proposition says that every target slice used in the release judgment satisfies member(targetSlice, SafetyControlClaimScope); PressCommandFeedbackConstraintClaim, whose proposition says that the change preserves the model's command-versus-feedback distinction; and PlantJointReviewConstraintClaim, whose proposition says that, under independently governed PlantReleaseRule-3, all three selected occurrences are required inputs to the release review when each is material. SafetyControlClaimScope, any membership outcome, boundary rendering, and the claim carriers enter no discriminator by themselves. Its fourth discriminator is PressControlReleaseFrame from section 0: ask whether the change is code-only or jointly model/use/coherence-relevant; provide that joint subject matter to the release review; do not infer review or release authority from the structure. Missing any discriminator leaves the direct relations in place but blocks this structure selection.
The relation sentences above assert direct world-side occurrences; the scope sentence states an A.2.6 membership claim. Publishing either episteme does not create an occurrence or change scope membership. If the question is only whether the model applies to the press, stop at ModelApplicabilityRelation. Select BoundedModelUseStructure only when the selected applicability, operating-use, and expression-coherence occurrences plus the exact applied constraint claims and frame change the decision or Work plan.
One subsystem, one model. The press-control replay above is the filled case. The machine keeps its U.System identity; the selected structure uses the exact constituents, three obtaining relations, applied constraints, and PressControlReleaseFrame. Without that complete basis, stop at the direct relations. A diagram or later crossing is unnecessary for the positive selection.
One subsystem, two competing models. DeviceSubsystem-2 remains one system. Two structures are available only because each organization is independently complete:
An exact C.2.1 EpistemeEditionRelation may separately establish historical continuation; it does not merge simultaneous organizations. Near miss: if either side lacks its coherence occurrence, an applied constraint, or its complete frame, that side has useful applicability and use facts but no selected BoundedModelUseStructure yet.
One model, two use loci. ClinicalTerminologyModel-7 participates in two independently complete non-software structures:
Across these five filled structures, each assignment occurrence and dated Work stays only in its selected ModelUseRelation and in the evidence establishing that occurrence. Changing either one reopens that relation and therefore the selected-occurrence discriminator; it is not also an independent constituent replacement. One spanning structure is available only when one exact constituent plurality, relation-occurrence organization, applied-constraint set, and selection-use frame genuinely spans both uses. Shared model identity alone neither merges nor splits them. Near miss: exact diagnosis and billing Work plus a shared model, without one side's coherence occurrence or filled frame, supports only the direct facts on that side.
Published classification model. A NAICS publication remains an episteme. Exact F.6 performedUnderAssignment(ClassificationWork-4, ClassificationAssignment-3) and actual use of that model content concerning an organization supply the use branch. A positive NAICSClassificationModelUseStructure additionally needs exact applicability with ClassificationClaimScope as that relation's scope participant, fixed-content coherence with the classification expression, exact applied constraint claims stating which edition and classification distinctions the judgment must preserve, and NAICSClassificationFrame: ask which NAICS edition and distinctions govern this classification; use the complete organization for the classification claim; do not infer that publication makes the model used, that a Conformist label creates a crossing, or that NAICS is a system part. The bare scope or one membership result is not an applied constraint. Without the complete basis, stop at publication availability or the direct relation that actually obtains.
When a proposed directional dependency is called Conformist, retain its source, target, direction, required fit, permitted loss, and claim scope. Return missing CROSS-LOCALITY-BRIDGE governor until a compatible direct relation exists; the label does not create or identify the crossing.
Stale description. An already recognized Context Map view is six months old while the same already governed applicability, actual-use, and model-expression-coherence relations continue. Its currentness claim can become obsolete; revising the U.View episteme or publishing another rendering changes those epistemic and publication objects only. The structures remain until their direct relation organization changes.
Context-mapping assurance case. This case tests the heavier method, product, view, and publication boundaries after the ordinary entry path has succeeded.
- Method and Work. Exact F.6
performedUnderAssignment(ContextMappingWork-14, ArchitectureAssignment-6)obtains, and the assignment holder isArchitect-9 : U.System. ExactenactsMethod(ContextMappingWork-14, ContextMappingMethod-3)obtains forContextMappingMethod-3 : U.Method. The repeatable method and this datedContextMappingWork-14 : U.Workremain different objects. - Candidate product. C.2.1 independently identifies episteme
ContextRelationsAnalysis-8. Its EntityOfConcern is the six-part proposed crossing organization: source, target, direction, required fit, permitted loss, and claim scope. The episteme is not the proposed organization. - Current stop. No independent direct governor currently makes the proposed crossing obtain. A.22 therefore lacks the relation-occurrence discriminator needed for base identity, and the candidate episteme does not designate an exact member of the conditional crossing-analysis specialization. Stop at the proposed organization.
- Later positive route. Only if a future direct governor admits that exact crossing and all four A.22 discriminators are recovered may a corresponding C.2.1 episteme designate the resulting exact structure. Changing the EntityOfConcern remains subject to C.2.1 episteme identity.
- Source use and inception. If a current claim says
ContextRelationsAnalysis-8first existed through the mapping Work, A.15.PROD governs only that exact local inception claim. If source epistemeContextNotes-7participates, C.2.P recovers its exact source expression and routes the source-use relation to its direct governor. - View evaluation.
Reviewer-6 : U.Systemseparately performsContextViewConformanceEvaluationWork-15 : U.Workunder exact obtainingContextViewReviewerAssignment-10 : U.RoleAssignment; exactperformedUnderAssignment(ContextViewConformanceEvaluationWork-15, ContextViewReviewerAssignment-10)andenactsMethod(ContextViewConformanceEvaluationWork-15, ContextViewConformanceEvaluationMethod-5)obtain. Any result episteme and any A.15.PROD inception claim about that result remain separate.ContextRelationsAnalysis-8becomes aU.Viewonly when exactEpistemeViewpointConformanceRelation(ContextRelationsAnalysis-8, ContextMappingViewpoint-4)obtains under E.17.0. - Representation and publication stop. The product name, mapping method, performed Work, source use, evaluation result, representation, rendering, publication occurrence, form, and carrier grant neither crossing-structure identity nor
U.Viewmembership and remain under their direct patterns.
Bias-Annotation
This pattern has a DDD lineage bias because bounded context is the source term. Outside software, use A.1.1 only when the domain has one claim-bearing model edition, explicit applicability, actual use in assigned Work, fixed-content expression coherence, and a present decision changed by their joint organization. Industrial control, clinical or billing terminology, and published classifications can meet that test through different direct governors; a familiar context label cannot.
It has a structure-selection bias. The lightweight stop rule prevents mere local terminology, model mention, or implementation and organizational partition from becoming a structure without the required model-use relation organization.
It also has a model-coherence bias. Actual systems, work, methods, transformations, epistemes, and role assignments keep their own identities and can remain the referents designated by receiving epistemes when the joint relation organization is not the subject of the receiving use.
Conformance Checklist
- A positive
BoundedModelUseStructureexposes all four A.22 discriminators: exact constituents, exact selected obtaining applicability/use/coherence occurrences, exact applied constraints, and one named question/action/overread selection-use frame. - The three direct relation declarations satisfy
WF-A1.1-APP,WF-A1.1-USE, andWF-A1.1-COH; any imported-sense receiving use additionally satisfiesWF-A1.1-APP-USEorWF-A1.1-COH-USE. Missing conditions return the named stop rather than a positive assertion. - Every
ModelExpressionCoherencePredicatevalue satisfies the local five-part membership and value-identity rule. EveryModelExpressionCoherenceRelationoccurrence is participant-determined by<model episteme, expression episteme, predicate value, comparison scheme>and has no interval discriminator. BoundedModelUseStructureis governed asU.Structure; no context holon, context parthood, meta-holon transition, crossing, description, or publication enters its identity.- Reidentification compares all four discriminators and then applies A.1.1:4.3. A changed applied constraint or changed question/action/overread frame reopens identity even when constituents and relation occurrences are unchanged; a changed page, graph, rendering, or publication does not.
- Semantic locality follows the direct-value triage in A.1.1:4.4. A local rule, inference, unit, evidence use, or status use remains at its exact direct owner; a broad label or unrepaired generic-context field cannot manufacture the missing participant.
- A description episteme designates its exact EntityOfConcern under C.2.1. Empirical grounding requires one exact
EpistemeEmpiricalGroundingRelation; a reference field, structure, view, or publication does not make it obtain. - DDD Context Mapping is recovered as method, dated Work, claim-bearing product, proposed or obtaining crossing organization, view conformance, representation, and publication under their separate owners.
WF-A1.1-CROSSblocks a positive cross-structure member while the direct crossing governor or an A.22 discriminator is missing. - A code/schema cue is classified from the exact claim as claim-bearing episteme content, repository/file/form/carrier, or deployed system/structure; the cue itself supplies no common kind.
- Two model uses over one subsystem yield two structures only when each independently supplies all three obtaining relation families, applied constraints, and its exact selection-use frame. Missing coherence or another discriminator leaves that side at its direct relations.
- The structure is omitted when its joint organization changes no receiving decision. The reader can name both the admissible action and the nearest overread; otherwise the reader stops at the direct relation or direct owner.
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits. Teams can compare model-use boundaries without inventing an enclosing whole. Competing models over one subsystem and one model across several loci become expressible through complete structure bases. Local vocabulary, rules, inferences, units, evidence use, and status use remain recoverable through direct owners rather than a context proxy.
Costs. A load-bearing structure claim must recover three direct relation families, exact applied constraints, and one question/action/overread frame. Semantic transfer sometimes stops at a direct owner that still cannot express the claim without a generic context field; that stop is preferable to inventing a participant or claiming false parity.
Limits. A.1.1 does not decide model truth, role assignment, rule validity, measurement, status, evidence, claim-scope membership, reference-scheme construction, system parthood, Work performance, release authority, or publication currentness. It selects only the bounded model-use organization after those direct claims are available.
Rationale
The selected object must survive two decisive tests. One subsystem under two models needs two bounded contexts without duplicating the subsystem. One model coherently used across several loci may need one bounded context without pretending those loci are parts of another whole. A dependent U.Structure over exact relations passes both tests.
The practical DDD lesson retained here is that boundaries matter because model applicability, actual use, expression consistency, and relationships can change engineering decisions. FPF does not copy that sentence as one ontology: it separates participant-determined fixed-content coherence from maintenance Work, identifies each bounded model-use structure without crossings, and routes any independently governed crossing into a distinct A.22 structure over already identified endpoints.
SoTA-Echoing
The source line is not one settled ontology. The 2015 reference defines a bounded context as a description of a boundary. The January 2026 worked case also uses the term for an actual system part and for use of the published NAICS model. FPF keeps those three readings distinct instead of choosing one of them as a universal context object.
Scoped FPF synthesis hypothesis and defeaters. This edition hypothesizes that, for the bounded uses declared here, the decision-relevant organization is one BoundedModelUseStructure over exactly the three direct relation kinds ModelApplicabilityRelation, ModelUseRelation, and ModelExpressionCoherenceRelation, its exact model-use substrate, exact applied constraint claims, and named frame. Each claim scope remains only the applicability-relation participant unless a distinct applied constraint proposition refers to it. Crossings belong only to a distinct A.22 structure over already identified bounded model-use structures. The hypothesis is usable only while each direct relation has coherent participant meanings, an obtaining rule, and an occurrence-identity rule, each applied constraint proposition is recoverable, and selecting their joint organization changes a concrete practitioner decision.
Fail this edition for the affected case, or reopen only the affected part of the synthesis, when:
- any one of the three direct relations lacks coherent participant meanings, a coherent obtaining rule, or a coherent occurrence-identity rule;
- a DDD case needs a materially different relation organization rather than this three-relation organization; or
- selecting the joint organization changes no practitioner decision compared with stopping at the direct relations.
The external sources therefore change recognition and the tests applied to the working problem. Current FPF direct governors and the scoped, defeasible synthesis above supply the normative Solution. Constructional ontology tests a construction claim; it neither chooses the FPF kind nor proves the no-holon conclusion by citation.
Relations
A.1governs constructive recognition of exact candidates under already admitted holon kinds and its locally declaredU.System/U.Epistemedistinctions. Direct identity patterns govern candidate identity;E.24.UKgoverns public-kind admission; A.14 and direct part-relation patterns govern parthood; C.13 governs constructive assembly. A.1 does not supply those decisions by itself.A.22governs baseU.Structureidentity through exact constituents, selected obtaining relations, applied constraints, and one named selection-use frame. It also governs the conditional cross-structure question after a direct crossing governor exists.C.2.1governs model, expression, rule, inference, and description episteme identity, effective reference schemes, exact EntityOfConcern and ClaimGraph content,EpistemeEditionRelation, and empirical grounding. It also identifies the separate bounded-use claim about an F.9 Bridge.A.2.6governsU.ClaimScope,U.ContextSlice, and membership.C.16governs measurement bases, readings, scales, units, and direct comparability.A.2.4and A.10 govern evidence use; F.10 governs status family and status use; B.3 governs assurance.A.2,A.2.1, andA.2.7govern role taxonomy, role assignment, and role-relation structure in model-use loci.A.3.1,A.15.1, andE.18govern Context Mapping method, performed mapping Work, and transformation-flow structures. A.15.PROD enters only for a separately needed local entity-inception claim.F.17andF.18govern sense cells, durable public labels, candidate-name history, public rows, lineage, and name refresh. A.1.1 consumes the settled names without copying their dossiers.F.9governs an obtaining Bridge between exact F.17SchemeSenseCellvalues. A Bridge carries relation semantics, not a receiving-use decision or a structure-to-structure crossing. A separate C.2.1 claim states bounded suitability; A.10 or B.3 governs reliance.E.17.0,E.24.PUB, andC.29separately govern view conformance, publication occurrence and availability, representation, rendering, form, and carrier.C.2.Precovers an exact source expression and routes any source-use relation to its direct governor.A.6.0andA.6.5govern theRelationSignatureand SlotSpecs declared here;A.6.RELgoverns progressive explicit individuation after the direct relation kind, obtaining condition, and occurrence-identity rule exist.
A.1.1:End
Role Taxonomy
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Work-facing role value.
Use this pattern when a project needs to say what an admitted U.System holder, such as a system, organization-as-system, person, team, tool, agent, machine, motor, pump, or component, is being in a bounded context before method, plan, work, transformation, functioning, evidence, responsibility, or naming claims can be made safely.
Typical moments:
- a project sentence says "engineer", "reviewer", "operator", "supplier", "model verifier", "agent", "service provider", "drive motor", "cooling circulator", "load-bearing brace", or another role-like name, and it is unclear what holder, context, and work, transformation, or functioning claim are current;
- a team treats a role name as if it created capability, commitment, obligation, permission, method, work, or evidence;
- a standard, report, dataset, model card, publication, requirement, or definition is described as having a "role" in evidence, status, assurance, source use, or publication use;
- a method, plan, work occurrence, or result is attributed to a role without naming the holder and role assignment under which the work is performed;
- role names must be kept reusable across contexts without making each context-local role into a new system kind;
- a role boundary is being decomposed into factors, states, responsibilities, or method participation, and the project must recover the current neighboring object instead of treating role as a holon.
Primary EntityOfConcern. The EntityOfConcern is U.Role: a context-bound enactment-facing role value in the role ontologicalNeighborhood. A role value names what an admitted U.System holder is being for a bounded context when method admission, role-state checking, transformation or functioning participation, or work attribution depends on that role. U.Role is a root U-kind, but it is not an admitted holon kind: role decompositions resolve to assignment, state, capability, responsibility, permission, commitment, obligation, method, work, or role-relation owners rather than to role parts.
Primary working reader. The first reader is an engineer-manager, analyst, or FPF author who must separate role value, holder, role assignment, method, plan, work, evidence, and source-use claims before acting or writing a pattern. The downstream reader is the project participant who needs role language to answer who held what role, in which context, for which claim.
First useful move. Name the role value, the bounded context, and whether the current claim is about role identity, a role assignment, role description, role state, role relation structure, capability-fit condition, functional or transformation participation, method role-admission condition, planned work, performed work, or an episteme used as evidence, source, standard, requirement, definition, explanation, status bearer, or publication.
What goes wrong if missed. Role words become an ontology shortcut. A document becomes a "verifier role"; a capability becomes a role; a role name is treated as evidence that work happened; a method is treated as a role's hidden behavior; a publication is treated as if it acted. FPF then grows a second role ontology for epistemes, status labels, access labels, relation arguments, and source labels.
What this buys. A small role vocabulary can serve many projects without type explosion. The same system can hold different roles in different contexts; work remains performed by a holder under a role assignment; epistemes remain used through their own evidence, status, source, publication, requirement, definition, explanation, and assurance relations.
Not this pattern when.
- If the current claim is the assignment relation linking holder, role, context, and window, use
A.2.1. - If the current claim is capability, use
A.2.2. - If the current claim is role state, use
A.2.5. - If the current claim is role-admission substitution, incompatibility, qualification, or bundles, use
A.2.7. - If the current claim is method, method description, work plan, or performed work alignment, use
A.15. - If the current claim is an episteme used as evidence, source, standard, definition, requirement, explanation, status bearer, publication, or assurance input, use the direct evidence-use, status-use, source-use, publication-use, requirement-use, definition-use, explanation-use, or assurance pattern. Do not force it through
U.Role. - If the current issue is only a confusing role-like word, first use
A.6.RSIRto recover the governed object or claim kind.
Problem Frame
FPF needs role language because the same holon can be used, treated, expected, or named differently in different bounded contexts. A pump can be a cooling circulator in one plant context and a test article in another. A person can be verifier in one work package and author in another. A service can be supplier in one agreement-like relation and consumer in another. Without a role value, these contextual uses either become new system subtypes or remain vague source language.
At the same time, role language is dangerous. Everyday phrases such as "the role of this standard", "the role of this dataset", "the role of this theorem", "the role of this dashboard", or "the role of this interface" can hide several different FPF claims. They may be evidence-use, source-use, publication-use, status-use, requirement-use, explanation-use, interface, signature, capability, method, or work claims. They are not automatically U.Role claims.
A.2 therefore keeps U.Role real, but narrow. A role is a context-bound enactment-facing role value. Enactment-facing does not mean "human job" or "social agent only": a motor can be assigned as a drive motor, a pump can be assigned as a cooling circulator, and a valve can be assigned as a regulator inside a functional or transformation context. A method or method description may name role-admission conditions; performed work cites a U.RoleAssignment; transformation and functioning claims may also need the same role value. A role becomes operational through neighboring relations, especially U.RoleAssignment in A.2.1, role-method-work alignment in A.15, transformation participation in A.3.4, and functional precision restoration in A.6.F when function wording is current. It does not absorb every relation in which a value participates.
Problem
Without this pattern:
- Type explosion returns. Each contextual use becomes a new system kind such as
PumpAsCoolingCirculatororReviewerReportSystem. - Role and assignment collapse. The role value, the holder, the context, and the time window are treated as one vague label.
- Role and capability collapse. A role name is treated as if it created ability.
- Role and method collapse. A role name is treated as if it contained the method by which work is done.
- Role and evidence collapse. A document, dataset, standard, proof, or model card is treated as a role holder because it is used as evidence or source material.
- Role and work collapse. A role label is treated as evidence that work was performed.
- Argument-position drift appears. "Role" is used for relation argument positions or slot positions, competing with
A.6.5SlotSpec discipline. - Role-whole overclaim. A role is decomposed into factors, responsibilities, states, permissions, obligations, or method participation and then treated as a holon, although
U.Roleis not admitted as a holon kind. The recoverable objects are neighboring relations or values, not role parts.
Forces
Solution
Use U.Role as a context-bound role value, not as a generic contextual classifier.
U.Role answers the question: what is this admitted U.System holder being, in this bounded context, for the current method, transformation, functioning, or work claim?
It does not answer by itself:
- who holds the role;
- whether the holder can do the work;
- which method is selected;
- which work was planned or performed;
- which evidence justifies a claim;
- which publication or description expresses the role;
- which status applies to a document, method, result, or claim;
- which relation argument position or SlotKind is current.
Those claims belong to neighboring patterns.
Core Definitions
U.Role. A U.Role is a context-bound enactment-facing role value: a reusable value that names what an admitted U.System holder is being in a bounded context. It is enactment-facing because its primary practical use is to govern or explain role assignment, method role-admission conditions, transformation or functioning participation, work attribution, role-state checks, role naming, and role-related evidence about work.
Plain gloss: a role is a contextual functional mask. The gloss is helpful only if the normative object stays clear: the role value is not the holder, not a system part, not the function itself, and not the work.
U.RoleAssignment. A U.RoleAssignment is a typed assignment relation value governed by A.2.1. It links a holder, a U.Role, a bounded context, and any current assignment window. A.2 names why this relation is needed; A.2.1 governs its SlotSpecs.
Role holder. A holder of a U.RoleAssignment is an admitted U.System selected by the governing work, transformation, functioning, or method pattern as the system-like performer for the bounded context. The word "performer" here includes physical and operational performance by motors, pumps, valves, organisms, teams, services, and devices; it does not imply consciousness, social agency, or responsibility unless a neighboring pattern makes that claim current. An episteme is not admitted as holder merely because it is used as evidence, source, standard, requirement, definition, explanation, status bearer, publication, or assurance input.
Role description. A role description is an episteme that describes, constrains, teaches, publishes, or stores a role value or role assignment. The description is not the role value by default.
Role boundary. A role boundary is grounded by a bounded context, the holder class or known holders, the assignment or admission use, the method, transformation, functioning, or work claim, and any current role description, role-state relation, role-relation structure, capability-fit condition, method role-admission condition, or evidence about performed work. A proposed decomposition of a role does not supply role holonhood. Recover whether the decomposed objects are role-admission fit relations, factors or qualifications, bundle expressions, separate role values, role-state refinements, capability-fit conditions, responsibility, permission, commitment, or obligation relations, or coupled method/work structures.
Do not infer role parts from slots or relation richness. Systems hold roles. Role assignments, role states, evidence uses, and other relation-bearing structures may have SlotSpecs. Epistemes such as role descriptions may have constituent parts. Those slots and description parts are not parts of the U.Role value.
Role relation-neighborhood. A role value is surrounded by relations that are not parts of the role:
Do not turn every relation in this neighborhood into a slot of U.Role. Use SlotSpec discipline only when the governing pattern declares a slot-bearing relation.
Work-Facing Role Assignment Boundary
Use the short readable notation only as a notation for a typed assignment relation:
The normative assignment relation is governed by [A.2.1](/generated/patterns/A.2.1), not by the notation. Its core slots are:
HolderSlot is filled by an admitted U.System selected as system-like performer for the current work, transformation, functioning, or method claim.
RoleValueSlot is filled by U.Role.
BoundedContextSlot is filled by the context that gives the role value its local meaning.
AssignmentWindowSlot is filled when assignment currentness, work attribution, role-state admission, or source freshness depends on a window. An open-world missing slot means unknown, not asserted, not recovered, or not current for this claim; it does not mean no such value exists.
Direct work-role patterns may add work-role qualifier slots. Evidence-use and status-use slots are not work-role qualifier slots and do not belong in assignment provenance.
What Does Not Become U.Role
The following are not role values merely because source language says "role":
If the direct kind is not yet clear, use A.6.RSIR.
Role Taxonomy Inside a Bounded Context
Inside one bounded context, roles may be organized by:
- role-admission substitution;
- role incompatibility;
- role bundles;
- role-state predicates;
- holder eligibility constraints;
- capability-fit conditions;
- method role-admission conditions or exclusions;
- naming and description conventions.
A.2.7 governs role relation structure. It is context-local role architecture in life, not mereology, not class subsumption for systems, not generic concern algebra, not MethodRelationStructure@BoundedContext, and not method algebra. Algebraic, graph, matrix, embedding, or neural descriptions are only lenses over selected role relation structure when a project explicitly uses them.
Typical work-facing role families include:
Domains may define roles such as DriveMotorRole, CoolingCirculatorRole, BridgeInspectorRole, ClinicalTrialCoordinatorRole, ModelCardReviewerRole, or ShipyardOperatorRole. Define them in their bounded context and connect them to role assignment, capability, method, transformation, work, and evidence only when those claims are current.
Reduced Use and Reopen Conditions
A role-like word may stay in reduced use when it only helps people recognize a local conversation and no claim depends on holder, assignment, context, time, capability, method, work, evidence, status, source, publication, or gate use.
Use the fuller role pattern when a claim based on the role-like word would change what can be done, claimed, checked, relied on, or attributed:
- use
A.2when the role value itself, bounded context, role taxonomy, or role relation-neighborhood is current; - use
A.2.1when holder, role value, context, window, assignment source, or work-role qualifier is current; - use
A.2.2when ability or capability is current; - use
A.2.5when role-state admission, currentness, or role-state gate is current; - use
A.2.7when role-admission substitution, incompatibility, qualification, or role bundles are current; - use
A.15when method, method description, work plan, or performed work is current; - use direct episteme-use patterns when evidence, status, source, publication, requirement, definition, explanation, assurance, or gate use of an episteme is current;
- use
A.6.5when the word "role" is only a relation position or SlotKind.
If a reduced-use role label is later used for a stronger claim, do not treat the earlier reduced use as evidence. Recover the needed role value, assignment relation, neighboring value, or direct episteme-use relation before the stronger claim is made.
Archetypal Grounding
Pump in a Cooling Loop
The holder is PumpUnit-3, a system. The role value is CoolingCirculatorRole. The context is Plant-A. The assignment window is open from a named date.
This does not say the pump has the capability to circulate under every condition. Capability claims stay under [A.2.2](/generated/patterns/A.2.2). It does not say which method is used or which work occurred. Method, method description, work plan, and work claims stay under [A.15](/generated/patterns/A.15).
Standard Used in Design Work
"RFC-9110 has the protocol-standard role in this design" is source-side wording that must be repaired.
Current FPF expression:
- the RFC publication is an episteme or publication used as source, standard, requirement, or method-description source;
- the design service, engineer, or team is the admitted
U.Systemholding any work-facing role; - the design work is performed by that holder under a role assignment;
- the RFC does not perform the work and does not hold
U.Role.
Reviewer and Review Report
A person, team, or agent service can hold ReviewerRole for a review context. The review report produced by that work is an episteme. Later, another project may use the report as evidence or status input. That use is an evidence-use or status-use relation around the report, not a role assignment to the report.
Relation Argument Named "Role"
In a relation signature, "role" may mean an argument position. If the claim is about a relation position, use A.6.5 SlotSpec discipline. Do not create a U.Role merely because the source says "argument role".
Bias Annotation
Working Guidance
- Start with the source phrase and recover the current project concern.
- If the phrase names what an admitted
U.Systemholder is being in a bounded context, recover aU.Rolevalue. - If the phrase names the holder-role-context-window relation, recover
U.RoleAssignmentunderA.2.1. - If the claim decomposes a role, do not open role mereology. Use
A.2.7and neighboring owners to recover role-admission fit, factor or qualification, bundle expression, separate role value, role-state refinement, capability-fit condition, responsibility, permission, commitment, or obligation relation, or coupled method/work structure. - If the phrase names ability, recover capability under
A.2.2. - If the phrase names performed work, intended work, or governing method, use
A.15and its neighboring method and work patterns. - If the phrase names evidence, source, standard, requirement, definition, explanation, publication, status, assurance, or gate use of an episteme, use the direct episteme-use relation pattern.
- If the phrase only names a relation position, field, parameter, or argument, use
A.6.5.
Conformance Checklist
Common Anti-Patterns
Consequences
Rationale
Roles are needed because holons participate in different contexts without changing their substantial identity. A role value gives this context-local participation a name. The pump remains the same pump while being a cooling circulator in one context and test article in another. The engineer remains the same person while holding verifier or author roles in different work packages.
The selected ontology keeps three levels separate:
U.Role: the context-bound role value.U.RoleAssignment: the typed relation value linking holder, role, context, and window.- Neighboring values: capability, method, method description, work plan, work occurrence, evidence-use relation, status-use relation, source-use relation, publication-use relation, and role description.
This is a compact architecture. It avoids type explosion, but it also avoids the opposite error of making role a generic slot word for anything that participates in anything else. A role is a real role value when an admitted U.System holder is being something in a bounded context for work, transformation, functioning, method, or attribution. Other participation claims use their own relation patterns.
SoTA-Echoing
Relations
Builds on: A.1 for holon and system grounding; A.6.5 for SlotSpec discipline; E.24 for ontic and slot-relation discipline; A.6.RSIR for first-level wording-use recovery.
Governs with: A.2.1 for role assignment; A.2.2 for capability; A.2.5 for role state; A.2.7 for role relation structure and role-algebra lens boundary; A.15 for role-method-work alignment; Part F role-description and naming patterns for durable role names.
Keeps separate from: A.10, B.3, C.2.1, C.28, E.17, F.10, and direct evidence-use, status-use, source-use, publication-use, requirement-use, definition-use, explanation-use, assurance-use, and gate patterns for episteme use.
Precision-restoration applications: If source wording uses "role" for interface, signature, argument, field, parameter, capability, method, function, concern, interest, status, evidence, or publication, apply A.6.RSIR only until the governed object or claim kind is recovered, then apply the direct governing pattern.
A.2:End
U.RoleAssignment - System Role Assignment
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. System role assignment.
Use this pattern when another claim must rely on which admitted U.System holds which enactment-facing U.Role, under which role vocabulary and interpretation scheme, during which assignment window.
Typical moments:
- a method description names
InspectorRole, but the current holder and assignment window are still unstated; - a performed-work attribution is needed: one exact dated Work occurrence
Wand one exact assignmentRAparticipate inperformedUnderAssignment(W, RA), the direct relation governed byF.6; the actual performer is the admitted holder SystemS = RA.HolderSystemSlot, and a separate assertion may designateWandRA; - the same system receives the same role during two separate assignment episodes;
- a DDD-style model-use organization changes the interpretation of an otherwise identical role assignment;
- a constituting decision or installation relation may establish a specialized assignment occurrence;
- a roster entry, configuration line, observation, or evidence relation may support an assignment claim without becoming an assignment slot.
Primary EntityOfConcern. The EntityOfConcern is one obtaining U.RoleAssignment relation occurrence. Its four required actual participants are an admitted U.System holder, one U.Role value, the role-taxonomy episteme, and the effective U.ReferenceScheme under which that value is interpreted. The occurrence has a maximal continuous temporal extent determined by uninterrupted obtaining; an assignment assertion or occurrence description may state the currently known extent as an AssignmentInterval.
Primary working reader. The first reader is an engineer-manager, analyst, method author, or FPF author who must make role admission or work attribution inspectable without turning role, capability, method, performed work, evidence, or publication into one assignment relation occurrence.
First useful move. Write a readable assignment assertion naming the four required participants and the assignment episode being claimed. State the currently known temporal extent separately. Explicitly individuate the relation occurrence only when a receiving claim must distinguish this assignment episode from another rather than merely recognize that the direct relation obtains.
What goes wrong if missed. A role label is mistaken for an assignment, repeated episodes collapse into one timeless relation, or a database row is treated as what makes the assignment obtain. Work may then be attributed to the wrong holder or assignment episode, while evidence, capability, and method claims become hidden fields of the assignment.
What this buys. Assignment identity becomes stable enough for method admission, role-state checking, and work attribution while ordinary prose remains lightweight. The assignment relation has one exact identity rule; all support, decision, capability, method, work, evidence, and publication claims keep their direct governing patterns.
Not this pattern when.
- Use
A.2for role-value interpretation and the role taxonomy itself. - Use
A.2.2for holder capability,A.2.5for role state, andA.2.7for selected relations among role values. - Use
A.3.1,A.3.2, andA.15for method and role-admission conditions. - Use
A.15.1andF.6for performed work and its attribution through an assignment. - Use the direct decision, responsibility, commitment, evidence, reliance, provenance, publication, external-rule, or currentness pattern when that relation is current.
- Use
A.6.5when an external relation notation labels a participantroleand the current task is to recover its exact SlotKind and ValueKind.
Problem Frame
A role value does not assign itself. InspectorRole may be understood under a role taxonomy, yet no robot, person, or service holds it until an assignment relation obtains. Conversely, the same system can hold several roles without changing system identity, and the same holder-role pair can enter several assignment episodes.
An admitted holder may be a person or another kind of U.System. Holding the role does not by itself establish consciousness, intention, legal or ethical accountability, permission, or gate passage; each stronger claim needs its direct governing pattern.
Role meaning is local to a role-taxonomy episteme and effective reference scheme. Assignment locality therefore needs those four actual relation participants directly, not a mandatory U.BoundedContext. When an actual DDD-style model-use organization changes one receiving interpretation, the receiving assertion or work use may designate the selected BoundedModelUseStructure; the structure is not an optional participant of generic U.RoleAssignment.
Assignment is also not performed work. A current assignment may exist before any work occurs. When work does occur, the admitted holder System S = RA.HolderSystemSlot performs exact Work W under exact assignment RA; F.6 owns the direct performedUnderAssignment(W, RA) relation. Capability, role state, method admission, responsibility, assignment decisions, and evidence remain separate relations with their own obtaining and currentness conditions.
Problem
Without this pattern:
- a role name is used as if it identified a holder and assignment episode;
- role value, taxonomy episteme, interpretation scheme, holder, and time are compressed into one label;
- two assignments with the same holder and role but disjoint windows become one occurrence;
- assignment is treated as proof of capability, method admission, role state, performed work, or authorization;
- a constituting assignment decision or installation relation and epistemic evidence or provenance collapse into one untyped justification field;
- an optional DDD model-use structure is made mandatory or identity-bearing without showing that it changes interpretation.
Forces
Solution
State the direct assignment in readable prose first. When another claim needs reusable participant typing or occurrence identity, use the RelationSignature for U.RoleAssignment governed here and declared through A.6.0 and A.6.5. The signature is an episteme about the relation kind; it is not the world-side assignment occurrence. Its SlotSpecs are:
The four SlotSpecs declare all participant meanings of generic U.RoleAssignment. No SlotSpec is declared for the occurrence's temporal extent or for a selected model-use structure used only to qualify a receiving interpretation.
AssignmentInterval is a local content ValueKind for an assignment assertion or relation-occurrence description, not a U-kind and not the ValueKind of a relation-participant SlotSpec. An assignmentInterval field states the currently known temporal extent through a temporal reference, a start boundary, an end boundary or explicit open end, and the continuity claim used to recognize one uninterrupted assignment episode. The world-side occurrence has that temporal extent under its direct identity rule. The field describes the extent and does not make the relation obtain. A shift label is sufficient only when those temporal facts can be resolved. C.27.TA governs fuller temporal-aspect description when the temporal reference or interval itself becomes a relied-on object.
U.RoleAssignment obtains when the admitted system holds the role value, interpreted by the named role-taxonomy episteme under the effective reference scheme, throughout one continuous assignment episode. An assignment assertion is a U.Episteme claiming that this relation obtains. A roster entry or configuration line may express that assertion, and a publication may expose it; evidence may support relying on it. None of those epistemic or representation-side objects makes the world-side relation obtain merely by existing.
Relation-Occurrence Identity
Do not replace the identity rule with a tuple key. One generic U.RoleAssignment occurrence begins when the assignment predicate starts obtaining for one fixed holder system, role value, role-taxonomy episteme, and effective reference scheme. It continues while that predicate obtains without interruption for those same four actual participants. It ends when the predicate ceases to obtain or one of those participants changes. A later resumption starts another occurrence.
An assignment assertion or occurrence description may carry an AssignmentInterval stating the currently known temporal extent of that occurrence. [start, open] can designate the current episode before its end is known. Recording the end boundary later refines the description of the same occurrence when obtaining was continuous. A gap in available evidence remains unknown and does not by itself split the occurrence. A demonstrated period of non-assignment ends the occurrence; a later resumption begins another. Two descriptions refer to the same occurrence only when they resolve to the same four participants and to temporal information belonging to that one uninterrupted period.
A selected model-use structure does not enter generic assignment identity. A genuinely structure-dependent relation species requires its own direct pattern, a required identity-bearing structure participant, a stronger predicate, and an explicit occurrence-identity rule.
Filling the Declared Slots
Resolve HolderSystemSlot through U.EntityRef and check that its referent is an admitted U.System. Embed RoleValueSlot and EffectiveReferenceSchemeSlot by value. Resolve RoleTaxonomyEpistemeSlot through U.EpistemeRef to the exact episteme edition used for interpretation. If a receiving assertion or work use depends on a selected BoundedModelUseStructure, designate that structure in the receiving episteme or use relation under its direct governor.
Those four required designations correspond to the actual participants under the declared participant meanings. State the currently known temporal extent separately as assignmentInterval in the assertion or occurrence description. Assignment decision, responsibility, evidence, provenance, installation work, role state, capability, performed work, selected model-use structure, and publication remain separate objects or relation occurrences under their own governing patterns.
Well-Formedness Predicates
An evidence gap makes the assignment claim unknown or unrecovered; it does not demonstrate that the assignment predicate failed. A demonstrated non-assignment interval, by contrast, ends the current occurrence.
Demand-Driven Materialization
Ordinary use can stop at a readable direct assertion:
Expose the relation occurrence explicitly only when a receiving claim needs to refer to it, distinguish it from another episode, or use it as a participant. If any required participant filling or the continuity of the assignment episode cannot be recovered, keep the assertion reduced or lower the receiving claim. Do not insert a dummy filling or put a value of another kind into a declared slot.
Direct Neighboring Relations
A constituting decision, installation relation, or another assignment-establishing occurrence can help make a specialized assignment relation obtain only when that direct ontology says so. Evidence, reliance, and provenance relations instead support knowledge or use of the assignment claim. Do not use epistemic support as the world-side constituting condition by default.
Performed-Work Attribution
When dated work is performed under role holding, name the admitted holder System, exact Work, and exact assignment directly:
Robot-7 is the admitted System in RoleAssignment-17.HolderSystemSlot. [A.15.1](/generated/patterns/A.15.1) governs InspectionWork-17; [A.2.1](/generated/patterns/A.2.1) governs RoleAssignment-17; [F.6](/generated/patterns/F.6) owns the attribution relation. The assignment does not prove that work occurred, and the work occurrence does not alter assignment identity.
If source wording says RoleEnactment, recover the dated U.Work occurrence, exact U.RoleAssignment, admitted holder System, and direct performedUnderAssignment(W, RA) relation. Do not introduce a second run-time U-kind or relation occurrence beside work and assignment.
Legacy Context Shorthand
Holder#Role:Context@Window is source notation, not the assignment ontology. Context is an untyped source label here. Recover the exact referent, its kind, and the direct relation that makes it relevant. If it denotes an independently selected BoundedModelUseStructure that changes a receiving interpretation, designate that structure in the receiving assertion or work use. Otherwise keep the recovered referent in its own direct relation; never invent a generic context or model-use participant for U.RoleAssignment.
Archetypal Grounding
Robot Assigned for One Inspection Shift
The four SlotKind-labelled fields designate the actual relation participants. The assignmentInterval field states the assertion's temporal description of the occurrence; it is not a fifth relation-participant designation. During the shift, the direct assignment predicate obtains for the four actual participants—Robot-7, InspectorRole, MaintenanceRoles-2026, and Maintenance-Scheme-A; the displayed RoleAssignmentAssertion states those participant designations and describes the occurrence's temporal extent. Sensor capability, current role state, the inspection method, and any performed inspection work remain separate claims.
Repeated Assignment Episodes
Robot-7 is assigned the same role again on the next day under the same taxonomy and scheme. The four stable participant fillings match, but the assignment predicate does not obtain continuously across the two shifts. The second shift is therefore another U.RoleAssignment occurrence. A staffing table that reuses one row identifier must not collapse the two world-side episodes.
Motor Holding a Drive Role
The open end says that this episteme does not yet state the occurrence's end. Extending or later closing that temporal description does not create another assignment while the direct predicate obtains continuously for the same four participants. The holder is the motor as a U.System. Pump Assembly A is the actual system in which installation and work occur; it is not an assignment context slot. Torque capability, electrical interface relations, installation work, and a later pumping run remain direct neighboring claims.
DDD Model-Use Structure Changes a Receiving Interpretation
Two software teams use ApproverRole under different model vocabularies. In the fulfilment model it admits acceptance of a fulfilment-state transition; in the payment model it admits payment authorization. The generic assignment still has exactly four participants:
The second block belongs to the receiving assertion or work use. It does not add a fifth participant to U.RoleAssignment and does not change generic occurrence identity. The selected structure was independently recovered under [A.1.1](/generated/patterns/A.1.1); it neither assigns the service nor performs approval work. If a future dependent relation species truly obtains only with one selected structure, its direct pattern must declare that structure as a required identity-bearing participant.
Reviewer and Review Report
ReviewService-4 holds ReviewerRole through ReviewService-4-ReviewerAssignment and, as that assignment's admitted holder System, performs ReviewWork-82 under it through F.6 performedUnderAssignment(ReviewWork-82, ReviewService-4-ReviewerAssignment). ReviewReport-82 is a separately identified U.Episteme; when the work first constitutes that exact episteme and the inception claim matters, A.15.PROD recovers the local work/change/identity claim. Its content may state a review judgment under the direct evaluation pattern. A later evidence relation may use the report for another claim; the report never fills HolderSystemSlot merely because it is useful.
Bias Annotation
Working Guidance
- State the assignment predicate in ordinary language.
- Name the four required relation participants, then state the currently known temporal extent separately as an
AssignmentIntervalin the assertion or occurrence description. - Decide whether a receiving use needs explicit occurrence identity. Stop at the readable assertion when it does not.
- Distinguish repeated episodes by temporal extent; do not use a database row identifier as the discriminator.
- Keep capability, role state, method admission, performed work, responsibility, decision, evidence, reliance, provenance, and publication under their direct patterns.
- When a selected model-use structure changes a receiving interpretation, designate it in that receiving assertion or use; do not extend the generic assignment signature.
- For old
Contextshorthand, recover its exact referent, kind, and direct governing relation before continuing.
Conformance Checklist
Common Anti-Patterns
Consequences
Rationale
U.RoleAssignment is admitted because a role value and holder identity answer different questions. U.Role is the admitted kind for role values; one exact role value carries the work-facing participation meaning. One obtaining assignment occurrence RA : U.RoleAssignment relates one admitted System to that role value through one role-taxonomy episteme and one effective reference scheme over its maximal continuous extent. A separately identified assignment assertion or description may designate those four participants and state the occurrence's temporal extent. U.Work is the admitted kind for work individuals; one W : U.Work is the world-side dated occurrence. A separate assertion or record may say that W occurred and state its obtaining relations.
The assignment is a relation occurrence, not a relation value stored in a row. Its participant meanings and temporal episode provide the domain identity required by A.6.REL. This prevents two opposite errors: treating every role label as a complete assignment, and requiring explicit assignment-occurrence individuation for casual recognition text.
The role-taxonomy episteme and effective reference scheme provide semantic locality directly. They remove the need for mandatory U.BoundedContext. A selected model-use structure remains available to a receiving assertion or work use without becoming an agent, role taxonomy, generic assignment participant, or identity component.
SoTA-Echoing
Relations
Builds on: A.2 for U.Role; A.6.REL for relation obtaining and occurrence identity; A.6.5 for SlotSpec discipline; C.2.1 for the role-taxonomy episteme and effective reference scheme.
Coordinates with: A.2.2 for capability; A.2.5 for role state; A.2.7 for selected role relation structure; A.3.1, A.3.2, and A.15 for method admission; A.15.1 and F.6 for performed-work attribution.
Uses when current: A.1.1 for an optional selected model-use structure; F.9 and A.6.9 for cross-scheme alignment; direct responsibility, decision, evidence, reliance, provenance, currentness, and publication patterns for claims about the assignment occurrence.
Does not replace: role value, role state, capability, method, work, assignment decision, evidence, publication, or their descriptions.
A.2.1:End
U.Capability - System Ability Envelope and Measures
Status: Stable
U.Capability is the FPF object for "can do within bounds".
Use this pattern when a project claim says that a person, team, machine, software service, organization, composite cell, or other system can produce a kind of result, perform a class of work, or meet a performance threshold. The claim is about a holder's capability instance, not about who is assigned, which method is described, which work occurred, or what was promised to another party.
Primary EntityOfConcern. The EntityOfConcern is U.Capability: an E.24.UK-admitted dependent durable U-kind name for holder-dependent capability instances. An individual U.Capability instance is a holder-dependent concrete governed object of a named U.System, recognized as that system's ability to perform a work family or produce a result class within a declared envelope, measure set, qualification window, and currentness condition. A statement, report row, certification, evidence relation, source-use relation, dashboard display, or currentness assessment about that instance is a neighboring governed record or relation, not the capability instance itself.
Primary working reader. A manager, architect, engineer, safety assessor, scheduler, or model author who needs to decide whether a holder can be used for a work claim, method step, service promise, or architecture move without smuggling role assignment, method description, past work, evidence, or quality wording into the capability instance.
First useful move. Ask: who is the holder system, what work family or result class is the ability about, under what envelope, with what declared measures, during which qualification window, and which separate statement, evidence relation, source-use relation, or currentness assessment currently supports reliance on that capability?
What goes wrong if missed. A role label becomes a hidden proof of ability, a method description is treated as if it can perform work, a single successful run is generalized into a stable ability, or a promise is made without a measured capability behind it.
What this buys. Capability becomes checkable and reusable: a work-admission claim can test role assignment, role state, method-side admission conditions, and capability thresholds separately.
Not this pattern when.
- If the current claim is who holds a work-facing role in a bounded context, use
A.2.1. - If the current claim is whether that assignment is in an enactable state, use
A.2.5. - If the current claim is a role value, role description, role name, role relation structure, or role bundle, use
A.2, Part F role patterns, orA.2.7. - If the current claim is a way of doing, use
A.3.1; if it is an episteme describing that way, useA.3.2. - If the current claim is dated performed work or planned work, use
A.15,A.15.1, orA.15.2. - If the current claim is a promise to others, use the promise-content and commitment patterns.
- If the current claim is evidence, source, status, assurance, publication, or description use of an episteme, use the direct episteme-use pattern. Do not make the episteme a capability holder.
- If the current claim is one measured aspect with a declared scale, use
U.CharacteristicthroughC.16.P,A.19, and the current characteristic or scale owner. - If the current claim is a composite quality family such as availability, resilience, security, or maintainability, use
C.25Q-Bundle. - If the current claim is an architecture-characteristic starter head, project criteria row, architecture eval reading, or architecture-description concern, use
C.32.HCS,C.32.ACS,C.32.ACE, orC.30as applicable.
Problem Frame
In ordinary work, the same sentence often carries several typed values:
- "The welding robot is the welder on this line."
- "The welding robot can weld seam type W at 12 seams per minute."
- "The welding procedure says how to weld seam type W."
- "The robot welded batch B at 10:20."
- "The supplier promises 12 seams per minute."
Only the second sentence can support a U.Capability instance when the holder, work family, envelope, measures, and currentness conditions are recoverable. The sentence itself is a statement about the capability instance. The others may be role assignment, method description, performed work, or promise content. When FPF collapses them, project reasoning becomes brittle:
- Role assignment becomes fake ability. "Assigned as verifier" is treated as "able to verify".
- Method description becomes fake ability. A recipe or algorithm is treated as if it can execute itself.
- Past work becomes fake ability. One successful work occurrence is treated as stable capacity.
- Promise content becomes fake ability. A service promise hides the real system envelope and measured bounds.
- Description becomes fake holder. A standard, report, model card, or dashboard is said to "have capability" because it is useful in a capability argument.
- Unbounded ability becomes unreviewable. "Can machine titanium" does not name conditions, measures, version, calibration, or currentness.
Kind and Boundary
U.Capability is retained as a dependent durable U-kind name under E.24.UK. A concrete U.Capability instance is the holder-dependent capability instance of a named U.System; its identity is grounded by the holder, work family or result class, envelope, measure set, qualification window, and currentness condition. The statement that asserts the ability, the evidence that supports reliance, and the fit predicate that tests work admission are separately governed records or relations rather than the U.Capability instance.
CapabilityHolderRef. The holder is a U.System: a physical system, cyber system, socio-technical system, organization, team, composite cell, software service as deployed system, or other acting holon admitted as system for the claim. A role assignment, method, method description, work record, episteme, publication, standard, or dashboard is not the capability holder merely because it appears in the sentence.
WorkFamilyOrResultClassRef. The ability is about a class of work results or a method family the holder can enact. It may refer to a U.Method, U.MethodDescription, method family, result class, or work family, but the reference does not turn the method or description into the holder.
CapabilityEnvelope. The envelope states the bounded conditions under which the ability holds: input range, environment, resources, configuration, system version, calibration state, staffing composition, access constraints, safety limits, or other current conditions.
CapabilityMeasureSet. The measures state achieved or required bounds with units, scales, tolerances, success predicates, reliability, throughput, latency, precision, defect rate, or other declared characteristics. A measure may cite a U.Characteristic, Q-Bundle slot, or architecture-characteristic criteria row as an input for a capability-fit check, but that characteristic, Q-Bundle, or architecture row does not become the capability.
QualificationWindow. Capability is stable enough to plan with but not timeless. The instance may depend on software version, calibration horizon, team training state, wear, operating season, regulatory state, or other temporal currentness relation.
CapabilityStatementRefs. A CapabilityStatement is a governed episteme or publication-side record that says a capability instance exists, describes its holder, envelope, measures, and window, or cites it for planning. It is not U.Capability, but it is still a governed record under its own episteme or publication pattern.
EvidenceRelationRefs and SourceUseRelationRefs. Evidence, tests, certifications, prior work summaries, simulations, audit records, standards, and model results can justify a capability statement through direct evidence or source-use relations. These are governed relations or records. They do not become the capability and do not become its holder.
CurrentnessAssessmentRefs. A currentness assessment is a dated assessment relation saying whether the capability instance remains usable under its qualification window and current conditions. It is not the capability instance, but it is still a governed assessment relation. CapabilityCurrentnessCondition states what must remain true; an assessment evaluates that condition.
CapabilityFitConditionRefs. A capability-fit condition is an admission predicate, threshold, or gate relation that tests a holder capability and any declared characteristic, Q-Bundle, or architecture-characteristic inputs against a current role, method step, work plan, work occurrence, bounded context, or gate need. It is a governed relation or predicate. Unless a separate E.24.UK admission is written, it is not a U.* kind.
Neighboring-term boundary. When a neighboring pattern uses U.WorkScope, recover the set-valued condition part of CapabilityEnvelope: the inputs, environment, resources, configuration, and assumptions against which an intended work slice is checked. When it uses U.WorkMeasures, recover CapabilityMeasureSet. JobSlice names the intended work slice for a work-admission check. QualificationWindow names the temporal currentness relation for the capability instance. These are neighboring governed terms, not substitute names for U.Capability.
Positive Solution
Use U.Capability when the object under discussion is the holder's ability to achieve a result class within a declared envelope and measure set.
Minimal capability instance:
Separate supporting record:
Plain sentence form:
This sentence form is a publication or statement about the capability instance. It is deliberately not a method description. It does not list the step order or algorithm. It also does not assign the holder to a role, assert that a work occurrence happened, prove an architecture characteristic, or make the evidence relation into the capability.
Separation From Neighboring Values
Work-Admission Use
A method step or work claim may require both role and capability conditions.
The checks are separate:
- role assignment says who is acting in which context;
- role state says whether that assignment is in a work-admitting state;
- method or method description says what capability threshold is required;
- capability names the holder's capability instance within the envelope, measure set, and window;
- capability-fit condition tests whether that instance meets the current threshold or gate need;
- performed work says what actually happened.
Do not put the threshold into the role name. Do not treat a role assignment as proof of ability. Do not let a capability instance perform the work. Do not treat a fit predicate, Q-Bundle, architecture-characteristic row, evidence relation, or currentness assessment as the capability instance.
Worked Cases
Manufacturing Cell
RobotArm_A is assigned as WelderRole on AssemblyLine_2026. That assignment alone says who is eligible to act in the line context.
The capability instance is separate; a statement or record may describe it:
If a method step requires WelderRole and bead width tolerance below 0.2 mm, the role assignment and the capability are both checked. The assignment does not supply the tolerance, and the capability does not assign the robot to the shift.
Software Service as Deployed System
PlannerService_v4 is a deployed system. It may have capability to generate job-shop schedules for 50-500 jobs and 5-40 machines, with benchmark optimality above 0.95 and latency below 20 ms in PlantScheduling_2026.
The algorithm paper and method description are not the capability. The deployed system has the capability only while its version, dependencies, input range, and operational measurements satisfy the declared currentness condition; a benchmark report or model card is support for a statement about that instance.
Organization or Team
FinanceDept can close books for eight legal entities under IFRS with ERP v12, staffing at or above six qualified people, and close duration below five business days. That is a capability of the organizational system.
The monthly-close service promise is a promise content claim. The actual close for March 2026 is performed work. Staff assignments and role states are neighboring role claims. The capability instance keeps the ability of the department visible and measurable; the management report describing it is a statement about that instance.
Episteme Anti-Case
"ISO 26262 has safety capability" is not a capability statement about a holder-dependent capability instance. The standard is an episteme used as source, requirement, or assurance input. A safety engineering team or toolchain may have a capability to perform safety-case work using that standard within a declared envelope.
Capability Currentness and Lowering
Lower or reopen a capability instance, or lower reliance on a statement about it, when any of these changes:
- the holder system changes composition, version, calibration, staffing, training state, toolchain, or environment;
- the envelope no longer covers the intended work slice;
- measures no longer meet the required threshold;
- the qualification window expires or becomes contested;
- evidence, source-use, test, audit, or simulation relations become stale or are reclassified, lowering the support or currentness assessment rather than becoming the capability;
- the method or method description changes the required capability threshold;
- the role assignment or role state changes, causing a work-admission claim to fail even though capability remains true;
- a composite holder changes dependency conditions.
Repair the smallest object that changed. A stale calibration window lowers the capability currentness assessment and may lower reliance on the capability instance; it does not rewrite the role value. A failed role assignment lowers work admission; it does not by itself lower the holder's measured ability. A stale report lowers a statement or evidence relation before it lowers the capability instance itself.
Composite Capability
A composite system may have a capability that none of its parts has alone. Treat the composite as the holder.
The concrete capability instance is asserted for Cell_3, not for every part and not for the method description. Dependencies may be named, but the bounded capability claim is about the composite holder.
Checklist
Anti-Patterns and Repairs
Consequences
Benefits.
- Planning separates "can do" from "is assigned now".
- Method steps can name capability thresholds without putting extra meaning into role names.
- Work records can be judged against the capability instance and fit predicate current at the time of work.
- Promise content becomes less magical because the internal ability and measured envelope are explicit.
- Composite-system ability can be stated at the right holder instead of scattered across parts.
Costs.
- Capability tables need envelope, measures, and currentness fields.
- Teams need to stop using role labels as shortcuts for ability.
- Some old "function", "service", "process", and "algorithm" sentences need kind recovery before they can be used in FPF.
The cost is intentional: without it, FPF cannot distinguish authorization, ability, method, and performance.
SoTA-Echoing
Source-currentness note: DoDAF and TOGAF are used here as stable capability-planning practice lineage, not as the full current frontier. Current pressure comes from SysML v2 and 2025-2026 MBSE work on semantic precision, uncertainty, stakeholder-context formalization, and model integration. The NIST zero-trust line is used only for the split between current authorization and measured ability.
Relations
Excluded Objects
Do not use U.Capability as the current object for:
- role value, role assignment, role state, role relation structure, or role description;
- method, method family, method description, or algorithm description;
- work plan, work occurrence, run record, or measurement trace;
- evidence graph, source record, model card, standard, report, dashboard, publication, or specification-use relation;
- promise content, commitment, permission, authority relation, or policy decision;
U.Characteristic, scale row, coordinate, score, metric, indicator, or threshold;C.25Q-Bundle, quality-family label, mechanism, status, or evidence slot;- architecture-characteristic starter head, project criteria row, eval program, eval reading, selected-structure adequacy claim, or architecture-description concern;
- capability-fit predicate, gate, admission relation, or work-entry readiness record;
- structural part, module, interface, port, or functional structure unless the current claim is the ability of a holder system expressed through that structure.
These values may be related to a capability instance, a statement about it, or a fit check over it. They do not become the capability by adjacency. Name the neighboring value, record, relation, or predicate through its own governing pattern when that neighboring claim is current.
A.2.2:End
U.PromiseContent (Promise Content)
Type: Definitional promise-content episteme pattern Status: Stable
Kind Settlement
U.PromiseContent is a dependent durable promised-outcome episteme under the episteme settlement. It is not a root beside U.Episteme, not a commitment, not work, and not a U.PresentationCarrier.
Use This When
Use this pattern when a project needs to state what is promised to a consumer before asking who is obligated, what work occurred, which system exposes access, or which evaluation method and A.10 evidence relations support a fulfilment assertion.
Typical moments:
- an SLA publication, service catalog, product offer, public API promise, utility offer, or government-service description contains a statement about what a consumer may rely on;
- a team says "the service" but might mean promise content, provider organization, API, access point, delivery system, method, ticket, or performed work;
- a fulfilment claim needs evaluation work that applies declared acceptance criteria to exact delivery-work facts, affected entities and post-work states, and any exact delivery or acceptance relation current for the use; the actual evaluation-operation result binding, optional verdict episteme, and A.10 evidence relations remain separate;
Primary EntityOfConcern. The EntityOfConcern of this pattern is U.PromiseContent: a consumer-facing promise-content episteme. At species level, its C.2.1 EntityOfConcernSlot is filled by the A.7 OutcomeSpec episteme denoted by promisedOutcomeSpecRef. Its claim graph states the promised outcome, any eligibility predicate, and acceptance claims; accessSpec separately describes the access method when that description is current.
First useful move. Write the promise content as a clause: what outcome is promised, which consumer role and claim scope are eligible, how access is described when relevant, and which acceptance criteria selected work facts and post-work states must satisfy. Name the evaluation method, evidence epistemes, and A.10 evidence relations separately so a fulfilment assertion can be checked. Then use U.Commitment only when an accountable subject is assigned to that content.
What goes wrong if missed. The word "service" starts naming provider, API, method, ticket, work, department, and promise at once. Teams then judge work against an implicit promise, treat access systems as obligations, or count performed work without knowing which promised outcome it was meant to satisfy.
What this buys. One consumer-facing promise-content episteme with direct exits to commitment, role assignment, access, PromiseContentUse, performed delivery work, affected entities and states, evaluation-operation results, optional verdict epistemes, evidence, acceptance, and publication patterns. Each neighboring claim keeps its named EntityOfConcern and direct relation instead of being collapsed into one undifferentiated service referent.
Not this pattern when. If the current EntityOfConcern is the accountable deontic relation, use A.2.8; if it is the performed delivery work, use A.15.1; if it is the access point or delivery system, use system and architecture patterns plus A.6.8 service wording repair; if the current move is Contract Bundle unpacking, use A.6.C.
Problem frame
Across domains the word service is used for many different things: a server or provider, an API, a procedure, a run, a department, even a product bundle. Such polysemy is productive in everyday speech but toxic in a normative model.
FPF therefore reserves U.PromiseContent for one kernel meaning: a consumer-facing promise content clause. When "service" denotes something else, recover the current referent: a provider or access point as U.System, provider participation as U.RoleAssignment, an access description as U.MethodDescription, performed delivery as U.Work, or the named direct relation governed by its own pattern. Normative prose uses an explicit facet head phrase per A.6.8 (RPR-SERV).
This keeps the kernel minimal while keeping the prose readable to non‑mathematicians: the canonical symbol is U.PromiseContent, and the head kind in normative text is always promise content.
Modularity note. A.2.3 defines the promise-content episteme and PromiseContentUse. Role assignment, access specification, delivery work, actual operation application and result binding, result-episteme identity, affected-subject change, A.10 evidence relations, evaluation, commitment, delivery, acceptance, speech act, and publication remain with their direct governing patterns. A.6.8 restores which service facet the wording denotes; it does not replace the named participants and their direct relations with a locally minted service-situation relation. A.6.C governs the Contract Bundle lens when contract, SLA, or guarantee wording must be unpacked.
Plain reading. Promise content says what a consumer may rely on. A system holding the provider role through a named U.RoleAssignment occurrence performs delivery work by enacting a U.Method; a U.MethodDescription describes that method. PromiseContentUse obtains between the delivery-work occurrence and the selected promise-content edition during the named interval. Exact work-participation, affected-referent, actual-change, delivery, and acceptance relations state what happened. A separately performed evaluation applies the declared operation or method; its actual result binding states the evaluation value. If another use needs a verdict episteme, C.2.1 governs that episteme and A.15.PROD governs any current entity-identity-inception claim. Evidence relations support the relied-on assertions. No universal work-result relation is presumed.
Lexical note (L-SERV and RPR-SERV). Bare service does not determine one FPF referent. When that word carries a relied-on claim, use A.6.8 to select the service facet: for example, a promise-content episteme and an access-point system have different kinds and participate in different relations. E.10 L-SERV triggers that recovery; after the facet is known, its direct governing pattern applies.
Problem
Without a first-class U.PromiseContent, a project description tends to make five recurring category errors:
- Provider = Service. Calling the provider system or team “the service” collapses that provider referent with the promise-content episteme.
- API = Service. Treating an interface or endpoint as the service hides the promised consumer-side outcome and its acceptance criteria.
- Method or plan = promise content. Treating a semantic method, a method-description episteme, or a work plan as the promise content hides the consumer-facing outcome and acceptance claims.
- Run = Service. Logging Work as "a service" erases the promise-content episteme and acceptance specification needed for SLA reasoning.
- Business ontology lock-in. Large domain schemes are imported wholesale, losing FPF universality and comparability across projects and domains.
Forces
Solution - Define U.PromiseContent as the promise-content episteme
Definition (normative).
A U.PromiseContent is an externally oriented promise-content episteme. Its claim content states a promised consumer-side outcome, any eligibility predicate, and acceptance criteria by which fulfilment is evaluated. Its optional accessSpec describes the access method. Interpretation is fixed by its effective U.ReferenceScheme; U.ClaimScope states where the claims hold.
U.PromiseContent is not a deontic commitment relation. One or more explicit U.Commitment occurrences under A.2.8 may have the promise content in their referents position; the promise-content episteme does not obligate an actor by itself.
In normative prose, the head phrase is promise content. Service offering clause and service promise clause are admissible Plain twins under A.6.8; bare service does not identify a promise-content episteme.
Species-level identity follows C.2.1:
promisedOutcomeSpecRef is the species-level realization of EntityOfConcernSlot; it is a U.EpistemeRef that resolves to the A.7 OutcomeSpec episteme about which the promise claims are made. OutcomeSpec is a specification-use episteme form, not a separately admitted U-kind. claimScope and optional modelUseStructureRef qualify interpretation and applicability of the promise-content claims; they are not generic identity positions. A direct dependent species may strengthen identity only through its own governing pattern.
- FPF kind:
U.Episteme. - Time stance: the promise content can be authored before delivery; later exact delivery-work facts, affected entities, post-work states, and any current delivery or acceptance relations are tested against the declared outcome and acceptance predicates. Evaluation work and the actual operation-result binding remain separate; when a verdict episteme is constituted, C.2.1 and A.15.PROD govern its identity and inception, while A.10 evidence relations support the relied-on assertions.
- Orientation: consumer-facing promise claims, not provider capability claims.
- Publication boundary:
isCarriedBymay obtain between aU.EpistemePublicationand aU.PresentationCarrier. Promise-content identity follows the C.2.1 episteme identity rule; neither theisCarriedByoccurrence nor carrier identity enters that rule.
Promise-content schema
contentcarries the promised-outcome, eligibility, and acceptance claims together with the optionalaccessSpecvalue when an access-method description is current; it is not an untyped text slot.providerRoleandconsumerRoleareU.Rolevalues carried by value in the claim graph.accessSpec,acceptanceSpec, andunitOfDeliveryare episteme values carried by value in the claim graph; a publication or other declared representation may express them throughU.EpistemeRefvalues that resolve to those same epistemes without changing their kinds. Changing any of these values changescontentand therefore the promise-content identity.promisedOutcomeSpecRefresolves to the A.7OutcomeSpecepisteme. It is neither aU.Workoccurrence, an affected or delivered entity, an actual operation-result binding, nor a verdict episteme.effectiveReferenceSchememakes the claim graph and its references interpretable.providerRoleandconsumerRoleare role values; actual providers and consumers enter through namedU.RoleAssignmentoccurrences.claimScopestates the operating conditions, populations, locales, or other slices over which the promise claims hold.accessSpecdescribes the access method enacted when a holder system under an eligible consumerU.RoleAssignmentrequests access; an access-point system remains separate.acceptanceSpecstates the acceptance criteria, identifies the evaluation method through itsU.MethodDescription, and states evidence-admissibility conditions for supported assertions; actual evidence relations remain separate.unitOfDeliverystates how accepted delivery work is counted when counting is current.modelUseStructureRefis present only when an independently selectedBoundedModelUseStructurechanges interpretation for the currentPromiseContentUseoccurrence.- An internal delivery method remains
U.Method. An already identified episteme is aU.MethodDescriptiononly when its exactEntityOfConcernresolves to that Method and at least one claim says how that Method is done. A promise-content or acceptance claim may cite that episteme for one named use; Method-selection work, performed work, andPromiseContentUseremain separately governed.
Promised outcome spec (disambiguation: work vs post-work result)
promisedOutcomeSpecRef points to an A.7 OutcomeSpec episteme that makes explicit what is promised in kind form and specification form without collapsing it into either:
- the promise content clause itself (
U.PromiseContent), - the delivery work that happens at run‑time (
U.Work), or - the post-work state or affected referent after the work.
This is a controlled semantic precision restoration for the everyday metonymy "outcome" or "service outcome", which different communities use to mean (i) the work performed, (ii) the achieved result, or (iii) both.
Terminology bridge (informative). In loose contract talk people say promiseOutcomeSpec (the description of what will be delivered) and promiseOutcome (what was actually delivered). Those lexical forms are metonymic: sometimes they mean “the work performed”, sometimes “the post‑work result”, and sometimes the pair.
In FPF:
-
promiseOutcomeSpec -> A.7
OutcomeSpec, referenced viapromisedOutcomeSpecRef. -
promiseOutcome -> an extensional delivered outcome instance. It does not have one kernel kind; it is the run-time reality that satisfies the outcome specification, interpreted according to
OutcomeSpec.mode:WorkOnly→ the set of deliveryU.Workepisode(s) that satisfyworkSpec(and, if present, the promisedmethodConstraintRef).ResultOnly→ the post‑work state of the described referent(s) on the declaredstatePlaneRefthat satisfiesresultSpec.postConditionRef(regardless of how it was achieved).Composite→ the pair: (delivery Work episode(s), post‑work state).
FPF identifies the extensional delivered outcome by citing the relevant
U.Workoccurrences, exact affected or delivered entities, applicable actual-change and delivery relations, and the selected Delta expression for affected referents together with their pre-work and post-work states on the declared state plane (A.15.1:4.2 item 10). Evidence epistemes derived from telemetry may enter A.10 evidence relations supporting claims about those facts and states and about later evaluation-result epistemes; neither an evidence episteme nor theU.PresentationCarrierfilling the carrier position of itsisCarriedByrelation is the delivered outcome.
When bundling, invoicing, or dispute handling needs a downstream claim to identify the delivered instance, that claim's episteme separately references the delivery-work occurrences, affected entities, post-work states, evidence epistemes, and A.10 evidence-relation occurrences under their direct governing patterns. It does not create a local OutcomeInstance kind, collapse the delivered reality into OutcomeSpec, or let an invoice, dispute record, other record form, or U.PresentationCarrier become either the episteme or the delivered instance.
A conforming OutcomeSpec uses this explicit-RefKind reading of the specification-use shape in A.7:5.10.2:
workSpeccorresponds to the work-as-promised facet: it states the consumer-facing kind of work (optionally constraining method) and the work predicate (e.g., duration, method ban, safety limit).resultSpeccorresponds to the result-as-promised facet:entityOfConcernRefidentifies the affected entity,statePlaneRefidentifies the state plane when current, andpostConditionRefidentifies the required post-work state predicate.- Counting is not part of
OutcomeSpec. Counting lives inU.PromiseContent.unitOfDeliveryas thecountingRulemini-schema (A.7:5.10.3). Outcome specifications say what counts as delivery; unit-of-delivery specifications say how much to count and how to avoid double counting.
Examples (informative):
- “Work 5 minutes” →
mode=WorkOnly;workPredicateRefstates duration ≥ 5 min;methodConstraintRefmay be omitted. - “Dig a hole” →
mode=ResultOnly;postConditionRefdescribes the hole’s target state; method choice remains provider‑autonomous. - “Hairstyle in ≤ 20 min, must be haircut+styling (not a wig)” →
mode=Composite;workSpecexpresses time + method constraint;resultSpecexpresses the target hairstyle state.
Naming note (normative).
The head noun outcome is intentionally broad. Do not replace it with result when referring to the combined work-and-result specification. If a passage means the affected entity, name that entity and link it to resultSpec.entityOfConcernRef. If it means the required post-work state, name the state predicate and link it to resultSpec.postConditionRef. If it means the promised work occurrences, say work as promised and link them to workSpec.
Recommended acceptanceSpec mini‑schema (informative, non‑kernel)
Projects may express acceptanceSpec with the following small schema when downstream evaluation work requires replayable criteria and verdict semantics:
targetOutcomeSpecRefmakes explicit which promised outcome is being judged; if omitted, it is the containing promise content’spromisedOutcomeSpecRef.criterionRefsresolve to evaluation-criterion epistemes. Their predicates are evaluated over the same selected work facts and post-work state references used for the targetedOutcomeSpec; direct evidence relations separately support assertions about those facts and states.evaluationMethodDescriptionRefresolves to theU.MethodDescriptionfor the method enacted by evaluation work. The description does not perform the evaluation.verdictScaleDescriptionRefresolves to one scale-description episteme governed by the characteristic and scale patterns. That description states the admitted verdict values and how non-delivery is represented. Informative examples include Booleanpass/fail, trichotomypass/partial/fail, or named graded values, with non-delivery represented asfail,N/A, orInconclusive; these values are examples, not defaults.GammaTimePolicyRefkeeps temporal selection explicit and non-retroactive (F.10 and F.12): it resolves to the policy stating whether judgement is per work occurrence, reporting window, or another named temporal selection. Population and locale remain inU.ClaimScope; they are not temporal-policy values.
This mini-schema is a recommendation only: it does not admit another U-kind. An acceptance-specification episteme may contain these declared schema fields by value or refer to their values through the declared RefKinds. The resulting episteme remains inspectable and bridge-ready without turning its publication form into identity.
What U.PromiseContent is not
- Not a provider: use a named provider
U.RoleAssignmentoccurrence whose holder is the providerU.System. - Not a deontic commitment: that is
U.Commitment(A.2.8) whosereferentsinclude the promise content when that accountable relation is current. - Not an access point: addressable "services", servers, desks, or endpoints are
U.System(see A.6.8: service access point and service delivery system). - Not a method or method description: the semantic way of doing is
U.Method; a recipe or other episteme describing that way isU.MethodDescription. - Not delivery work or its description: performed delivery is
U.Work; a ticket, case description, or incident description is a separately governed episteme about planned or performed work. - Not a schedule: that is
U.WorkPlan. - Not a capability: capability is the provider system's admitted ability to perform a declared work family and meet any declared result-class predicate within its
U.WorkScope, measure set, qualification window, and currentness condition. Delivery under a promise may depend on one or more capability instances, but the promise-content episteme is not a capability. - Not its scope or use interval:
U.ClaimScopestates where the promise claims hold,U.WorkScopestates where a provider capability can deliver work, andPromiseUseIntervalSlotstates when onePromiseContentUseoccurrence obtains. These are three different values.
Promise content, delivery work, and evaluation work
-
Before delivery work: The promise-content episteme declares its effective
U.ReferenceScheme, namedU.ClaimScope, promised outcome specification, access specification when current, and acceptance specification. The provider system's ability remains a holder-dependentU.Capabilityinstance under A.2.2. A capability-fit predicate tests that instance against the thresholds selected for the planned delivery work, including any threshold stated by the chosen method description. Method-selection work may yield a C.11ChoiceResult;enactsMethodobtains between the later delivery-work occurrence and the selectedU.Method. A relied-on episteme is aU.MethodDescriptiononly when it meets A.3.2 membership, and the promise-content or acceptance claim may cite it for the named use. That citation establishes neither Method selection, laterenactsMethod,PromiseContentUse, evidence, nor acceptance. -
Run‑time: The admitted holder system
S = consumerRA.HolderSystemSlotof the named consumerU.RoleAssignmentperforms request or visitU.Workunder that assignment. When the attribution is stated explicitly, useperformedUnderAssignment(requestWork, consumerRA). The admitted holder systemS = providerRA.HolderSystemSlotof the named providerU.RoleAssignmentperforms deliveryU.Workunder that assignment. When the attribution is stated explicitly, useperformedUnderAssignment(deliveryWork, providerRA). A system performing evaluation work enacts the evaluation method described byacceptanceSpec; the actual evaluation-operation application carries its exact argument bindings and evaluation-result value. When another use needs a durable verdict episteme, C.2.1 governs that episteme and A.15.PROD governs any current entity-identity-inception claim. The counting rule stated byunitOfDeliverymaps admitted fulfilment occurrences to unit counts. The verdict episteme may assert whether a named service-level objective or another acceptance criterion was satisfied during the declared window. When a separately obtainingU.Commitmenthas the sameU.PromiseContentin its referents position, the supported assertion concerns fulfilment of content that is also a referent of the obligation. Neither the operation-result binding, verdict episteme, nor commitment is a property of the promise-content episteme.In each
performedUnderAssignment(W, RA)occurrence,WorkOccurrenceSlotis filled byWandRoleAssignmentSlotby the named A.2.1 assignment occurrenceRA; the admitted holder systemS = RA.HolderSystemSlotis the actual performer. The assignment does not act, and no provider-assignment or consumer-assignment pseudo-kind is introduced.
Memory hook: Promise content states what is promised. A method constrains possible work. A system performs work. Evaluation binds a result value. A verdict episteme states the judgment. Evidence supports that assertion.
Didactic card: Relations around one service-delivery evaluation
Didactic (non-normative). This representation keeps each promise-content episteme, access-description episteme, work occurrence, and direct relation in one delivery evaluation visible without prescribing an order of work. Promise content and an access description remain epistemes; commitment and role assignment remain relations; delivery and evaluation remain work occurrences; evidence remains in its A.10 relations. When order matters, describe semantic method order in
U.MethodDescription, intended dated order inU.WorkPlan, and transformation dependencies in the governingTransformationFlowStructure.
U.PromiseContentstates the promise. An A.2.8U.Commitmentrelation may refer to that content; its accountable-subject position is filled by the accountable subject. In a providerU.RoleAssignment, the holder-system and role-value positions are filled by the provider system and provider role. DeliveryU.Workoccurs. Evidence relations support claims about selected delivery-work facts and post-work states. A system performing evaluation work enacts the evaluation method; the actual operation application carries its result binding, while any verdict episteme is separately governed by C.2.1 and any current identity-inception claim by A.15.PROD.This informative diagram is a publication-side representation, not new ontology. It prevents two category errors: treating
U.PromiseContentas the addressable access system, and treating a publication-side list or diagram of service senses as a relation occurrence that replaces the direct relations shown here.
Reading guide (one breath).
- The promise content is the consumer-facing outcome and acceptance statement.
- In the A.2.8 commitment relation, the accountable-subject position is filled directly and the referents position contains the promise-content clause.
- The provider role assignment identifies the holder system, provider role, role-taxonomy episteme, effective reference scheme, and assignment window. The holder system acts under that assignment.
- A.6.8 recovers the selected facet denoted by "service" wording. It adds no service-situation participant: provider assignment, access description, access-point system, delivery system, delivery method, promise content, and work occurrence retain their direct kinds and governing patterns; A.10 separately governs the evidence relations.
- Delivery work is what happened. Evidence relations support claims about selected facts concerning that occurrence and any post-work state expressed by its selected effect Delta. A system performing evaluation work enacts the declared evaluation method over those facts and states; the actual evaluation operation has its own result binding, and a separately constituted evaluation-result episteme may carry the verdict assertion.
Litmus rule (addressability).
If the current claim is about invocation, connection, visitation, restart, or scaling, its EntityOfConcern is an actual U.System, not the promised-outcome statement. Use a service access point when the interaction boundary is current and a service delivery system when the realization system is current.
Archetypal grounding (engineer‑manager friendly)
Key takeaway. The same pattern yields one promise-content episteme in each domain without treating the promise as the provider, access point, method, work occurrence, evidence, operation-result binding, or verdict episteme. Direct role-assignment, PromiseContentUse, evaluation-operation, evidence, acceptance, and publication relations retain their own participants and governors; evaluation remains separately performed U.Work.
Bias-Annotation
A.2.3 repairs the collapse of several service-related referents into one service label. A visible service name often denotes provider, access point, method, work, commitment, ticket, evidence, and promised outcome without saying which claim is current. The pattern recovers the promise-content episteme first; A.2.8 then governs commitment, A.2.1 provider participation, A.3.2 access description, A.15.1 delivery work, A.10 evidence claims, and the direct outcome and acceptance patterns their respective relations.
In a contract or SLA agreement, an A.2.8 U.Commitment may have promise content in its referents position. A contract document, SLA publication, service catalog, API page, or offer publication may be a U.PresentationCarrier for U.EpistemePublication values describing the agreement, promise content, commitment, or fulfilment work. These relations, epistemes, and carriers retain separate identities.
Mapping the common “service” picture to FPF (didactic bridge)
A common service diagram is a representation. Recover the represented systems, epistemes, work occurrences, and relation occurrences as follows:
- Provider participation -> one named
U.RoleAssignmentoccurrence with holder system, provider role value, role-taxonomy episteme, effective reference scheme, and assignment window. The admitted holder system performs each selected delivery-work occurrence under that assignment; when stated as a direct relation, useperformedUnderAssignment(deliveryWork, providerRA). - Acceptance criterion -> an evaluation-criterion episteme in
U.PromiseContent.acceptanceSpec; its target values, verdict scale, andGammaTimePolicyRefremain explicit. AU.WorkPlanis added only when planned delivery or evaluation work is current. - SLA obligation -> an A.2.8
U.Commitmentoccurrence whose referents position is filled by the relevantU.PromiseContent. Use A.6.C when one SLA publication combines wording about commitment, promise content, evidence specification, and publication relations and must be unpacked through its Contract Bundle lens. - Published SLA terms -> the
U.EpistemePublicationfor the promise content, together with itsisCarriedByrelation to aU.PresentationCarrier. When publication work also communicates or institutes a commitment, add the named A.2.9 speech-act and A.2.8 commitment relation occurrences; publication alone neither creates the commitment nor establishes fulfilment. - Operating conditions -> the named
U.ClaimScopeunder A.2.6. The acceptance specification may cite that scope; it does not replace it. - Promised subject -> resolve
promisedOutcomeSpecRef, then use the resultingOutcomeSpec.resultSpec.entityOfConcernReftogether with the exact affected referent, post-work state, and any direct delivery or acceptance relation current for the claim. - Customer material—“ours versus theirs.” -> If the current claim depends on who owns or has custody of data, an asset, or a case, name the exact governed role assignment or ownership/custody relation and its actual participants. Do not make ownership or custody a kernel-global property of
U.PromiseContent. - Access ->
accessSpec : U.MethodDescriptiondescribes the method enacted when an eligible consumer holder system requests access. Actual endpoints, desks, and manifolds remain access-pointU.Systemvalues. - One
PromiseContentUseoccurrence -> consumer request work and provider delivery work remain separate occurrences, each attributed through its ownperformedUnderAssignment(W, RA)relation to a named assignment whose holder system actually performs the work. When request work followsaccessSpec, its A.15.1methodDescriptionRefresolves to that sameU.MethodDescription; following the description does not by itself introduce a second relation occurrence.PromiseContentUseobtains between selected delivery work and the selected promise-content edition duringPromiseUseIntervalSlot. - Consumer-side changed entity or relation -> recover the exact affected-referent and actual-transformation facts, plus any local entity-identity-inception, delivery, acceptance, or receiving-use claim that the current promise evaluation needs. If the changed entity is a holder system and its post-work state calls for a new or revised
U.Capabilityinstance, use A.2.2 for that capability instance and its currentness relations. - Service-enabled consumer-side capability or activity -> If the question is about ability, identify the consumer holder's
U.Capabilityinstance and state its A.2.2 qualification and currentness claim. If the question is about activity, identify the consumer-side datedU.Workunder A.15.1. If the claim also says that delivery changed the consumer or was used by that Work, state only the exact actual-change or receiving-use relation that currently obtains; otherwise keep the objects separate. Do not create another U-kind or a generic capability-use relation. When a domain claim concerns catalog entries, exposure relations, charging relations, or entitlement relations, govern those entries, participants, and relations directly. Relate them toU.PromiseContentonly through named relations; do not treat them as components ofU.PromiseContentor replace their direct relations with a locally minted context relation.
Conformance Checklist (normative)
CC‑A2.3‑0 (Prose head phrase).
In normative prose, an instance of U.PromiseContent SHALL be referred to as a promise content (or service offering clause or service promise clause) and SHALL NOT be referenced by the bare head noun service. Unqualified service usage (and the co-moving cluster service provider or server) SHALL be unpacked per A.6.8 (RPR-SERV).
CC‑A2.3‑1 (Type).
U.PromiseContent IS a consumer-facing promise-content U.Episteme. One or more U.EpistemePublication values may be related to U.PresentationCarrier values through isCarriedBy without changing the promise-content episteme identity; no presentation carrier is the promise content. U.PromiseContent is not a U.System, U.Method, U.MethodDescription, U.Work, or U.WorkPlan.
CC-A2.3-2 (Semantic locality).
Every promise content names its effective U.ReferenceScheme, promisedOutcomeSpecRef, and U.ClaimScope when claim extent matters. Cross-scheme or cross-scope reuse uses the identified F.9 bridge occurrence and A.2.6 scope relations. modelUseStructureRef appears only when an independently selected BoundedModelUseStructure changes interpretation.
CC-A2.3-3 (Role values stay distinct from holders and assignments).
providerRole and, when present, consumerRole are U.Role values interpreted through a named role-taxonomy episteme and effective reference scheme. Actual provider and consumer systems enter through named U.RoleAssignment occurrences; a role label alone does not identify a performer.
CC-A2.3-4 (Acceptance).
acceptanceSpec MUST be present and MUST define how delivered U.Work is judged as pass, fail, or a declared grade against named evaluation criteria and target values. Any SLA deontics are represented through U.Commitment. The promise content MUST declare Claim scope (G) where operating conditions, populations, locales, or another claim extent matter. Every verdict cites an explicit Gamma_time window.
If the acceptance criteria mention measurable characteristics such as availability, latency, accuracy, cost, or safety, each characteristic MUST be introduced through C.16 and C.25 with its scale, unit when applicable, U.DHCMethod measurement template, and direct evidence relation. If the reading depends on a particular way of measuring, cite the U.MethodDescription that describes that measurement method. The characteristic is referenced by its exact identifier rather than by an unqualified KPI label.
CC‑A2.3‑5 (Access).
When the promised use relies on a request-facing access method, accessSpec MUST identify the A.3.2-admitted U.MethodDescription that describes that method. The endpoint, desk, manifold, or other access point remains a separate U.System. If no access-method description is current because access is ambient, accessSpec may be omitted. In either branch, keep an eligibility predicate in the promise content when eligibility is part of the promise; when eligibility depends on a separately obtaining admission relation, refer to that relation under its direct governing pattern.
CC‑A2.3‑6 (Unit of delivery + counting rule).
When fulfilment work is counted, declare unitOfDelivery (for example, one request, kWh, or case). The resulting count may fill a declared quantity position in a separately governed charging relation; that charging relation does not determine the unit-of-delivery specification.
When declared, unitOfDelivery MUST include a countingRule that maps accepted delivery work episodes (W✓) to unit counts (A.7:5.10). If omitted, the default is “1 unit per accepted delivery work episode”.
CC‑A2.3‑7 (No actuals on Promise Content).
Resource and time actuals belong to the performed U.Work occurrence under A.15.1. An incident-log episteme may describe that occurrence and may separately participate in an evidence relation for a stated claim; neither the log nor its participation in that evidence relation fills a U.PromiseContent slot.
CC-A2.3-8 (Provider capability stays separate).
When delivery depends on provider ability, use the A.2.2 U.Capability instance for the provider holder system and the separate capability-fit predicate for the planned delivery work. Do not insert capability into promise-content identity or infer capability or fit from the role name.
CC-A2.3-9 (Edition and promise-use interval).
A change to content, promisedOutcomeSpecRef, or effectiveReferenceScheme creates a new promise-content episteme edition under the C.2.1 identity rule. Each PromiseContentUse occurrence has one promise-content edition and one delivery-work occurrence as participants and PromiseUseIntervalSlot as its temporal qualifier; an untyped version or timespan entry fills none of those positions.
CC‑A2.3‑10 (Lexical rule). Unqualified head-noun uses of service (and the co-moving cluster service provider or server) in normative prose MUST be disambiguated per A.6.8 (RPR-SERV) and its lexical trigger L-SERV (E.10).
CC‑A2.3‑11 (No mereology). Do not place a promise content clause in PBS or SBS, or treat it as a part or component. Structural assemblies live in PBS and SBS; the promise clause is an episteme (A.2.3) and "service" talk must be facet-unpacked (A.6.8).
CC-A2.3-12 (Plan, work, and evidence stay distinct).
Windows and calendars belong to U.WorkPlan (A.15.2). Performed delivery belongs to U.Work (A.15.1). Evidence epistemes and evidence relations support claims about selected facts concerning that work and any post-work state expressed by its selected effect Delta; they are not slots or parts of the work occurrence.
CC-A2.3-13 (Claim scope, work scope, and promise-use interval).
The promise-content episteme names U.ClaimScope when its claims are bounded. A provider capability instance names U.WorkScope. PromiseUseIntervalSlot is the temporal qualifier of each PromiseContentUse occurrence. The ScopeCoverage predicate is satisfied only when the selected context slice is covered under an explicit Gamma_time selector; neither temporal extent nor capability scope replaces claim scope.
CC-A2.3-14 (Scheme and scope bridges).
Cross-scheme or cross-scope reuse names the identified F.9 bridge occurrence, direction, loss, and congruence level. A bridge may support a narrower mapped U.ClaimScope; it does not mutate the original promise content or create a universal context.
CC-A2.3-15 (OutcomeSpec typing).
promisedOutcomeSpecRef MUST be a U.EpistemeRef resolving to an A.7 OutcomeSpec specification-use episteme. It MUST NOT point at a concrete U.Work occurrence, affected or delivered entity, actual operation-result binding, verdict episteme, or downstream effect, and OutcomeSpec MUST NOT be written as an independently admitted U.OutcomeSpec.
CC-A2.3-16 (OutcomeSpec is explicit and mode‑complete).
promisedOutcomeSpecRef MUST be present and MUST reference an OutcomeSpec that declares mode in {WorkOnly, ResultOnly, Composite} and satisfies A.7:5.10 mode completeness:
WorkOnly→workSpecpresent,resultSpecabsentResultOnly→resultSpecpresent,workSpecabsentComposite→ bothworkSpecandresultSpecpresent
CC-A2.3-17 (OutcomeSpec predicates and delivery-work relations).
For any delivery U.Work occurrence named by PromiseContentUse, let OS be the A.7 OutcomeSpec resolved from SC.promisedOutcomeSpecRef.
- If
OS.workSpecis present, the selected facts about the work occurrence satisfyOS.workSpec.workPredicateRef; whenmethodConstraintRefis present, the enacted method is compatible with that constraint. - If
OS.resultSpecis present, the exact affected referent and post-work state expressed by the selected effect Delta satisfyOS.resultSpec.postConditionRefon its declared state plane; any production, delivery, acceptance, or receiving-use claim remains separately governed. - A.10 evidence relations obtain between each relied-on satisfaction assertion and its supporting evidence epistemes. Those evidence epistemes are neither delivery-work occurrences, affected or delivered entities, operation-result bindings, verdict epistemes, nor values of
OutcomeSpec.workSpecorOutcomeSpec.resultSpec.
Explicitly individuate PromisedOutcomeDeliveryRelation only when a downstream relation or claim must refer to its occurrence identity and only after these mode-specific conditions are established; otherwise retain the readable deliversPromisedOutcome(W, OS) assertion.
CC-A2.3-18 (Acceptance evaluation supports rather than constitutes fulfilment).
A holder system performs evaluation work by the evaluation method described in acceptanceSpec over the same selected work facts and post-work states used to test delivery under SC.promisedOutcomeSpecRef. The actual evaluation-operation application carries its exact argument and result bindings. When a durable verdict episteme is needed, C.2.1 governs its identity and A.15.PROD governs any current entity-identity-inception claim. That episteme may assert an admitted fulfilment verdict only when the selected work facts and post-work state satisfy the acceptance criteria. A.10 evidence relations support the relied-on assertions; the operation-result binding, verdict episteme, and evidence relations support knowledge of PromiseContentFulfilmentRelation but do not make it obtain. A multi-grade verdict-scale description states how non-delivery is represented.
CC-A2.3-19 (OutcomeSpec ↔ unitOfDelivery coherence).
If unitOfDelivery is present, its counting rule states a selectorRef that selects only work occurrences eligible to satisfy SC.promisedOutcomeSpecRef in the declared mode. When one occurrence can fulfil several promise contents, the rule states either dedupeKeyRef or a reference to a counting-policy episteme under its direct governing pattern. A selector may denote work occurrences filling FulfilmentWorkOccurrenceSlot in obtaining PromiseContentFulfilmentRelation occurrences; it does not count work for which fulfilment has not been established.
CC-A2.3-20 (Unit-of-delivery is computable from work facts).
If unitOfDelivery is present, it MUST declare its counting rule over selected facts about fulfilment work, cite the U.DHCMethod used for any measurement reading, name the U.MethodDescription when a particular measurement method constrains that reading, state evidence-admissibility conditions, and refer to the evidence epistemes and A.10 evidence relations used, per A.7:5.10.3. The default "1 unit per fulfilment work occurrence" is permitted only for a pure count of fulfilment occurrences.
Promise-content use, delivery, evaluation, and evidence
Keep PromiseContentUse, PromisedOutcomeDeliveryRelation, evaluation U.Work, the actual evaluation-operation application and result binding, any verdict episteme, and A.10 evidence relations separate. A direct relation may obtain even when the current episteme about it is unresolved; evidence supports the claim and does not become the relation.
Core relations
PromiseContentUse : U.Relation. This direct use relation obtains between one delivery-work occurrence and one promise-content edition during one named promise-use interval; it makes no fulfilment claim.
Its occurrence key is <DeliveryWorkOccurrenceSlot, PromiseContentSlot, PromiseUseIntervalSlot>. Obtaining of this relation implies neither successful delivery nor intention, judgement, or claim-making by either participant.
PromisedOutcomeDeliveryRelation : U.Relation. This derived relation obtains between one delivery-work occurrence and the A.7 OutcomeSpec resolved from the PromiseContentUse occurrence in which that work participates, when the conditions below hold.
The relation obtains only when one PromiseContentUse occurrence has the delivery work and a promise-content edition as participants, that edition's promisedOutcomeSpecRef resolves to the same OutcomeSpec, and the specification's mode-specific conditions hold. When workSpec is present, selected work facts satisfy workSpec.workPredicateRef. When resultSpec is present, the exact affected referent and post-work state expressed by the selected effect Delta satisfy resultSpec.postConditionRef; any current production, delivery, or acceptance relation remains separately governed. Its occurrence key is <DeliveryWorkOccurrenceSlot, PromisedOutcomeSpecificationSlot>. The readable predicate is deliversPromisedOutcome(W, OS), where OS denotes that resolved OutcomeSpec. An episteme may assert that this relation obtains, and evidence may support that assertion; neither the assertion nor the evidence makes the work facts or post-work state satisfy the specification.
Acceptance evaluation result. A holder system performs evaluation U.Work by the evaluation method described in acceptanceSpec, using the same selected facts about delivery work and post-work states. The actual evaluation-operation application carries exact argument bindings and the verdict value in its declared result binding. When another use needs a durable evaluation-result episteme, C.2.1 governs that episteme, and A.15.PROD governs any current identity-inception claim linking exact work, actual change, and episteme identity. A.10 evidence relations support the relied-on assertions. The promise content does not perform the evaluation or compute the verdict; the operation-result binding, result episteme, and evidence relations support the assertion rather than making the fulfilment relation obtain.
PromiseContentFulfilmentRelation : U.Relation. This derived relation obtains between one delivery-work occurrence and one promise-content edition when the conditions below hold.
The semantic predicate for this relation is satisfied only when PromiseContentUse obtains for the same work and promise-content participants, PromisedOutcomeDeliveryRelation obtains for that work and the OutcomeSpec resolved from that promise content, and the acceptance predicate declared by acceptanceSpec is satisfied for the exact delivery-work facts, affected or delivered entities, post-work state, and any direct delivery or acceptance relation required by the criterion. PromiseContentFulfilmentRelation obtains for the declared participants when that semantic predicate is satisfied. Its occurrence key is <FulfilmentWorkOccurrenceSlot, FulfilledPromiseContentSlot>. The readable predicate is fulfilsPromiseContent(W, SC). A later evaluation may change the supported assertion about whether the relation obtains; it does not change relation identity. When satisfaction of any required predicate is unresolved, no positive fulfilment assertion is available for reliance.
The explicit RelationSignature declarations are warranted only when unitOfDelivery selectors or fulfilment measures refer to relation-occurrence identity. Ordinary prose may stop at the readable predicates when no later relation refers to that occurrence identity.
Invariant:
fulfilsPromiseContent(W, SC)impliesPromiseContentUse(W, SC, T),deliversPromisedOutcome(W, resolve(SC.promisedOutcomeSpecRef)), and satisfaction of the acceptance criteria declared inSC.acceptanceSpec; an evaluation-result episteme and A.10 evidence relations support the corresponding assertion without becoming relation participants. Invariant: One work occurrence can fulfil several promise contents only when each promise content's counting rule statesdedupeKeyRefor refers to a counting-policy episteme under its direct governing pattern; no silent double counting.
Promise-content delivery measures
Let W(SC, T) be the set of delivery-work occurrences for which PromiseContentUse obtains with SC during interval T. Let W✓(SC, T) be the subset for which PromiseContentFulfilmentRelation obtains with SC.
- Delivered units:
delivered(SC, T)is computed from the setW✓(SC, T)usingunitOfDelivery’s countingRule (A.7:5.10). Default (whenunitOfDeliveryis absent):delivered(SC, T) = |W✓(SC, T)|(one unit per accepted delivery work). - Rejection rate:
rejectRate(SC, T) = 1 − |W✓(SC,T)| / |W(SC,T)|(declare handling ofpartial). - Lead time: declare the characteristic definition and aggregation separately. The definition may use work duration or request-to-completion delta; the aggregation may use an average or named percentile.
- Availability and uptime claims: select one declared characteristic instead of treating the labels as synonyms. Derive its observed characteristic value from selected work facts and telemetry observations through its C.16 measurement template,
Gamma_timepolicy, and evidence relations; cite aU.MethodDescriptionwhen a particular measurement method affects the reading. - Cost‑to‑serve: sum of
Γ_workoverW✓per resource category (A.15.1).
Each resulting U.Measure claim is derived from selected facts about U.Work occurrences through its C.16 measurement template and named A.10 evidence relations; when a particular measurement method matters, its U.MethodDescription is cited. The promise-content episteme is never the bearer of resource or time actuals.
Aggregation across time uses the Gamma_time policy referenced by the named C.16 measurement template or acceptance specification; an unqualified KPI label does not select that policy. When a measure needs a B.1.4 temporal-phase aggregation of one carrier, name one ContextTemporalAggregation@Context record and its exact selected policy—for example, union of observed values or their convex hull—together with carrier identity, time window, coverage and non-overlap conditions, and admissible use. If those one-carrier conditions do not hold, return to the direct aggregation owner instead of using this example. Union and convex hull are policy choices, not defaults; Gamma_time does not select either by itself.
Common misclassification repairs
- A microservice label is being used for the whole service claim. Ground the current referent. The deployed software is normally a delivery-system or access-point
U.System; the consumer-facing outcome and acceptance claims remain inU.PromiseContent. - An API label is being used for the whole service claim. When the referent is the interface specification, use
U.MethodDescription; when it is the addressable endpoint, useU.System. Neither referent is the promise-content episteme. - A process or procedure label is being used for the whole service claim. Recover the semantic way of doing as
U.Method, its description asU.MethodDescription, planned work asU.WorkPlan, and performed occurrences asU.Work. Keep the promised outcome and acceptance claims inU.PromiseContent. - A ticket or case record is being used for the whole service claim. Recover its claim-bearing content as a ticket or case-description
U.Episteme; keep the publication form andU.PresentationCarrierseparate. Relate that episteme to the namedU.WorkPlanorU.Workoccurrence it describes. - Cost or elapsed time is attached to the promise content. Keep resource and time actuals on the performed
U.Workoccurrence. Derive a measure over work occurrences participating inPromiseContentUseonly through its declared characteristic, C.16 measurement template, named A.10 evidence relations, aggregation rule, andGamma_timepolicy; cite aU.MethodDescriptionwhen a particular measurement method affects the reading. - Promise content is placed in a product or system breakdown. Keep the promise content as an episteme. The access and delivery systems may have parts and selected structures under A.22 and C.30; the promise-content episteme is not one of those parts.
- A person or organization name is stored as the provider role. State the
U.Rolevalue and role-taxonomy scheme in the promise content, then use a namedU.RoleAssignmentoccurrence for the provider holder system and assignment window.
Existing promise-description repair applications
- Name the promises. As an informative first pass, list roughly 5–15 consumer-facing promises used by the project; the range is a prompt, not an admission threshold. Represent each as
U.PromiseContentwith effective reference scheme, promised outcome specification, acceptance specification, and claim scope, plus access specification and unit of delivery when current. - Separate provider from promise content. Keep people, organizations, machines, and software delivery systems as admitted
U.Systemvalues; connect the provider holder through a named A.2.1 role-assignment occurrence. - Relate promise content to delivery and evidence. Add
PromiseContentUsefor every delivery-work occurrence evaluated under the promise. EstablishPromisedOutcomeDeliveryRelationonly after exact work facts, affected or delivered entities, post-work states, and any direct delivery relation required by the resolvedOutcomeSpecsatisfy it; establishPromiseContentFulfilmentRelationonly after those facts and states satisfy the declared acceptance criteria. Record the actual evaluation-operation result binding, any evaluation-result episteme, the evidence epistemes it cites, and the A.10 evidence relations separately. - Define evaluation characteristics. As an informative first pass, select roughly 2–4 characteristics for each promise content; the range is a prompt, not a conformance limit. Use a recognizable §8.2 formula family—availability over a named window, lead time as a declared delta plus aggregation, rejection rate
1 − |W✓| / |W|, or cost-to-serve as summed Work resource use—or state an exact declared alternative. For each characteristic, name its scale, unit when applicable, C.16 measurement template,Gamma_timepolicy, direct evidence relations, and exact formula; cite aU.MethodDescriptionwhen a particular measurement method affects the reading. Do not let a KPI label stand in for this declaration. - Bridge domain schemes. If a domain ontology already distinguishes business, technical, or internal service kinds and relations, retain its own reference scheme and name the F.9 bridge occurrence used for each selected domain referent and its FPF counterpart.
- Tidy language. Apply A.6.8 (RPR-SERV) and L-SERV. When "service" denotes a provider or access-point
U.System, an accessU.MethodDescription, plannedU.WorkPlan, performedU.Work, or a ticket or case-description episteme, use that full kind name and reserveU.PromiseContentfor the consumer-facing promise content.
Consequences
Rationale
Everyday "service" language is useful because one label can denote promise content, provider systems, access points, commitments, methods, work occurrences, and evidence epistemes. When those claims guide evaluation or work, FPF distinguishes the referents and states their direct relations. U.PromiseContent gives the promised-outcome side one stable episteme, A.6.8 recovers the referent intended by the service wording, and each named direct relation remains governed by its direct pattern.
The pattern keeps promise content in the episteme family because it is a clause or description whose outcome and acceptance predicates state conditions on delivery work, affected referents, and post-work states. A fulfilment assertion and the evidence relations supporting it remain distinct from those referents and from the world-side relations whose obtaining the assertion describes. The episteme never becomes an obligation: the referents position of an A.2.8 commitment relation may contain it, an A.2.9 speech-act occurrence may communicate or institute that commitment, and A.6.C may unpack contract or SLA wording carried by a publication, while gate and policy relations remain separate.
SoTA-Echoing
Service-management, product, utility, platform, and public-service practice all distinguish offers, providers, access channels, service levels, work execution, and evidence of fulfilment, even when everyday language calls all of them "the service". A.2.3 keeps that practical distinction in FPF by giving the consumer-facing promise clause its own episteme value and by returning provider, access, commitment, work, and evidence claims to their governing patterns.
Contract and SLA practice distinguishes promised content from obligation-bearing acts or agreements and from later performance evidence. FPF keeps that separation without importing a domain-specific service taxonomy; the promise-content episteme remains usable across IT, utilities, healthcare, public services, manufacturing support, and other project domains.
Relations
- Builds on: C.2.1
U.Epistemeidentity and reference scheme; A.2U.Role; A.2.1U.RoleAssignment; A.2.2U.Capability; and A.2.6U.ClaimScopeandU.WorkScope. A.1.1 is used only when an independently selectedBoundedModelUseStructurechanges interpretation. - Coordinates with: A.3.1
U.Method; A.3.2U.MethodDescription; A.15.1U.Work; A.6.1 for actual operation application and result binding; A.15.PROD for current entity-identity-inception claims; A.15.2U.WorkPlan; direct affected-subject, delivery, acceptance, and evaluation patterns; A.10 for evidence relations; A.2.8 for commitment; A.2.9 for speech act; A.6.8 for service-wording restoration; F.9 for cross-scheme or cross-scope bridges; and A.7 plus the direct publication pattern when specification use or publication is current. - Constrained by lexical rules: E.10 L‑SERV (service disambiguation); also L‑FUNC, L‑PROC, L‑SCHED, L‑ACT.
- Informs: reporting and assurance patterns for measures over work occurrences participating in
PromiseContentUse, plus directly governed catalog entries, exposure relations, charging relations, and entitlement relations when those claims are current.
Didactic quick distinctions
- Promise content. A consumer-facing episteme stating the promised outcome, any eligibility predicate, effective reference scheme, claim scope, and acceptance specification; its optional
accessSpecdescribes the access method. - Method and method description.
U.Methodis the semantic way of doing.U.MethodDescriptionis an episteme describing that method; neither is delivery work. - Delivery work, affected subject, and effect Delta. A provider holder system performs
U.Work. Exact affected-referent, actual-change, production, delivery, or acceptance claims state what happened under their own governors; the selected effect Delta is a mathematical-lens expression over the affected referent and its pre-work and post-work states. - Evidence and evaluation. Evidence relations support delivery and satisfaction claims. A separately performed evaluation occurrence has an actual operation application with a declared result binding; any verdict episteme is separately constituted and governed.
- Provider and consumer participation.
U.Rolevalues denote participation positions; the role-taxonomy episteme describes their meanings, and the holder-system and assignment-window positions of namedU.RoleAssignmentoccurrences are filled explicitly. - Measures.
U.Measureclaims such as availability or lead-time readings derive from selected work facts through named characteristics, C.16 measurement templates, A.10 evidence relations, aggregation rules, and temporal policies; when a particular measurement method matters, itsU.MethodDescriptionis cited. - Structure boundary. Promise content is not a structural part. The systems that expose access or perform delivery retain their own parts, selected structures, and
ArchitectureOf@Contextrelations.
A.2.3:End
Episteme Evidence-Use and Status-Use Relations
Type: Boundary and relation-use pattern Status: Stable Normativity: Normative
Problem Frame
Use this pattern when a report, proof, dataset, measurement file, standard, requirement, dashboard cell, model card, publication face, generated explanation, or other U.Episteme is being used as evidence, source, status bearer, assurance input, or causal-use input for a claim.
Use it when the working question is:
- which episteme is being used;
- which claim, theory statement, status assertion, use, or causal-use question the episteme is being used for;
- which bounded context, claim scope, grounding holon, polarity, relevance window, assurance use, weight model, and provenance constraints are current;
- whether source wording such as "evidence role", "status role", "standard role", or "the report plays a role" hides an evidence-use, status-use, source-use, publication-use, assurance-use, gate-use, or causal-use relation;
- whether the evidence-use or status-use relation is sufficiently specified for the intended reliance, or only enough for orientation, source-finding, a reversible probe, or a narrowed use.
Primary EntityOfConcern. The EntityOfConcern is the evidence-use relation or status-use relation around an episteme. It is not U.Role, not U.RoleAssignment, and not a system performing work.
First useful move. Name the episteme, the bounded context, the claim or status being addressed, and the direct governing pattern that owns the use: usually A.10, B.3, C.2.1, C.28, F.10, G.6, E.17, E.10.D2, or a direct gate, source, requirement, definition, explanation, or publication-use pattern.
What goes wrong if missed. A document starts acting like an agent, a dataset is treated as if it held a work-facing role, a dashboard status becomes permission, a proof becomes global evidence without a theory fence, or a simulation-only counterfactual output is relabelled as realized causal evidence.
What this buys. The project can use epistemes as evidence, status bearers, sources, standards, requirements, definitions, explanations, publications, or assurance inputs without creating a second role ontology for epistemes and without losing claim scope, polarity, freshness, provenance, or assurance-use distinctions.
Not this pattern when. If the current claim is a system or acting holon holding a work-facing role, use A.2 and A.2.1. If the current claim is performed work, use A.15.1. If the current claim is the full evidence-provenance graph relation, use A.10. If the current claim is assurance, use B.3. If the current claim is causal use, use C.28. If the current claim is a status family or status mapping, use F.10. If the current claim is publication-use or source-use, use E.17 and E.10.D2 as needed.
Problem
Source text may name U.EvidenceRole or evidence-like role labels for a real need: an episteme can be used as evidence for a claim inside a bounded context, with scope, polarity, time, assurance use, weight, and provenance constraints. The FPF repair is to model that use as an evidence-use relation, not as a non-behavioral role held by the episteme through U.RoleAssignment.
That creates several failures:
- Episteme-as-holder drift. A paper, proof, dataset, standard, or dashboard cell is treated as if it held a work-facing role.
- Evidence role ontology drift.
ModelFitEvidenceRole,MeasurementEvidenceRole, orAxiomaticProofRolelook like role kinds instead of evidence-use relation classifications or local evidence-use labels. - Claim relation collapse. Target claim, grounding holon, claim scope, polarity, relevance window, assurance use, weight model, and provenance constraints are hidden behind one role name.
- Evidence and status collapse. A status badge, standard reference, approval-looking display, publication face, or requirement source is treated as evidence, status assertion, gate passage, permission, and assurance at once.
- Work confusion. The work that produced an episteme and the later use of that episteme as evidence are folded into one relation.
- Causal-use laundering. Observational association, intervention, realized counterfactual sample, identified counterfactual estimate, and simulation-only output are relabelled by evidence-wording instead of being governed by
C.28. - Cross-context leakage. Evidence accepted in one context is reused in another without an explicit bridge, source-currentness relation, or assurance-use statement.
Forces
Solution
Do not create or use U.EvidenceRole as a durable role kind. Do not place an episteme in U.RoleAssignment merely because it is used as evidence, source, standard, requirement, definition, explanation, publication, status bearer, or assurance input.
Use direct relation patterns instead:
Evidence-Use Relation Slots
An evidence-use relation is a relation around an episteme and a claim or effect. It is not a role assignment.
These SlotKinds are evidence-use relation positions. They are not work-role qualifier slots, not U.Role names, and not new U-kinds by themselves.
Status-Use Relation Slots
A status-use relation is a relation around a bearer, status value, scope, window, source, and use. It is not a status role held by an episteme.
These names do not create a generic status ontic. They are repair vocabulary for status-use relations in the current role and relation-slot settlement. Durable status families remain governed by F.10 or a direct status pattern.
Minimal Evidence-Use Statement
For ordinary use, write only the fields needed for the current reliance question:
UnsupportedOverread names the stronger claim not carried by this relation, such as approval, permission, gate passage, performed work, assurance, causal identification, release confidence, or global truth.
Minimal Status-Use Statement
For status-like cases, write the smallest relation that keeps status from becoming role assignment, gate passage, or assurance by display alone:
If the status is used for a gate, release, work-plan readiness, assurance, or admission decision, apply the direct governing pattern for that use. A.2.4 only keeps the status-use relation typed and prevents role-holder grammar from returning where an episteme-use relation is needed.
Formal, Empirical, and Causal Evidence Uses
Source labels such as AxiomaticProofRole, ObservationEvidenceRole, MeasurementEvidenceRole, ModelFitEvidenceRole, ReplicationEvidenceRole, CalibrationEvidenceRole, and BenchmarkEvidenceRole become evidence-use classifications or local evidence-use labels, not U.Role values.
Formal line:
- the evidence episteme is a proof, derivation, counterexample, theory note, proof-check result, or formal publication;
EvidenceTargetClaimSlotnames the theorem or theory statement;EvidenceClaimScopeSlotnames the theory domain or declared scope;EvidenceRelevanceWindowSlotusually names a theory-version fence rather than an empirical expiry date;EvidenceProvenanceConstraintSlotnames proof checks, source publications, theory version, and dependency conditions when current.
Empirical line:
- the evidence episteme is a dataset, observation record, measurement report, replication report, calibration result, benchmark result, model-fit report, or similar episteme;
EvidenceClaimScopeSlot,EvidenceRelevanceWindowSlot,EvidenceWeightModelSlot, andEvidenceProvenanceConstraintSlotusually decide whether the use is admissible;- the producing work remains
U.WorkunderA.15.1, performed by a system or acting holon underU.RoleAssignmentwhere that trace is current.
Causal-use line:
- the causal-use question belongs to
C.28; - A.2.4 keeps the evidence-use relation typed so the episteme is not relabelled by vocabulary alone;
- exact
C.28values such asobservationalAssociationSupportBasis,interventionalActionSupportBasis,realizedCounterfactualSampleSupportBasis,identifiedCounterfactualEstimateSupportBasis, andsimulationOnlyCounterfactualOutputBasisremainC.28values, not role names.
Work, Source, and Publication Boundary
The producing work and the later evidence use are different relations.
- A lab run, proof-checking session, calibration run, benchmark run, review, model evaluation, or data extraction can be
U.Work. - The report, proof file, dataset, benchmark table, or publication produced by that work can be a
U.Episteme. - A later project can use that episteme as evidence through an evidence-use relation.
- A publication face, view, source citation, credential view, dashboard display, or generated explanation can cue evidence or status use, but it does not become the evidence-use relation by itself.
When the source-currentness, publication-use, view, explanation, or specification-use question is current, use E.17, E.17.0, E.17.2, E.17.EFP, E.10.D2, A.10, or the direct source-use pattern before relying on the evidence-use or status-use relation.
Shortcut Cost and Reopen Condition
The baseline is the direct governing pattern: full A.10 for evidence-provenance graph relations, full B.3 for assurance, full C.28 for causal use, full F.10 for status families, full E.17 or E.10.D2 for publication-use and description-use cases, and full A.15.1 when the producing work is current.
A.2.4 is the weaker first-use representation. It saves effort by writing only the relation positions needed to stop role-like source wording from collapsing evidence, status, work, assurance, source, and publication claims. The loss budget is narrow: A.2.4 may name the evidence-use or status-use relation, preserve the named direct governing pattern, and state unsupported overread. It may not decide assurance value, gate passage, causal identification, source-currentness order, publication interpretation, or performed-work truth.
Open the direct governing pattern when the attempted use depends on assurance, safety, release, compliance, causal effect, gate decision, permission, performed work, source freshness, publication use, status currentness, or a contested provenance relation.
Archetypal Grounding
Proof Used as Evidence
Lemma-12.proof is an episteme used as evidence for Theorem-12 in GraphTheory_v3.1.
The evidence-use relation names:
EvidenceEpistemeSlot = Lemma-12.proof;EvidenceTargetClaimSlot = Theorem-12;EvidenceClaimScopeSlot = finite DAGs inside GraphTheory_v3.1;EvidencePolaritySlot = supportsor an entailment-specific polarity when the local value set declares one;EvidenceRelevanceWindowSlot = theory-version fence GraphTheory_v3.1;EvidenceAssuranceUseSlot = verification use;EvidenceProvenanceConstraintSlot = proof publication, proof-check result, dependency list, and theory version.
No episteme holds AxiomaticProofRole. The proof episteme is used in a claim-bound evidence-use relation.
Calibration Dataset Used as Evidence
Trial-R3.csv is an episteme used as evidence for Sensor S accuracy +/-0.3 C in [0,70] C under lab conditions L.
The evidence-use relation names the claim scope, polarity, relevance window, weight model, producing work runs, method description, measurement traceability, and freshness policy. If a later assurance claim is made, B.3 consumes this relation. If the calibration run itself is being discussed, use A.15.1 for the work occurrence.
Dashboard Status Cell
A release dashboard shows Ready.
That visible cell can be:
- a status cue;
- a status assertion if the source, status value, scope, window, and provenance constraints are recoverable;
- evidence for a gate or release claim only when
A.10and the gate pattern recover the source relation; - no evidence-use relation if it is stale, copied, unauthenticated, or disconnected from the decision source.
It is not a status role held by the dashboard episteme.
Standard Used as Requirement or Evidence
An ISO/IEC/IEEE standard clause can be an episteme used as a requirement source, definition source, status source, or evidence source depending on the current claim.
Do not write "the standard has a normative role" as live FPF ontology. Recover the relation governed by the current claim: standard-use, requirement-use, definition-use, source-use, evidence-use, status-use, or assurance-use.
Simulation-Only Counterfactual Output
A simulation output mentions a counterfactual. That output may be an episteme used in an evidence-use relation. The causal-use class still belongs to C.28.
If the current C.28 value is simulationOnlyCounterfactualOutputBasis, the evidence-use relation cannot be relabelled as realizedCounterfactualSampleSupportBasis or interventionalActionSupportBasis by evidence wording, validation wording, or role wording alone.
Bias-Annotation
This pattern mainly blocks six biases:
- episteme-as-role-holder bias: an episteme is placed in
U.RoleAssignmentbecause it is useful as evidence or status; - evidence-name-as-kind bias: local evidence-use labels become
U.Rolenames; - status-display-as-authority bias: a visible badge or status cell becomes gate passage, permission, or assurance;
- work-as-evidence-use collapse: producing work, produced episteme, and later evidence use are treated as one relation;
- scope-free evidence bias: target claim, grounding holon, claim scope, polarity, time, assurance use, or provenance constraints are omitted;
- causal laundering bias: causal evidence classes are changed by source vocabulary rather than by
C.28causal-use reasoning.
The repair is to recover the episteme first, then recover the evidence-use, status-use, source-use, publication-use, assurance-use, or causal-use relation that is current.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
The positive consequence is a simpler role ontology. Systems and acting holons hold work-facing roles; epistemes are used through evidence-use, status-use, source-use, publication-use, requirement-use, definition-use, explanation-use, assurance-use, and causal-use relations.
The cost is explicit relation recovery. A phrase such as "evidence role", "status role", "standard role", "proof role", or "benchmark role" no longer closes the claim. The user needs to recover which episteme, claim, scope, status, time window, provenance constraint, and direct pattern are current.
The payoff is that one episteme can be reused honestly across many claims. Each use can have a different target claim, grounding holon, scope, polarity, relevance window, assurance use, weight model, or provenance constraint without multiplying role kinds.
Rationale
Evidence-use and status-use are kept as relation positions because an episteme can support, constrain, display, attest, or refresh different claims without becoming a work-facing role holder. This avoids multiplying role kinds for every publication, credential, dataset, proof, status display, source, and explanation use.
SoTA-Echoing
Refresh this pattern's source use when those provenance, credential, attestation, assurance, causal-use, or foundational-ontology practices change the separation between evidence presence, status display, assurance, provenance, causal class, and role assignment.
Relations
- Builds on:
A.2forU.Role,A.2.1forU.RoleAssignment,A.6.5for SlotSpec discipline, andC.2.1for episteme slot relation and episteme identity. - Coordinates with:
A.10for evidence-provenance graph relation;B.3for assurance;C.28for causal-use evidence classes;F.10for status families;G.6for evidence graph and provenance ledgers;E.17,E.17.0,E.17.2, andE.17.EFPfor publication, view, and explanation-use cases;E.10.D2for EntityOfConcern, description episteme, and specification-use discipline. - Separates from:
A.15.1for producing work;A.15.2for planned work; gate patterns for gate passage;A.2.8andA.2.9for commitments and speech acts; source-currentness patterns for source freshness and source order. - Precision-restoration owners: When source wording says "evidence role", "status role", "standard role", or another role-shaped phrase around an episteme, use
A.6.RSIRfor relation-slot or role-like slot recovery andE.10.ARCHfor ontology-first repair architecture.
Lowering, Repair, and Refresh
Lower an attempted A.2.4 use when the episteme is known but the target claim, scope, polarity, status value, time window, or provenance constraints are not recoverable. The lowered result may be source-finding, orientation, an evidence-needed note, a status-source request, or a narrowed reliance use.
Repair the use when a neighboring relation is actually current: performed work, assurance, causal use, gate passage, permission, commitment, publication-use, source-currentness, requirement-use, definition-use, or explanation-use.
Refresh the use when the episteme edition, target claim, grounding holon, claim scope, theory version, relevance window, source-currentness relation, status source, proof check, measurement trace, method description, or assurance-use relation changes.
A.2.4:End
RoleStateRelation@BoundedContext - Role State Space and Enactable-State Admission
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Role-state space.
Kind Settlement
A.2.5 does not admit U.RoleStateGraph as a durable U-kind. The governed object is RoleStateRelation@BoundedContext: a selected context-local relation structure over U.Role, U.BoundedContext, role-state values, state predicates, state assertions, and work-admission relations. State-machine or graph notation is a mathematical or representation lens over that relation structure, not the object itself and not a new root beside U.Role.
Use this pattern when a project needs to decide whether a role assignment is currently in a state that admits a work claim, a method-step claim, an incompatibility claim, or a role-readiness claim.
Typical moments:
- a work record says that a person, team, device, service, agent, or machine acted as technical checker, operator, deployer, verifier, surgeon, sensor, or incident commander, but the current role state is unclear;
- a method description names a required role, and the project needs to state which role states admit the step;
- a role assignment is current, but the holder may be suspended, stale, uncalibrated, fatigued, not yet authorized, or otherwise not in an enactable state;
- a role-relation claim such as role-requirement substitution, incompatibility, or bundle expression depends on role states rather than labels alone;
- a source says "ready", "approved", "validated", "authorized", "active", "stale", or "blocked" and it is unclear whether this is a role state, an evidence or status relation around an episteme, an admission result, a capability value, or a work occurrence.
Primary EntityOfConcern. The EntityOfConcern is RoleStateRelation@BoundedContext: the selected context-local state-space relation for one U.Role in one U.BoundedContext. It names role states, state predicates, state-change predicates when current, and the subset of states that admit work through a U.RoleAssignment. It is a real FPF object, but it is not a new U.* kind beside U.Role; its identity is carried by the role value, bounded context, state set, state predicates, and work-admission relation.
Primary working reader. The first reader is an engineer-manager, analyst, safety checker, operations lead, or FPF author who needs to keep role assignment, role state, holder capability, method requirement, and performed work distinct while still deciding whether a work claim may proceed.
First useful move. Name the role and bounded context, list the states that matter for the current claim, mark which states admit work, and state what observation, evaluation, speech act, work record, or source relation can justify a StateAssertion for the relevant window.
What goes wrong if missed. A role label becomes a permission slip. A role assignment is treated as ability. A certificate, report, standard, status marker, or dashboard is treated as if it held a work-facing role. Separation-of-duties checks operate on labels instead of states. Source phrases such as "approved evidence role" or unlabeled readiness marks create a second role ontology.
What this buys. Role admission becomes inspectable without making forms heavy. The same role value can have different current states in different contexts and windows; method and work claims can ask only for the state evidence they need; episteme evidence and status uses stay with their direct patterns.
Not this pattern when.
- If the current claim is the role value itself, use
A.2. - If the current claim is the assignment relation linking holder, role, bounded context, and assignment window, use
A.2.1. - If the current claim is ability or operating envelope, use
A.2.2. - If the current claim is role-requirement substitution, incompatibility, or bundle expression independent of current state, use
A.2.7. - If the current claim is selected method, method description, work plan, or performed work, use
A.15and the direct A.15 subpattern. - If the current claim is an episteme used as evidence, source, standard, requirement, definition, explanation, publication, status bearer, assurance input, or admission input, use the direct pattern for that relation. Do not turn the episteme into a role holder or role state.
Problem Frame
Work-facing role assignment is not enough for safe work attribution. "Dana holds IncidentCommanderRole" may be true while Dana is off-duty, conflicted by another role assignment, outside the current assignment window, or missing a fresh authorization source. "Robot-7 holds InspectorRole" may be true while the robot is uncalibrated. "Thermometer T-17 holds ObserverRole" may be true while the calibration evidence is stale.
The project needs a small state space for each important role in each bounded context. That state space says which role states exist, which state predicates justify them, and which states admit work. It is not a method order, not a task list, not a capability, not a work log, and not an episteme status ontology.
A.2.5 therefore defines RoleStateRelation@BoundedContext as a selected relation structure around a U.Role and bounded context. It uses state-machine or graph notation only as a selected mathematical or representation lens where helpful. The FPF object is the role-state relation used for work admission and role-state claims.
Problem
Without this pattern:
- Assignment and state collapse. A holder assigned to a role is treated as currently ready.
- Role and capability collapse. A state label such as "ready" is treated as ability instead of a window-bounded state assertion.
- Role state and work collapse. Being in a state is mistaken for having performed the work.
- State and source collapse. A certificate, report, standard, model card, dashboard, or publication is treated as the state itself rather than as a source or evidence relation for a state assertion.
- Label-only incompatibility appears. Incompatibility checks block or admit work by role names rather than by enactable states in a window.
- Context drift returns. "Approved" or "Ready" travels across contexts without named state predicates or loss.
- Enactment reification survives.
RoleEnactmentbecomes a durable root value even though performed work is governed byU.WorkandU.RoleAssignment.
Forces
Solution
Use RoleStateRelation@BoundedContext for the state-space relation of one U.Role in one U.BoundedContext.
This is a relation value. A role description, policy, register, diagram, checklist, or publication may describe or store the relation value. The description or register is not the role-state relation itself by default.
Do not promote this object to a separate U.* kind. RoleStateRelation@BoundedContext has action-facing use because it controls role-state admission, but the identity is reducible to slot and relation combinatorics over existing governed values: U.Role, U.BoundedContext, role-state values, state predicates, state assertions, and the work-admission relation through U.RoleAssignment. The durable U-kind remains U.Role; A.2.5 supplies the selected state relation inside the role ontologicalNeighborhood.
Core SlotSpecs
The SlotSpecs are open-world. A casual role-state note may only name role, context, and a state. A safety-critical work claim may require state predicates, evidence, assignment window, role-state window, capability checks, and method-step relation. Missing relevant content lowers or blocks the stronger claim; it does not assert that the value cannot exist.
State and State Assertion
Role state. A role state is a context-local value in the RoleStateSet for one U.Role and one bounded context. Names such as Ready, Calibrated, Suspended, Authorized, Stale, or Blocked are local labels until their predicates are named.
Enactable state. An enactable state is a role state admitted by EnactableStateSet. A method-step claim or work-attribution claim that requires the role can use that state only with a current StateAssertion.
State assertion. A StateAssertion says that one U.RoleAssignment is in one role state for one window, with named evidence or source relations.
PredicateEvaluation is governed by the evaluation or evidence pattern that owns the claim. The assertion does not make the evidence episteme a role holder.
Enactable-State Admission
Use this admission predicate when a method or work claim depends on role state:
This predicate admits or blocks the work or method-step claim. It does not create work, select a method, grant capability, or prove that work occurred.
State Predicates and State-Change Predicates
State predicates answer: is this assignment in this state for this window?
Examples:
CalibrationAge <= 30 days;AuthorizationDecision exists within the stated window;FatigueScore below threshold;IndependenceFrom(holder, conflictingAssignment) is true;ObservationProcedureActive and calibration trace is current;NoOpenIncident above declared severity.
State-change predicates answer: what evidence or event changes the state relation? They may reuse the same observations or decisions, but their use is different. A predicate that says calibration expired can justify a Stale state assertion; it still does not prescribe the method order for recalibration work.
Role Relation Structure Hooks
When A.2.7 declares role-requirement substitution, incompatibility, or bundle expressions, A.2.5 adds state-sensitive admission.
Do not construct product state spaces by default. Product states are admitted only when the bounded context actually maintains a composite role value and gives it its own RoleStateRelation@BoundedContext. A graph or state-machine diagram may describe that relation; it is not the relation in life.
Separation From Capability, Method, Work, Evidence, and Status
Worked Slices
Incident Commander
Context: SRE_Prod_Cluster_EU_2026.
Role: IncidentCommanderRole.
States:
OffDuty- not in the on-call assignment window;OnCall- assignment window and contact source are current;Authorized- escalation decision source is current;Ready- on call, authorized, not conflicted, attention-pressure indicator below threshold;RunningIncident- currently performing incident-command work;Blocked- conflicting assignment or missing source.
Ready and RunningIncident are enactable states for incident-command work in this context. A work record for "Declare severity level" may cite performedBy = Dana#IncidentCommanderRole:SRE_Prod_Cluster_EU_2026, but the work claim is admitted only when a StateAssertion puts that assignment in Ready or RunningIncident for the declaration window.
Thermometer Observer
Context: Metrology_Thermo_2026.
Role: ThermometerObserverRole.
States:
Unqualified- no traceable calibration source;Calibrated- calibration source current;Synchronized- time relation within threshold;InRange- drift and environment predicates hold;Measuring- observation procedure is active;Stale- calibration or synchronization window expired;Quarantined- suspected contamination or bias.
Measuring is the only enactable state for the "record temperature" work claim. Calibrated and Synchronized are useful role states, but they do not by themselves admit observation work.
Standard or Dataset With "Status Role" Source Wording
A source may say that a standard has an "approved role" or a dataset has an "evidence role." Do not make a RoleStateRelation@BoundedContext for the episteme unless a direct work-facing role is actually current. Usually the repair is:
- standard or requirement source: requirement-use, status-use, source-use, or publication-use relation;
- dataset or report: evidence-use, source-use, measurement, benchmark, freshness, or provenance relation;
- claim about the worker who approved, measured, verified, or published it:
U.Workperformed by a holder underU.RoleAssignment, with A.2.5 used only for that holder's role state.
Archetypal Grounding
System side. A role-state relation can govern a person, team, machine, service, software agent, laboratory instrument, organization, or other acting holon through U.RoleAssignment. The holder is still governed by A.2.1; capability by A.2.2; performed work by A.15.1.
Episteme side. A role-state relation may be described by an episteme, and evidence for a state assertion may be an episteme. That does not make the episteme a role holder. If the EntityOfConcern is a report, standard, dataset, requirement, proof, model card, or publication, the current relation is usually evidence-use, status-use, source-use, requirement-use, definition-use, explanation-use, publication-use, assurance-use, or admission-use.
Bias-Annotation
This pattern resists four common biases:
- status-word bias: treating
Approved,Ready, orValidatedas self-explanatory instead of context-local state predicates; - role-label bias: treating a role assignment as current ability or performed work;
- semio-bias: making the pattern about records, certificates, diagrams, or publications rather than the role-state relation they describe or evidence;
- IT-bias: reducing role states to access-control states for software users. Software access is one case; the same ontology applies to surgery, metrology, plant operations, teams, AI agents, and organizations.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Good consequences:
- work admission becomes reviewable without making every role assignment a large form;
- role relation structure can use current state rather than labels alone;
- role descriptions can publish state predicates without turning descriptions into states;
- evidence and status around epistemes no longer create shadow role kinds;
- cross-context role-state comparison becomes explicit rather than label-based.
Costs:
- high-consequence work needs state predicates and currentness windows;
- projects need to decide which role states actually admit work;
- role-state design can become too detailed if authors encode method order instead of admission predicates;
- cross-context reuse needs explicit mapping or comparison when state predicates differ.
Lowering and Reopen Conditions
Lower a role-state claim or reopen A.2.5 when any of these changes:
- the role assignment, assignment window, or bounded context changes;
- the state predicates, state-change predicates, or enactable-state set change;
- a
StateAssertionwindow expires, is contested, or loses the evidence or source relation that made it current; - a method description changes its required roles or required role states;
- a capability claim changes the holder envelope needed by a state predicate;
- a role-relation structure changes role-requirement substitution, incompatibility, or bundle admission;
- an episteme previously used as evidence, source, standard, requirement, publication, or status value is reclassified by its direct pattern.
The smallest repair is normally local: update the state predicate, state assertion, window, role-relation-structure hook, or neighboring capability, method, work, evidence, or status relation that changed. Do not rewrite the whole role value or role assignment when only one role-state claim changed.
Rationale
FPF keeps role state separate because the surrounding values have different kinds and different failure modes. A role assignment can be valid while the role state is not work-admitting. A holder can be capable while the assignment window is stale. A method can require a role while no current holder has an enactable state. A publication can describe or evidence any of these without becoming the holder, the role, or the state.
The state-machine lens is useful because finite named states, guarded change, and state assertions are easy to inspect. But the pattern does not make every role claim executable behavior. It uses the state lens only where the project needs role-state recognition, admission, currentness, and state-aware role relation structure.
SoTA-Echoing
Relations
A.2.5:End
Unified Scope Mechanism (USM): Context Slices & Scopes
Status: Stable Type: Ontic pattern
Kind Settlement
U.ContextSlice and U.Scope are the durable USM values for scope work. U.ClaimScope, U.WorkScope, and U.PublicationScope are C.3-governed scope specializations under U.Scope, not independent root ontics. ContextSliceSet := Set[U.ContextSlice] is the mathematical ValueKind whose values are exact sets of independently identified context slices; it is neither a durable scope nor another U-kind. Each exact U.Scope has one ContextSliceSet value as its extension under the effective reference scheme. GammaTimePolicy, work-measure target sets, qualification-window policies, formality thresholds, detail values, abstraction-tier values, scope profiles, coverage metrics, guards, reports, and publication views remain policy values, characteristic values, non-U records, lenses, guard facets, or publication forms unless a direct governing pattern admits them. Dotted forms such as U.Mechanism.Intension name the intension slot or intension form governed by U.Mechanism and A.6.1; they do not admit a separate structural U-kind.
One-line summary. A.2.6 lets a practitioner test one exact
U.ContextSliceagainst one exact set-valued scope. For a claim, askmember(slice, claimScope):trueadmits the claim-scope condition,falsestops that use, andunknownmeans the available evaluation cannot decide. The predicate is not aU.Relationoccurrence, and the evaluation work or result record does not make membership true.
Use this pattern when a receiving action needs to decide whether a claim, capability, or publication use covers one exact combination of standards, environment, local sense, platform, cohort, or time selectors.
First useful move. Name the exact claim, its exact U.ClaimScope, and the target U.ContextSlice; evaluate membership. Stop on false. On unknown, obtain the missing evaluation input, narrow the attempted use, or abstain. Add a result episteme or table only when the receiving use needs one. If exact local senses must be translated, first name the obtaining F.9 Bridge, then state the separate affirmative C.2.1 claim for this translation's direction, rule, and tolerance. Before using the translated scope, establish evidence-based reliance through A.10 or assurance-based reliance through B.3.
What goes wrong if missed. Teams infer coverage from a document, table, “current context” label, or selected structure; treat an unevaluated slice as excluded; or mint ScopeDelimitationRelation occurrences for included and excluded slices. Those moves collapse predicate truth, evaluation, representation, and structure.
What this buys. One set-valued scope algebra supports exact membership, intersection, supported union, translation, widening, narrowing, and refit while keeping claim content, evaluation work, result epistemes, model-applicability relations, and selected structures separate. Vocabulary boundary. Use these scope names in live FPF wording:
- For epistemes, the only scope type is
U.ClaimScope(nick G in F–G–R). - For system capabilities, the only scope type is
U.WorkScope. - For publication carriers (views, cards, and lanes), the only scope type is
U.PublicationScope. - The abstract architectural notion is
U.Scope— a durable scope value identified extensionally through one exactContextSliceSetvalue under the effective reference scheme. Intersection, SpanUnion, translation, widening, and narrowing operate on those extensions; refit changes an expression without changing the extension.U.Scopeis not aU.Characteristicand MUST NOT appear in anyCharacteristicSpace.
Source words such as applicability, envelope, generality, and capability envelope may appear only as explanatory aliases in non-normative notes.
Cross‑references.
— C.2.3 (Unified Formality F) and C.2.2 (F–G–R): this pattern defines G as U.ClaimScope.
— A.2.2 (Capabilities): capability gating now SHALL use U.WorkScope.
— F.9 (Bridges): use an exact obtaining Bridge only when membership content must be translated across exact local senses; a different label or reference scheme alone does not trigger translation. F.9 supplies the direct semantic relation only. The separate C.2.1 claim states the exact translation use, direction, rule, tolerance, and polarity; A.10 or B.3 governs reliance on that claim.
— Part E (Publication discipline; e.g., E.17 MVPK): publication views, cards, and lanes MAY declare U.PublicationScope to bound where a publication is admissible; U.PublicationScope MUST NOT widen the underlying U.ClaimScope/U.WorkScope. (USM supplies the scope calculus; Part E supplies publication discipline.)
Problem frame - Purpose and Audience
This pattern gives practitioners one exact question: does this slice belong to the scope needed by this use? It applies first to claim scope and reuses the same value algebra for work and publication scopes.
The claim-bearing episteme, capability, or publication object is not the scope. It designates or uses an exact U.ClaimScope, U.WorkScope, or U.PublicationScope. The membership predicate, evaluation work, result episteme, gate, and evidence claim also remain separate.
With USM, a practitioner can:
- declare exact slice selectors and an exact scope predicate;
- evaluate membership as true, false, or currently unknown;
- combine exact scopes by intersection or independently supported union;
- translate only when exact local senses require an obtaining F.9 Bridge, a separate affirmative C.2.1 claim about this translation, and the current A.10 or B.3 reliance branch; and
- stop without inventing a relation occurrence, context object, or selected structure.
A.2.6 defines the scope values, membership predicate, mathematical scope algebra, exact reusable A.6.1 operation declarations, and use boundaries. It does not decide a gate, perform evaluation work, establish evidence, identify an A.22 structure, or prescribe which claim should widen.
Context
Cross‑disciplinary pressures
Modern projects couple formal specs, data‑driven models, safety cases, and operational playbooks. Each specification, model, safety case, or operational-playbook publication must say where it is valid—yet terminology drifts:
- Standards and specs often say applicability or scope.
- Modeling communities say envelope.
- Safety and performance documents speak about capability envelope.
- Knowledge patterns have used generality (G) as if it were “more abstract,” when we actually need “where the statement holds.”
Slice-bounded reasoning
U.ContextSlice is not a bounded-context object or a part of one. It is an addressable value identified by its exact declared selector schema and selector values under the effective reference scheme: for example local senses, named standard editions, environmental values, platform or cohort selectors, and a time selector when that selector belongs to the declared schema. One scope predicate may inspect only a projection of those selectors, but that projection does not reidentify the slice.
The practical question is therefore concrete: does this exact slice belong to this exact scope? A phrase such as “inside the current context,” a project label, or a selected U.Structure does not answer it.
Minimal, composable trust math
In F–G–R:
- F (formality) is “how strictly a claim is expressed” (C.2.3).
- G must be “where it holds,” not “how abstract it sounds.”
- R carries evidence and reliance currentness. Observed semantic mismatch or loss may be evidence about a proposed translation, while the permitted-loss tolerance belongs to the separate C.2.1 claim about that use.
When G is a set‑valued scope, composition becomes precise: serial dependencies intersect scopes; parallel, independently supported lines can publish a SpanUnion—but only where each line is supported.
Problem
- Synonym soup. Applicability, envelope, generality, capability envelope—different labels for the same mechanism led to mismatches in gating, review, and reuse.
- Abstraction confusion. Calling G “generality” invited teams to treat “more abstract wording” as “broader scope,” silently masking unstated assumptions.
- Split mechanics. Episteme vs system text used different algebra and guard language, though the same set operations were meant.
- Translation opacity. Exact local-sense translation was confused with ordinary designation resolution, causing automatic Bridge use and hidden changes to the supported slice set.
- Overloaded words. Validity clashed with Validation Assurance (LA); operation and operational clashed with Work and Run in A.15, producing governance ambiguity.
Forces
Solution - Overview
USM keeps the following things distinct:
U.ContextSlice- one addressable value identified independently of the predicate that later inspects it;ContextSliceSet- the mathematical ValueKindSet[U.ContextSlice], used for scope extensions and finite target sets;U.Scope- one durable scope value whose extension is one exactContextSliceSetvalue;U.ClaimScope,U.WorkScope, andU.PublicationScope- C.3 specializations for claim, capability, and publication uses;- membership semantics, mathematical scope algebra, and reusable operations - three separate layers: the bivalent predicate, its C.29 set representations, and the exact A.6.1 declarations used only when a receiving use needs an actual application and binding. None is a field or relation occurrence stored on the object being checked.
The primitive claim-scope question is member(x, S) for exact slice x and exact scope S. Intersection handles serial dependence. spanUnion is allowed only for independently supported areas. widen and narrow change the extension; refit preserves it while changing only a scope expression or parameterization. translate is used only when exact local-sense content must cross an obtaining F.9 Bridge and a separate affirmative C.2.1 claim names this translation's direction, rule, and tolerance. A receiving guard relies on that claim only through the current passing A.10 branch or positive B.3 branch; a different label or reference scheme alone selects none of these.
One exact U.ClaimScope may participate in a ModelApplicabilityRelation. That relation, its actual obtaining extent, a selected A.22 structure, a membership evaluation, and a table displaying members remain separate.
Lexical commitments. In normative text and guards, use Claim scope (G), Work scope, and Publication scope. Source words such as applicability, envelope, generality, capability envelope, or validity may remain only when quoted or explained; they do not name additional scope kinds.
Normative Definitions
Predicate semantics, mathematical algebra, and A.6.1 operations
Keep three layers explicit:
- Scope semantics.
member(x,S)is a bivalent predicate over one exactU.ContextSliceand one exactU.Scope. - Mathematical representation. The formulae below represent membership and set operations under C.29. Operand order and notation do not declare an operation application or create a scope.
- Reusable actual operations. When a receiving use needs one identified calculation or evaluation application and its bound result, use one of the exact A.6.1
OperationDeclarations below. These are argument and result declarations, never A.6.5 SlotSpecs.
Mathematical semantics.
Here T : ContextSliceSet is a finite target set, F : Set[U.Scope] is a finite scope family, B is an exact obtaining F.9 Bridge, C_use is the exact current C.2.1 claim with B as EntityOfConcern and affirmative polarity for this named scope-translation use, and RS is the exact target reference scheme. The claim's content names the direction, scope-correspondence rule, and permitted-loss tolerance used to select the target image; its effective ReferenceScheme makes those designations interpretable. scopeSubset, coversSet, widen, narrow, and refit are mathematical predicates or comparison classifications, not actual A.6.1 operations in this edition. The formula represents the claim's proposed mapping but proves neither the claim nor reliance on it and declares no operation application. Work that authors or compares scope declarations remains separately governed.
A.6.1 declaration A — ScopeMembershipEvaluationMechanism.
EntityOfConcernRef: exact operation familyScopeMembershipEvaluationOperationFamily = {evaluateMembership}.- effective
U.ReferenceScheme: the scheme under which this mechanism's argument, result, and application meanings are interpreted. SubjectKind:U.Scope.RangedValueKind:U.ContextSlice.ResultKind: declaration-local finiteU.KindMembershipEvaluationValue = {true, false, unknown}under C.3. Its membership rule admits exactly those three values. It is not a world-side third truth value, public U-kind, gate decision, or result episteme.SliceSetandExtentRule: absent; membership of the kindU.Scopeis not slice-dependent in the A.6.0 sense.
OperationDeclaration evaluateMembership:
ApplicationPredicate: with those bindings, evaluate member(targetSlice, scope) under the bound interpretation basis; return true or false when the basis determines the predicate and unknown when a required selector resolution or translation input is unavailable. The application neither makes membership true nor changes either argument.
ApplicationIdentityRule: one application is one independently bounded evaluation invocation selected by the current calculation or evaluation-work locus. Repeating the evaluation with the same arguments is another application when another invocation occurs; argument equality alone does not merge them.
ApplicationExtentRule: the application begins when its exact argument bindings and interpretation basis are fixed for the invocation and ends when membershipJudgment is returned or the invocation stops without a result. A result binding cannot begin before the value is returned.
ScopeMembershipEvaluationMechanism LawSet. With the same exact argument bindings, interpretation basis, and effective reference scheme, evaluation is deterministic. true reports that the basis determines member(targetSlice, scope); false reports that it determines non-membership; unknown reports only that it cannot determine either result. No returned value changes the bivalent predicate.
ScopeMembershipEvaluationMechanism AdmissibilityConditions. Admit an application only after the exact slice, exact scope, and exact interpretation basis are bound. unknown is admitted when that basis records an unavailable required selector resolution or translation input. A missing exact scope, slice, or basis blocks the application rather than creating a guessed binding.
ScopeMembershipEvaluationMechanism Applicability. Use this declaration only for evaluating exact U.ContextSlice and U.Scope values under its effective reference scheme. The receiving use names its exact U.ClaimScope, selected evaluation time when current, selected CHR:ReferencePlane only when the use is plane-dependent, and any mechanism-specific condition; it does not replace them with generic context wording.
ScopeMembershipEvaluationMechanism SignatureManifest (optional). When dependency replay needs it, name the actual imported or provided declarations for U.ContextSlice, U.Scope, and the local MembershipEvaluationValue. A list of nearby policies or operands is not a second operation signature.
ScopeMembershipEvaluationMechanism neighboring objects. An evaluation application can occur within dated work governed by A.15.1. A separately persisted result episteme remains optional under C.2.1; A.15.PROD enters only for a current claim that work first constituted that episteme. Evidence-use and gate occurrences stay under A.10 and A.21. None of those objects, nor another evaluation invocation, reidentifies this mechanism unless it reveals changed declaration content.
ScopeMembershipEvaluationMechanism refinement or conservative extension. A refinement preserves evaluateMembership, its argument and result meanings, binding rules, application predicate, identity and extent, and the bivalent-truth boundary while stating every strengthened law or admission condition. A conservative extension adds exact optional arguments, results, or operations without changing those inherited meanings or admitted uses.
A.6.1 declaration B — ScopeDerivationMechanism.
EntityOfConcernRef: exact operation familyScopeDerivationOperationFamily = {deriveIntersectionScope, deriveSpanUnionScope, deriveTranslatedScope}.- effective
U.ReferenceScheme: the scheme under which this mechanism's operation meanings and returned scopes are interpreted. SubjectKind:U.Scope.RangedValueKind:U.Scope; each derivation operation still returns aU.Scope, so no distinct mechanism-levelResultKindis current.SliceSetandExtentRule: absent for the same A.6.0 reason stated above.
ApplicationPredicate rules. deriveIntersectionScope returns the scope represented under C.29 by intersection of extension(S) for S in scopeFamily. deriveSpanUnionScope implements the already established SpanUnion: it is admitted only when independenceBasis establishes the section 7.3 independence condition and returns the scope represented by SpanUnion(scopeFamily). deriveTranslatedScope is admitted only when the bound Bridge obtains and the bound C.2.1 claim has that Bridge as EntityOfConcern, affirmative polarity, and content naming this scope-translation use, its direction, rule, and tolerance. The application applies that rule within that tolerance and returns the scope represented by translate(bridgeOccurrence, scopeTranslationClaim, sourceScope, targetReferenceScheme). The formulae and claim alone declare no application or result binding.
For every governed-reference argument, record presence, citation, or a compatible token is insufficient: the reference must resolve to the exact value actually used. For every result row, the result binding obtains only when that exact application returns the independently identifiable extensional scope. The application and formula do not constitute that scope or make any membership predicate true.
ApplicationIdentityRule: each derivation application is one independently bounded calculation invocation identified through its exact invocation boundary, mechanism edition, and operation designator rather than the argument tuple alone. Repeated calculations with equal arguments remain distinct applications.
ApplicationExtentRule: the application begins after every required argument is bound for that invocation and ends when the derived-scope value is returned or the invocation stops without a result. A result-binding extent cannot begin before that scope value is returned.
ScopeDerivationMechanism LawSet. Serial composition uses intersection. Parallel publication uses the one established SpanUnion and preserves only slices supplied by independently supported lines. Translation returns only the target-slice image selected by the bound claim's rule and tolerance over the bound obtaining F.9 Bridge. No derivation operation widens support by itself.
ScopeDerivationMechanism AdmissibilityConditions. Intersection and SpanUnion require at least two exact scopes. deriveSpanUnionScope additionally requires the bound independence basis to meet section 7.3. deriveTranslatedScope requires both an exact obtaining Bridge and the exact affirmative C.2.1 claim whose named rule and tolerance select the claimed target image. A missing or non-obtaining Bridge or a missing or non-affirmative claim blocks that positive derivation application rather than creating a guessed scope; the latter does not negate an otherwise obtaining Bridge.
ScopeDerivationMechanism Applicability. Name the exact source scopes and reference schemes required by the selected derivation. For translation, also name the bound Bridge and separate C.2.1 claim. Before a receiving guard, assertion, publication, or structure selection relies on the returned scope, require either the exact A.10 evidence-provenance graph relation plus RelianceDisposition=pass for this bounded use, or a current positive B.3 assurance claim that carries this bounded assurance use and has its sufficient minimum reliance safety assurance record. Enter B.3 when an assurance claim is being made or its material-reliance threshold is met, and decide first whether a current assurance claim exists. The threshold requires the minimum record but does not create a positive claim.
A missing or non-affirmative use claim, a non-passing A.10 disposition, or a B.3 no-assurance-claim, insufficient-record, narrowed, rejected, withdrawn, abstaining, or blocked disposition stops or narrows the receiving use without changing membership truth or the Bridge. An A.10 pass or positive B.3 assurance claim supports reliance only for its named use; neither is legal, policy, or deontic authorization, and neither proves that a derivation application or another receiving object occurred. Any required authorization remains under its direct governor. The receiving use also names its exact U.ClaimScope, selected time when current, selected CHR:ReferencePlane only when plane-dependent, and derivation-specific conditions. GammaTimePolicy enters only when time changes membership; ReferencePlane is absent from ordinary set algebra.
ScopeDerivationMechanism SignatureManifest (optional). When dependency replay needs it, name the actual imported or provided declarations for U.Scope and, for translation, the exact F.9 Bridge declaration and C.2.1 claim identity rules. The independence basis, particular Bridge, and particular scope-translation claim are application arguments, not declaration-manifest entries by adjacency. scopeTranslationClaim is only this declaration's argument label; it names no public claim kind. A.10 and B.3 reliance objects remain under their direct owners rather than becoming a common mechanism signature.
ScopeDerivationMechanism neighboring objects. A derivation can occur within dated calculation work governed by A.15.1. Its bound independence-basis episteme, Bridge, and C.2.1 scope-translation claim retain their own identities and direct governors. The exact A.10 relation and disposition or B.3 claim and record govern reliance on the use claim; they are neither mechanism arguments nor results. The returned U.Scope is independently identified by its extension; neither the application nor its C.29 formula constitutes it. Evidence, publication, gate, assurance, and any downstream Work, assertion, relation, or publication occurrence remain with their direct owners. None of those objects, nor another derivation invocation, reidentifies this mechanism unless it reveals changed declaration content.
ScopeDerivationMechanism refinement or conservative extension. A refinement preserves the inherited derivation operations, argument and result meanings, binding rules, application predicates, identity and extent, and the intersection, SpanUnion, and translation semantics while stating every strengthened law or admission condition. A conservative extension adds exact optional arguments, results, or operations without changing those inherited meanings or admitted uses.
Relation between the declarations. These are two independently identified U.Mechanism epistemes, not sections of an undeclared common parent. They coordinate by value: a later evaluateMembership application may bind a scope returned by one derivation application. That reuse does not merge the mechanism identities. If a receiving claim needs a refinement, extension, equivalence, or other direct relation between exact mechanism editions, state its endpoints, predicate, scope, and preserved and changed content under A.6.1; adjacency supplies no relation.
U.ContextSlice - exact membership target
U.ContextSlice is an addressable durable value formed from one exact declared selector schema and one value for every selector present in that schema. A scope predicate may inspect a declared projection of the slice, but it does not determine the slice's identity. A minimal slice declaration contains:
The slice is one value, not a finite set and not a U.BoundedContext, selected structure, project, system part, or description. A finite target is one value of mathematical ValueKind ContextSliceSet. Two slice designators resolve to the same U.ContextSlice exactly when their declared selector schemas match and every declared selector resolves to the same value under the effective reference scheme. A predicate's current argument projection, missing evaluation input, or receiving action cannot merge or split slice identity.
For example, slice_A and slice_B may share substrate Al6061, temperature 140 °C, and rig edition Calib-v3 while carrying different declared cohort selectors. A temperature-only scope predicate can return the same result for both slices, but the slices remain distinct; a cohort-sensitive predicate can distinguish them without reidentifying either one.
Do not write an implicit “current” or “latest” selector. If time changes membership, name the exact point, interval, or policy. If time does not change membership, do not add a fictitious temporal field merely to complete the tuple.
U.Scope - set-valued scope
U.Scope is a durable value with one exact extension of mathematical ValueKind ContextSliceSet. U.ClaimScope, U.WorkScope, and U.PublicationScope are its C.3 specializations for receiving uses; the specialization does not copy the extension or add another identity discriminator. A scope is not its predicate expression, a U.Characteristic, U.Structure, collection holon, context, description, representation, or direct relation occurrence.
For exact scope S and exact slice x, the primitive delimitation semantics is:
The predicate has the exact slice and exact scope as arguments. It is not by itself an explicitly individuated U.Relation occurrence. Included slices satisfy it; excluded slices do not. The excluded area is not materialized as an unbounded complement entity.
For effective reference scheme RS, define extension_RS(S) := { x : U.ContextSlice | member(x, S) }. Two scope designators resolve to the same extensional U.Scope value when their extensions contain exactly the same independently identified slices under the same or explicitly reconciled reference scheme. An equivalent predicate expression, unit conversion, factoring, or publication change can preserve that value; a boundary change that adds or removes even one slice identifies another scope value.
A set or predicate expression, table, diagram, or query result can represent or designate a scope or a set of evaluated slices under C.29 and C.2.1. Its form does not make membership true, identify the scope by syntax, or create a membership occurrence.
USM admits subset, intersect, spanUnion, translate, widen, and narrow over exact scope extensions. refit is a same-extension normalization: it changes a predicate expression, units, or factoring while preserving member(x,S) for every exact slice under the effective reference scheme. A changed expression may require another declaration or claim-bearing episteme edition under its direct governor; it identifies another U.Scope only when the extension changes.
If a future receiving use genuinely requires stable identity for membership occurrences, A.2.6 must first declare a direct relation kind with exact participant meanings, obtaining condition, recurrence rule, and non-optional occurrence-identity rule under A.6.REL. Until then, do not use ScopeDelimitationRelation, ScopeDelimitationMode, or ScopeDelimitationInterval.
U.ClaimScope (G) and membership evaluation
U.ClaimScope is the exact set-valued scope used to say where one claim holds. The claim-bearing U.Episteme and the scope value are distinct; the episteme designates the exact scope current for that claim.
An evaluation of member(x, S) is also separate:
- the predicate semantics determine membership;
- an exact system performs dated evaluation work by an exact method, using a direct evaluation relation or A.6.1 operation binding;
- a separately current C.2.1 result episteme may state
true,false, orunknown; - evidence and freshness claims remain under A.10 and their direct governors.
unknown reports that the evaluation cannot currently decide because a required selector, designation resolution, or translation input is unavailable. It does not mean false, does not exclude the slice, and does not create a third world-side membership state. A receiving guard abstains, narrows the attempted use, or follows an explicitly governed reliance policy; it does not rewrite the predicate.
One exact U.ClaimScope participates in ModelApplicabilityRelation when model applicability is current. A declared ModelApplicabilityInterval belongs to an assertion or occurrence description. The actual applicability occurrence uses the maximal continuous extent over which its predicate obtains, as governed by A.1.1; the interval is not another direct participant.
A BoundedModelUseStructure may be selected over exact model-applicability and other governed relation occurrences under applied constraints that refer to exact claim-scope values. Keep three routes distinct. A bare scope, slice, membership outcome, or displayed boundary never enters A.22 identity. One exact U.ClaimScope remains a participant of an independently governed ModelApplicabilityRelation; when that exact obtaining occurrence is selected into the structure, the occurrence contributes through A.22's relation-occurrence discriminator. Separately, one exact applied constraint claim may refer to that scope and contribute through A.22's applied-constraint discriminator. Neither route turns the scope into a structure constituent, a membership-relation occurrence, or a second delimiter. The same scope may participate in differently selected relation occurrences or be referenced by differently identified structures, and a changed structure does not by itself reidentify the scope.
Expression. State a Claim scope as an exact predicate or condition block over slice selectors: assumptions, parameter ranges, cohorts, platform or standard editions, exact local senses when current, and time conditions only when they change membership.
Algebra. Serial dependencies use intersection. Independently supported areas may use spanUnion with the independence basis stated. widen and narrow change the declared set; refit preserves it. translate uses the section 7.5 Bridge-plus-use-claim branch and keeps reliance separate.
U.WorkScope — scope of doing Work (capability)
Carrier. U.Capability (a system’s ability to deliver specified U.Work).
Meaning. U.WorkScope is the set of U.ContextSlice values under which a capability's deliverability claim may be evaluated. Work-measure targets and qualification windows are checked separately at use time; they are not members or identity fields of the scope.
Expression. The capability declaration designates an exact U.WorkScope expressed only as conditions over U.ContextSlice: environment, versioned standards or platforms, resource regimes, exact local senses when current, and gammaTime only when time changes membership. Quantitative deliverables and qualification windows are not part of the scope value:
- Declare targets as work-measure target sets (e.g., latency <= L, throughput >= T, tolerance <= epsilon) bound in guards (WG‑2).
- Declare inspection/recertification policies as qualification-window policies bound in guards (WG‑3).
The use‑time admission requires all of:
WorkScope covers JobSliceANDWorkMeasures satisfiedANDqualificationWindowHolds(capability, qualificationWindowPolicy, evaluationTime).
Method–Work gating. A Work step’s guard MUST check that the target slice is covered by the capability’s Work scope and that required measures and qualification windows are satisfied.
Composition and Delta-moves. Work scope uses the same algebra as Claim scope (intersection / spanUnion / translate / widen / narrow / refit). Section 7.5 selects translate only for exact local-sense translation through an obtaining F.9 Bridge plus the separate affirmative C.2.1 claim and its current reliance branch.
Separation from knowledge. A Work scope is a set-valued scope, not an assertion. The capability declaration uses it to delimit where a deliverability claim is evaluated. Measurements and monitoring may support that claim through separately governed evidence and reliance judgments; they do not make a slice a member.
Required guard facets (capabilities).
- Work-measure target set (mandatory). A set of measurable targets with units and tolerated ranges, evaluated on the JobSlice.
- Qualification-window policy (mandatory for operational use). A time policy stating when the capability is considered qualified; evaluated at the exact evaluation time selected by the receiving guard, not copied into
U.WorkScope. These facets are separate fromU.WorkScopeand live in the R‑lane (assurance). They MUST be referenced in Method–Work guards (see §10.3 WG‑2/WG‑3).
U.PublicationScope — scope of a publication view or publication form
Carrier. Publication faces, publication forms, interop publication forms, cards, lanes, and MVPK faces are publication-lane objects whose renderings live on carriers; the carrier remains separate from the publication view or form.
Meaning. The set of U.ContextSlice where a publication (a view, card, or lane about some object or morphism) is admissible for use without introducing claims beyond its underlying carrier.
Relation to other scopes (normative).
- If the publication is about an episteme
E:PublicationScope(view_E) ⊆ ClaimScope(E). - If the publication is about a capability
C:PublicationScope(view_C) ⊆ WorkScope(C). - If the publication is about a composition, its scope is a subset of the intersection of the exact contributing scopes. When exact local senses require translation, use section 7.5 for each affected source scope: obtaining F.9 Bridge, separate affirmative C.2.1 use claim, and current A.10 or B.3 reliance before the returned scopes are intersected.
Expression. Declare U.PublicationScope as an exact predicate over only the U.ContextSlice selectors that restrict publication use: for example versioned standards, environment, audience, interface availability, exact local senses, or gammaTime when time changes membership. It may be narrower than the underlying scope but must not be wider.
Algebra and Delta-moves. Publication scope uses the USM algebra. A widened publication scope is admissible only when the resulting set remains a subset of every relevant underlying Claim scope or Work scope and the publication conditions support each added slice; the underlying scope need not change when it was already broader.
Orthogonality to measurement. U.PublicationScope is a USM scope object (set‑valued), not a CHR Characteristic and MUST NOT appear as a slot in a U.CharacteristicSpace.
View refinement (profiles). When a stricter publication profile/view refines another (e.g., a typed card that requires additional pins), its U.PublicationScope MUST NOT be wider than that of the less formal view.
Scope Algebra
Membership and coverage
For exact slice x and scope S, evaluate member(x, S).
true: the slice is included and the scope condition for the attempted use passes;false: the slice is excluded and that use stops or selects another scope;unknown: the available evaluation cannot decide; the guard abstains or follows an explicitly governed reliance policy without asserting exclusion.
For a finite target set T : ContextSliceSet, coversSet(S,T) abbreviates for every x in T, member(x,S). Scope-to-scope scopeSubset(S1,S2) instead means for every x, member(x,S1) implies member(x,S2). A target set is neither a scope nor a substitute for one. There is no “close enough” membership and no implicit widening.
Membership evaluation work, its inputs and A.6.1 bindings, an optional C.2.1 result episteme, and a C.29 table remain neighboring objects. None changes predicate truth by being performed, recorded, or displayed.
Serial Composition (Intersection)
Rule S‑INT (serial). For an essential dependency chain C1 → C2 → … → Ck that supports a claim/capability, the effective scope along that chain is:
If Scope_serial = ∅, the chain is inapplicable and MUST NOT contribute to published scope.
Monotonicity. Adding a new essential dependency can only narrow (or leave unchanged) the serial scope.
Parallel Support (SpanUnion)
Rule P‑UNION (parallel). If there exist independent support lines L₁,…,Lₙ for the same claim/capability, each with serial scope S_i, the publisher MAY declare:
Constraints.
- Independence MUST be justified (different support lines must not rely on the same weakest link).
- The union MUST NOT exceed the union of supported slices; “hopeful” areas are disallowed.
- Publishers SHOULD annotate coverage density/heterogeneity (informative) to aid R assessment, but numeric “coverage” is not part of G.
- Independence criterion. Support lines in a SpanUnion MUST be partitioned so that each line has a set of essential components disjoint from the others’ essential components (no shared weakest link). The partition (or a certificate thereof) SHALL be referenced in the publication.
Why a G-ladder/levels/scales is not needed (and must not be introduced)
1) G is not an ordinal scale; it is set-valued.
Under USM, U.ClaimScope is a set‑valued USM scope object over U.ContextSlice. The only well‑typed primitives are membership and set operations (⊆, ∩, ⋃). Imposing ordinal “levels” such as G0…Gk violates the type discipline and produces non‑invariant behavior (the same set could be “rated” with different numbers under different heuristics). (See also LEX‑CHR‑STRICT.)
2) G composes via ∩ / SpanUnion, not via min / avg.
USM already fixes composition: along a dependent path use intersection; across independent support lines publish SpanUnion. None of these operations relies on (or preserves) any linear order. An ordinal “G ladder” invites people to take minimums/averages, which is incorrect for sets and breaks the established algebra.
3) A G ladder drags in “abstraction level,” which is orthogonal.
Early “G ladders” effectively encoded abstraction/typing (instances -> patterns -> formal classes/types -> up-to-iso). That is valuable didactics, but not applicability. We have already separated these concerns: abstraction is captured, if needed, by AbstractionTier (AT) as an optional facet; applicability is U.ClaimScope (G).
4) A G ladder breaks locality and Bridge semantics. When exact local senses require translation, an obtaining F.9 Bridge establishes their direct semantic relation while a separate C.2.1 claim states the proposed mapping rule and tolerated loss. There is no canonical way to translate an ordinal G level: the mapped area may be narrower or differently factored. USM translates exact sets only through that bounded claim and keeps A.10 or B.3 reliance separate rather than rewriting G.
5) A G ladder duplicates ESG guards without adding decision power.
What teams often want to “compress into a G number” is actually (a) the quality of expression and (b) the completeness of the declared scope. The first is an F threshold; the second is handled by explicit guards: Scope covers TargetSlice, gammaTime is explicit only when membership varies with time, and a separate freshness-window check when current. A ladder for G adds confusion but no decision power.
Normative directive.
U.ClaimScope (G) SHALL remain a set‑valued USM scope object; no ordinal or numeric ladder SHALL be defined for G. If a profile needs scalar reporting, it MAY publish an explicit report‑only proxy CoverageMetric(G), but CoverageMetric(G) MUST NOT substitute for G in norms, gates, Bridge semantics, bounded-use claims, or reliance decisions. Authoring and gating SHOULD use F thresholds (C.2.3) and explicit guard predicates (A.2.6) rather than pseudo‑levels of G.
Translation across exact local senses
Use translation only when ordinary designation resolution cannot settle the exact local senses needed by the target membership predicate. Then proceed in this order:
- resolve the source and receiving F.17
SchemeSenseCellvalues and name the exact obtaining F.9 Bridge that relates them; - state the proposed scope translation separately: name the source scope, target scheme, source-to-receiving direction, scope-correspondence rule, and tolerated loss, then cite the exact current C.2.1 claim with that Bridge as EntityOfConcern and affirmative polarity for this use;
- before a guard relies on the claim, require the exact A.10 evidence-provenance graph relation plus
RelianceDisposition=passfor this bounded use; when an assurance claim is made or B.3's material-reliance threshold is met, first decide whether a current assurance claim exists, then require a current positive claim carrying this use with its sufficient minimum record, or stop or narrow the use under the exact non-positive B.3 disposition; and - use
translate(Bridge, UseClaim, SourceScope, TargetReferenceScheme)as the C.29 mathematical representation, or invokederiveTranslatedScopewith those same four values when one actual calculation and returned scope are needed.
The Bridge establishes the direct semantic correspondence. The separate claim selects this translation's direction, rule, and tolerance. A Bridge profile, Bridge Card, reference-scheme difference, project label, or slice designator cannot supply that claim or its reliance basis. A missing or non-obtaining Bridge blocks the semantic branch. A missing or non-affirmative use claim, a non-passing A.10 disposition, or a non-positive B.3 branch blocks reliance on the translation without making an otherwise obtaining Bridge false.
Meeting B.3's threshold creates the minimum-record obligation, not a positive claim. A passing A.10 classification or positive B.3 assurance claim supports reliance only for the named use; neither authorizes it. Observed mismatch, calibration error, and counterexamples are evidence about the use claim. The permitted loss is the tolerance inside that claim. If the rule and tolerance support only a proper subset of the source area, return that explicitly narrower target scope. Neither the Bridge nor the claim supplies direct support for adding a slice, and neither makes membership true. The exact deriveTranslatedScope application remains an A.6.1 operation application; the claim and reliance basis do not prove that it occurred.
Δ‑Operations (Widen, Narrow, Refit)
- Δ‑G+ (widen). Monotone expansion:
S subsetOf S-prime. Every added slice requires direct support under the receiving use; a Bridge and affirmative translation-use claim can define a mapping but supply no such support by themselves. - ΔG− (narrow). Monotone restriction:
S′ ⊂ S. Often used to remove areas invalidated by new findings. - Refit. A different expression or parameterization designates the same extensional scope after normalization (for example, changing units or factoring common predicates). Refit MUST NOT alter membership and does not create another scope value.
Refit (normalization). A refit MUST preserve membership exactly: extension_RS(S_after) = extension_RS(S_before), so both expressions designate the same scope value. Any change that alters boundary inclusion through rounding, unit conversion, or discretization is a ΔG± change, not a refit.
Edition triggers. A changed extension identifies a different scope value. A changed predicate expression with the same exact extension preserves the scope value but is a content change in the declaration or claim-bearing episteme that carries the expression; its direct governor decides whether another episteme edition is needed.
Discriminating cases. Under one effective reference scheme, 20 °C <= temperature <= 30 °C and the exactly converted 293.15 K <= temperature <= 303.15 K have the same extension and can be related as a refit while designating the same scope. Replacing the inclusive upper boundary with temperature < 30 °C removes every slice exactly at 30 °C; that one membership-boundary change identifies another scope rather than a refit.
Invariants
- I-LOCAL. Interpret membership under the effective reference scheme and exact local senses current to the declaration. Translate only through an obtaining F.9 Bridge plus the separate affirmative C.2.1 claim for that translation; keep A.10 or B.3 reliance outside membership truth.
- I‑SERIAL. Serial scope is an intersection; it cannot grow by adding dependencies.
- I‑PARALLEL. Parallel scope MAY grow by union, but only where independently supported.
- I‑WLNK. Weakest‑link applies to F and R on dependency paths; G follows set rules (∩ / ⋃).
- I‑IDS. Idempotence: Intersecting or unioning a set with itself does not change it.
- I‑EMPTY. Empty scope is a first‑class value; guards MUST treat it as “not applicable”.
Empty & Partial Scopes
- Empty scope (
∅). No slice satisfies the declared predicate. A receiving guard stops; this does not identify a context, structure, or complement entity. - Partial scope. Publishers SHOULD avoid “global” language when actual scope is thin; instead, publish explicit slices and (informatively) coverage hints to guide R assessment.
Locality, Time & Version Semantics
Local interpretation without a context owner
A scope is not owned by a U.BoundedContext. Interpret its predicate under the effective reference scheme and exact local senses named by the claim or scope declaration. Evaluate it against exact U.ContextSlice values.
Do not assume that a similarly named selector elsewhere has the same sense. Use ordinary designation resolution when it suffices. Use translate only when exact local senses need an obtaining F.9 Bridge and a separate affirmative C.2.1 claim states the proposed translation's direction, rule, and tolerance; establish the current A.10 or B.3 reliance branch before acting on the returned scope.
Time selector Γ_time
When membership depends on time, the scope predicate and target slice name an exact gammaTime point, interval, or policy and state which boundary changes a slice from member to non-member or back. Implicit “latest” is forbidden. When time does not change membership, omit the selector. Evidence freshness remains a separate R-lane predicate.
Standards, versions & notations
When a standard, interface, or schema edition affects membership, name the exact edition. A notation change with faithful designation resolution does not change G. If exact local senses require translation, the F.9 Bridge establishes their relation, the separate C.2.1 claim states this translation's rule and tolerance, and A.10 or B.3 governs reliance; none redefines membership truth.
Determinism of evaluation
For a fixed exact scope, exact slice, and available evaluation inputs, the evaluation method returns one reproducible result. false stops the attempted use. unknown also blocks admission but does not assert non-membership.
Interaction with R (freshness & decay)
For empirical claims and operational capabilities, R typically binds evidence freshness windows. Scope does not decay with time; trust in the support does. Guards MAY combine “Scope covers” with “Evidence freshness holds” as separate predicates.
Lexical Discipline (Part E compliance)
L‑USM‑1 (names). Use Claim scope (G) for epistemes, Work scope for capabilities, and Publication scope for publication carriers. Use Scope only when discussing the abstract mechanism. Avoid naming any characteristic as “applicability,” “envelope,” “generality,” “capability envelope,” or “validity”.
L‑USM‑2 (Work and Run). Prefer Work and Run vocabulary from A.15 for system execution contexts. Do not introduce “operation” or “operating” as characteristic names; use Work scope.
L‑USM‑3 (Validation). “Validation/Validate” remain reserved for LA in assurance lanes (Part B). Do not name a scope object “validity”.
L-USM-4 (Domain). “Domain” is a recognition cue, not a guard input. Name the exact U.ContextSlice selectors needed by the membership predicate.
L-USM-5 (First mention). On first use in a pattern or working instruction, write “Claim scope (G)” so the F-G-R meaning is recoverable.
Guard Patterns (ESG & Method–Work)
Common guard shape
A claim-scope guard starts with one exact judgment:
Admit the scope condition only when the result is true. Stop on false. On unknown, abstain, obtain the missing input, narrow the attempted use, or apply a separately governed reliance policy. Evidence freshness, formality, time currentness, decision, and assurance remain separate predicates.
Add a translation branch only when the membership predicate uses exact local senses that ordinary designation resolution cannot align. Require the obtaining F.9 Bridge and the separate affirmative C.2.1 claim for this translation before deriving a scope, then require the current A.10 or B.3 reliance branch before the receiving guard relies on it. A different reference scheme or location label alone is not such a trigger.
Claim-scope guard family
EG-1 - Exact membership.
Name the exact claim-bearing episteme, exact U.ClaimScope, and exact target slice. The episteme, scope, and slice remain different values.
EG-2 - Formality or evidence, only when current. A receiving state may separately require a C.2.3 formality threshold or an A.10 freshness judgment. Neither changes membership.
EG-3 - Unknown evaluation. When a required selector, designation resolution, or translation input is unavailable, return unknown as the result binding of the exact evaluateMembership application, or as the result of the directly governed evaluation when no reusable application is current. Abstain or follow the exact receiving reliance policy; do not assert member = false. Add a C.2.1 result episteme only when a named receiving use needs the conclusion to persist. Use A.15.PROD only when the current claim is that dated work first constituted that episteme.
EG-4 - Translation. When exact local senses differ, require the obtaining F.9 Bridge and the separate affirmative C.2.1 claim naming this scope translation's direction, rule, and tolerance. After the exact A.10 or B.3 branch supports reliance for that use, derive the scope with deriveTranslatedScope(SourceScope, ExactBridgeOccurrence, ExactUseClaim, TargetReferenceScheme), then use that returned scope in evaluateMembership. Scheme difference alone does not select this branch.
EG-5 - Scope-value versus declaration change. Widen or narrow only when the extension gains or loses at least one independently identified slice; that extension change identifies another U.ClaimScope. A changed predicate expression with the same exact extension is a refit: it preserves the exact scope value and may require another scope declaration or claim-bearing episteme edition under its direct governor. A result-record, table, or selected-structure change alone changes neither the scope value nor its declaration.
Method–Work guard families (capabilities)
WG‑1 - WorkScopeCoverage (mandatory). A capability can be used to deliver a Work step only if:
WG‑2 - work-measure target set satisfied (mandatory for deliverables). Guards MUST bind quantitative measures that the capability promises in the JobSlice:
WG‑3 - qualification-window policy holds (mandatory for operational use). Operational guards MUST assert that the exact qualification-window predicate (qualification, inspection, or recertification) holds at the receiving guard's exact evaluation time:
WG-4 - Translation branch for capability use.
Translate U.WorkScope only when its condition predicates use exact local senses that differ from those needed by the job slice. Require the obtaining F.9 Bridge and a separate affirmative C.2.1 claim naming this Work-scope translation's direction, rule, and tolerance; establish the exact A.10 or B.3 reliance branch before the capability guard uses the result. A capability object and job slice carry no hidden .Context field that automatically selects this branch.
Observed mapping loss is evidence about the use claim, and permitted loss is its tolerance. When the claim's rule and tolerance support only a subset, return an explicitly narrower Work scope. Neither fact changes membership truth by itself.
WG‑5 - Δ(WorkScope). When widening Work scope (new operating ranges/platforms), the guard MUST require evidence at the new slices (measures + qualification windows). Refit (e.g., new units/parametrization) requires no new evidence.
Translation guard
Use this branch only after the exact local-sense translation need, the obtaining F.9 Bridge, and the separate affirmative C.2.1 claim for this translation are current. The claim names the source-to-receiving direction, scope-correspondence rule, and tolerated loss. Before the receiving guard relies on it, require the exact passing A.10 branch or a current positive B.3 assurance claim that carries this use with its sufficient required record.
The source claim-bearing episteme designates SourceScope; it does not own that value as a hidden context field. The Bridge relates exact local senses under F.9. The C.2.1 claim supplies this translation's rule and tolerance, and A.10 or B.3 supplies the separate reliance basis. None of them makes the A.6.1 operation application occur. An unmapped slice yields unknown for the attempted evaluation unless the returned scope explicitly excludes it; it is not silently dropped and reported as false.
Time selector
Name gammaTime in the context slice only when the applicable membership predicate varies with time. State the boundary that changes membership. If a work qualification or evidence-freshness condition varies with time, name its exact evaluation time and interval or policy under that condition's direct governor rather than copying it into scope. For example, qualificationWindowHolds(controller, Recertification90d, evaluationTime) is a separate guard; it is not a scope selector.
Do not write implicit “latest.” When time does not affect membership, omit the selector instead of inventing a nominal current value.
Archetypal Grounding - Worked Examples
Claim-scope membership boundary
Claim-bearing episteme E_adhesive states that Adhesive X retains at least 85 percent tensile strength on Al6061 for two hours at 120-150 °C under rig edition Calib-v3. It designates exact claim scope G_adhesive.
slice_in = {substrate=Al6061, temp=140°C, dwell=90min, rig=Calib-v3}.member(slice_in, G_adhesive)is true.slice_out = {substrate=Al6061, temp=160°C, dwell=90min, rig=Calib-v3}. Membership is false; the attempted use stops.slice_unknown = {substrate=Al6061, temp=140°C, dwell=90min, rigEdition=unavailable}. Evaluation returns unknown. It neither excludes the slice nor permits the use.
LabEvaluator_A may perform exact membership-evaluation work through the declared USM operation. When a named audit or replay use needs a judgment to persist, a C.2.1 episteme may record it. Neither the work nor the optional episteme makes membership true. A table showing the three rows is a C.29 representation and creates no ScopeDelimitationRelation.
The same G_adhesive may participate in two independently governed model-applicability relation occurrences and may be referred to by exact applied constraint claims in two A.22 structures. Only a selected obtaining model-applicability occurrence or an exact constraint claim as applied contributes through its corresponding A.22 discriminator; the common scope itself contributes through neither path and neither merges nor identifies the relations or structures. A declared applicability interval in either occurrence description is separate from the actual maximal continuous obtaining extent.
Translation only when local senses require it
An assembly use expresses temperature through an exact local calibration sense different from the laboratory sense used in G_adhesive. F.9 Bridge B-lab-assembly-temp obtains between those two cells under its calibration-correspondence profile; the profile contains no translation-use rule or loss tolerance.
Separate C.2.1 claim C-adhesive-scope-translation has that Bridge as EntityOfConcern and affirmative polarity. Its content names use translate G_adhesive for the assembly membership check, direction laboratory-to-assembly, the calibration rule for mapping the source interval, and tolerance no selector-meaning loss and at most 2 °C boundary uncertainty.
Use that translation only while exact A.10 relation EP-adhesive-scope-translation connects the claim and that bounded use to evidence record CalibrationComparisonRecord.Calib-v3-to-AssemblyCalibration-v5.2026-07-25. Provenance edge CalibrationComparisonRecord.Calib-v3-to-AssemblyCalibration-v5.2026-07-25 --carriedBy--> CalibrationComparisonRegister.Calib-v3-to-AssemblyCalibration-v5.2026-07-25.csv names its carrier. The window runs from 2026-07-25 through 2026-10-23 and closes earlier if either calibration edition, the mapping rule, or the 2 °C tolerance changes.
The path supports neither reverse translation, a mapping outside the named rule or tolerance, nor a claim that the A.6.1 application or membership evaluation occurred. This fixture asserts no evidence-producing or evidence-interpreting Work, current role assignment, or method trace. If the record, carrier, or provenance edge is missing or stale, or the window closes, stop before translation and set RelianceDisposition=reopen; otherwise RelianceDisposition=pass applies only to this bounded use. No assurance claim is made and the use does not meet B.3's material-reliance threshold.
The actual A.6.1 application deriveTranslatedScope(G_adhesive, B-lab-assembly-temp, C-adhesive-scope-translation, AssemblyReferenceScheme) applies the named rule and tolerance and returns the explicitly narrowed receiving scope [122,148]°C. The receiving membership evaluation uses that scope. The Bridge and claim alone do not prove that this calculation occurred or that any target slice is a member.
If the receiving use merely uses another designation for the same sense under an ordinary resolvable reference scheme, introduce no Bridge, use claim, or translation.
Capability: robotic weld Work scope
- Context:
RobotCell‑Weld@2026. - Capability: “Weld seam W at bead width 2.5 ± 0.3 mm, cycle ≤ 12 s.”
- Work scope:
{humidity<60 %, current∈[35,45]A, wire=ER70S‑6, controller=FW‑2.1}. - Job slice:
{humidity=55 %, current=40A, wire=ER70S‑6, controller=FW‑2.1}. - Qualification evaluation time:
2026-07-25, outside the Work-scope tuple. - Guards (WG‑1..3): coverage true; measures satisfied;
qualificationWindowHolds(controller, Recertification90d, 2026-07-25)is true because certification occurred on2026-05-26. - Outcome: capability admitted for this Work.
Controller certificate age does not change Work-scope membership in this case. When the 90-day qualification condition fails, WG-3 stops operational use without removing the Job slice from the scope.
Serial intersection (API + dataset compatibility)
- Claim A (API Standard):
v2.3request schema with constraint “idempotent under retry”. - Claim B (Dataset cohort): “metrics valid for cohort K with schema
ds‑14”. - Composition: service S depends on both A and B → serial intersection of Claim scopes:
{api=v2.3} ∩ {cohort=K, schema=ds‑14}. - Target slice:
{api=v2.3, cohort=K, schema=ds‑14}→ membership true. - Any drift (e.g.,
ds‑15) empties the intersection ⇒ path inapplicable.
Parallel support (SpanUnion) in a safety case
- Line L1: tests on dry asphalt support braking property; scope
S1={surface=dry, speed≤50 km/h}. - Line L2: simulations for wet asphalt; scope
S2={surface=wet, speed≤40 km/h}. - Published scope:
SpanUnion({S1,S2})={(dry, ≤50), (wet, ≤40)}with independence note (L1 empirical, L2 model‑validated). - Guard: allowed; union does not include
(wet, 45)because not supported.
ML model deployment with different local feature senses
- Model claim: “AUC >= 0.92 on cohort K, pipeline P, feature sense
Training.F.” - Claim scope:
{cohort=K, pipeline=P, exactLocalSense=Training.F}. NogammaTimeselector is present because this example does not claim that model applicability changes with the slice time. - Target slice: product
On-Device@v7, pipelineP-prime, feature senseDevice.F-prime. - Translation trigger: ordinary designation resolution fails because
Training.FandDevice.F-primehave different declared semantics, not merely different labels. Exact F.9 BridgeB-training-device-featureobtains between those cells under a lossy-subset correspondence profile; the profile carries no device-use rule or tolerance. - Bounded translation claim: exact current C.2.1 claim
C-device-feature-scope-translationhas that Bridge as EntityOfConcern and affirmative polarity. It names usetranslate the training claim scope for the On-Device@v7 membership check, direction training-to-device, the subset-mapping rule, and toleranceno feature-kind substitution and no target slice outside the tested mapped subset. - Evidence and reliance: Before translating, verify that exact A.10 relation
EP-device-feature-scope-translationconnects claimC-device-feature-scope-translationand this bounded use to both records below.- Mapping evidence:
MappingTestRecord.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25, with exact carrier edgeMappingTestRecord.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25 --carriedBy--> MappingTestReport.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25.json. - Training evidence:
TrainingEvaluationEvidence.K-P-TrainingF.2026-07-25, with exact carrier edgeTrainingEvaluationEvidence.K-P-TrainingF.2026-07-25 --carriedBy--> TrainingEvaluationReport.K-P-TrainingF.2026-07-25.json. - Window and stop: the 180-day window runs from
2026-07-25through2027-01-21and closes earlier if pipelinePorP-prime, either feature-sense edition, or the tested mapped subset changes. If a record, carrier, or edge is missing or stale, the window closes, or a named dependency changes, stop before translation and setRelianceDisposition=reopen; otherwiseRelianceDisposition=passapplies only to this bounded use. - Boundary: the path supports neither feature-kind substitution, a target outside the tested subset, material release or assurance, nor a claim that deployment occurred. This fixture asserts no evidence-producing or evidence-interpreting Work, current role assignment, or method trace. No assurance claim is made and the B.3 material-reliance threshold is not met; a material release or assurance use must instead enter B.3.
- Mapping evidence:
- Guard: bind
translatedScope := deriveTranslatedScope(G, B-training-device-feature, C-device-feature-scope-translation, ProductReferenceScheme), then evaluateevaluateMembership(TargetSlice, translatedScope, InterpretationBasis); separately require the chosen formality predicate. The translated scope covers only the tested mapped subset. Neither the claim nor its passing reliance makes the derivation application or deployment occur. - Outcome: admit only a target slice in the returned subset; otherwise return false or unknown according to the exact returned scope and available evaluation input.
Bias-Annotation
USM counters three recurring biases. First, scope wording can hide a claim that the object is usable everywhere; require an addressable U.ContextSlice instead of a vague domain phrase. Second, abstract wording can be mistaken for wider scope; keep abstraction tier and detail separate from U.Scope. Third, publication convenience can be mistaken for content permission; U.PublicationScope bounds the publication surface and does not widen U.ClaimScope or U.WorkScope.
Conformance Checklist (USM)
Common Anti-Patterns and How to Avoid Them
Consequences
A correct USM use makes scope checks reproducible: every judgment names an exact scope and slice, and true, false, and unknown evaluation results have different actions. Translation appears only for exact local senses after an obtaining F.9 Bridge, a separate affirmative C.2.1 claim about the proposed translation, and its current A.10 or B.3 reliance branch are distinguished. The cost is naming the selectors, mapping rule, tolerated loss, and evidence that actually affect the receiving use while keeping membership truth, operation application, result epistemes, representations, model applicability, and structure separate.
Playbooks (Informative)
Manager’s six-step use
- Name the claim and exact scope. Do not start from a context label or table.
- Name the target slice. Designate the independently identified slice; bind only the declared selector projection that this membership evaluation needs.
- Evaluate membership. True admits the scope condition; false stops it; unknown requires abstention, a missing input, or a narrower attempted use.
- Keep other checks separate. Formality, evidence freshness, capability measures, qualification, gate, and decision have their own predicates.
- Translate only when needed. Name the exact local senses and obtaining F.9 Bridge; then state the separate affirmative C.2.1 claim for this translation's direction, rule, and tolerance and establish its A.10 or B.3 reliance branch before using the returned scope.
- Persist only what the use needs. A C.2.1 result episteme may record the judgment when a named receiving use needs it to persist; a C.29 table may display it. Neither changes membership. Use A.15.PROD only when the current claim is that the work first constituted that episteme.
Architect’s design rubric for scopes
- Prefer predicates over prose. Name the parameters, ranges, and standard editions that affect membership; name
gammaTimeonly when time affects membership. - Factor common conditions. Use Refit to normalize units and factor shared predicates; do not widen by stealth.
- Partition support lines. If you plan a SpanUnion, document independence up front.
- Keep scope thin & honest. Publish what you can support; add slices as support appears (ΔG+).
- Design translations early. Test the direct F.9 Bridge first, then state each proposed translation use separately with its direction, mapping rule, tolerated loss, and evidence plan; do not turn an expected loss score into permission to use the mapping.
Minimal DSL snippet for scope blocks (illustrative)
(Illustrative only; the specification does not mandate a particular syntax.)
Profiles as Scope configurations (informative)
Idea. A Scope profile is a named, editioned configuration that expands to a concrete U.Scope predicate block (over U.ContextSlice), used to avoid repetition and to keep declarations consistent across carriers.
Rules.
- P1 (Expansion). Profiles are macros: guards MUST expand them to explicit predicates before evaluating
Scope covers TargetSlice. - P2 (Edition). Profiles are editioned. A changed predicate expression is a content change for a carrier that references the profile even when the exact scope extension is preserved; a changed extension additionally identifies another scope value.
- P3 (No stealth widen). A profile update MUST NOT implicitly widen a carrier’s published scope; ΔG+ must be explicit in that carrier.
- P4 (Translation awareness). If a profile expands to predicates whose exact local senses require translation, name the obtaining F.9 Bridge and the separate affirmative C.2.1 claim for that translation's direction, rule, and tolerance. The receiving guard must recover the current A.10 or B.3 reliance branch; a different label, scheme, profile, or Bridge Card alone is insufficient.
- P5 (No hidden owner). A profile expands to predicates; it is not a context object, scope owner, or additional scope kind.
Examples (illustrative).
— An engineering team defines Ops-Lab-v3 as a profile pinning standard editions and environment selectors. It leaves LabEvidenceRelevanceWindow365d to the receiving A.10/R guard and contains no gammaTime, because evidence age does not change scope membership.
— A field team defines WinterCampaign-v1 with gammaTime in [2026-11-01, 2027-03-31] because the exact scope predicate admits only slices during the declared winter campaign; a slice before or after those boundaries is a non-member.
— A publication stack defines TechCard‑Lite@Σ as a profile that narrows U.PublicationScope to slices where required pins are available.
Governance Hooks & Audits
Durable audit evidence, when needed
When a scope-aware decision needs durable audit evidence, its C.2.1 result episteme may name:
- Using object and exact scope. The claim-bearing episteme, capability, or publication object designates or uses the exact scope; it does not own the scope as a hidden context field.
- Exact target slice. Designate the independently identified slice with its complete declared selector schema and values. An evaluation may bind only the projection its scope predicate inspects; that projection does not replace slice identity. Include
gammaTimein the schema only when that temporal selector is part of the exact slice being evaluated. - Evaluation outcome. Record
true,false, orunknown, plus the evaluation method or work occurrence when replay needs it. - Separate guard outcomes. Record work measures, qualification windows, formality, or freshness only when the receiving use checks them; none is membership.
- Translation evidence, only when triggered. Name the exact obtaining F.9 Bridge, the separate C.2.1 claim with its polarity, use, direction, rule, and tolerance, and the exact A.10 or B.3 reliance branch. Record any observed loss as evidence rather than a Bridge identity field.
- Scope change. Say whether the declared set widened, narrowed, or remained identical under refit.
Recording these facts does not make membership true, identify the scope, or create a membership-relation occurrence.
USM compliance levels (informative)
- USM-Ready. Exact scope and slice values are declared; editors can distinguish membership from evaluation, evidence, representation, and structure.
- USM-Guarded. Guards evaluate exact Claim scope or Work scope membership and keep measures, qualification, freshness, and
gammaTimewhen material as separate checks. - USM-Auditable. Durable result epistemes identify the exact scope, slice, and evaluation result. When translation was triggered, they cite the obtaining F.9 Bridge, separate bounded-use claim, and current A.10 or B.3 reliance without treating those citations as membership truth.
- USM‑Composed. Serial intersection and SpanUnion are implemented in composition tooling.
Audit checklist (informative)
- Does each guard name a concrete TargetSlice?
- Is membership reproducibly evaluable from the exact declared predicate and required inputs?
- Are freshness and coverage separate predicates?
- When exact local-sense translation was required, are the obtaining F.9 Bridge, separate C.2.1 use claim, direction, rule, tolerance, polarity, and current A.10 or B.3 reliance branch named?
- For parallel support: is independence justified?
Risk controls (informative)
- Silent widening. Require ΔG+ review; flag any scope increase without new direct support. A Bridge may translate supported conditions but does not supply support.
- Opaque slices. Disallow “domain” placeholders; enforce addressable selectors.
- Time drift. Require an exact
gammaTimeboundary only when the scope predicate itself changes membership across time; keep qualification, calibration, recertification, data-age, and evidence-freshness windows under their direct guards.
Extended FAQ (informative)
Q1. Is “Claim scope” the same as “domain”?
No. “Domain” is descriptive and often fuzzy. Claim scope is addressable: it supplies an exact predicate over the U.ContextSlice selectors that determine membership, including gammaTime only when the predicate changes membership across time. Guards reference the exact slice, not a generic domain.
Q2. How do we express partial coverage across different cohorts or platforms?
Declare each supported serial scope (S₁, S₂, …) and publish SpanUnion({Sᵢ}) with independence justification. Do not include unsupported slices.
Q3. Can raising F (formalizing) widen G? Only if the formalization explicitly changes the scope predicates (ΔG+). Formalization alone does not widen scope.
Q4. What is the difference between Work scope and SLOs? Work scope is where the capability can deliver; measures within the guard are what it promises there (SLO targets). Both are required at use time (WG‑1..3).
Q5. Can we assign numeric coverage to G?
Not normatively. G is set‑valued. You MAY attach an informative, explicitly declared CoverageMetric(G) (e.g., a proportion under a pinned policy) to aid R assessment, but guards use set membership and CoverageMetric(G) MUST NOT replace G.
Q6. How do we handle “latest data” scopes?
First decide what “latest” is doing. If it means that evidence or data must be no older than 90 days, do not put it in Claim scope: require the A.10 evidence-provenance path to satisfy its exact 90-day relevance or currentness window at the receiving use time. Put gammaTime in the scope only when claim applicability itself changes with the slice time, and state the membership boundary—for example, slices whose observation time falls outside the declared interval are non-members. The word “latest” alone supplies neither boundary.
Q7. How do we use a scope with differently named slice selectors?
First resolve whether the designations refer to the same values under the effective reference scheme. If exact local senses differ and membership must be expressed across them, name the obtaining F.9 Bridge. Then state the separate affirmative C.2.1 claim for the proposed translation's direction, mapping rule, and tolerated loss, establish the exact A.10 or B.3 reliance branch, and evaluate the scope returned by deriveTranslatedScope. A different project, place, label, reference scheme, profile, or card alone does not move or translate the scope.
Q8. What about abstraction level or detail?
Keep AT (AbstractionTier) and D (Detail and Resolution) as orthogonal, optional annotations. They never substitute for Claim scope or Work scope.
Q9. Can a capability’s Work scope be broader than a predecessor claim’s Claim scope on a dependency path? They are on different carriers. In a serial dependency, the effective scope is the intersection; the broader one does not dominate.
Q10. When does an empty scope make sense? No slice satisfies the declared predicate, so the receiving guard stops. This may occur during early drafting or after a refutation; it does not create a special context, time, or complement entity.
Annexes (informative)
Source wording -> USM dictionary
(Use these source terms only in explanatory notes; not in guards or conformance text.)
Minimal data model hints
ContextSlice tuple (suggested keys):
effectiveReferenceScheme, one exact declaredSelectorSchema, the values of every selector in that schema, and optional selector families such as exactLocalSenseRefs, standardOrInterfaceEditions, environmentOrPlatformSelectors, cohortOrJurisdictionSelectors, and gammaTime only when that selector belongs to the declared schema because membership changes across time. A scope predicate declares which projection it inspects; it does not define the tuple's identity.
Claim-scope predicate block:
assumptions, cohorts, platformOrStandardEditions, environmentSelectors, exactLocalSenseRefs?, and gammaTime? when time changes membership.
Work-scope predicate block:
environmentSelectors, platformOrStandardEditions, resourceRegimeSelectors, exactLocalSenseRefs?, and gammaTime? when time changes membership.
Publication-scope predicate block: the exact audience, interface, availability, and other selectors that restrict publication use, always as a subset of the underlying claim or work scopes.
Separate use-time guard: work-measure targets, qualification windows, evidence freshness, and any decision threshold. These are not fields of the scope value. (These are informative; the spec does not mandate a concrete serialization.)
Pseudocode membership evaluation (illustrative)
required_selectors returns the projection needed by this scope predicate; it neither creates nor reidentifies target_slice. UNKNOWN belongs to the evaluation result because a required input is unavailable. The underlying membership predicate remains bivalent for an exact, fully interpreted scope and slice.
Rationale
A.2.6 needs a scope mechanism because scope is neither evidence freshness nor expression rigor: it is the set-valued condition under which a claim, work capability, or publication surface may be used. USM makes those membership conditions addressable, composable, and reopenable while preserving the F/G/R separation. When exact local senses require translation, F.9 supplies the Bridge, C.2.1 supplies the separate claim about this use, and A.10 or B.3 supplies reliance; A.2.6 alone governs the scope calculation and membership question.
SoTA-Echoing - F-Cluster Unification for A.2.6 (F.17 and F.18)
Intent. This annex applies the F‑cluster method to triangulate USM terms against a diverse set of post‑2015 sources and communities (“Contexts”), and then fixes the Unified Tech and Plain names used in A.2.6. Results are ready for downstream lexicon entries (Part E) and guard templates (ESG / Method–Work).
F.17 Unified Term Survey (UTS) — Method & Scope
Contexts surveyed (SoTA, diverse):
- ISO/IEC/IEEE 42010 (architecture description)
- OMG Essence (Kernel: Alphas, Work Products, States)
- NIST AI RMF 1.0/1.1 (trustworthy AI)
- ASME V&V 40–2018 / FDA 2021–2023 (model credibility)
- W3C SHACL (2017+) / SHACL‑AF (data constraints)
- OWL 2 / ontology engineering (2012+, current practice)
- IETF BCP 14 (RFC 2119/8174) (normative keywords & guard style)
- DO‑178C + DO‑333 (avionics, formal methods supplement)
- ISO 26262:2018/2025 (automotive functional safety)
- IEC 61508 (2010+, current revisions) (basic safety)
- ACM Artifact Review & Badging v1.1 (reproducibility signals)
- MLOps/Cloud SLO practice (SRE / platform) (operational guardrails)
Survey focus (terms we align): U.ContextSlice, generic Scope and set algebra, Claim scope (G), Work scope, Bridge plus a separate bounded-use claim and reliance basis, Γ_time, widen, narrow, refit, translate, SpanUnion, serial intersection, separation from F and R, and avoidance of overloaded validity and operation terms.
UTS Table (F.17) — Cross‑context term mapping
Summary. Across all Contexts, two stable notions recur: (1) evaluate in a concrete context (→ U.ContextSlice), and (2) declare where something holds or is deliverable (→ set‑valued Scope). “Context of use,” “operating modes,” “targets,” “class extension,” and “OSED” are all Context‑flavored presentations of Claim scope or Work scope. Terms like validity and operation are semantically close but collide with LA and FPF’s Work and Run lexicon; we therefore do not adopt them as characteristic names.
F.18 Term Selection — Unified Tech & Plain names
Selected names (normative)
Why these names (decision grounds):
- “Scope” wins over “envelope/applicability/validity”. It is short, self‑documenting, and already idiomatic in SRE/SW, while “validity” clashes with Validation Assurance (LA) and “envelope” suggests geometry, not membership.
- “Claim scope” vs “Work scope”. Two‑word compounds meet the FPF clarity rule: the first token reveals the carrier (Claim vs Work/Capability), the second the mechanism (scope).
- Keep G. The F–G–R triple is canonical; we retain G as nickname for Claim scope.
- “Context slice” keeps the evaluation target addressable through its exact declared selector schema and values; one membership predicate may inspect only a projection without reidentifying the slice.
- “Operation”, “operating”, and “validity” avoided. They are overloaded in existing FPF lanes (Work, Run, and LA) and create policy ambiguities in guards.
Phrasebook (for editors, normative)
- Use “Claim scope (G) covers TargetSlice” and “Work scope covers JobSlice” in guards.
- When time changes membership, name exact
gammaTime; never say “latest.” Omit it when time is irrelevant. - To compose, say: “intersection along dependency paths; SpanUnion across independent support lines.”
- When exact local-sense translation is current, say: “through an obtaining F.9 Bridge and a separate affirmative C.2.1 claim for this direction, rule, and tolerance; rely on it only through the current A.10 or B.3 branch, then evaluate membership on the returned scope.”
- When widening/narrowing, write “ΔG+ / ΔG−” and log the support change; use “Refit” for unit/param normalization.
Rosetta summary (informative, for rationale box)
Outcome. The UTS shows clear convergence across SoTA Contexts on addressable context and set‑valued applicability. F.18 therefore fixes: Context slice, Scope, Claim scope (G), Work scope, Publication scope with the algebra and guard clauses mandated in A.2.6. This closes synonym drift while remaining readable for engineering managers and precise for assurance tooling.
Relations - Cross-Pattern Coordination
With F–G–R (C.2.2)
- G is Claim scope. Use set algebra (∩ / SpanUnion).
- F remains the expression rigor (C.2.3); R captures evidence currentness and bounded reliance. Observed loss may bear on the translation-use claim; its permitted-loss tolerance remains in that claim rather than in G or the Bridge profile.
- Weakest‑link. On dependency paths: F_composite = min(F), R_composite = min(R); G follows §7.2–§7.3 (set rules).
With Formality (C.2.3)
- No conflation. Raising F does not change G unless scope predicates change.
- Guarding rigor. ESG may use
Formality >= F_kalongside scope coverage.
With Work & Run (A.15)
- Work scope delimits the exact job slices on which a capability's deliverability claim is evaluated; it is not the
U.Workoccurrence or its execution setting. - Method–Work gates use Work scope coverage plus measures and qualification windows.
With exact F.9 Bridge occurrences
- Translation boundary. Use an exact F.9 Bridge only for exact local-sense translation. State the translation's direction, rule, tolerated loss, and polarity in a separate C.2.1 claim, then recover the exact passing A.10 or positive B.3 reliance branch before the receiving use proceeds; none makes membership true or false by itself.
- Best practice. Return an explicitly narrower scope when the bounded-use claim's rule and tolerance support only a proper subset; do not turn observed mapping loss into a Bridge identity field or a generic R penalty.
With Capability governance (A.2.2)
- Capabilities MUST declare Work scope, measures, qualification windows; gates MUST verify all three.
- Capability refits that preserve the set (unit changes) are Refit, not Δ(WorkScope).
A.2.6:End
RoleRelationStructure@BoundedContext - Context-Local Role Relations and Representation-Lens Boundary
Status: Stable Type: Ontic relation-structure pattern
Kind Settlement
Use this pattern when a project needs context-local role substitution, incompatibility, factor, qualification, bundle relations, or role-decomposition repair without turning labels or role-algebra notation into a second ontology.
What goes wrong if missed. Role labels start carrying type, capability, method, work, evidence, or permission claims, and a representation lens starts replacing the role relation structure in life.
What this buys. Role-relation claims stay small, local, and inspectable while role assignment, capability, method, work, evidence, source, status, publication, and lens claims keep their own governing patterns.
A.2.7 does not admit U.RoleAlgebra as a durable U-kind. The governed object is RoleRelationStructure@BoundedContext: a selected context-local relation structure over role descriptions, U.Role values, role expressions, substitution, incompatibility, and bundle-expression relations. A role algebra, graph, matrix, embedding, distributed model, or neural representation is a mathematical or representation lens over that structure, not the structure itself and not an operation on holder systems.
RoleRelationStructure@BoundedContext is the FPF object for context-local relations among role descriptions, declared role values, local role expressions, role-bundle expressions, and role-assignment-admission uses. It is not a new U.* kind beside U.Role; it is a selected relation structure over role-side values inside one bounded context. When project prose calls this "role architecture", the FPF object is still the selected role-relation structure in life; a role-algebra, graph, matrix, embedding, distributed, or neural description is a lens over that structure, not the structure itself and not an operation on holder systems. Coupled method relations are governed symmetrically as MethodRelationStructure@BoundedContext under A.3.1, A.3.2, A.15, G.5, or a direct method-composition pattern when current; A.2.7 names the role-relation side and the bridge to role-method naming.
Use this pattern when a method, work-admission rule, staffing rule, safety case, governance rule, or role description needs to say that one role value can satisfy a role-admission condition stated with another role value, two roles cannot be held together by the same holder during the same window, a role expression has a factor or domain qualification, a role-decomposition claim needs grounding, or a frequent conjunction of roles is worth naming.
Primary EntityOfConcern. The EntityOfConcern is RoleRelationStructure@BoundedContext: a context-local role-relation and role-expression structure in one U.BoundedContext. Algebraic notation, matrices, partial orders, products, graphs, embeddings, neural representations, or other mathematical or representation expressions are descriptions or lenses of that structure. The role architecture in life is the selected relation structure among role values and role expressions; the lens is not the holder, not the performed work, not the living system, not the method, and not the role assignment.
Primary working reader. A manager, architect, method author, safety assessor, or model author who needs role-admission substitution, separation-of-duties, role-factor or qualification expression, role-bundle expression, or ordinary name guidance without turning the role relation structure into capability, method, holder, work, evidence, status, or kind hierarchy.
First useful move. Name the bounded context, the role descriptions or role values being related, the local role expression or relation being claimed, and the assignment, method, work-admission, naming, or bridge check that will use that relation. If the claim decomposes a role, first decide whether the recovered object is role-admission substitution, factor or qualification, bundle expression, separate role value, role-state refinement, capability-fit condition, responsibility, permission, commitment, or obligation relation, method/work decomposition, or only ordinary prose. Use a role-algebra lens only when mathematical notation helps state or check that relation.
What goes wrong if missed. Role names start acting like type hierarchy, org-chart hierarchy, permission policy, capability model, method family, staffing plan, or cross-context translation. Then FPF grows a second ontology beside U.Role, U.RoleAssignment, U.Capability, and method or work patterns, or treats algebraic notation as if it were the object in life.
What this buys. Context-local role relation structure gives a small, replayable set of role relations for role assignment, method role-admission checks, naming, and bridge work while keeping ability, work, method, evidence, and status claims in their governing patterns. Role-algebra notation remains a lens for describing those relations, not a substitute ontology.
Not this pattern when.
- If the current claim is who holds a role, use
A.2.1. - If the current claim is whether an assignment is currently in a work-admitting state, use
A.2.5. - If the current claim is ability, use
A.2.2. - If the current claim is a method, method family, or method description, use
A.3.1orA.3.2. - If the current claim is performed work or planned work, use
A.15,A.15.1, orA.15.2. - If the current claim is cross-context naming or translation, use F-family context and naming patterns such as
F.9andF.18. - If the current claim is evidence, source, status, assurance, publication, or description use, use
C.2.1,A.10,B.3,E.17.*,E.24.PUB, orA.7as the direct governing pattern for that episteme-use claim.
Problem frame
Use this when a method, work-admission rule, staffing rule, safety case, governance rule, or role description needs a declared context-local relation among role values, role expressions, or role-bundle expressions.
What goes wrong if missed. Role labels act as type hierarchy, org chart, permission, capability, method family, staffing plan, or cross-context equivalence; mathematical notation then starts replacing the role relation structure in life.
What this buys. Role-admission substitution, incompatibility, role factors, and role bundles become inspectable local relations while role assignment, capability, method, work, evidence, source, status, and publication claims stay with their governing patterns.
Work governed by role values and role assignments often needs three small claims:
- One role value can satisfy a role-admission condition stated with another role value in the same context when a role-admission substitution relation is declared.
- Two roles are incompatible for the same holder during overlapping windows.
- A recurring conjunction of roles can be named as a role bundle expression.
Role decomposition is not a fourth primitive and not evidence of role holonhood. It prompts recovery of one of the declared relations above, a role-state refinement under A.2.5, a separate role value under A.2, a capability, responsibility, permission, commitment, or obligation relation under its direct owner, or a coupled method/work decomposition under A.15.
Without a local role relation structure, teams usually encode those claims in the wrong objects:
- a role assignment says "senior inspector" and silently satisfies "inspector" without declared relation;
- a separation-of-duties rule is written as a deontic slogan rather than an incompatibility relation over assignments;
- a role bundle becomes a new holder, capability, work product, or method;
- a cross-context label match is treated as role equivalence;
- method role-admission wording smuggles capability or work claims into role names.
A.2.7 keeps the role relation structure small and local. It says how role values, role descriptions, and role expressions relate; it does not say who holds them, whether holders are able, whether work happened, or whether an episteme proves something. Algebraic, graph, factor, embedding, distributed, neural, or other mathematical descriptions are optional lenses over that structure.
Problem
A combined role expression such as engineer-roboticist, inspector-auditor, or musician-teacher can hide several different claims: a local role-admission substitution, a role bundle, a factor or qualification, an incompatibility, a holder assignment, a capability claim, a responsibility, permission, commitment, or obligation relation, a role-state refinement, or a method/work coupling. The problem is to recover the local role relation structure without minting a new universal role kind, treating role decomposition as mereological parthood, or treating an algebraic, graph, factor, embedding, or neural description as the role structure itself.
Forces
Solution - Core Role-Relation Structure
RoleRelationStructure@BoundedContext is a relation structure declared inside one U.BoundedContext. A role-algebra description may be attached when notation helps inspection, but the structure remains the governed object.
BoundedContextRef. The role relation structure is local. A relation declared in HospitalOR_2026 does not automatically apply in PlantMaintenance_2026 or another hospital's governance context.
RoleDescriptionRefs. Role descriptions may supply the recognized meaning of role values or role expressions. They are description epistemes, not the holder, not the assignment, and not the algebraic lens.
RoleValueSet. The structure ranges over U.Role values governed by [A.2](/generated/patterns/A.2).
RoleExpressionSet. The structure may include context-local role expressions such as qualified roles, bundle expressions, decomposition candidates, or labels that ordinary prose uses before a durable role value is declared.
RoleAdmissionSubstitutionSet. The context may declare AcceptedAssignmentRole <= AdmissionConditionRole as a role-admission substitution relation. This is a local admissibility relation for method, work-admission, staffing, safety, or governance checks. It is not kind subsumption, org-chart rank, capability evidence, source-label equivalence, or public naming.
IncompatibilityRelationSet. The context may declare RoleA incompatibleWith RoleB. This means the same holder cannot use overlapping role assignments for both roles in the same bounded context and window when that incompatibility is current for the work claim.
FactorOrQualificationExpressionSet. The context may declare that one ordinary label is a qualified role expression, such as engineer qualified by robotics domain, method family, practice, or work field. This does not automatically create a separate RoboticistRole or a combined role value.
BundleExpressionSet. The context may declare RoleBundle := Role1 and Role2 and Role3 as a role-bundle expression. The expression is satisfied only by valid assignments to each component role under the same bounded context and required window. It does not create a composite holder, composite capability, or method.
MathematicalOrRepresentationDescriptionRefs. A mathematical or representation description may use order, product, factorization, graph, matrix, embedding, neural representation, distributed model, or another lens to express the selected role relation structure. This description is governed like any lens use: it names what it represents, what it preserves, what it loses, and what it must not be overread to prove.
UseRelationRefs. A method step, work-admission check, staffing rule, safety case, naming decision, or governance rule may cite the role relation it uses.
Role-Relation Expressions
Role Decomposition Boundary
Start from the object claim, not from the word used for it. If a role is decomposed, the admissible repairs are:
- role-admission substitution when one role assignment may satisfy a role-admission condition stated with another role value;
- factor or qualification when one role expression narrows a role by domain, practice, method family, work field, or context;
- bundle expression when several independent role assignments must be held together;
- separate role value when the bounded context needs its own role description, state expectations, capability-fit conditions, and method or work relations;
- role-state refinement under
A.2.5when only enactable-state detail changes; - capability-fit condition, responsibility relation, permission, commitment, or obligation under the direct owner when the decomposition actually names those objects;
- method or work decomposition under
A.15when the source actually divides method into submethods or work into work-part relations.
Do not use role partOf. U.Role is a root work-facing role value under A.2, not an admitted holon kind under A.1.
Do not infer role parts from slots. RoleAssignment, role-state relations, evidence-use relations, and role-relation structures may declare SlotSpecs under A.6.5; those SlotSpecs are relation positions. Role descriptions may have episteme constituents. Neither case supplies parts of the U.Role value.
Role-Admission Substitution
Use role-admission substitution when one role value can satisfy a role-admission condition stated with another role value in the same bounded context.
Read this as: an assignment to SeniorWeldingInspector may satisfy a method or work-admission condition stated with WeldingInspector when the bounded context declares that substitution and the assignment window is current.
The relation is not kind subsumption. SeniorWeldingInspector is not a subtype of a system kind; it is a role value related to another role value for local admission satisfaction. It is also not capability evidence, public naming, or method identity. A senior inspector role may still need a separate capability-fit claim under [A.2.2](/generated/patterns/A.2.2), a method relation under [A.3.1](/generated/patterns/A.3.1)/[A.3.2](/generated/patterns/A.3.2), or a naming settlement under [F.5](/generated/patterns/F.5)/[F.18](/generated/patterns/F.18).
Role Incompatibility
Use role incompatibility when the same holder cannot validly use overlapping assignments to two roles in the same context and window.
This relation is often used for separation-of-duties or independence constraints. It does not create a commitment object, permission policy, or evidence record by itself. A work-admission check may use it to reject the proposed assignment combination.
Role Bundle Expression
Use a role bundle expression when a frequent conjunction of roles is useful to name inside one context.
The bundle expression is satisfied by current assignments to all component roles under the same bounded context and required window. It is not a product of role values, not a new holder, not a method, and not a capability.
A bundle expression becomes a durable role value only when the bounded context declares it as a role with its own role description, role-state expectations, capability-fit conditions, and method or work relations where current.
How Role Relation Structure Is Used
Role relation structure is normally used by neighboring patterns as one selected structure, sometimes informally called the local role architecture:
The role relation structure supplies one role-substitution relation used by the method role-admission or work-admission check. The method, method family, method relation structure, work plan, performed work, capability envelope, and evidence use remain governed by their direct patterns. When a method relation or method composition structure also needs to be named, the current object is MethodRelationStructure@BoundedContext under [A.3.1](/generated/patterns/A.3.1), [A.3.2](/generated/patterns/A.3.2), [A.15](/generated/patterns/A.15), [G.5](/generated/patterns/G.5), or a direct method-composition pattern when current; method-algebra notation is a lens over that structure, not a hidden product of roles.
Naming role-relation and role-method expressions
Role relation work may leave behind something people need to name in ordinary project prose. The named object is not always an atomic U.Role value. It may be a holder-in-role statement, a context-local role expression, a role-admission substitution relation, an incompatibility relation, a role-bundle expression, a durable combined role value, a coupled role-method expression, a method name, or a work name.
Recover the named object before choosing the label:
Role and Method suffixes are optional Tech-register disambiguators. They are not ordinary-name requirements and they do not create the FPF kind. A user-facing sentence may say "Vasya is an engineer-roboticist and musician" without saying "role" when the FPF record or surrounding context lets a reader recover the role expression, role values, holder assignments, methods, and work separately.
Hyphenation is not algebra by itself. Use a hyphenated ordinary label when it helps a reader see a recovered factor, domain, practice, method-family qualification, or combined role expression. Use "and" when the current point is multiple independent role assignments. Do not mechanically concatenate operands into a Tech label.
The math-lens boundary is narrow. A role-algebra, graph, matrix, embedding, distributed, or neural representation is a lens over role values, role-admission substitution relations, incompatibility relations, role-factor or qualification expressions, and role-bundle expressions. The lens is not itself the role, holder, assignment, method, work, or capability. The name attaches to the recovered object or expression, not to the notation that helped recover it.
Archetypal Grounding - Worked Cases
Role-Admission Substitution Without Capability Smuggling
PlantMaintenance_2026 declares:
A method-description source or work-admission check that states HydraulicsTechnician as a role-admission condition may accept an assignment to SeniorHydraulicsTechnician. This does not prove that the technician has the pressure-test capability. The same source or admission check may separately state PressureTestCapability as a capability-fit condition under [A.2.2](/generated/patterns/A.2.2).
Incompatibility for Independence
SafetyCase_2026 declares:
The same holder cannot use overlapping assignments for both roles when approving the same hazard analysis. If a source sentence says "the approver role is independent", A.2.7 recovers the role incompatibility relation; evidence of independence, approval work, and approval records stay in their direct patterns.
Bundle Expression Without New Capability
IncidentOps_2026 declares:
This is a reusable role-bundle expression for method role-admission checks. It does not state that one person has incident-management capability; that remains a capability claim. It does not state that incident work happened; that remains a work claim.
Naming Engineer-Roboticist and Musician
A project says: "Vasya is an engineer, does robot engineering, is therefore an engineer-roboticist. These are musical robots, and Vasya is also a musician, performs music, and teaches robots music."
Good ordinary rewrite:
Vasya is our engineer-roboticist and musician: he works on robot engineering, and in the musical-robots project he also performs music and teaches robots music.
This ordinary sentence is admissible because a reader can recover the separate FPF values behind it:
Do not write "engineer and roboticist and musician" unless EngineerRole, RoboticistRole, and MusicianRole are three independent role values with separate assignments.
Do not write "engineer-roboticist-musician" unless the bounded context declares one durable combined role value or one named role-bundle expression with its own role description and naming settlement. Without that declaration, the label hides that musician is a separate role assignment.
Robot-engineering, music performance, and teaching robots music are method or work names when those values are current. They are not produced by a role-algebra lens merely because their labels share words with role names. The role relation structure and a MethodRelationStructure@BoundedContext can be coupled in the same working sentence, but the FPF record keeps their typed values distinct.
Cross-Context Boundary
Role relation structure is context-local. Matching role labels across contexts are not enough.
ArticleAssessorRole:JournalContext and SafetyAssessorRole:SafetyCaseContext may share a source label, but a role-admission substitution or incompatibility relation in one context does not transfer to the other context by label. Cross-context reuse, bridge, translation, public naming, or semantic alignment uses F-family context and naming patterns.
Bias-Annotation
A.2.7 blocks two biases. The first is role nominalism: a convenient role label starts carrying ability, permission, method, work, evidence, or status claims that belong elsewhere. The second is representation bias: a role algebra, graph, matrix, embedding, or neural representation is mistaken for the role relation structure in life. Recover the relation in the bounded context first; then use a representation lens only for the properties it preserves.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits.
- Method role-admission checks can use declared role substitutions without encoding taxonomy in every method-description source.
- Separation-of-duties and independence claims become inspectable relations over assignments and windows.
- Frequent role conjunctions can be named without creating fake holders or capabilities.
- Role relation structure remains small enough to use in ordinary project work.
Costs.
- Contexts need to declare their role relations instead of relying on job-title intuition.
- Some role-like source labels need F-family cross-context repair before role relation structure can be reused.
- Capability-fit conditions and method role-admission conditions need separate claims when role labels used to hide them.
Rationale
A.2.7 keeps role relation structure as a selected relation structure rather than a new U-kind because the durable object is still U.Role and its contextual use through assignments, states, methods, and work claims. This preserves ordinary role naming while preventing algebraic notation or organizational labels from becoming a second ontology.
SoTA-Echoing
Source-currentness note: RBAC and separation-of-duties are stable lineage, not the full current frontier. Current practice adds attribute and zero-trust authorization, context and currentness checking, policy-as-code practice, and FPF's newer slot-relation discipline. A.2.7 therefore keeps only the role-relation part and leaves currentness, policy decision, capability, method, work, and evidence to their direct patterns.
Relations
Excluded Objects
Do not use RoleRelationStructure@BoundedContext or a role-algebra lens as the current object for:
- holder taxonomy, system kind hierarchy, or org chart hierarchy;
- capability model, skill model, performance threshold, or operating envelope;
- method family, algorithm family, or work procedure;
- work plan, work occurrence, approval act, or audit record;
- evidence graph, source record, standard, report, dashboard, publication, or model card;
- cross-context translation, public naming, or bridge claim.
Those values may cite or justify a role relation. They do not become role relation structure by adjacency.
A.2.7:End
U.Commitment (Deontic Commitment Object)
Status: Stable Type: Definitional ontic pattern
Terminology: “binding” is overloaded (normative)
The word family “bind/binding” is used throughout FPF for technical binding (name/slot binding, parameter binding, etc.). This pattern introduces a narrower lexical constraint: do not use “binding” as the Tech-level term for deontic governance relations. Use commitment and model it as U.Commitment. If source wording uses “binding contract/promise” rhetoric, rewrite it into explicit U.Commitment fields (subject, modality, scope/window, referents, and—when auditable—adjudication).
This pattern therefore treats commitment as the canonical Tech-level term and uses U.Commitment as the kernel object.
If source wording uses “binding” rhetoric (e.g., “binding contract”, “legally binding promise”), treat it as Plain-level phrasing that must be recovered into explicit U.Commitment fields (subject, modality, scope/window, referents, and, when auditable, adjudication). Deontic keywords are cues for the modality field after the deontic relation is recovered; they are not the governed object of this pattern.
Use This When
Use this pattern when a project needs to state who is accountable for what, under which modality, scope, and time window, without pretending that the words in a specification, contract, ticket, API description, or standard are themselves the accountable actor.
What goes wrong if missed. A specification, interface, dashboard, contract text, or ticket is treated as the accountable party; evidence, gate admission, performed work, and commitment content collapse into one deontic-looking sentence.
What this buys. The accountable subject, modality, referent, scope, time window, and adjudication hooks become inspectable without turning publications, evidence, gates, or work occurrences into commitment holders.
Typical moments:
- a promise content, policy clause, requirement, SLA, protocol rule, or standard clause must become an accountable commitment;
- source wording says "MUST", "SHALL", "guarantees", "is responsible for", or "legally binding", and the project must recover the deontic relation rather than normalize keywords by themselves;
- evidence or gates are being attached to a duty and the model must keep commitment content, adjudication evidence, and performed work distinct.
Primary EntityOfConcern. The EntityOfConcern is U.Commitment: a deontic relation linking an accountable subject to referents under explicit modality, scope, validity window, and optional adjudication hooks.
First useful move. Name the accountable subject and the referents first. Then state modality, scope, validity window, and adjudication only if the commitment is meant to be checked or enforced.
Not this pattern when. If the current EntityOfConcern is the promised content, use A.2.3; if it is the communicative act that instituted or revoked the commitment, use A.2.9; if it is a gate or admissibility claim, use the gate or boundary pattern; if it is performed work, use A.15.1.
Type: Definitional (D) Normativity: Normative (unless explicitly marked informative) Placement: Part A → A.2 Roles & Agency Kernel Refines: A.2 (Role Taxonomy) Builds on: E.8 (authoring template), A.2.1 (RoleAssignment), A.2.6 (Scope &
Γ_time), A.7 (EntityOfConcern / Description episteme / carrier), A.2.3 (U.PromiseContentas promise), A.15.1 (U.Work) Purpose (one line): Provide a minimal, reusable kernel object for deontic commitments (who is accountable, under what modality, in what scope/window, with respect to which referents, with which adjudication hooks), explicitly separating the commitment object from its utterance descriptions (A.7), so deontics stop “living” in naming patterns and become stable across A.6 and governance patterns.
Terminology: “binding” is overloaded (normative)
The word family “bind/binding” is used throughout FPF for technical binding (name/slot binding, parameter binding, etc.). This pattern introduces a narrower lexical constraint: do not use “binding” as the Tech-level term for deontic governance relations. Use commitment and model it as U.Commitment. If source wording uses “binding contract/promise” rhetoric, rewrite it into explicit U.Commitment fields (subject, modality, scope/window, referents, and—when auditable—adjudication).
This pattern therefore treats commitment as the canonical Tech-level term and uses U.Commitment as the kernel object.
If source wording uses “binding” rhetoric (e.g., “binding contract”, “legally binding promise”), treat it as Plain-level phrasing that must be recovered into explicit U.Commitment fields (subject, modality, scope/window, referents, and, when auditable, adjudication). Deontic keywords are cues for the modality field after the deontic relation is recovered; they are not the governed object of this pattern.
Problem frame
FPF needs to express boundary governance and socio-technical obligations in a way that is:
- grounded in an accountable role, role assignment, or party (someone is accountable),
- scope-and-window explicit (where/when the commitment holds),
- reference-based (no paraphrase drift; refer to claim IDs),
- adjudicable (if intended to be checkable, it has an evidence story).
In practice, texts use “MUST/SHALL/should”, “commits to”, “guarantees”, “SLA”, “contract”, etc. Without a stable kernel object for the deontic commitment relation, authors either:
- assign agency to descriptions (“the API guarantees…”),
- smuggle admissibility gates into deontics (or vice versa),
- treat evidence as semantic truth,
- or create multiple inconsistent “contracts” across faces.
A.6.B provides L/A/D/E claim-classification discipline, and A.6.C provides contract-language unpacking, but both benefit from a kernel-level object that pins down what a U.Commitment is structurally (so “contract/binding” rhetoric does not leak back in as ontology).
Problem
How can FPF represent a deontic commitment relation so that:
- The accountable subject is explicit (role or role-enactor; not “the spec/interface/service”),
- Modality is explicit and lintable (obligation, recommendation-as-duty, prohibition, and strength),
- Scope and validity window are explicit (bounded context + time + conditions),
- The content is referenceable via stable referent claim IDs (promise contents, gates, evidence targets, etc.),
- Adjudication hooks exist when the commitment is meant to be testable/auditable (links to evidence claims and carrier expectations),
- Conflicts can be represented (without requiring this pattern to solve them).
Forces
Solution
U.Commitment is the kernel object representing a deontic commitment relation: it links an accountable subject (role or role-enactor) to one or more referents via an explicit modality within an explicit scope/window, optionally with adjudication hooks.
This pattern defines:
- a normative minimal structure for
U.Commitment, - how
U.Commitmentrelates toU.PromiseContent,U.Work, and evidence, - how it is used as the canonical payload for D-quadrant obligation, recommendation-as-duty, and prohibition claims (A.6.B), while permission claims route to the exact
A.2.8.PERresult, - and what must be stated for a commitment to be considered auditable.
Normative definition
A U.Commitment is a governance object representing a deontic relation that constrains an accountable subject (role or role-enactor) with respect to one or more referents under an explicit modality and explicit scope/window, optionally with explicit adjudication hooks.
Per A.7, a U.Commitment is not the text that states it: it is an object that is typically instituted by (and recorded via) one or more speech acts and utterance descriptions and may be carried by utterance carriers or publication carriers.
Minimal structure (normative)
A conforming U.Commitment SHALL be representable by the following minimal record (field names are illustrative; the presence/meaning constraints are normative). Required fields are: id, subject, modality, scope, validityWindow, referents. adjudication and source are optional (but may become required by other patterns when auditability or authority must be made explicit).
Normative constraints:
- (C1) Subject must be accountable.
subjectMUST resolve to an accountable role or party; it MUST NOT be “the interface, spec, service, or system” as an episteme. - (C2) Modality must be explicit and normalized.
modalityMUST be present for normative commitments and MUST be normalized toDeonticModalityToken. - (C3) Scope + validity must be explicit.
scopeandvalidityWindowMUST be present. Defaults are allowed only when an explicit context policy is cited as the source of those defaults (do not rely on “implied defaults”).validityWindowexpresses in-force conditions; per-action admissibility gates belong in referencedA-*predicates. - (C4) Referents must be non-empty.
referentsMUST contain at least one referent (what is being obligated, recommended as a duty, or prohibited). - (C5) Referents must be by reference when possible. If the bound content already exists as claim IDs,
referentsSHOULD cite those IDs rather than restating them. - (C6) Auditable commitments must have adjudication hooks. If a commitment is intended to be audited/adjudicated by observation,
adjudication.evidenceRefsSHALL include the evidence claim IDs (typicallyE-*) that carry the adjudication substrate. - (C7) Evidence belongs in adjudication by default. If an
E-*claim is referenced only to define how to measure/verify a commitment, it SHALL be listed inadjudication.evidenceRefs(not inreferents). AnE-*claim MAY appear inreferentsonly when the commitment’s content is itself an evidence-producing/retaining duty (e.g., “MUST retain traces”). - (C8) Default auditability stance is explicit. If
adjudicationis absent, the commitment SHALL be treated as non-auditable by default (aspirational / governance-only), unless another pattern or Context policy explicitly supplies adjudication hooks by reference.
Interaction rules (normative)
-
U.PromiseContentis promise content;U.Commitmentis the governance relation. A service promise clause (what is promised) is not, by itself, an accountable commitment. AU.Commitmentmakes an accountable subject responsible for providing/satisfying the service promise (or for satisfying other governance clauses). -
U.Commitmentis notU.Work. Work is execution; commitment is governance. A commitment may reference evidence targets, but it does not “contain” evidence. -
Commitments may reference admissibility predicates; they must not become predicates. If compliance requires satisfying a gate predicate, the commitment should reference the gate (
A-*) as a referent, rather than rewriting the predicate as prose inside the commitment. -
A
U.Commitmentis a governance object, not a law. Commitments are not truth-conditional invariants. If something is intended to be an invariant, it belongs as law/definition (L), and a commitment can reference it. -
Commitment changes are explicit (no silent mutation). When a commitment is updated, narrowed, broadened, superseded, or revoked, the change SHOULD be represented as a new
U.Commitment(new ID) and an institutingU.SpeechAct(A.2.9) that references the affected commitment IDs (e.g., viaU.Commitment.source.speechActRefand a status/supersession claim), rather than editing a published commitment in place without an auditable change record.
Canonical use in boundary claim registers (recommended)
When using the A.6 stack, represent each D-quadrant atomic claim that states an accountable obligation, recommendation-as-duty, or prohibition as a U.Commitment payload with the fields below. A D-* strong/weak permission, exercise, non-violation, or conflict claim instead cites the exact A.2.8.PER result and does not acquire a U.Commitment payload:
id = D-*,subject = accountable role or party,modality = DeonticModalityToken(normalized from RFC-keyword family usage),referents = {PromiseContentRef, MethodDescriptionRef, L-*, A-* … as needed}(content/targets),adjudication.evidenceRefs = {E-* …}when the commitment is meant to be checkable.
Archetypal Grounding (Tell–Show–Show)
Tell (universal rule)
A deontic statement becomes stable and reviewable when it is represented as a U.Commitment with an accountable subject, an explicit modality, explicit scope/window, referent claim IDs, and—if auditable—explicit evidence hooks.
Show #1 (system archetype: incident response SLO discipline, post‑2015 SRE practice)
A production org states: “Severity‑1 incidents must be responded to within 4 hours.”
A commitment with explicit references:
subject:RoleAssignmentRef(OpsTeam as ProviderRole)(or at leastRoleRef(ProviderRole)),modality:MUST,scope: bounded contextIncidentManagement,validityWindow:calendarYear2026(or “while contract edition X is active”),referents:{PromiseContentRef(SVC-SLO-RESP-4H), A-SEV1-CLASS-1}whereA-SEV1-CLASS-1is the admissibility predicate for “counts as Sev‑1”.adjudication.evidenceRefs:{E-SLO-RESP-1}whereE-SLO-RESP-1defines the measurement substrate and evidence carriers (tickets + timestamps + clock source).
This makes the statement auditable by construction and keeps “classification gate” separate from “duty”.
Show #2 (episteme archetype: protocol specification with behavioural typing motif)
A protocol spec states: “Participants MUST follow the state machine; violations are rejected; traces are retained for audit.”
Model as:
-
A set of
L-*claims defining the state machine and safety/progress properties within the model, -
A-*claims defining what runtime checks count as “admissible trace”, -
D-*commitments instantiated asU.Commitmentwith:subject = RoleRef(ParticipantImplementer)modality = MUSTreferents = {L-STATE-MACHINE-1, A-TRACE-VALID-1, MethodDescriptionRef(TraceRetentionProcedure_v1)}adjudication.evidenceRefs = {E-TRACE-LOG-1}
This mirrors common post‑2015 “protocols as types” practice: semantics and progress live in the model; compliance is agent governance; evidence is trace-based.
Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Kernel universal (any place FPF needs deontic commitment relations).
- Gov bias: prioritizes accountable subjects and adjudication hooks; may increase authoring overhead.
- Arch bias: pushes reference-by-ID and explicit scope/window to preserve evolvability and reduce drift.
- Onto/Epist bias: enforces “descriptions don’t promise”; commitments name accountable subjects.
- Prag bias: aligns with common spec-language practice (RFC keywords) but makes the structure explicit.
- Did bias: favors a small record that can be taught and linted.
Conformance Checklist (normative)
-
CC‑A.2.8‑1 (Accountable subject). A normative
U.CommitmentMUST name an accountablesubject(role assignment, role enactor, or party) and MUST NOT use a specification episteme, interface-description episteme, or document-carried episteme as subject. -
CC‑A.2.8‑2 (Explicit modality). A normative
U.CommitmentMUST specifymodalityasDeonticModalityToken(with any RFC-keyword synonyms normalized to it). -
CC‑A.2.8‑3 (Scope & validity explicit). A normative
U.CommitmentMUST specifyscope(U.ClaimScope) andvalidityWindow(qualification-window policy), or explicitly cite the context policy that supplies defaults (do not rely on “implied defaults”). -
CC‑A.2.8‑4 (Referents present and by ID).
referentsMUST be non‑empty. If the bound content exists as claim IDs, the commitment SHOULD reference those IDs inreferentsrather than restating their content. -
CC‑A.2.8‑5 (Auditable commitments have hooks). If the commitment is intended to be auditable, it SHALL include
adjudication.evidenceRefsreferencing the evidence claims (typicallyE-*) that make adjudication possible. -
CC‑A.2.8‑6 (Evidence separation). If an
E-*claim is referenced only for measurement/verification, it SHALL appear inadjudication.evidenceRefs(not inreferents).
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits
- Makes deontic statements first-class and lintable (subject/modality/scope/referents/hooks).
- Enables clean integration with boundary claim classification (A.6.B) and contract unpacking (A.6.C) without embedding ontology in naming patterns.
- Improves auditability by making evidence expectations explicit only when intended.
Trade-offs / mitigations
- Adds structure to authoring; mitigated by allowing conceptual evidence hooks and default scope policies.
- Does not resolve conflicts between commitments; mitigated by capturing
source/precedencetags and delegating resolution to governance patterns (Part D) and context policy.
Rationale
The triad “promise, utterance, and commitment” is useful for language discipline, but deontic ontology should not be anchored in a naming-focused pattern. A kernel object:
- stabilizes what a “commitment” structurally is,
- ensures “MUST/SHALL” talk is representable without category mistakes,
- and provides the bridge between governance claims and adjudication (via explicit hooks), which is essential for boundary engineering and ethics/governance work.
SoTA-Echoing (informative; post‑2015 alignment)
Informative. Alignment notes; not normative requirements.
- BCP 14 (RFC 2119 + RFC 8174) / modern spec-language discipline (2017+). Treating modality tokens as a controlled family is standard;
U.Commitment.modalitymakes this family explicit and lintable. - Policy-as-code ecosystems (2016+). Modern governance stacks often encode gates as code (e.g., Kubernetes admission controls, OPA/Rego-style policy evaluation) and obligations as process controls; the
U.Commitmentstructure helps keep “gate predicates” separate from “actor duties”, while still linking them by reference. - ODRL-style duty, permission, and prohibition modeling (W3C ODRL 2.2, 2018). The minimal subject/assignee, action/target, constraint/window, and policy shape is widely used, and its source separation is useful. FPF adapts that shape without forcing unlike deontic effects into one modality record:
U.Commitmentkeeps accountable duty/recommendation/prohibition, whileA.2.8.PERowns strong/weak permission and exercise. Both retain explicit subject or beneficiary, action/referent, constraint/window, policy provenance, FPF boundary-claim classification, and evidence discipline. - Trace-based compliance and audit (2018+ supply-chain / reproducibility practice). “Compliance is evidenced by evidence carriers and records” is mainstream;
adjudication.evidenceRefscaptures this without turning evidence into semantics. - Supply-chain attestations (2021+). Attestation-oriented schemes (e.g., SLSA-style provenance, transparency logs) operationalize “claims + evidence carriers”;
adjudication.evidenceRefsis the bridge point without collapsing evidence into truth.
Relations
Uses / builds on
- A.2.1 for identifying accountable roles vs role-enactors (role assignments).
- A.2.6 for expressing scope and time/window (
U.ClaimScope, qualification-window policy). - A.7 for keeping source “binding” wording distinct from utterance descriptions and carriers.
Used by
- A.6.B (Quadrant D) as the canonical payload shape only for obligation, recommendation-as-duty, and prohibition statements; strong or weak permission, exercise, non-violation, and conflict claims cite the exact
A.2.8.PERresult instead. - A.6.C (Contract Unpacking) as the formal governing pattern for the “Commitment” component of the bundle.
- Part D governance/ethics patterns, when current, for expressing layered, conflicting, multi-authority commitments.
Coordinates with
- A.2.3 (
U.PromiseContent): services are promise clauses; commitments assign accountable subjects to those clauses. - A.2.9 (
U.SpeechAct):U.Commitment.source.speechActRefpoints to the instituting communicative work occurrence when provenance matters. - A.15.1 (
U.Work) and evidence patterns: adjudication hooks refer to evidence in work, not to text. - A.2.8.PER: strong grants, permission exercise, weak non-prohibition/non-violation findings, and permission conflicts remain separate from
U.Commitment; a visibleMAYorOPTIONALtoken does not choose between those objects and anA-*entry predicate.
A.2.8:End
Granted Permission, Exercise, and Non-Prohibition
Type: Definitional ontic support pattern Status: Stable Normativity: Normative unless marked informative
Use this when
Use this pattern when a policy, approval, permit, role rule, boundary claim, readiness check, or later work use needs to distinguish five questions: whether a sufficiently complete current frame supports a NonProhibitionFinding@Context; whether a valid grant currently obtains as GrantedPermissionRelation@Context; whether dated matching work exercises it through PermissionExerciseRelation@Context; whether checked actual work supports a NonViolationFinding@Context; and whether an incompatible current grant and norm requires PermissionNormConflictFinding@Context.
The first useful move is to name the beneficiary reference, permitted-action specification or checked work, policy and bounded context, scope, window, and the exact result needed now. Return exactly the warranted NonProhibitionFinding@Context, GrantedPermissionRelation@Context, PermissionExerciseRelation@Context, NonViolationFinding@Context, or PermissionNormConflictFinding@Context; do not infer one from another.
Not this pattern when. Use A.2.8 for an accountable obligation, recommendation-as-duty, or prohibition; A.2.9 for the communicative work that institutes or revokes a grant; A.6.B for L/A/D/E classification; A.15.5 for work-entry readiness; A.21 for gate decisions; and A.15.1 for the identity and result of performed work. This support pattern is not a method, gate, permit carrier, work plan, or generic authorization object.
The primary reader is a policy, boundary, work-planning, assurance, or operations practitioner who must decide exactly what a permission-looking claim can support. The performer of a grant speech act or later work remains an admitted system under a current role assignment; the reader position does not perform those acts.
Problem frame
Permission-looking language often compresses unlike values. “No rule forbids it” may be an incomplete search result. “The permit allows it” may refer to a document, an issuing act, or an enduring relation. “We used the permit” may mean only that a badge was visible, while no matching work occurred. A green gate can also look as if it defeated a current prohibition.
The governed concern is the smallest exact permission result needed for one beneficiary, action specification, context, scope, and window. The act, permit episteme, publication carrier, evidence relation, admissibility predicate, readiness relation, gate decision, actual work, and work result keep their direct owners.
Problem
How can FPF represent positive permission without turning it into an obligation modality, absence-of-evidence claim, permit document, gate result, readiness label, capability, or performed action?
A conforming account must make weak and strong permission different, keep grant occurrence identity inspectable, connect only eligible matching work to a current grant, keep both exercise and non-exercise from establishing a frame-relative non-violation finding, and expose same-scope normative conflicts instead of resolving them by display or wording.
Forces
Solution
Keep the permission objects separate
Use exactly the object warranted by the current claim:
NonProhibitionFinding@Contextis a frame-relative episteme returned before action when a sufficiently complete current normative frame contains no applicable prohibition.GrantedPermissionRelation@Contextis an enduring strong permission instituted under an exact policy.PermissionExerciseRelation@Contextconnects actual dated work to one obtaining grant occurrence when action and beneficiary eligibility match.NonViolationFinding@Contextis a frame-relative episteme about actual work that instantiates no applicable prohibition in the checked frame.PermissionNormConflictFinding@Contextis an episteme exposing an incompatible current grant and prohibition or commitment over matching content, scope, and window.
Absence of any one object does not imply another. In particular, no grant is inferred from a weak finding, no exercise is inferred from a grant, and work outside a grant is not called a violation of that grant.
Use the closed beneficiary reference family
The participant meaning is stable: the exact entity designated by the grant as beneficiary. The reference branch changes only the exercise-eligibility test:
RoleAssignmentRefcovers that exact current assignment.RoleRefcovers current assignments that instantiate the role in the declared context under the grant policy; the role value itself does not perform work.PartyRefcovers work only when its exact performer or on-behalf-of relation satisfies the policy. Shared naming or organizational membership is insufficient.
This is a closed ref union over admitted U.Entity values, not U.PermissionBeneficiary, U.Authorization, or another new U-kind. A materially different beneficiary meaning requires a separate direct-owner decision.
Record weak permission and non-violation as findings
nonProhibited and nonViolating are admissible only when the named frame is current and explicitly sufficiently complete for the intended use. Otherwise the finding is unresolved. Neither finding institutes permission, proves absence outside its frame, or becomes a world-side relation.
For NonViolationFinding@Context, recover the actual performer systems from the named Work and cite their exact covering U.RoleAssignment occurrences. If the checked norm instead turns on work done for a PartyRef, cite the already obtaining subject-owned on-behalf-of relation occurrence. These are direct case facts used by the evaluation, not a new beneficiaryPerformanceBinding episteme. Omit the on-behalf-of reference when no such branch is used.
Declare the strong granted-permission relation
The beneficiary and permitted-action specification are participants. Grantor assignment, instituting act, policy, context, scope/window, and revocation are constructive ground or qualifiers, not collapsed participants.
The relation begins only when an admitted holder U.System performs a U.SpeechAct under the exact grantorAssignmentRef, the act satisfies the current policy's grant-validity predicate, and it institutes permission for the named participants. The assignment's HolderSystemSlot must resolve to that system: the system performs the act, while the assignment supplies its role and authority ground and never acts. The relation obtains while beneficiary applicability, policy continuation, scope, and window hold and no valid revocation or supersession ends it.
One occurrence is identified by the instituting speech-act occurrence, exact beneficiary ref and ref kind, action-specification edition, policy/context, and effective interval. Beneficiary change, renewal, materially changed action specification, non-carried policy edition, or revocation ends or splits the occurrence. A policy edition preserves it only through an explicit satisfied carry-forward rule.
Declare actual exercise
Decide exercise from two observable questions about the existing objects: did this dated Work instantiate the grant's permitted-action specification, and did its actual performer satisfy the grant's beneficiary branch? For a RoleAssignmentRef beneficiary, the grant's assignment must cover the Work and have that performer as its holder. For a RoleRef, beneficiaryAssignmentRef names the covering assignment that instantiates the role. For a PartyRef, the performer must be that party or onBehalfOfRelationOccurrenceRef must cite the already obtaining subject-owned relation licensed by the policy. If either question fails, this exercise relation does not obtain.
No actionMatchFinding or beneficiaryEligibilityFinding is required. The match and eligibility are direct obtaining predicates over the Work, grant, action specification, performer, and cited assignment or on-behalf-of relation. If a receiving assurance or audit use needs a separately recorded evaluation or evidence item, cite that item through its direct owner; do not mint a placeholder episteme merely to fill this relation.
The exercise relation obtains only when those two predicates hold, the grant obtains throughout the exercise interval, and the work remains in scope. The work is a satisfier of permitted action content. It does not satisfy or discharge an obligation and does not consume the grant unless the named policy explicitly makes it single-use or quota-bound.
Non-exercise leaves an obtaining grant unused and ordinarily still obtaining; it does not establish NonViolationFinding@Context. Exercise establishes only the exercise relation and likewise does not establish that finding without the separate checked-frame evaluation. Work outside the action specification, beneficiary binding, scope, or window does not exercise the grant; a separate prohibition, commitment, admissibility, or work owner decides any further consequence.
Expose conflict without inventing precedence
Create the finding only when the grant and current prohibition or commitment concern the same beneficiary/action content, overlapping scope/window, and incompatible practical conclusions. Check that match directly from the two claims and their participants; do not require a beneficiaryAndActionMatchFinding wrapper. Permission and an obligation to perform the same action are not automatically in conflict.
Resolve the conflict through exactly one of two branches:
- The current policy already decides.
applicablePrecedenceRuleRefcites the policy claim whose stated conditions match this beneficiary, action, scope, and window. SetsettledByApplicableRuleonly when that rule itself selects which claim governs the blocked use. - A decision is required. Name the admitted
U.Systemthat decides, the covering assignment under which it performs the datedresolutionWorkRef, and the independently obtaining subject-owned authority relation that authorizes this decision. The direct result relation for that decision must connect the Work to a currentPermissionConflictResolutionResult@Contextselecting either the grant occurrence or the conflicting norm claim for the stated scope/window. The system decides; neither its assignment, authority relation, policy, nor organizational label performs the work.
PermissionConflictResolutionResult@Context is the exact decision result for this conflict, not a generic owner record. Exactly one of selectedGrantOccurrenceRef or selectedNormClaimRef is filled. Its deciderAssignmentRef must cover resolutionWorkRef and have deciderSystemRef as holder; decisionAuthorityRelationOccurrenceRef must independently authorize that decision. If no policy rule decides and no such current result exists, the disposition remains unresolved, even when a responsible office or role is named. Permit text, readiness, or a passing gate does not silently defeat the prohibition.
Keep the handshakes narrow
Archetypal Grounding
Strong grant and exercise. Admitted system MaintenanceCoordinator-A performs a policy-valid grant speech act under MaintenanceCoordinator-A@DayShift, the exact grantor assignment whose holder is that system. The act institutes MaintenanceCalibrationGrant-2026-07-19 : GrantedPermissionRelation@Context for MaintenanceTechnicianRole to run CalibrationProcedure-v3 during one service window. Its beneficiary is a RoleRef. Beneficiary assignment Tech-17@Shift-B instantiates that role for admitted technician system Tech-17; Tech-17 performs dated CalibrationWork-17B under that assignment. The Work instantiates CalibrationProcedure-v3 within the grant's zone, window, and scope, so the action-match predicate holds; Tech-17@Shift-B covers the Work and instantiates the beneficiary role, so the beneficiary predicate holds. CalibrationExercise-17B : PermissionExerciseRelation@Context therefore connects CalibrationWork-17B to MaintenanceCalibrationGrant-2026-07-19, cites beneficiaryAssignmentRef=Tech-17@Shift-B, and states the work interval and scope. No auxiliary match or eligibility finding is created. The assignments ground the grant and work attribution but perform neither act. The grant remains current for the rest of the window because the policy is not single-use. No obligation, readiness, capability, gate passage, safe result, or successful calibration is inferred.
Weak finding. A policy reviewer checks a named, current, sufficiently complete plant-access frame and finds no prohibition applicable to the role, action specification, zone, and window. The result is NonProhibitionFinding@Context(result=nonProhibited), not an instituted grant. If the emergency-policy register cannot be checked, the result is unresolved.
Actual-work non-violation. After CalibrationWork-17B is performed, CalibrationComplianceEvaluation-17B : U.Work checks that Work against PlantCalibrationNormativeFrame-2026-07-19-e3, whose currentness and sufficient completeness for the technician, procedure, zone, and service-window use are named and whose applicable prohibitions are checked. The result is NonViolationFinding@Context(workRef=CalibrationWork-17B, performerAssignmentRefs={Tech-17@Shift-B}, normativeFrameRef=PlantCalibrationNormativeFrame-2026-07-19-e3, evaluationWorkRef=CalibrationComplianceEvaluation-17B, result=nonViolating). It needs no beneficiary-binding episteme: the covering assignment already relates the performer system to the beneficiary role. The separate exercise relation shows which grant the work exercised; exercise alone does not establish non-violation, and non-exercise alone does not establish it either. If the frame is stale or insufficiently complete for this use, the non-violation result is unresolved.
Conflict and non-use. The role-level calibration grant remains published while ContaminatedZoneEntryProhibition-7 forbids the same beneficiary and calibration action in Zone 7 during an overlapping interval. In the direct-rule case, EmergencyCalibrationPrecedencePolicy-e5 contains applicable claim CZ7-Prohibition-Overrides-CalGrant; the rule's conditions match, so the finding is settledByApplicableRule, cites that rule, and returns “do not enter Zone 7” for the blocked work. In a discretionary Zone 8 case, admitted system SafetyDirector-3 performs CalibrationConflictDecisionWork-8 under SafetyDirector-3@EmergencyShift; the separately obtaining PlantEmergencyExceptionAuthority-8 relation authorizes that decision, and current CalibrationConflictResolutionResult-8 selects the prohibition claim for the stated scope/window. Only then is the finding settledByDecisionResult. A second Zone 8 request that merely names the Safety Director but has no dated decision work or current result remains unresolved. A visible permit and green readiness tile cannot repair either gap. If no calibration work occurs, the permission is neither exercised nor violated.
Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: permission-specific support across boundary and work uses.
The chief bias is document-and-display authority: a readable permit, badge, policy response, or green gate looks stronger than its recoverable relation. The repair is exact ground, participants, policy/currentness, scope/window, and separate evidence. A second bias is obligation-shaped deontics; the exercise and non-exercise rules preserve permission as latitude.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Permission becomes inspectable without being inflated into a universal authorization ontology. Practitioners can distinguish a tentative frame-relative result from an enduring grant and from actual exercise, and can stop on unresolved conflict without letting a gate or permit display choose precedence. The cost is recording enough policy, identity, scope, window, and eligibility detail to support the intended use.
Rationale
Positive permission has different satisfaction and failure behavior from obligation. A grant can obtain while unused; non-use ordinarily violates nothing; matching action can exercise the grant without discharging a duty. Separating weak findings, strong grants, and exercise preserves these practical consequences while using existing episteme, relation, speech-act, policy, work, and evidence owners.
SoTA-Echoing
These sources change the practical record and its failure results. They do not license a generic authorization kind, beneficiary kind, permit-as-relation shortcut, or automatic precedence rule.
Relations
- Coordinates with:
A.2.8for obligations, recommendations-as-duty, and prohibitions;A.2.9for instituting/revoking speech acts;A.6.BandA.6.Cfor deontic claim classification and contract unpacking. - Supplies inputs to:
A.15.5readiness and direct mechanism/gate checks only when their own predicates explicitly consume a current grant, finding, or conflict result. - Relates to work through:
A.15.1for datedU.Workidentity andPermissionExerciseRelation@Contextfor the separate exercise claim. - Uses evidence from:
A.10and publication/currentness owners without turning evidence or a permit carrier into the permission relation. - Does not replace: role assignment, capability, plan, gate, admissibility, policy precedence, evidence, performed work, result, safety, assurance, or commitment owners.
A.2.8.PER:End
A.2.9 — U.SpeechAct (Communicative Work Kind, Occurrences, and Records)
Status: Stable Type: Definitional work-ontic pattern
Kind Settlement
U.SpeechAct is the admitted communicative-work kind under U.Work. One individual such as SA-Approve-4711 : U.SpeechAct is an actual temporally bounded speech-act occurrence. A SpeechActRecord : U.Episteme may state claims about that occurrence; it is neither the occurrence nor what makes the occurrence actual.
Use This When
Use this pattern when a communicative event must be modeled as performed work: an approval, authorization, revocation, notice, declaration, publication, or similar act whose occurrence changes what a project can claim or do.
What goes wrong if missed. A document, interface, ticket, message, or log is treated as if it performed the act; approval, utterance content, evidence carrier, commitment, and performed work collapse into one governance phrase.
What this buys. Actual communicative Work occurrences become inspectable without collapsing them into a claim-bearing SpeechActRecord, an utterance description, or an evidence carrier.
Typical moments:
- a release, gate, or work step depends on whether a named approval or authorization was performed;
- a publication, notice, or revocation changes status in a bounded context;
- a commitment must cite the act that instituted it, rather than only pointing at a document;
- a message, ticket, signed record, or API call log is being mistaken for the act itself.
Primary EntityOfConcern. The EntityOfConcern is one actual speech-act occurrence admitted under the kind U.SpeechAct: a communicative Work individual performed by an admitted accountable U.System under an exact obtaining U.RoleAssignment in a bounded context. The system performs the act; the assignment supplies the role and authority ground. A SpeechActRecord, the utterance-description episteme, and the file, message, ticket, or log carrier are separate objects.
First useful move. Name the actual occurrence, performer system, and assignment under which it acts, then name the judgement context, time window, act type, what the utterance is about, and—only when current—the intended institutional target and independently established effect. Create a SpeechActRecord only when a receiving use needs a persistent claim about that occurrence; add utterance or carrier references only when observation, audit, or source return needs them.
Not this pattern when. If the question is only what a document says, use A.7/C.2/E.17. If the question is who is accountable under a deontic relation, use A.2.8. If the question is evidence, use A.10/G.6. If the work has no communicative effect, use A.15.1 directly.
Type: Definitional (D) Normativity: Normative (unless explicitly marked informative) Placement: Part A → A.2 Roles & Agency Kernel Refines: A.2 (Role Taxonomy) Builds on: A.2.1 (RoleAssignment), A.2.6 (
Γ_timeand windows), A.7 (EntityOfConcern, Description episteme, and carrier), A.10 (SCR/RSCR carrier discipline), A.15.1 (U.Work) Purpose (one line): Admit communicative enactments under theU.SpeechActkind, identify each actual Work occurrence, and provide a minimal optionalSpeechActRecordfor claims about it while keeping the act, record, utterance description, and evidence carrier separate.
FPF already treats communicative acts as observable events used in role-state checklists and grounding (“presence of act: AuthorizationSpeechAct exists…”); those checks cite actual occurrences admitted under
U.SpeechAct, not the kind itself. The spec’s micro-examples and conformance gates distinguish communicative Work (“performed a SpeechAct”) from operational Work (“executed Work”) while keeping both insideU.Work(cf. CC‑A15‑10 GateSplit). F.18 can nameU.SpeechActin the promise/utterance/commitment triad; A.2.9 keeps the ontology and conformance discipline in Part A where communicative work, utterance description, and evidence carrier can be kept distinct.
A.2.9:1 — Problem frame
FPF repeatedly needs to reference “someone said/did the approving/authorizing/declaring thing”:
- Role eligibility and enactability checklists often depend on the presence of an approval/authorization act within a freshness window.
- Governance patterns and boundary writing (A.6 stack) need provenance: “this obligation or commitment, or this separately represented granted permission, was instituted by that act”.
- Operational patterns need auditable notices (“depletion notice”, “override invoked”) whose existence and timing matter.
Without a first-class kind for such communicative Work and a separate way to describe each occurrence, authors tend to:
- attribute agency to descriptions (“the spec approves…”, “the interface guarantees…”),
- collapse “utterance text” and “speech act event”,
- leave provenance dangling as “if modeled”,
- encode gates as prose obligations, or treat obligations as gates.
This pattern admits U.SpeechAct as an explicit Work kind, identifies actual speech-act occurrences under it, and keeps their optional records separate from U.Commitment, utterance descriptions, and carriers.
A.2.9:2 — Problem
How can FPF represent communicative enactments so that:
- Agency is explicit: an admitted accountable
U.Systemperforms the act under a covering role assignment, not a role value, assignment, document, spec, or interface. - The act is locatable in time: the act has an explicit Window (and thus freshness can be evaluated).
- The act is locatable in meaning: the act is recognized inside a declared bounded context (the
U.Workjudgement context), not viaU.ClaimScope(which expresses applicability of claims/commitments, not the judgement context for Work occurrences). - The act is auditable: it has at least one declared utterance description, evidence carrier, or both when used for gate checks or governance.
- Institutional effects are linkable: the act can institute (or update/revoke) commitments, role assignments, statuses, etc., by reference.
- Ambiguity is handled pragmatically: the model supports multi-function and multi-party communication without requiring full linguistic pragmatics.
A.2.9:3 — Forces
A.2.9:4 — Solution
U.SpeechAct is the admitted kernel kind for communicative Work. An individual SA : U.SpeechAct is the actual enactment performed by an admitted accountable U.System under an exact obtaining role assignment within a bounded context. A SpeechActRecord may describe that occurrence and point to utterance descriptions or evidence carriers; none of those epistemic or representational objects is the act.
A.2.9:4.1 — Normative definition
U.SpeechAct <: U.Work is a kind declaration. An actual Work individual is admitted as SA : U.SpeechAct when its primary effect is communicative: it places an utterance into a context in a way that is recognized by that context’s institutional semantics (policies, procedures, protocol rules) as potentially:
- asserting/informing,
- requesting/directing,
- promising/committing (as an instituting act),
- declaring/authorizing/revoking (status-changing acts),
- notifying (event announcement relevant for downstream work).
Per A.7 and A.15.1, the actual speech-act occurrence is a Work individual; its SpeechActRecord and utterance descriptions are epistemes, while its carriers are utterance carriers, publication carriers, or traces that allow observation and audit. (Note: “Surface” is reserved for MVPK publication/interoperability surfaces; do not use it here.)
Whether a given act type institutes commitments, permissions, or status changes is entirely context-policy dependent. Absent an explicit policy, treat SA : U.SpeechAct only as an actual communicative Work occurrence; neither its kind membership nor a complete-looking record licenses a deontic inference.
A.2.9:4.2 — Minimal occurrence-description record (normative)
Use the following declaration schema only when a receiving use needs a persistent claim about an actual or candidate speech-act occurrence. The record fields state claims about the referenced occurrence; they are not fields stored in the Work individual and do not make it occur.
Occurrence-side constraints:
- (SA‑C0) Actual Work conformance. The individual referenced by
speechActOccurrenceRefMUST independently satisfyU.Workconformance (A.15.1), including the actual performer system, covering assignment, enacted method, containing system, temporal extent, and judgement-context anchoring. A complete record neither creates those facts nor substitutes for them. - (SA‑C1) The accountable system performs; the assignment grounds. The occurrence's actual performer MUST be an admitted
U.System. The exact obtainingU.RoleAssignmentunder which it acts MUST have that system inHolderSystemSlotand cover the act. The assignment supplies role, authority, and attribution ground; it does not perform the act. - (SA‑C2) Act types are occurrence classifications and context-local. The occurrence MUST instantiate at least one
SpeechActTypeRefrecognized in its judgement context. A token written into a record does not establish that classification unless the context's predicate is satisfied. - (SA‑C3) Time honesty. The occurrence MUST have an actual temporal extent so freshness can be evaluated; a recorded timestamp is a claim about that extent, not the extent itself.
Keep three questions separate. utteranceSubjectRefs answers what the utterance or claim is about. institutionalTargetRefs answers which object or relation the act is intended to institute or update under the named policy. Actual change or institutional effect is a third world-side fact and is stated only through its exact direct change/effect relation and the matching typed institutes.* reference when the record needs it. An informative notice or assertion may have a subject without any institutional target or changed entity. Shared reference values do not collapse these relation meanings.
Record- and reliance-side constraints:
- (SA‑C4) A relied-on occurrence must be observable. When a gate, checklist, commitment, or grant relies on a
SpeechActRef, theSpeechActRecordSHALL identify that same occurrence and cite at least one applicableutteranceRef,carrierRef, or separately governed evidence relation. Evidence-critical uses SHOULD cite at least one carrier through A.10. Record completeness alone does not prove occurrence or institutional force. - (SA‑C5) Institutional-effect claims are typed references to world-side effects.
institutes.*may reference only the exact commitment or relation occurrence through its declared RefKind. Eachinstitutes.permissionsvalue MUST be aGrantedPermissionRelationRef@Contextwhose context matches the speech-act occurrence's judgement context or is connected by the explicit Bridge used by the receiving claim. Eachinstitutes.publicationRelationsvalue MUST resolve to an obtainingEpistemePublicationRelationunder E.24.PUB. A status claim is an episteme about an effect, not an instituted effect; keep it and its A.10 evidence relation outsideinstitutes.*. The cited policy and direct world-side obtaining conditions still decide whether any effect exists. - (SA‑C6) Cross-context use is Bridge-only. If a
SpeechActReforSpeechActRecordis interpreted for checking, gate evidence, or provenance in a different bounded context than the occurrence's judgement context, the receiving claim MUST cite the Bridge/policy that licenses that interpretation rather than assuming equivalent force from the same label.
A.2.9:4.3 — SpeechActRef discipline (normative)
A SpeechActRef resolves to one actual Work individual admitted as SA : U.SpeechAct. It never denotes the kind itself or a SpeechActRecord.
- If another object (for example,
U.Commitment.source.speechActRef) cites aSpeechActRef, the referenced occurrence MUST satisfy occurrence-side SA‑C0…SA‑C3. A gate, audit, or provenance use additionally needs the record/evidence basis in SA‑C4 and SA‑C6 when cross-context. - A
SpeechActRefMUST NOT be replaced by anEpistemeRef(“see the document”) when occurrence provenance is needed. ASpeechActRecordor utterance-description episteme may make claims about the occurrence but is not the act. - If a source cannot complete a
SpeechActRecord, it may create an observation stub with the candidatespeechActOccurrenceRef, known claims, provenance for those claims, and explicit unknowns. When the actualenactsMethodrelation is not recoverable, leaveenactsMethodRefabsent, cite the exact unresolved claim and source-gap provenance, and setreliancePosture=observationOnly. The stub does not make the candidate actual, satisfy occurrence-side conformance, or support gate/deontic provenance. It becomes reliance-ready only after the exactenactsMethod -> U.Methodrelation is recovered, or after the governing Work architecture explicitly establishes that this occurrence needs no such relation. Never mint anAdHocCommunicationor otherU.MethodDescriptionsolely to fill the gap; a description neither is the method nor enacts itself.
A.2.9:4.4 — Separation rules with U.Commitment, GrantedPermissionRelation@Context, and U.PromiseContent (normative)
-
Speech act is not the enduring deontic relation. A speech-act occurrence may institute a
U.Commitmentfor an obligation, recommendation-as-duty, or prohibition, or aGrantedPermissionRelation@Contextfor strong permission. The enduring relation is the separately governed object, not the act. Do not encode obligations or permissions as prose inside itsSpeechActRecord: cite commitments ininstitutes.commitmentsand grants ininstitutes.permissions, each under the exact instituting policy (A.2.8,A.2.8.PER). -
Speech act is not the service promise clause.
U.PromiseContentis the promised-outcome statement; a speech act may be the act of offering or issuing that promise, but the promise content lives in the promise-content object and is referenced from the resulting commitments. -
Speech act is not the carrier. A “signed approval PDF”, ticket, message, or API log is a carrier; it may carry an utterance-description episteme or a
SpeechActRecord. The speech act is the Work occurrence described or evidenced, not either episteme and not the carrier. -
Publishing a spec is not a commitment by default. Default interpretation rule (normative). A conformant model/interpreter MUST NOT infer a
U.Commitment,GrantedPermissionRelation@Context, publication occurrence, or subject-specific status relation solely from aPublish/Approvespeech-act occurrence or its record. Publication work may establish anEpistemePublicationRelationonly when E.24.PUB's selected edition, audience, bounded use, form, carrier, and availability conditions obtain. A constitutive policy may let an act institute a subject-specificApproved,Published, or similar status relation; then cite that exact relation occurrence through the subject pattern and separately cite any C.2.1 status claim and A.10 evidence. The claim represents the status; neither its ID nor its publication makes the status obtain.
A.2.9:4.5 — Multi-function and multi-party support (normative)
-
Multi-function:
actTypesis a set. If one utterance performs multiple recognizable acts (e.g., “approve + instruct + warn”), the model may either:- identify one speech-act occurrence and let its
SpeechActRecordstate multiple satisfiedactTypes, or - identify multiple actual speech-act occurrences and give each its own
SpeechActRef; their records may share the samecarrierRefs/utteranceRefs. In either case, institutional effects must remain referenceable (SA‑C5).
- identify one speech-act occurrence and let its
-
Multi-party:
addressedTois a set and may include roles/parties/assignments. If addressees matter for validity (e.g., “approval by CAB chair to deployment bot”), they should be explicit.
A.2.9:5 — Archetypal Grounding (Tell–Show–Show)
A.2.9:5.1 — Tell (universal rule)
When governance or gating depends on “someone said/did X”, identify that saying/doing as an actual Work occurrence SA : U.SpeechAct. Add a SpeechActRecord only to state relied-on claims about it, and keep the utterance text and carriers separate. If the occurrence creates obligations, recommendations-as-duty, or prohibitions, cite explicit U.Commitment objects; if it creates strong permission, cite an explicit GrantedPermissionRelation@Context. The act institutes neither effect without the exact context policy.
A.2.9:5.2 — Show #1 (system archetype: change-control approval gates a deployment)
Situation (messy prose): “Change is approved, so the pipeline may deploy.”
Conformant modeling sketch. The first line names the actual Work individual. The following episteme reports claims about it; those claims must be true independently.
-
Actual occurrence:
SA-Approve-4711 : U.SpeechAct -
SA-Approve-4711-Record : SpeechActRecordspeechActOccurrenceRef = SpeechActRef(SA-Approve-4711)actTypes = {SpeechActTypeRef(Approval@ChangeControl)}performedBy = U.EntityRef(CAB_Chair_A)whereCAB_Chair_A : U.SystemperformedUnderAssignment = RoleAssignmentRef(CAB_Chair_A@ApproverRole@ChangeControl)enactsMethodRef = U.EntityRef(ChangeApprovalMethod_v3); the actualenactsMethodrelation independently obtainsmethodDescriptionRef = EpistemeRef(ChangeApprovalProcedure_v3)reliancePosture = relianceReadyexecutedWithin = ChangeControlBoardSystemwindow = [t,t]judgementContextRef = ChangeControlutteranceSubjectRefs = {ChangeRequestId(4711)}institutionalTargetRefs = {GrantedPermissionRelationRef@ChangeControl(PER-Deploy-4711)}utteranceRefs = {EpistemeRef(ChangeTicket#4711)}carrierRefs = {CarrierRef(TicketSystemRecord#4711)}institutes.permissions = {GrantedPermissionRelationRef@ChangeControl(PER-Deploy-4711)}
-
GrantedPermissionRelation@ChangeControl PER-Deploy-4711beneficiaryRef = RoleAssignmentRef(OpsBot#DeployerRole:CD_Pipeline_v7)permittedActionSpecificationRef = EpistemeRef(DeployChange4711WorkSpecification)institutingSpeechActRef = SA-Approve-4711grantorAssignmentRef = RoleAssignmentRef(CAB_Chair_A@ApproverRole@ChangeControl)grantValidityPolicyRef = EpistemeRef(ChangeControlGrantPolicy_v3)scope,validityWindow, and revocation stance are explicit.
The utterance is about ChangeRequestId(4711); its policy-selected institutional target and demonstrated effect are the separately obtaining grant occurrence. Nothing here claims that the change-request entity itself changed.
- Gate predicate
A-Gate-Deploy-4711independently states whether deployment entry conditions hold. It may checkexists SpeechAct(type=Approval, utteranceSubjectRefs includes ChangeRequestId(4711), performedBy=CAB_Chair_A, performedUnderAssignment role=ApproverRole, within 90d), consume the current grant occurrence, and apply other prerequisites; passing the gate neither institutes nor equals the grant.
This preserves:
- kind vs actual act vs record vs utterance text vs carrier vs enduring grant,
- explicit performer and grant beneficiary,
- time window and policy for currentness,
- explicit provenance from the grant to the instituting act, and
- the distinction between strong permission and an admissibility gate.
A.2.9:5.3 — Show #2 (episteme archetype: publishing a spec edition without making the spec an agent)
Situation (anti-pattern): “The interface spec declares MUST/SHALL requirements.”
Conformant modeling sketch. SA-Publish-API-v12 is the actual occurrence; the record is a separate episteme about it.
-
Actual occurrence:
SA-Publish-API-v12 : U.SpeechAct -
SA-Publish-API-v12-Record : SpeechActRecordspeechActOccurrenceRef = SpeechActRef(SA-Publish-API-v12)actTypes = {SpeechActTypeRef(Publish@APISpecContext), SpeechActTypeRef(DeclareNorms@APISpecContext)}performedBy = U.EntityRef(StandardsEditor_A)whereStandardsEditor_A : U.SystemperformedUnderAssignment = RoleAssignmentRef(StandardsEditor_A@PublisherRole@APISpecContext)enactsMethodRef = U.EntityRef(SpecPublicationMethod_v12); the actualenactsMethodrelation independently obtainsmethodDescriptionRef = EpistemeRef(SpecReleaseProcedure_v12)reliancePosture = relianceReadyexecutedWithin = SpecPublicationSystemwindow = [t,t]judgementContextRef = APISpecContextutteranceSubjectRefs = {EpistemeRef(APISpec_v12)}institutionalTargetRefs = {EpistemeRef(APISpec_v12)}utteranceRefs = {EpistemeRef(APISpec_v12)}carrierRefs = {CarrierRef(GitTag:v12), CarrierRef(SignedReleaseArtifact:v12)}institutes.publicationRelations = {EpistemePublicationRelationRef(APISpec-v12-Publication)}
-
APISpec-v12-Publication : EpistemePublicationRelationseparately names the selectedAPISpec_v12edition, audience declaration, bounded-use declaration, publication form, and exact carrier; it obtains only while that edition is available under E.24.PUB.
The same APISpec_v12 episteme is both the subject of the publication utterance and the object made available by the publication relation, but those are different relations. The act does not thereby change the spec's claim content or make the episteme an actor. If D-StdStatus-APISpec_v12-Published is needed, keep it as a separate C.2.1 claim about the publication occurrence and cite its evidence through A.10; do not put the claim in institutes. Norms live in the published utterance descriptions, while the act of publication is performed by StandardsEditor_A under its publisher assignment.
A.2.9:6 — Bias-Annotation
Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Kernel universal for speech-act usage that matters for governance, eligibility, gating, provenance, and protocol boundaries.
- Gov bias: favors explicit accountable performers and auditable records; increases clarity but adds modeling overhead.
- Arch bias: optimizes evolvability by keeping institutional effects referenceable rather than embedded in prose.
- Onto/Epist bias: enforces kind≠actual act≠record≠utterance≠carrier and prevents episteme-as-agent metaphors.
- Prag bias: models only what is needed for decisions/audit (not full intention/sincerity/perlocutionary psychology).
- Did bias: keeps the record minimal and queryable for state checklists and boundary reviews.
A.2.9:7 — Conformance Checklist (normative)
- CC‑A.2.9‑1 (Occurrence, performer, and assignment). One actual Work individual is admitted as
SA : U.SpeechAct; its performer is an admitted accountableU.System, and the exact coveringU.RoleAssignmenthas that system as holder. AnySpeechActRecordstates those as claims and MUST NOT make the assignment, role value, organizational label, episteme, or carrier the performer. - CC‑A.2.9‑2 (Act-type predicate). The actual occurrence satisfies at least one context-local
SpeechActTypeRef; merely writing a token intoSpeechActRecord.actTypesis insufficient. - CC‑A.2.9‑3 (Actual extent versus timestamp claim). The occurrence has an actual temporal extent. A record's
windowmust truthfully state that extent at the required precision; it does not create it. - CC‑A.2.9‑4 (Observable relied-on occurrence). If a checklist, guard, commitment, or grant cites the occurrence, one
SpeechActRecordidentifies it and cites an applicable utterance, carrier, or direct evidence relation. Evidence-critical uses SHOULD cite at least one carrier through A.10. - CC‑A.2.9‑5 (Typed world-side effects, separate claims). A record's
institutes.*branch references only an exact commitment or obtaining relation occurrence through its declared RefKind. A grant usesGrantedPermissionRelationRef@Context; publication usesEpistemePublicationRelationRef; a subject-specific status uses its direct relation type. A status claim and its evidence stay separate, and no record field makes any effect obtain. - CC‑A.2.9‑6 (Bridge-only cross-context use). A receiving claim that interprets a
SpeechActReforSpeechActRecordin another bounded context cites the Bridge/policy that licenses that interpretation. - CC‑A.2.9‑7 (No fabricated method anchor). If the occurrence's actual
enactsMethod -> U.Methodrelation cannot be recovered, the record names the unresolved claim and source-gap provenance, remainsobservationOnly, and is not used for gate or deontic provenance. A placeholderU.MethodDescriptionnever closes the gap. - CC‑A.2.9‑8 (Subject, target, and effect stay distinct). A record uses
utteranceSubjectRefsfor aboutness andinstitutionalTargetRefsonly for a policy-selected target. It claims actual change or institutional effect only through the exact direct relation; an informative act needs no changed target.
A.2.9:8 — Common Anti-Patterns and How to Avoid Them
A.2.9:9 — Consequences
Benefits
- Makes approvals/authorizations/notices first-class and queryable, enabling clean RSG checklists and guard rules.
- Provides stable provenance: commitments, granted permissions, and status transitions can cite the instituting act explicitly.
- Prevents recurring category errors: “documents promise”, “interfaces commit”, “logs prove”.
Trade-offs / mitigations
- Reliance-bearing uses require a small structured
SpeechActRecordplus adequate evidence; ordinary occurrence talk needs no record when no later claim must cite it. - Requires context-local
SpeechActTypeRefregistration; mitigated by starting with a small set (Approve, Revoke, Publish, Notify, Authorize) and extending as needed.
A.2.9:10 — Rationale
FPF already relies on communicative acts (approvals, notices, overrides) as operationally meaningful events. A.2.9 therefore admits U.SpeechAct as the Work kind, treats each actual act as a temporally bounded Work individual under it, and uses SpeechActRecord only for claim-bearing representation. That separation keeps performer, scope, time, utterance descriptions, carriers, and separately governed deontic effects (U.Commitment or GrantedPermissionRelation@Context) inspectable without letting a record stand in for actuality.
This also improves modularity:
- F.18 can remain a lexical entry point for naming (why “SpeechAct” and “utterance” are useful labels),
- while A.2.9 carries the ontology and conformance discipline for the kind, its actual occurrences, their optional records, and their connections to commitments, granted permissions, and evidence.
A.2.9:11 — SoTA-Echoing (informative; post-2015 alignment)
Informative. Alignment notes; not normative requirements.
- Adopt — ISO 24617‑2:2020 / multi-dimensional communicative functions. Modern dialogue‑act standards treat communicative behavior as potentially multi‑functional. A.2.9 mirrors this by allowing
actTypesto be a set and by supporting shared carriers across multiple acts. - Adapt — commitment-based semantics for communication (multi-agent/protocol practice, 2015+). A pragmatic way to avoid mental-state modeling is to track communication by its social/institutional effects, especially on commitments, permissions, and protocol states. A.2.9 reflects this via separate
institutes.commitmentsandinstitutes.permissionslinks toU.CommitmentandGrantedPermissionRelation@Contextwithout modeling sincerity or intention. - Adopt (warning) — illocutionary pluralism in multiparty discourse (2015+). One utterance commonly performs multiple recognizable functions. A.2.9 avoids the “single force” trap by permitting multi-type acts, multiple acts sharing the same utterance and carriers, or both.
A.2.9:12 — Relations
Uses / builds on
- Uses A.15.1 (
U.Work) for the event/work backbone (actual performer system, covering assignment, window, and stance). - Uses A.7 for the strict actual-act≠record/description≠carrier split.
- Coordinates with A.2.6 for scope/window discipline.
Used by
- A.2.8 (
U.Commitment) as a concrete target forsource.speechActRefprovenance, and A.2.8.PER for aGrantedPermissionRelation@Contextgrounded byinstitutingSpeechActRef. - A.2.5 (RSG checklists/guards) when “presence of authorization/approval act” is a criterion.
- A.6.C (Contract unpacking) as the “utterance/instituting act” hook that prevents episteme-as-agent claims and improves provenance.
A.2.9:End
Transformer Constitution (Quartet)
Intent
Establish a substrate-neutral way to say which system performed one dated world-side Work occurrence, under which exact U.RoleAssignment, by enacting which U.Method, and which separately governed method-description, capability, work-to-change, evidence, or aggregation claims the current use additionally relies on—without self-magic and without blurring run-independent semantics, the occurrence, and an episteme that describes or asserts it. The pattern keeps the Transformer Quartet object families distinct; it does not require every change claim or Work assertion to carry all four. A.3.4 independently identifies an actual bounded change; that identification alone establishes no acting system, agency, role assignment, method, or work. A.3 builds directly on Holon-Role Duality (A.2) and Temporal Duality (A.4) and is guarded by Strict Distinction (A.7) and Evidence Graph Referring (A.10).
Context
- Holonic substrate. FPF separates what things are (Holon → {System, Episteme, …}) from what they are being right now via roles. Only systems can bear behavioural roles, enact methods, and perform Work occurrences admitted under
U.Work; epistemes do not act. This work-facing rule does not imply that every actual change has an acting-system side. - Role, method, description, and occurrence stay distinct. A role is a mask, not behaviour;
U.Methodis a run-independent semantic way of doing,U.MethodDescriptionis an episteme that may describe that Method, and each individual admitted underU.Workis the dated performed occurrence that enacts it. - Run-independent semantics vs dated occurrence. A Method and any episteme that describes it are not the occurrence. When a claim about actual Work is current, its assertion or description designates the exact Work individual and the independently obtaining performer-assignment, enacted-Method, temporal, containing-system, affected-referent, binding, and resource-use relations required by A.15.1 and the receiving use. When actual change is also claimed, identify it independently under A.3.4 and use a separately governed work-to-change relation.
- Occurrence, assertion, evidence, and carrier. One Work individual is the world-side occurrence. A separate
U.Epistememay assert or describe it and designate the exact occurrence and obtaining relations. Logs, observations, evidence items, and publications have their own carriers and direct relations; neither a carrier nor a record becomes Work by referring to it.
Problem
Legacy phrasing (“actor / process / blueprint”) causes recurrent failures:
- Self‑magic in an actor-side claim: “the system configures itself” is used as if it already supplied a performer, role assignment, method, work occurrence, causal relation, and evidence.
- Plan = event: blueprint/algorithm reported as if execution happened.
- Capability = result: possession of a method counted as evidence of work.
- Episteme as doer: documents/models treated as actors.
- Occurrence-description leak: a method, plan, log, ticket, carrier, or evidence item is treated as the dated Work occurrence, while the assertion fails to designate the actual performer assignment, enacted Method, extent, affected referent, and direct relations. A.2/A.4/A.7/A.10 collectively forbid these, but A.3 must give the canonical quartet that authors can apply consistently.
Forces
Solution — The Transformer Quartet
For work-enactment, A.3 keeps four neighboring anchors visible: the performer-side assignment, a MethodDescription edition when the receiving use relies on one, the enacted Method, and the dated Work. For another independently grounded asymmetric actor-side claim, apply only the anchors required by its direct governor. These anchors qualify the actor-side claim; they are not occurrence conditions for every U.Transformation.
The four anchors (terms & types)
-
Acting side: for actual Work, each obtaining
performedByrelation points from the Work occurrence to an exactU.RoleAssignmentoccurrence whoseHolderSystemSlotresolves to the admitted performer System. For another actor-side claim, its direct owner grounds the participants and decides whether a work-facing role assignment is current. Canonical phrase after that grounding: system bearingTransformerRole@Context. Local shorthand: after explicit binding in the same subsection, you MAY write Transformer for that same system; re-bind on context change and do not use the shorthand where the domain already has a conflicting transformer term. The shorthand neither identifies an actual transformation nor upgrades causal participation or broad physical agentivity into Work. -
MethodDescription (description episteme, when relied on): an SOP, program, protocol, script, diagram, or other source is a
U.MethodDescriptiononly when it describes the exact Method. Its exact edition is cited only when the receiving claim about Work, assurance, gate, audit, or another use depends on that description. -
Method (run-independent semantic way of doing): the exact
U.Methodthat Work may enact. It is neither an occurrence nor a MethodDescription, role assignment, or holder capability. Order-sensitive composition belongs to B.1.5 only when that composition claim is current. -
Work (world-side dated occurrence holon):
U.Workis the admitted kind; one Work individual is an independently identified performed occurrence that stands in actualenactsMethod,performedBy, temporal,executedWithin, affected-referent, binding, and resource-use relations as applicable to its identity and the current use. AU.Epistememay assert or describe those facts and designate the occurrence; a ticket, log row, record, or carrier is not the Work. The occurrence neither requires one universal MethodDescription edition nor establishes an actual change, result, production, delivery, acceptance, or aggregate merely by occurring.
Safe memory line: A MethodDescription may describe a Method; one dated world-side Work occurrence may enact that Method; a Work assertion may designate that occurrence. The description, occurrence, and assertion are different holons, and none of these relations alone establishes actual change or result. Roles are masks (A.2/A.7); a Method is a reusable way of doing; a Work individual is the performed behaviour occurrence.
Contextual Role Assignment (U.RoleAssignment) for actor-side enactment
When a performed-work claim relies on a TransformerRole@Context assignment, use A.2.1's four-participant relation rather than a holder-role-context triple:
- The four participant designations correspond to the actual relation participants.
assignmentIntervalis assertion or occurrence-description content: it describes the currently known extent, is not a fifth participant, and does not make the relation obtain. - A generic
U.BoundedContextor selectedBoundedModelUseStructureis not anotherU.RoleAssignmentparticipant. When a receiving assertion or other claim about Work depends on a selected interpretation structure, designate it through that receiving use's exact relation. - The same system may bear several role values when their direct compatibility rules admit them; labels or shared context wording do not decide compatibility.
- When work on an episteme or carrier is claimed, the acting performer remains a System; episteme identity, carrier change, Work, publication, and evidence retain separate governors.
- An independently grounded
[A.3.4](/generated/patterns/A.3.4)occurrence supplies none of the assignment participants or temporal facts by itself.
Boundary & externality
A.3.4 first identifies the actual bounded change from its changed referent and subject-side occurrence facts. Add an asymmetric acting side and target side only when a direct participation, interaction, causality, or work owner independently grounds that factorization. If an explicit U.Interaction obtains, cite its direct governing relation; A.3 does not create one from the word “transformation.”
Natural, spontaneous, and formal transformations can therefore remain actual without an invented performer. Joint dynamics, relational change, or a non-separable or frame-dependent participation case also remains under its direct dynamics, relation, interaction, or causality owner until an asymmetric actor–target split is justified. Ordinary coupling and scale-free or minimal physical agentivity alone establish neither TransformerRole@Context, U.Method, nor a dated Work occurrence admitted under U.Work.
For genuine work on oneself, use the A.12 reflexive split only after two distinct internal positions are grounded for the current claim. The acting and changed positions may be subholons inside one containing holon; selecting those already grounded parts is an A.14/C.13 structure move, not a Meta-Holon Transition. Use B.2 only if the whole itself is reidentified.
Temporal alignment (A.4 bridge)
- A
U.MethodDescriptionis a separately identified episteme; cite its exact edition only when the receiving use relies on what that edition says. - A
U.Methodis run-independent and may be enacted by many dated Work occurrences. - One Work individual admitted under
U.Workhas its own governed temporal extent and stands in exactperformedByrelations to its performer assignments; an assertion or description may designate those facts, but is not the occurrence. No universal liveStateAssertionis a Work or Method condition. - When a work-to-change claim is current, identify the world-side Work under A.15.1, the actual change under A.3.4, and the exact direct relation between them. A formal ordering boundary or natural change remains under A.3.4 without a work-facing inference.
Evidence Graph Referring
An assertion or description episteme about one Work occurrence makes its exact performer assignments and enacted Method recoverable and cites a MethodDescription edition only when the receiving use depends on it. Logs, observations, provenance, evidence, and their carriers remain separately related under their direct owners; neither the assertion nor a carrier or output produced by the performer is the Work occurrence or self-certifying evidence for it or its effects.
Didactic dictionary (safe recovery)
- Process, workflow, SOP, algorithm, protocol, script, or recipe is source wording first. Recover whether the current object is a MethodDescription, Method, WorkPlan, dated Work, method-relation structure, or another directly governed object.
- Operation, job, run, or performance is a Work individual admitted under
U.Workonly when the A.15.1 occurrence basis is recoverable; a log row, ticket, assertion, description, or label does not make it Work. - Function in an equipment specification may describe a Method, a MethodDescription, a capability, an intended effect, or another direct relation; the word alone decides none of them.
- Creator becomes local shorthand for a Transformer only when an exact actor-side holder has already been bound as a system through the applicable direct relation and, for performed Work, an obtaining
U.RoleAssignment; otherwise recover the actual relation or stop.
Illustrative scenarios (substrate‑neutral)
Physical system — Cooling loop
The world-side occurrence run-2025-08-08-T14:03, an individual admitted under U.Work, stands in an obtaining performedBy relation to an exact RoleAssignment occurrence whose holder is PumpUnit#3, and in an actual enactsMethod relation to CirculateCoolingFluid@CoolingLoop. Cite centrifugal_pump_curve.ld as a MethodDescription edition only if the receiving claim about this Work depends on it. A separately obtaining resource-use relation connects the Work individual to the 3.6 kWh use; the measured ΔT=6 K and any actual fluid change remain separately governed measurement, transformation, and work-to-change claims.
Epistemic change — Proof revision
The world-side occurrence lemma-42-check-2025-08-08, an individual of U.Work, stands in an obtaining performedBy relation to an exact RoleAssignment occurrence whose holder is LeanServer, and in an actual enactsMethod relation to CheckAndReviseLeanProof@Lean. proof_tactic.lean, any exact MethodDescription edition, the theorem episteme, carrier or episteme change, and the check log remain separately governed. An exact evidence-use relation may use the log to support a receiving claim; production by the performer does not itself confer evidence status or support.
Reflexive maintenance — “calibrates itself”
When the calibration controller and sensor suite are independently grounded as distinct internal positions, split into Regulator (acting position) and Regulated (changed position), cite the exact interaction and independently obtaining relations involving any claimed Work occurrence, and keep evidence separately governed; no self-evidence.
Joint or non-separable physical participation
A tide-related change of seawater can be one independently grounded A.3.4 transformation. Moon–Earth–ocean gravitational coupling, joint dynamics, and causal participation are recovered through their direct relation, dynamics, interaction, and causality owners. Coupling or a minimal physical-agentivity reading alone does not make the Moon a holder of TransformerRole@Context and does not create U.Work. Use C.26 only if a residual probe-, frame-, order-, incompatible-read-, or no-faithful-export lens issue remains; C.26 is not physical quantum ontology or a second transformation owner.
Reflexive work — scratching oneself
For a genuine work-on-oneself claim, the containing holon is the person, the acting position is the grounded neural-control/right-arm subsystem, and the changed position is the grounded left-hand tissue or state. The exact U.RoleAssignment, applicable method, dated work, work-to-change facts, and A.3.4 occurrence remain separate. Selecting these already grounded subholons uses A.14/C.13; it is not an MHT unless the person as a whole is reidentified under B.2.
Conformance Checklist (normative)
CC‑A3‑0 - U.RoleAssignment presence.
A world-side Work occurrence performed by a system bearing TransformerRole@Context MUST stand in an exact obtaining performedBy relation to a U.RoleAssignment occurrence. A conforming assertion or description designates the Work, assignment, and relation; the assignment has A.2.1's four participants: exact holder System, role value, role-taxonomy episteme edition, and effective ReferenceScheme. State the currently known assignment extent separately as assignmentInterval in the assignment assertion or occurrence description when needed. A context label is not a generic fifth participant. For a non-Work actor-side claim, use its direct governor and introduce a work-facing assignment only when that relation is independently current.
CC‑A3‑1 - Acting-side distinction.
When an asymmetric actor-side claim is current, its directly governed acting and changed positions MUST be distinct for that claim. When performed Work is current, each obtaining performedBy relation reaches an exact RoleAssignment occurrence. In reflexive Work the acting and changed positions MAY be grounded subholons or positions inside one containing holon; the containing holon need not be reidentified. Do not force this split or a role assignment onto a natural, joint, relational, non-separable, or formal change merely to satisfy A.3. This preserves acting-side externalization without fictive actors.
CC‑A3‑2 - Method-description-Work-assertion separation.
U.MethodDescription is a description episteme, U.Method is a run-independent semantic way of doing, and a Work individual admitted under U.Work is a world-side dated performed occurrence. A Work assertion or description is another U.Episteme; a log, ticket, or carrier may express or support it but is not the occurrence. Neither Method nor MethodDescription is a run-time occurrence. A changed description edition and performed Work are separate facts, and a claim that Work occurred remains admissible without a MethodDescription reference when no receiving use relies on an exact description edition.
CC‑A3‑3 - Boundary-crossing evidence.
A conforming actor-side or work-to-change assertion MUST designate the exact direct participation, interaction, flow, causality, or work-to-change facts on which it relies; an A.3.4 occurrence alone supplies none of them. Conservation-class effects, when claimed, MUST satisfy the applicable B-invariants.
CC‑A3‑4 - Method and conditional description traceability.
Every Work individual admitted under U.Work stands in an exact actual enactsMethod relation to the U.Method it enacts; the assertion or description used by a receiving claim MUST designate both sides and that relation. Cite an exact U.MethodDescription edition only when the receiving claim depends on that edition to identify, constrain, or justify the Method. If actual enactment departs from a cited description, state the description-selection, override, exception, or deviation claim under its direct owner and apply the Work continuity policy to the actual occurrence facts. Absence of a description reliance claim is not silent drift.
CC‑A3‑5 - Episteme as object-under-change.
When Work on an episteme or its carrier is claimed, the performer is still a System; episteme identity, carrier continuity, edition succession, publication, and any actual carrier change remain under their direct owners. Do not infer a performer from the episteme change itself, and do not force every episteme history into one PhaseOf relation. See C.2.1, E.24.PUB, A.14's mereology firewalls, and direct epistemic aggregation owners when current.
CC‑A3‑6 - Units and measures for performed resource use.
Every performed resource-use fact relied on for a claim about Work MUST state its measure and units. A percentage that enters a resource aggregation must be grounded in the exact PortionOf measure needed by that use. Totals, allocation, overlap handling, deduplication, and optional Gamma_work notation belong to a separately recovered B.1.6 aggregation, not to Work identity.
CC‑A3‑7 - Authority, justification, and provenance boundary. Authority, justification, and provenance are not optional-looking required fields of a RoleAssignment occurrence or Work occurrence. When a receiving use relies on one of them, identify the exact episteme and direct authority, justification, source, evidence, or provenance relation and connect it to the exact assignment occurrence, Work individual, assertion, or description. None of those neighboring claims makes the assignment obtain or the Work occur.
CC‑A3‑8 - Agentic policy, planning, Work, and outcome separation.
An agentic case does not license a generic D.Policy → U.PlannedAction → U.Action pipeline. Recover each exact policy, objective, selection or decision, WorkPlan, RoleAssignment, dated Work, actual change, and outcome claim under its direct owner when that claim is current. A policy does not create a plan or Work; a plan does not prove Work; and Work does not prove an outcome. Do not mint U.PlannedAction or U.Action from ordinary action wording.
CC‑A3‑9 - Local interpretation and exact crossings.
Interpret each RoleAssignment occurrence through its exact role-taxonomy episteme and effective ReferenceScheme, and test compatibility through the exact rule current for that assignment use. Similar labels across localities establish neither equivalence nor conflict. When a receiving use needs exact local-sense correspondence, use F.9 only for the exact SenseCell correspondence and its admitted use; role-value, policy, criterion, verdict, or other mappings retain their direct owners.
CC‑A3‑10 - Use-driven aggregation boundary.
Neither a MethodDescription nor an assertion about Work MUST make every Gamma family runnable. When a receiving use needs order-sensitive Method composition, recover B.1.5 and optional Gamma_method; when it needs a temporal aggregate over exact Work intervals, recover B.1.4 and optional Gamma_time; when it needs a resource ledger, recover B.1.6 and optional Gamma_work. A system-boundary or epistemic aggregation likewise uses its exact direct owner. Each aggregation has its own EntityOfConcern, policy, evidence, and admissible use; none is a universal field or identity condition of MethodDescription, RoleAssignment, or Work.
Consequences
Benefits
- Explainability by construction. A conforming assertion about performed Work designates the world-side occurrence, exact
performedByRoleAssignment occurrences, enacted Method, and the direct neighboring description, capability, work-to-change, evidence, or aggregation claims on which the current use actually relies; actual-change identity remains separately inspectable under A.3.4. - No category errors. Keeping methods/roles out of mereology and enforcing DesignRunTag separation prevents the usual “process‑as‑part” and “version‑as‑component” mistakes. (A.14 + A.15.)
- Composable analytics without hidden ownership. Exact Work intervals and performed resource-use facts can feed separately recovered B.1.4 or B.1.6 aggregations; the selected policy, evidence, and result remain inspectable at that direct owner.
- Local plurality without whole-context bridges. Exact role taxonomies, ReferenceSchemes, compatibility rules, and use-specific mappings let local practices differ without treating a shared label or one bridge as wholesale equivalence.
Trade‑offs
- More explicit separation when reliance needs it. Start with the smallest grounded performer-assignment, Method, and Work claims; add MethodDescription, capability, policy, plan, change, evidence, and aggregation relations only when a named use depends on them.
- Discipline for genuine reflexive work. Modellers must ground distinct acting and changed positions before using a controller–plant or other reflexive split; this adds one relation when the claim needs it and avoids both self-magic and arbitrary decomposition.
Rationale (post‑2015 cross‑domain support)
Constructor theory (post‑2015).
Constructor theory informs the distinction between possible and impossible tasks and the conditions on substrates and constructors. A.3 adopts that modal discipline without equating a constructor-theory constructor with an FPF performer or TransformerRole holder. In the performed-Work branch, an independently grounded System may be the holder of an exact RoleAssignment, and a Work occurrence performed under that assignment may enact an exact Method; natural, spontaneous, joint, formal, or otherwise non-agentive transformation remains possible without that actor-side factorization. A MethodDescription may describe a task or Method, but it is neither the constructor nor the Work. (Royal Society Publishing, arXiv, Constructor Theory)
Active inference & free‑energy mechanics (2017→). When an agentic claim is current, active-inference and free-energy work motivates keeping policy, objective, observation, selection, planning, performed Work, and evidence distinctions visible under their direct owners. It does not supply a universal action pipeline, make agentivity a Work occurrence, or make one policy, plan, or posterior prove another. (MIT Press Direct, PubMed, arXiv)
Provenance and FAIR packaging (2016→).
FAIR, RO-Crate, OpenLineage, and ML Metadata motivate exact, machine-actionable provenance and evidence links when a receiving use relies on lineage, editions, runs, or jobs. A.3 therefore preserves those links as separately governed relations rather than making {authority, justification, provenance} constitutive fields of RoleAssignment or Work. (Nature, researchobject.org, SAGE Journals, openlineage.io, GitHub, arXiv)
Together, these lines of work support explicit actor-side participants and, for performed Work, exact role-assignment and performer relations, method-description/Method/Work separation, directly governed participation and deltas, and traceable local interpretation. They do not establish that every actual change has a performer, that broad physical agentivity supplies TransformerRole, or that coupling alone is U.Work.
Relations
A.7 Strict Distinction. A.3 keeps the target EntityOfConcern, MethodDescription, Method, RoleAssignment occurrence, dated Work occurrence, Work assertion or description, actual change, log or observation, and evidence relation distinct. A recipe or log is not part of the target, and a record about Work is not the Work occurrence.
A.12 Acting-Side Externalization & External Transformer. A.3's CC-A3-1 uses A.12 only when an actor-side or reflexive-work claim is current. The split keeps grounded acting and changed positions distinct for that claim; it neither invents an actor for non-separable change nor turns ordinary descent to already grounded parts into an MHT.
A.13 Agential Role.
When an agency claim is current, A.13/C.9 governs its characteristic profile while A.3 keeps identity, role assignment, method, plan, work, transformation, and evidence separate. Scale-free or minimal physical agentivity, observerhood, self-evidencing, or causal participation does not by itself establish an obtaining U.RoleAssignment, TransformerRole@Context, method enactment, or dated Work.
A.3.4 Bounded Change Under Conditions. A.3.4 independently identifies one actual bounded transformation from the changed referent and subject-side occurrence facts. A.3 opens only when an actor-side enactment claim is additionally grounded. Natural, spontaneous, formal, relational, and joint-dynamics changes therefore need no fictive performer.
A.3.3, direct relation, interaction, and causality owners.
These owners establish participation and causal structure. Use an asymmetric actor-target factorization only when that result is independently grounded; retain a joint or non-separable account otherwise. C.26 may test a residual probe, frame, order, incompatible-read, or no-faithful-export lens issue, but it is neither physical quantum ontology nor a second transformation owner.
A.15 Role-Method-Work Alignment.
A.3 relies on A.15's separation of role value, exact world-side RoleAssignment occurrence, run-independent Method, conditional MethodDescription reliance, intended WorkPlan episteme, world-side dated Work occurrence, and any assertion, description, log, or evidence about that occurrence. The Work stands in an actual enactsMethod relation; a MethodDescription may describe the Method; neither the description, plan, nor record proves that Work or actual change occurred.
A.14 Advanced Mereology. A.3 consumes A.14/C.13 only for independently grounded part or structure relations and forbids role or recipe leakage into part-whole trees. Selecting grounded internal positions for a reflexive claim is not an MHT; B.2 opens only when the containing whole is actually reidentified.
B-cluster (Gamma sections).
A.3 supplies grounded actor-side facts and exact Work occurrences; receiving assertions may designate them, but A.3 does not require a universal bundle of Gamma calculations. B.1.5 governs order-sensitive Method composition and optional Gamma_method; B.1.4 governs a selected temporal aggregation and optional Gamma_time; B.1.6 governs a selected Work-resource aggregation and optional Gamma_work. System-boundary and epistemic aggregations use their exact direct patterns when current. Every such result has its own EntityOfConcern, policy, evidence, and admissible use rather than becoming a field or identity condition of MethodDescription, RoleAssignment, or Work.
Indexing to the glossary. Terms used here (TransformerRole, Work, Method, MethodDescription, PortionOf, PhaseOf, BoundedContext) remain exactly as defined in Annex A; see A.1/A.2/A.14/A.15 entries for lexical registers.
A.3:End
U.Method: Reusable Way of Doing with Explicit Applicability
Type: Definitional pattern Status: Stable Normativity: Normative
Problem frame
Use this pattern when a project needs to say how something is done in principle without prematurely treating that method or practice claim as a document, program, workflow diagram, plan, run log, role assignment, capability statement, mechanism claim, cultural tradition, discipline position, or mathematical-model claim before those positions are recovered.
Typical moments:
- a team says "the method is the code", "the process is the BPMN", "the workflow is the evidence", or "the solver model is the operation";
- a practice, procedure, protocol, proof script, optimization model, control strategy, or recipe is intended for reuse across many runs;
- two descriptions look different but may describe the same way of doing;
- a graph, query, table, dashboard, checklist predicate, or mathematical representation is being interpreted as if it were an instruction sequence;
- work planning, dated work, method description, formal substrate, mechanism, role assignment, cultural-evolution, discipline, and evidence are starting to collapse into one vague "method" or "practice" word.
Primary EntityOfConcern. The EntityOfConcern is the U.Method: one reusable semantic way of doing under stated participant meanings, applicability, preconditions, intended effects or preserved conditions, and bounds. Cite an exact effective reference scheme and local senses only when their variation changes that method meaning. U.Method is a non-agentive holon kind: methods can have submethods, compose into whole methods, and participate as submethods of larger methods. This does not make a method an actor, a method description, a work plan, or a dated work occurrence. A step label or step description is not a method part unless the recovered object is itself a U.Method.
First useful move. Name the reusable way of doing, its generic participant meanings, applicability, preconditions, intended effect or preserved condition, and the concern it addresses—for example changing, observing, comparing, classifying, evaluating, communicating, selecting, proving, or preserving. If local terminology changes that answer, cite the exact effective reference scheme and local senses. The method remains this pattern's primary EntityOfConcern; this semantic statement establishes no planned assignment, actual participant, actual transformation, or result.
What goes wrong if missed. A diagram starts authorizing work, a query plan starts looking like performed work, a program starts looking like proof of operational success, or a graph path starts looking like a route that something followed.
What this buys. The project can reuse, compare, describe, plan, enact, and audit a way of doing without confusing the method with its descriptions, runs, mechanisms, mathematical substrates, evidence relations, gates, or authority claims.
Not this pattern when. If the sentence is about a document or representation that describes a method, schedules work, reports dated Work, declares a mechanism, presents a mathematical lens, cites evidence, decides a gate, asserts authority, or publishes a view, use that claim's owner. For a claim-bearing episteme about one exact Method, apply A.3.2's same-individual membership test; a carrier or representation is not thereby linked directly to the Method. State any planning, enactment, realization, evidence, gate, authority, publication, or representation relation only under its direct owner when it actually obtains.
Problem
Without a current U.Method distinction, FPF cannot repair method-like wording cleanly. Texts then slide among several different claims:
- Description as method. A SOP, code repository, proof script, BPMN diagram, SQL query, solver model, or protocol is treated as the method itself.
- Plan or run as method. A calendar plan, access plan, run log, telemetry trace, or work-result record is called the method.
- Mechanism or formal substrate as method. A mathematical object, formal substrate, mechanism declaration, causal model, or control structure is used as if it already selected the way of doing work.
- Role or capability leakage. Named people, organizations, teams, permissions, or capability thresholds are baked into the method instead of being kept in role assignment, authorization, capability, or gate patterns.
- Programming-paradigm overread. Imperative, functional, logical, constraint, object-centric event, or effect-handler wording is taken as a direct ontology of work rather than one possible description or representation of a way of doing.
The practical harm is fragile reliance. Changing a publication looks like changing the method; a run error looks like method invalidation; a mechanism declaration starts authorizing work; and a dashboard cue starts acting like evidence or permission.
Forces
- A method has enough identity stability to support comparison, reuse, teaching, improvement, and audit across many runs.
- Work still happens in dated situations with exact performer assignments, actual participants, resource uses, conditions, and separately governed effects; a method statement establishes none of those occurrence-side facts.
- Method descriptions can be executable, formal, graphical, procedural, declarative, or hybrid; publication form alone does not decide the method ontology.
- Mechanisms and mathematical substrates often make a method explainable or constrained enough to rely on, but the mechanism claim and the method claim still answer different project questions.
- A useful method statement remains applicable to welding, clinical triage, proof construction, optimization, agent orchestration, lab protocols, software execution, and organizational work without making software notation the default model of method.
Solution
U.Method is the reusable semantic way of doing under stated applicability.
Local method mantra. Name the reusable way; say who or what it is for and when; state the intended result or preserved condition and the nearest stop; add an effective reference scheme or a selected structure only if changing it would change the method identification or the next decision; keep descriptions, plans, Work occurrences, and mechanisms separate. This is an attention aid, not a work order, U.WorkPlan, dated enactment, or DemonstrativeUnfoldingSlice@Context.
It is a non-agentive holon kind. Part methods can be selected, bounded, ordered, joined, adapted, and hidden or exposed through method interfaces to form a whole method with whole-level preconditions, effects, invariants, constraints, and assurance hooks. The whole method may then be used as a part method in a larger method.
It is not the text, code, diagram, model, plan, run, role, capability, or evidence relation that may be associated with that way of doing. A U.Method is:
- semantically local: its identity uses the declared participant meanings, applicability, conditions, intended effects or preserved conditions, and bounds; add an effective reference scheme and local senses only when a meaning difference would change the method identification or a stated comparison;
- semantic: it is the way of doing that descriptions denote and work may enact;
- concern-explicit: it states what a future enactment is intended to do or decide—change, observe, compare, classify, evaluate, communicate, select, derive, prove, control, produce, or preserve—and its intended effect or preserved condition; it identifies no actual changed referent, participant, occurrence, or result;
- description-independent: one method may be described by several
U.MethodDescriptionepistemes; - run-independent: one method may be enacted by many Work occurrences admitted under
U.Work; - assignment-independent: method admission conditions may name role kinds or capability-fit conditions, but named holders and dated assignments belong elsewhere;
- participant-semantic: it may state generic participant meanings and method-side applicability without declaring
RelationSignatureSlotSpecs,OperationAlgebraargument or result positions, planned fillers, or actual participants.
Do not begin by replacing method or practice with a preferred technical word. First finish the ordinary sentence, "Here the text is trying to name or assert ___." Then use this one routing map:
Strategy wording by claim position
Treat strategy as ordinary source wording until the sentence's claim position is clear. Do not mint U.Strategy.
When the wording names a reusable way of deciding or acting under stated applicability, it identifies a U.Method. A clinical treatment strategy, manufacturing setup strategy, search strategy, or negotiation strategy qualifies only when it states the reusable action, participant meanings, preconditions, intended result, and bounds.
When a protocol, playbook, program, diagram, or prose passage describes that way, that episteme may be a U.MethodDescription. Reusable strategizing can itself be a U.Method; a dated strategy workshop, search episode, or planning session is a Work individual only when its A.15.1 occurrence basis is grounded.
When the sentence is about choosing among candidates, use A.19.SelectorMechanism and G.5 for the actual criteria, policy, and selector outcome. The label strategy does not replace those objects or prove that a reusable method has been stated.
Leave quoted or explanatory strategy wording alone when it carries no FPF claim. The repair is complete when a reader can say what the sentence asserts and which pattern owns that assertion, not when every occurrence has been replaced.
Thin first-use method identification
Start with the least apparatus that lets another reader recognize the same method:
- Ordinary use. State the reusable way of doing, the kinds of participants it is for, when it applies, what it is meant to achieve or preserve, and the nearest case in which it must not be used. If that sentence is enough for the decision at hand, stop.
- Later comparison or reliance. Fill the Plain aid below when another person must later distinguish same-named methods, compare descriptions or variants, cite one edition in a plan, or audit why this method was selected.
- Organization of several methods or uses. Open
A.22,B.1.5, or another direct composition pattern only when the question is about the organization itself—for example, which methods were composed, selected, used as fallbacks, or enacted in the reviewed work. A list or diagram does not create those relations.
Moving to a heavier level must solve one of those concrete problems. More fields do not make the method real, authorize its use, or prove that work occurred.
The following is a Plain identification aid, not a record kind, ontic, serialization, or mandatory form. Omit every optional line that the stated decision does not use.
NotEstablished states the nearest tempting stronger claim that this identification does not make—for example, permission to start work, a dated run, successful change, metrology acceptance, or evidence that the method works. Use the FPF term ClaimBoundary when another pattern consumes that boundary.
Add SemanticBasisIfMeaningVaries only when the same words have different meanings under another effective reference scheme or set of local senses. Add a claim scope, context slice, selected structure, or model-use relation only when its own predicate obtains and changing it would change the method identification or the later decision. None is a general container for method identity.
For every relied-on relation, name its participants, the relation that must obtain, and the pattern that governs it. A generic source, support, evidence, or current use entry is not a replay basis. RelianceWindow says which variant, time, or description edition the comparison relies on. ReviewIf names the concrete change that would make that comparison unsafe.
Closure and bounded non-use
Close positively when a reader can write the reusable action, generic participant meanings, applicability, preconditions, intended result or preserved condition, and nearest stronger claim that remains unestablished. Resolve an effective reference scheme and local senses only when a meaning difference changes that answer. Cite a method description, selected structure, model-use relation, or Work relation only when the next decision actually reads that relation.
If the project also claims an actual change, finish the method identification first. Then open A.3.4 for the actual changed referent, temporal boundary, subject facts, and transformation identity; the reusable method supplies none of them.
Close by non-use when the source is only a description, plan, dated Work occurrence, mechanism declaration, selector result, role relation, evidence relation, publication use, or quoted wording. If the material does not distinguish those positions, retain the source phrase as an unresolved cue and stop rather than inferring U.Method.
Method and mechanism settlement
Do not decide from words such as method, algorithm, process, or mechanism. First ask what the sentence lets the project assert:
A method statement may cite a mechanism episteme whose content declares operations used by that method. A shared concern or operation name does not make the two values identical. A selector may choose a method, and an A.6.1 application may bind a method as an actual value. State that use only when the selector outcome, application binding, or another admitted direct relation is present; otherwise keep the method and neighboring object separate. None authorizes Work merely by being named.
Keep the nearby relation families distinct once, here. An F.9 Bridge between two exact F.17 SchemeSenseCell values states a cross-context sense correspondence; it does not change an effective reference scheme or establish identity. A claim that this Bridge suits one named use remains a separate C.2.1 bounded-use claim, and A.10 or B.3 governs reliance on that claim. An A.6.1 realization relation connects a mechanism declaration to a realizer; it is not the mechanism content. C.29 governs a mathematical preservation or representation claim. E.20 governs where mechanism meaning is maintained. Evaluation, measurement, and evidence-use patterns support their own claims; they do not add content to the method or mechanism.
When neither the reusable way nor the reusable operation declaration can be stated, keep the source wording unresolved. Replacing it with a more technical noun is not a repair.
Method, MethodDescription, WorkPlan, Work
Keep the four positions separate.
The same solver model, repository, protocol, diagram, or run packet may figure in several claims, so say what each sentence is about. The solver-model episteme may describe a method; its mathematical representation may expose a C.29 formal substrate; a dated solver run may be Work; and a measurement or evaluation result may support another claim through its evidence relation. None substitutes for another.
Method statement fields
A useful U.Method statement can usually answer these questions in ordinary project language:
This table is a recognition checklist, not a data schema. Start with the ordinary method sentence. Use A.6.1 for a reusable operation declaration, A.6.5 for a reusable direct-relation declaration, A.15.2 for planned use, and the exact direct relation or A.6.1 application binding for actual participation.
Representation and programming-paradigm discipline
A U.Method need not be written as an imperative sequence. Code, rules, constraints, process diagrams, SQL queries, proof scripts, optimization models, and functional or effect-handler programs can all describe or represent a way of doing without becoming that way.
Choose by the claim being made:
- If the sentence states the reusable action, participants, applicability, intended result, and boundary, use A.3.1.
- If it points to code, prose, a protocol, diagram, solver model, or other episteme that describes the method, use A.3.2. Use A.6.0 or C.29 when the claim is instead about a formal declaration or mathematical representation.
- If it declares a law-governed operation family or asks where that declaration is maintained, use A.6.1 or E.20.
- If it schedules future work or reports a dated occurrence, use A.15.2 or A.15.1.
- If it claims evidence, provenance, or support, use A.10 and the direct evaluation or measurement owner. If a graph, path, query, table, dashboard, or publication face is being made to route or authorize action by metaphor, apply C.2.P.DR before choosing that owner.
Keep cross-context and application claims separate from those five choices. F.9 governs a Bridge between two exact F.17 SchemeSenseCell values. A claim that this Bridge suits one named use remains separate under C.2.1, and A.10 or B.3 governs reliance on that claim. C.2.1, A.6.3, A.6.3.RT, A.6.4, or A.1.1 governs an actual change of episteme edition, reference scheme, representation scheme, retargeting, or model-use relation. A.6.1 governs a mechanism realization or application binding. State one of these only when its participants and predicate are present; otherwise stop at the source objects without asserting the relation.
Thus algorithm and practice remain source cues. “The SQL query is the method” fails unless the project can state the reusable way of querying, its admissible inputs, intended result, and stop independently of that query text. “Our review practice is the method” fails when the sentence is actually about a team assignment, dated review, discipline, tradition, evidence record, or publication.
Constructor and process-theory settlement
When a method concerns change, its statement says what change a future enactment is meant to achieve; it does not assert that any referent changed. Observation, comparison, classification, evaluation, communication, selection, proof, and preservation methods use the same rule: the reusable way can be identified without fabricating an actual change occurrence.
The constructor-theory and process-theory source line supports this separation but does not supply a universal method ontology. FPF uses it as follows:
- An admitted
U.Systemperforms dated Work under an obtainingU.RoleAssignment. F.6performedUnderAssignment(W, RA)attributes that Work to the assignment, while the holder system performs it; the assignment neither acts nor enacts the method. A.15.1 separately requires the actualenactsMethod, extent, andexecutedWithinrelations. - The
U.Methodis the reusable way under stated participant meanings, applicability, conditions, intended result or preserved condition, and bounds. AU.MethodDescriptionis an episteme that describes it. - A formal substrate or mathematical lens can make the method analyzable, and a
U.Mechanismcan declare the relevant operation family and laws. Neither becomes the method by providing a formula or implementation. - A cross-context Bridge, changed reference or model-use relation, mechanism realization, evaluation, or evidence-use claim remains a separately stated relation with its own participants.
- A
U.WorkPlanprepares or schedules dated Work; a Work individual is the occurrence that actually happened.
For example, “the etch method changed Wafer-22” contains at least two claims. A.3.1 identifies the reusable etch method. Only if an actual bounded change of Wafer-22 is independently grounded does A.3.4 identify that transformation; any claim connecting the Work and transformation additionally needs its own predicate or an honest missing-governor result.
This settlement works for welding, milling, reagent mixing, clinical triage, proof construction, optimization, scheduling, training, inference, and software execution without treating code as the privileged form of a method.
Semantic identity and variants
Two U.MethodDescription epistemes may describe the same U.Method when the later comparison or reuse decision relies on the same method bases:
- effective reference scheme and local senses, when a meaning difference matters;
- generic participant meanings and declared applicability;
- compatible preconditions;
- compatible intended effects or preserved conditions;
- compatible safety and other non-functional bounds;
- accepted nondeterminism or search behavior; and
- the same work-facing acceptance relation, when that relation is part of the comparison.
Different control flow, proof notation, programming paradigm, diagram notation, or prose does not by itself make a different method. The converse also holds: the same name, repository, supplier label, or diagram family does not prove identity.
Keep one method across parameter ranges, equipment envelopes, or representation variants only when its declared applicability and the bases used by the comparison admit that variation. A changed intended result, participant meaning, safety bound, semantic basis, or acceptance criterion requires a stated refinement, substitution, or distinct-method decision.
Same-name locality replay. An emergency-department Triage method applies to patient presentations awaiting clinical assessment; a clinician enacting it uses clinical signs to assign urgency, escalates unsafe cases, and stops when the evidence cannot support that assignment. A software-defect Triage method applies to defect reports awaiting product handling; a product team enacting it uses reproduction evidence, severity, and ownership to choose routing and release impact, and stops when the report cannot support that choice. The shared label identifies neither method. Their participants, applicability, local senses, intended results, and stops distinguish them without a generic context object.
No-extra-locality replay. EuclideanGCD over positive integers closes as one method when the integer meanings, division-with-remainder rule, positivity precondition, decreasing-remainder invariant, and greatest-common-divisor result are stated. If those facts answer the comparison, add no claim scope, context slice, model-use structure, or other locality object.
Method relation structure, composition, and work enactment
First decide whether the question is about one reusable way, a composite way, or relations among already identified objects:
- one reusable way is a
U.Method; - submethods assembled into a whole remain a
U.Method, with B.1.5 used when order-sensitive composition is claimed; - relations among methods, descriptions, selectors, or Work occurrences remain those exact relations; select a
U.Structureunder A.22 only when their organization changes the next question or action.
MethodRelationStructure is only a local designator for such an already selected A.22 U.Structure. It is not a durable U-kind, method holon, or relation type, and the label contributes nothing to identity. Candidate relation families—composition such as serial, parallel, choice, or iteration; method change such as refinement, substitution, decomposition, or parameterization; and selection or use such as family membership, fallback, or enactment—are recognition cues. Method-description membership is not one of those relations: A.3.2 judges the episteme itself. Every selected relation occurrence must already obtain under its direct pattern.
Filled A.22 basis — enacted-method review. For this one-off review, a practitioner selects only two A.15.1 enactsMethod occurrences. No durable selection judgment is asserted, and no composition, fallback, selector, or work-to-pump relation is created.
- Independently identified constituents.
InspectPumpSeal@PumpMaintenance-2026andClassifyPumpSealCondition@PumpMaintenance-2026are independently identifiedU.Methodvalues.Pump37SealInspectionWork-2026-07-25T0900-0908andPump37SealClassificationWork-2026-07-25T0910-0916are independently admitted A.15.1 Work occurrences:PumpDiagnosticService-A : U.Systemperforms each under obtainingPump37DiagnosticAssignment-2026-07-25 : U.RoleAssignment; the corresponding F.6performedUnderAssignmentoccurrences, exact extents, andexecutedWithin(..., Pump37MaintenanceCell-A)occurrences obtain. The fixture states no direct Work-to-Pump_37predicate, so neither Work is said to affect or concern the pump merely because its designator containsPump37. - Selected obtaining relations.
enactsMethod(Pump37SealInspectionWork-2026-07-25T0900-0908, InspectPumpSeal@PumpMaintenance-2026)andenactsMethod(Pump37SealClassificationWork-2026-07-25T0910-0916, ClassifyPumpSealCondition@PumpMaintenance-2026)obtain under A.15.1. Their labels, times, or adjacency would not make them obtain. - Applied constraint claims.
DiagnosticReviewWindowConstraintstates that an eligibleenactsMethodoccurrence must have one of the two independently admitted Work individuals as its Work participant and an extent within 09:00-09:20 on 2026-07-25.NoCompositionFromEnactmentOrderConstraintstates that their timestamps and order establish no serial, fallback, or whole-method relation. - Selection-use frame.
DiagnosticMethodEnactmentFramestates the question: which methods did these two Work occurrences enact during the review window? The admissible action is to list the twoenactsMethodoccurrences in that review. The prohibited overread is a composite method, work plan, method quality, causal success, authority, or any relation toPump_37.
Those four discriminators identify DiagnosticMethodEnactmentStructure-2026-07-25-0900-0920, locally designated MethodRelationStructure for this use. Reidentify it only from its four constituents, two obtaining relations, two applied constraint claims, and use frame. Its label, selecting system, selection Work, result episteme, graph, or table is not an identity field. If the project relies on a persisted selection, separately identify the system that made it, the selection method and dated Work, the participation relation or A.6.1 binding used by that Work, and the C.2.1 result episteme. Add a decision claim only if the project also asserts an accountable choice; A.22 puts none of these neighboring objects into structure identity.
Missing-governor stop. Suppose a note additionally calls ClassifyPumpSealCondition@PumpMaintenance-2026 a fallback for InspectPumpSeal@PumpMaintenance-2026, but supplies no direct fallback predicate, compatible participant meanings, or occurrence-identity rule. Keep the two methods and the note, omit the fallback relation, and return missing-governor: fallback relation for <ClassifyPumpSealCondition@PumpMaintenance-2026, InspectPumpSeal@PumpMaintenance-2026>. If the question is specifically about fallback organization, do not select a positive structure until that relation and all four A.22 discriminators are available.
Method-holon composition is not A.14 component mereology. Source labels such as SerialStepOf or ParallelFactorOf remain cues until B.1.5 or another direct owner supplies an admitted relation with participants and an obtaining rule. A method-description node is not a submethod unless the described object is independently identified as a U.Method.
Work composition is occurrence-side. Work may interleave, split, retry, or fail differently from the method description. A temporal Work part can enact the same whole method, and an episode can change Work continuity without changing method identity. Call a candidate a submethod only when it has its own reusable action, preconditions, intended result or preserved condition, boundary, and whole-method relation.
Quick distinction. A step label, graph node, detector component, event-log segment, telemetry interval, work-plan item, or document section is not a submethod by position. If it states a reusable way with method-level conditions and a relation to the whole method, test it under A.3.1 and B.1.5. If it states what happened, when it happened, what a component did, or what a record shows, use the direct Work, mechanism, evidence, or description pattern instead.
Mathematical or graphical notation may describe the selected structure under C.29 or occur in a U.MethodDescription. It does not become the method, structure, plan, Work, mechanism, or selector registry by form. Likewise, a registry row merely lists or describes candidates; it establishes no relation among them.
Archetypal Grounding
Across the slices below, a U.Method is not recognized by source wording, notation, or publication form. It is recognized by a stable project answer to this question:
Non-transformative method replay. DuplicateDefectReportComparison applies to two defect reports for the same product and release when both contain the required symptom and version data. An evaluator enacting it compares those fields and records same incident, different incidents, or insufficient information; missing version data is a stop. This closes a method statement without claiming that either report, product, or incident changed and without opening A.3.4.
Actual-transformation branch. The filled Etch_Al2O3 replay in 5.1 closes the reusable method without actual-change facts. If a later assertion says that Wafer-22 changed during Work W-143, identify the Work under A.15.1 and the actual transformation of Wafer-22 under A.3.4 separately; connect them only through a declared predicate or return missing-governor[work-to-change].
Manufacturing, optimization, proof, graph or query overread, and clinical triage differ in material, representation, and assurance needs, but they share the same method-identification question. The archetypal failure is also shared: a nearby description, plan, run, mechanism, formalism, or evidence relation takes the method name and silently changes what the project can rely on.
Manufacturing recipe
Situation. A fab process engineer must decide whether two current SOP editions describe the same alumina-etch method before either description is cited in a work plan. The engineer needs a reusable method identification, not permission to run the tool and not proof that any wafer changed.
Reusable way and applicability. Etch_Al2O3 applies to alumina-coated silicon wafers whose substrate class and coating range satisfy RecipeWindow-Al2O3-3, using a qualified PE-4 plasma-etcher family and the gas-mixture range declared by that window. Its generic participants are the wafer surface, qualified etcher, admitted gas mixture, target-depth parameter, and safety bounds; none is an actual run participant merely because it is named here. A future enactment holds the admitted pressure and temperature envelopes, adjusts exposure until the declared target-depth stop, and preserves the substrate and maximum-temperature conditions.
Preconditions and stop. The method is applicable only when the wafer material and coating range are known, the selected PE-4 calibration is current for the planned use, the admitted gas mixture is available, and the safety interlocks required by RecipeWindow-Al2O3-3 are part of the intended setup. If the wafer is outside that range, the calibration basis is missing, or the target-depth and preservation limits are absent, keep alumina etch as a method cue and stop; do not widen this method by name.
Visible identification result. Under effective FabProcessScheme-2026, where Al2O3, target depth, and substrate preservation have the local senses used above, the engineer can write:
This result lets the engineer compare the two SOP claim sets against one method identity and lets a later work plan cite that method and the selected description edition. The SOP, PLC program, calibration recipe, and supplier note remain U.MethodDescription candidates when A.3.2 identifies what each episteme describes (EntityOfConcern) and the substantive claims it carries. The identification does not authorize Work W-143, establish that the run occurred, or establish that Wafer-22 changed or passed metrology. Those stronger claims open their own A.15.2, A.15.1, A.3.4, measurement, evidence, assurance, or gate routes.
Optimization model
Situation and reusable way. JS_Schedule_v4 applies when the jobs, eligible machines, durations, precedence constraints, feasibility rules, and optimization objective are all stated for the scheduling problem. A planner or solver system enacting it constructs candidate assignments, rejects infeasible candidates, compares the remainder by the declared objective, and records the selected schedule or no feasible schedule. Missing precedence data, an unstated objective, or incompatible machine eligibility is a stop rather than permission to guess a method variant.
This identification lets a planner compare two solver packages as descriptions of the same scheduling method. The MILP formulation and solver configuration are U.MethodDescription or formal-substrate candidates according to the claim. The selected production schedule is a U.WorkPlan; the dated solver run is Work; and its decision record is a separate result episteme. None becomes the method merely by containing the same job and machine names.
Proof or derivation
Gauss_Elimination applies to a matrix and right-hand side over a declared algebraic domain in which the required row operations and pivots are valid. A mathematician or proof system enacting it applies equivalence-preserving row operations until solved or echelon form is reached. A missing admissible pivot, unsupported division, or unspecified domain is a stop. The visible result here is a method identification that a later derivation may enact; it is not the derived solution or proof that one run succeeded.
A textbook explanation, proof-assistant script, and formal rule set are method descriptions. A concrete proof-assistant run is Work, and the algebraic structure may be a formal substrate. Using the resulting proof for a project decision additionally needs an evidence or assurance relation.
Graph or query overread
A graph path, SQL query, checklist predicate, or dashboard table normally represents a relation, state, evidence structure, provenance structure, or publication face. It supports a method identification only when the project can separately state the reusable action, admissible inputs, branch criterion, intended result, and stop. A query text that returns rows is still a description or executable representation until that semantic way is stated.
If wording says that the graph “routes” a project, the query “calls” a work sequence, or the table “authorizes” action, apply C.2.P.DR. A visible arrow or row order is the tempting wrong action: it establishes neither method order, dated Work, gate passage, nor authority.
Clinical triage protocol
SepsisTriage_v3 applies to adult emergency-department presentations inside its declared population and assessment window. A clinician enacting it evaluates the stated signs and measurements, assigns an urgency class, and selects the next clinical response. Insufficient evidence, a patient outside the admitted population, or a presentation requiring another protocol is a stop. The visible result here is the reusable triage method and its boundary, not an admission decision or proof of benefit.
The protocol PDF, order-set screen, and decision-support rule are method descriptions or publication faces. A clinician's dated assessment is Work. The physiological model or score formula may be a formal substrate or mathematical lens. Admission policy, treatment release, and evidence that triage reduced harm remain neighboring claims under their own patterns.
Bias-Annotation
This pattern mainly blocks seven recurring biases:
- description-as-method bias: a publication, program, diagram, or protocol is treated as the method instead of a method description;
- practice-as-method bias: a source says "practice" and the repair silently chooses
U.Methodwithout checking whether the current claim is work, role assignment, discipline, cultural-evolution, evidence, source label, or method relation structure; - run-as-method bias: a trace, log, run, or result record is treated as the reusable way of doing;
- software-notation bias: code, algorithm, workflow, or programming-paradigm language becomes the default ontology for every method;
- mechanism-overread bias: law-governed mechanism or formal-substrate material is treated as if it already selected the project method;
- holder-as-method bias: a team, system, supplier, or capability holder becomes the method name;
- semio-bias: the discussion shifts to wording, a document, publication, or evidence face before the reusable action and its boundary have been stated.
Use one concrete test in every case: can the reader state the reusable action, its participants, applicability, intended result, and stop? If yes, identify the U.Method; apply A.3.2 separately to each candidate U.MethodDescription episteme; route any plan to A.15.2; and state only those enactment, evidence, or other relations that actually obtain. If not, keep the source phrase unresolved or route the claim to the owner shown in §4.
Conformance Checklist
CC-A3.1-1 (Method identity). U.Method is one reusable way of doing under a stated concern, participant meanings, applicability, preconditions, intended result or preserved condition, and bounds. It establishes no actual participant or A.3.4 transformation. A description, plan, dated Work occurrence, evidence relation, role assignment, capability, mechanism declaration, formal declaration, publication face, or pattern relation does not close this test. If the sentence also makes one of those claims, write that claim under its owner and state only the relation to the method that actually obtains.
CC-A3.1-2 (Semantic locality). State the applicability, participant meanings, conditions, intended result, and bounds that distinguish the method. Add an effective reference scheme and local senses only when different meanings would change the identification. Add a claim scope, context slice, selected structure, or model-use relation only when its predicate obtains and changing that object would change the identification or the stated later decision. Same spelling, team, discipline, repository, or location proves none of those bases.
CC-A3.1-3 (Method-description membership and use). When work, assurance, gate, or audit reliance depends on a method description, name the exact episteme and verify that it meets A.3.2 membership for this Method. If several epistemes are treated as descriptions of the same Method, their EntityOfConcern references must resolve to the same A.3.1 identity; compare their claim sets separately for the proposed use.
CC-A3.1-4 (Assignment-free method). A method may state role-kind admission conditions or capability-fit conditions. These are method-side admissibility conditions, not deontic obligations by default. The method does not bind named people, teams, organizations, or calendar allocations.
CC-A3.1-5 (Runtime-free method). A dated run is a Work individual under U.Work, not a method field. A.15.1 separately grounds its performer system, covering assignment and attribution, enacted method, extent, containing system, and every participation or resource relation used by the claim. Telemetry, logs, measurements, evaluations, production, delivery, acceptance, and result records remain separate claims.
CC-A3.1-6 (Plan-free method). Work preparation, schedule, go or no-go date, work authorization, and planned work relation belong to U.WorkPlan, gate, authority, or commitment patterns.
CC-A3.1-7 (Mechanism and formal-substrate separation). A formal substrate, mathematical lens, mechanism declaration, realizer, or control model can constrain or help explain a method only through a relation with stated participants. Use E.10.ARCH:3.1 to classify that neighboring claim. It does not identify the method until the reusable action, applicability, intended result, and boundary are stated.
CC-A3.1-8 (Programming-paradigm neutrality). Imperative, functional, logical, constraint, object-centric event, effect-handler, and hybrid forms remain descriptions or representations until the reusable way and its boundary are stated.
CC-A3.1-9 (Graph and representation guard). A graph path, path slice, query, predicate, table, dashboard, publication face, or pattern relation is not a method or work sequence by layout. Use C.2.P.DR when representation wording is overread as imperative action.
CC-A3.1-10 (Method parts, structures, and Work parts). Call a candidate a submethod only when its reusable action, preconditions, intended result or preserved condition, boundary, and relation to the whole method are stated. Otherwise keep the step, graph node, description fragment, Work part, episode, component behavior, or telemetry slice under its own pattern. A selected method-side U.Structure must have all four A.22 discriminators; layout and list membership establish none of them. Mathematical or graphical notation remains a description or C.29 representation.
CC-A3.1-11 (Practice wording recovery). For a source word such as practice, ask what the sentence lets the reader do: reuse a way, inspect a description, schedule or report Work, allocate a holder, classify a discipline or tradition, cite evidence, or merely quote a label. Choose the corresponding owner only when that action is stated; otherwise retain an unresolved source cue.
CC-A3.1-12 (Parameter and variant discipline). Parameters may be method semantics or content of a U.MethodDescription. A U.WorkPlan may name planned values only against the declaration that gives those values their meaning. An actual value or participant requires an obtaining direct subject relation or A.6.1 application binding; neither method nor description makes it actual. Effects, bounds, participant meanings, applicability, and any semantic basis used by the comparison determine variant identity.
CC-A3.1-13 (Evidence and assurance boundary). A method or method description does not by itself prove that work happened, that a result is warranted for the claimed use, that a gate is passed, or that action is authorized. Those claims use the relevant evidence, assurance, gate, temporal, authority, work-plan, or work patterns.
Common Anti-Patterns and How to Avoid Them
Consequences
- Method-like language becomes reusable across physical, informational, organizational, and mathematical work without privileging software code or ordered instructions.
- Teams can compare descriptions, variants, and implementations without confusing them with dated work.
- Work planning and evidence become more reliable because a method no longer smuggles in authority, proof, schedule, or performed-work claims.
- The cost is one explicit choice: before relying on words such as method, practice, algorithm, workflow, process, procedure, program, recipe, proof, or solver, say whether the source means a reusable way, its description, planned or performed Work, a mechanism, a representation, or another concrete claim.
Lowering and local repair conditions
Withdraw a U.Method identification when the text cannot answer the ordinary method question: what reusable action is meant, for which participant kinds and conditions, with what intended result or preserved condition, and where it stops. Also withdraw it when the supposed method is only a document, repository, diagram, model, run log, team, supplier label, or authorization; when one value is called both method and mechanism without a governing dual-typing rule; or when a graph or table is being read as an execution order without C.2.P.DR recovery.
Keep a source word such as practice unresolved when the sentence does not reveal whether it means a reusable way, a description, planned or performed Work, an assignment, a discipline or tradition, evidence, or a quoted label. Do not force one of those meanings merely to complete the form.
Repair locally:
- If the reusable way is recoverable, rewrite its identification with the missing applicability, participant meaning, condition, result, or stop.
- If a description, plan, Work occurrence, mechanism, representation, evidence claim, or result has occupied the method position, move that claim to its owner. State a relation back to the method only if that owner admits it; otherwise keep the two objects separate.
- If a relied-on episteme no longer meets A.3.2 membership, or its cited edition, claim set, acceptance relation, semantic basis, or variant condition changed, review that changed basis and the comparisons that used it; do not invalidate every use of the method.
A new method-description edition changes the method only when it changes a method basis that the comparison relied on. A changed Work fact, measurement, evaluation, production, delivery, acceptance, or evidence result repairs that neighboring claim, not the reusable method by default. Return to G.5 or the direct method-family owner only when the available family or selector no longer separates the needed methods and variants. Poor explanation is a didactic defect to repair; it is not evidence that the method itself changed.
Rationale
FPF needs U.Method because practical work often depends on a way of doing before there is one dated work occurrence, one accepted description, one final implementation, or one verified result. Treating the method as the document, code, mechanism, plan, or run makes reuse brittle: changing the publication looks like changing the method, a run error looks like method invalidation, and a mechanism claim starts authorizing work.
A method claim states the reusable way of doing, participant meanings, applicability, conditions, effects, and bounds. The mechanism episteme declares a law-governed operation family, its subject and range fields, operation algebra, laws, admissibility predicates, and Applicability. A Bridge, realization, evaluation, or evidence-use claim may relate to that episteme without entering its semantic content. The method and mechanism may be linked, but they are not two names for one untyped value.
SoTA-Echoing
Review a project's U.Method identification when a change in participant meaning, applicability, precondition, intended result, preserved condition, safety bound, effective scheme, selected structure, model-use relation, or work-facing acceptance criterion could make a reader identify a different method or allow a different case. If only a description edition, Work occurrence, transformation, representation, measurement, or evidence relation changed, review that neighboring claim unless the change also alters one of those method bases.
Use G.11 when a later decision depends on the freshness or edition of a cited method description or source. A newer paper, implementation, or run is a reason to inspect the relation that cites it, not automatic evidence of a new method. Reopen A.3.1 itself only when stronger work overturns one of the distinctions that the project actually relies on.
Relations
- Identity and meaning: builds on
A.1,A.2,A.2.1,A.2.2, andC.2.1; useF.17when a local sense matters andG.11when a comparison relies on source or edition currentness. - Description, composition, and variation: coordinates with
A.3.2for method descriptions,A.3.3for dynamics,B.1.5for order-sensitive method composition,B.2for whole reidentification, andG.5for method families and selector outcomes. - Work and change: coordinates with
A.15.2for plans,A.15.1for dated Work, andA.3.4only after an actual changed referent and transformation are independently claimed. Role values, assignments, and role relations remain underA.2,A.2.1, andA.2.7. - Mechanism and representation: coordinates with
A.6.0for formal declarations,A.6.1andE.20for mechanisms,C.29for mathematical-lens use,F.9for sense Bridges, andA.1.1only for an obtaining model-use relation or selectedBoundedModelUseStructurethat changes the method decision. - Source-wording exits: coordinates with
C.20,C.36, andC.36.Pfor discipline and cultural-evolution uses of practice;A.10for evidence and provenance; andC.2.P.DRfor representations overread as routes or Work sequences. - Informs:
E.18andE.18.1when flow-structure or P2W wording must keep descriptions, mathematical paths, method claims, and Work claims separate.
A.3.1:End
U.MethodDescription: Description Episteme for a Way of Doing
Type: Definitional pattern Status: Stable Normativity: Normative
Problem frame
Use this pattern when engineers need reusable claims about how one method is carried out and must keep those claims distinct from the representation, publication, approval, plan, or actual work through which the method is discussed or enacted. In FPF terms, decide whether an already identified U.Episteme is a U.MethodDescription: whether its exact EntityOfConcern is one admitted U.Method and its claims say something substantive about that method as a way of doing.
Plain reading. A method description is the knowledge object whose claims say how one identified method is done. Code, text, or a diagram may represent those claims; a publication occurrence may make an edition available; neither fact decides membership.
Recognizable working moments include:
- a maintenance team comparing a revised procedure with the method used to plan the next service window;
- a clinical team selecting a triage guideline while keeping guideline claims, approval, and patient-specific work separate;
- a production-planning team comparing scheduling-method claims while the MILP representation and solver runs change.
Use it when the working question is:
- which admitted
U.Methodis the exactEntityOfConcern; - which claim states the method's transformation or enactment concern, applicability, precondition, effect, bound, or internal composition;
- whether anyone is proposing a use beyond membership; if so, what that use is, where it belongs, and which method claims it needs;
- which
C.29representation corresponds to the claims, which publication occurrence makes the selected edition available, which publication form expresses it, and whichU.PresentationCarrierbears that form—but only when the proposed use needs those distinctions; - whether two epistemes describe the same A.3.1-reidentified Method and, separately, whether their claims are equivalent for the proposed use. If their effective reference schemes differ, first establish the F.9
Bridgebetween the twoSchemeSenseCellvalues. That Bridge establishes correspondence only. Positive reliance on the proposed reuse also needs a separate C.2.1 claim for that bounded use. For ordinary below-threshold evidence reliance with no assurance claim, requireRelianceDisposition=passfrom A.10. If an assurance claim is current or the B.3 material-reliance threshold is met, enter B.3; positive assurance requires a current positive claim with its sufficient record, while no claim or an insufficient record blocks or narrows the assurance use. A negative or absent use claim, a non-passing A.10 disposition, or a non-positive B.3 outcome blocks or narrows reuse while the Bridge remains true.
Primary governed object. A.3.2 examines one already identified claim-bearing U.Episteme candidate and judges whether that same individual belongs to the dependent kind U.MethodDescription. For positive membership, the candidate episteme's exact C.2.1 EntityOfConcern must resolve to one admitted U.Method, and at least one of its claims must concern that Method as a way of doing. The Method is the internal subject of the episteme's claims, not a second candidate and not the primary object of this membership judgment. A.3.2 adds neither another episteme identity nor a binary description relation.
Primary working reader. An engineer, researcher, publisher, teacher, planner, or auditor who must identify or rely on reusable claims about a method before planning, enactment, comparison, audit, revision, publication, or teaching.
Primary working concern. Identify the claim-bearing episteme and its Method first. When someone proposes a further use, name that use and its owner, then ask which claims the use needs and whether this edition contains them. With no proposed use, stop at membership.
Primary viewpoint. The practitioner selecting, comparing, or revising method descriptions while method identity and the surrounding representation and publication relations remain explicit.
First useful move. Name the candidate U.Episteme. Check two things: its C.2.1 EntityOfConcern is one admitted U.Method, and at least one claim says how that Method is done. If both hold, the same episteme is a U.MethodDescription; if either fails, it is not. Only then, if someone proposes a concrete further use, write that use's criterion and result under the pattern that owns it. Otherwise stop at membership; do not invent Work, a decision, or an adequacy result.
What goes wrong if missed. A visible file or diagram is classified by its form, a mere mention is mistaken for a description, or an episteme about a relation structure among several methods is treated as if it described one composite method. Planning, enactment, audit, and review then rely on the wrong governed object.
What this buys. The project can identify, compare, revise, and reuse method descriptions while keeping the described U.Method, RelationSignature, OperationAlgebra, C.29 representations, publication occurrences and forms, presentation carriers, work plans, work occurrences, and evidence under their own governing patterns.
Not this pattern when. Do not infer membership from words such as algorithm, program, proof, workflow, process, procedure, recipe, or model. Ask what the sentence actually asserts. If its EntityOfConcern is not an admitted U.Method, or it says nothing substantive about that Method as a way of doing, A.3.2 does not apply. Use the owner of the actual method, selected structure, formal declaration, work plan, dated Work, evidence use, or publication use instead.
Problem
Without a precise U.MethodDescription distinction, projects collapse several different claims:
- Description as run. A flowchart, repository, executable, lab protocol, or solver file is treated as if it were the dated work occurrence.
- Description as method semantics. A notation or file is treated as the method itself, so equivalent descriptions look like competing methods and different methods can hide behind one document name.
- Description as plan or authority. A protocol, dashboard cue, gate-looking entry, or approved procedure note is treated as a work plan, permission, gate passage, or evidence result.
- Description as declaration, mechanism, or formal substrate. A proof script, algorithm, model, or rule set is treated as if it already were a
RelationSignature, an A.6.1 operation declaration, a mechanism law set, or a mathematical substrate. - Imperative overread. A declarative representation, graph path, query plan, constraint model, or state predicate is interpreted as an ordered work-control claim.
- Subject identity and description equivalence collapse. Two epistemes that concern the same method are treated as equivalent despite incompatible claims, or a notational difference is used to fork method identity without the A.3.1 reidentification rule.
Forces
Solution
Definition
U.MethodDescription is a same-individual dependent kind of U.Episteme. Membership holds when the already identified episteme has one admitted U.Method as its exact EntityOfConcern and its claims, interpreted under the effective U.ReferenceScheme, make at least one substantive claim about that method as a way of doing. Such a claim may state the method's transformation or enactment concern, generic participant meanings, applicability, precondition, intended effect or preserved condition, bound, or internal method composition. These are claims about method semantics, not planned assignments or actual participation. Naming the method, giving bibliographic metadata, or stating approval alone does not establish membership.
The C.2.1 claim content, exact EntityOfConcern, and effective U.ReferenceScheme remain the identity discriminators of the episteme; A.3.2 adds no second identity. Whether the claims are detailed, current, or reliable enough for a particular planning, enactment, comparison, audit, revision, publication, or teaching use is a separate evaluation. A new receiving use alone neither creates a new method description nor removes membership.
If someone claims empirical grounding, state the C.2.1 EpistemeEmpiricalGroundingRelation. If a proposed use depends on a test, write the tested claim, criterion, evidence path, and result under the evaluation, evidence, or assurance pattern that defines them. Do not add these as method-description fields or let a test change membership.
An assertion or description episteme about one dated Work occurrence may cite methodDescriptionRef when its claim depends on that description edition. The holder U.System performs the Work under an obtaining U.RoleAssignment; F.6 performedUnderAssignment(W, RA) attributes the Work to that assignment, and A.15.1 enactsMethod(W, M) relates it to the Method. The description itself neither performs Work nor is enacted.
Representation-agnostic stance
Begin with the claim-bearing episteme, then distinguish how its claims are made available:
- a
C.29representation stands in a declared correspondence to the represented claims; - an
E.24.PUBpublication form expresses the selected episteme edition for one publication use; - a
U.PresentationCarrierbears that publication form.
These are different objects and relations. None becomes U.MethodDescription by appearance. Only the claim-bearing episteme, not its representation, form, carrier, or publication occurrence, can meet the membership rule in 4.1.
The representation may use procedural text, code, a diagram, functional composition, a typed pipeline, a state machine, event rules, constraints, a solver formulation, a proof script, a statistical model, or a combination of notations. Notation choice does not decide membership. Read each assertion separately: use A.6.0 or C.29 when it asserts a formal object, A.6.1 or E.20 when it declares an operation family and laws, A.15.2 when it states intended Work, and A.10 or B.3 when another claim relies on it as evidence or assurance.
Method-description claim content
The membership threshold is positive but small: at least one claim must answer a method-side question about the way of doing. A name, author, citation, catalogue entry, or approval status does not answer such a question. This threshold distinguishes description from mention; it is not a completeness test for a receiving use.
Name the receiving use before asking whether this method-description edition is adequate for it. A receiving use is not required for U.MethodDescription membership. If no use is current, stop at the membership result and make no adequacy claim.
A.3.2 creates no universal method-description-use relation. Name the concrete receiving object and its owner. Comparing claim sets, revising a publication, or checking teaching content does not require a fabricated Work occurrence or decision object.
Then inspect the claim concerns that matter for that named use:
Calendars, assignees, work authorization, gate passage, and dated execution witnesses are governed by planning, assignment, gate, or work-occurrence patterns. They may cite a method description but do not become its claim content merely because they appear beside it.
A U.MethodDescription describes one admitted Method. It is not the RelationSignature that declares participants for one relation kind, the A.6.1 OperationAlgebra content that declares arguments and results for an operation family, the U.WorkPlan that states intended work, a dated Work occurrence, or any actual-participation relation of that occurrence.
Method-description acceptance and use boundaries
A project may accept, regulate, prefer, deprecate, or forbid a method description for one stated use, organization, or policy scope. Record that separate publication, gate, authority, or policy claim under its own pattern. It neither establishes U.MethodDescription membership nor turns the description into Work, evidence, a gate decision, or a mechanism.
When a method description is used to prepare or enact work, keep the chain explicit:
- C.2.1 identifies one episteme through its claim content, exact
EntityOfConcern, and effectiveU.ReferenceScheme; A.3.2 judges that same episteme to beU.MethodDescription. Plainly saying that the method description describes the method is shorthand for this constitution and membership judgment, not another binary relation occurrence. U.WorkPlanmay cite that episteme when preparing dated work.- The holder
U.Systemperforms dated Work under an obtainingU.RoleAssignment; F.6performedUnderAssignment(W, RA)attributes it to the assignment, and A.15.1enactsMethod(W, M)relates it to the Method. A separate assertion citesmethodDescriptionRefonly when its claim depends on that edition. - The word result is only a cue. Ask which claim is being made: an A.6.1 application returned a value, a referent changed under A.3.4, Work produced something under A.15.PROD, or a measurement, evaluation, delivery, or acceptance occurred. If the use needs a Work-to-result relation and no owner admits one, keep Work and result separate and return
missing-governor[work-to-result]. A log, trace, measurement, or result episteme supports another claim only through its evidence relation.
Method, mechanism, and formal-substrate boundary
Do not classify by the source word alone. First say in plain words what someone is trying to change, produce, select, derive, control, or maintain and what the sentence asserts about it. Then use E.10.ARCH:3.1 to separate method, mechanism, formal-object, plan, Work, and result claims; write each claim under its own pattern.
For A.3.2 ask only: is this episteme about one admitted Method, and does at least one claim say how that Method is done? If the same source also asserts a mechanism, formal declaration, work plan, dated Work, evidence use, gate, result, publication, or temporal claim, state that claim separately. Sharing one source does not connect those objects.
Use these claim checks instead of forcing distinct claims into one generic relation:
- A method-description membership judgment identifies one admitted
U.Methodas the episteme's exactEntityOfConcernand finds at least one substantive claim about that method as a way of doing. - A method claim states the reusable way of doing, its participant meanings, applicability, conditions, intended result or preserved condition, and bounds.
- A formal-substrate claim concerns the selected formal object, structure, invariant, or mathematical declaration used for reasoning.
- A mechanism-declaration claim concerns the law-governed operation family, direct subject and range fields, operation algebra, law set, admissibility predicates, and applicability. Transport, audit, realization, evaluation, and evidence-use relations remain separately governed neighboring claims.
- A work claim concerns one dated occurrence: the holder system that performs it, the covering assignment and F.6 attribution, enacted method, temporal extent, and containing system. Add participant, resource, or work-to-referent claims only through relations that actually obtain; otherwise return the corresponding missing-governor result.
Connect these claims only through an admitted relation whose predicate and participants are present. If no owner admits the needed relation, keep the objects separate rather than inferring dual typing or turning a method description into Work. Example: a scheduling-method episteme can meet the membership rule while a MILP file represents some of its claims. Another episteme may describe the mathematical formulation; a selector mechanism may declare operations over candidate methods; a dated solver run is Work; and an issued production-schedule episteme is a separate result. Use that result as evidence only through a current A.10 path and its bounded disposition. Without that path, keep the result available but do not rely on it as evidence for another claim.
Constructor and process-theory note
In the constructor-theory and process-theory interpretation used here, both informational and physical procedures are understood through possible or impossible transformations. That motivates a broad method-description kind without making software code privileged:
- an episteme about an information-transformation method may be represented through a program, proof script, or solver model;
- an episteme about a material, energetic, organizational, or mixed-transformation method may be represented through a procedure, lab protocol, or control recipe;
- an assertion or description about dated Work may cite a method description; the holder system still performs the Work under an obtaining assignment, F.6
performedUnderAssignmentcarries attribution, and A.15.1enactsMethodrelates Work to Method. No actor orTransformerRolefollows from the description; - a mechanism may declare law-governed operation structure for transformations, but that mechanism claim is separate from the method-description claim.
This interpretation does not justify classifying every algorithm-looking expression as U.MethodDescription. It only explains why FPF can treat many representation forms uniformly after the current claim and described method are recovered.
Declarative representation boundary
Some method descriptions use declarative representations: constraint sets, graph patterns, state predicates, SQL-like queries, policy rules, e-graphs, monoidal diagrams, or process constraints. Do not translate such representations into an imperative route unless the method claim actually states an ordered action structure.
If wording turns a graph path, evidence path, query plan, predicate, checklist, publication face, or pattern relation into a route, first say what it represents and whether the source actually asserts an order. Use C.2.P.DR to stop layout from creating a dispatch, call, or work-control sequence; state a genuine ordered method or WorkPlan only under its own pattern.
Composite methods and independent method structures
When claims concern relations among methods, first determine whether the related methods construct one admitted composite U.Method.
If admitted methods are actual method parts whose organization constitutes one composite method under A.3.1 and, when order-sensitive composition is current, B.1.5, the composite U.Method remains the exact EntityOfConcern. A U.MethodDescription can make substantive claims about that composite method's internal organization without changing its object of concern to an independently selected structure.
Description nodes, workflow boxes, code blocks, proof-script blocks, diagram paths, and table rows are representation constituents. They do not become method parts by position in the description. A constituent can participate in method-holon composition only after the recovered object is itself an admitted U.Method.
If a selected relation structure instead connects several methods as alternatives, substitutes, fallbacks, comparison candidates, or members of a family without constituting one composite method, the selected U.Structure is the exact EntityOfConcern under A.22 and C.2.1. The resulting episteme can describe that structure, but the present rule does not classify it as U.MethodDescription.
An algebraic, graph, categorical, process-calculus, effect-calculus, matrix, embedding, distributed, or neural representation can be used to express or analyze either case. Its correspondence to claims is governed separately through C.29. A work plan, work occurrence, method-family registry, or selector result also keeps its own governed object and governing pattern.
Archetypal Grounding
Across the slices below, recognize the claim-bearing episteme before examining how it is represented or published. Ask in this order:
- Which admitted
U.Methodis its exactEntityOfConcern? - Which claim says something substantive about that method as a way of doing?
- Is anyone proposing a use beyond membership? If so, name the use, its owner, and the claims it needs; if not, stop at membership.
- When expression or availability matters, which
C.29representation corresponds to the claims, which publication occurrence makes the selected edition available, which publication form expresses it, and whichU.PresentationCarrierbears that form?
Industrial procedure
A procedure episteme about EtchAl2O3@FabA qualifies when its claims state how the etching method is done: gas-feed participant meanings, temperature bounds, chamber preconditions, intended etch profile, failure conditions, operator role kind, calibration capability threshold, or admitted parameter ranges.
A PDF publication form may express one edition of those claims, and a PLC ladder representation may correspond to some of them. Their visible forms do not establish membership. The scheduled maintenance-window preparation is a U.WorkPlan; tool run W-143 is Work. A metrology result supports another claim only through the evidence relation for that claim.
Named-use replay — preparing WP-Etch-MW-47. The maintenance planner needs four claims before drafting this A.15.2 U.WorkPlan: the chamber is empty, inert, and leak-check complete before gas feed; the method's temperature range is 58–62 °C; calibration is no more than 24 hours old; and pressure above the stated bound stops the run. EtchAl2O3-Description-e7 passes A.3.2 membership because it concerns EtchAl2O3@FabA and says how that Method is done. It also states all four needed claims. To verify that this is the current edition, the planner checks its ClaimGraph against publication occurrence Pub-Etch-e7, publication form EtchAl2O3-SOP-e7, and carrier FabA-MethodRepository-2026, plus the source trace from EtchDescriptionReleaseWork-e7, performed under EtchDescriptionMaintainerAssignment-4 with method trace ClaimGraphReleaseCheck-v2. A.10 path EP-Etch-e7-Plan47 links those sources to claim C-Etch-e7-has-Plan47-claims. Its bounded use is citing e7 while drafting WP-Etch-MW-47; unsupported uses are gate passage, authorization, safe execution, and a claim that Work occurred. Its window reopens when e7, RecipeWindow-Al2O3-3, the calibration rule, or a source named in the path changes. RelianceDisposition=pass therefore supports citing e7 only for this drafting use.
EtchAl2O3-Description-brief-e7 still passes membership because it concerns the same Method and states the gas-feed and temperature procedure. It omits the 24-hour calibration condition and pressure stop. A.10 path EP-Etch-brief-e7-Plan47 points to that brief edition and cannot evidence the two missing claims, so RelianceDisposition=blocked-current-use applies to drafting WP-Etch-MW-47. Reopen after selecting an edition that states both claims; until then the planner stops or selects another edition. Membership is unchanged. If the result must persist, C.2.1 owns its result episteme and ClaimGraph, A.10 owns the evidence path and disposition, and A.15.2 owns the plan. A.3.2 creates no generic adequacy relation.
Optimization model
A scheduling-method episteme qualifies when its exact EntityOfConcern is JSScheduleV4@Plant2026 and its claims state how a production schedule is produced or evaluated. A MILP representation and an explicitly recovered solver-configuration representation can stand in declared correspondence to those claims.
A separate formal-substrate episteme can make claims about variables, constraints, objective, admissible solution set, or invariants. A publication form expressing that episteme may be borne by the same presentation carrier, but the carrier does not make the claims or establish their truth. A timestamped solver run is work. A selector mechanism, if declared, is governed by A.6.1 and E.20. Solver search order does not by itself state the project work sequence.
Proof script
An episteme about a reusable derivation or checking method qualifies when it identifies that U.Method exactly and makes a substantive claim about how the derivation or check is done. A proof-assistant script may represent those claims. The script's notation does not establish membership.
A concrete proof-checking session is work. Claims about a formal substrate, a theorem, or evidence for the theorem remain separately governed even when publication forms expressing those epistemes are borne by the same carrier. A publication occurrence, not the form or carrier, makes a selected edition available to an audience for a bounded use.
Clinical guideline
A guideline episteme qualifies when its exact EntityOfConcern is AcuteAppendicitisTriage@HospitalContext and its claims state the triage method through patient-information and resource participant meanings, exclusions, decision criteria, relevant role kinds and capabilities, intended effects, or failure response. A publication form expresses one selected edition, and a publication occurrence can make that edition available; approval status remains a separate claim.
Patient-specific dated enactment is a Work individual admitted under U.Work. If a causal claim relies on a triage disposition, diagnostic finding, or measurement result, name that premise and apply C.28. Merely using the guideline during Work establishes neither a causal effect nor a causal-use result.
Workflow diagram
An episteme whose claims state one reusable method may qualify as U.MethodDescription; a BPMN or object-centric process model may represent those claims. A diagram can also represent a work plan, event-log model, or independently selected structure, so its notation does not settle the exact EntityOfConcern.
If readers treat the diagram as a route that tokens or workers must follow, compare that reading with the source claim. Keep an ordered sequence only when the method claim actually states one. When order comes only from layout, use C.2.P.DR and stop at the represented graph, constraints, objects, or events.
Bias-Annotation
This pattern mainly blocks six recurring biases:
- carrier-as-description bias: a PDF file, repository, screen, or presentation carrier is treated as the method description. Identify the episteme whose ClaimGraph is being read, then record its C.29 representation and publication relations separately;
- description-as-method bias: the representation is treated as the way of doing itself;
- description-as-work bias: executable or operational-looking representation is treated as dated work;
- approval-as-proof bias: accepted, approved, or regulated descriptions are treated as evidence, gate passage, or safe execution;
- notation-prestige bias: code, formal notation, or solver files are treated as more authoritative than procedures, diagrams, or guidelines. Compare the actual method claims; representation form supplies no priority;
- imperative-metaphor bias: graph, query, predicate, or process-model representation is treated as an ordered work-control claim.
First identify the claim-bearing episteme, the claim it makes, and the Method it concerns. Then keep its C.29 representation, publication occurrence, publication form, and presentation carrier separate, and send each plan, Work, evidence, gate, authority, mechanism, formal, or mathematical claim to its own pattern.
Conformance Checklist
CC-A3.2-1 (Episteme membership). A.3.2 judges one already identified U.Episteme candidate. That same individual is a U.MethodDescription only when its C.2.1 EntityOfConcern is one admitted U.Method and at least one claim says how that Method is done. Representation form, publication form, carrier, approval, and use adequacy do not decide membership; no binary description relation is minted.
CC-A3.2-2 (Positive description threshold). The episteme must make at least one substantive claim about the method as a way of doing, such as its transformation or enactment concern, generic participant meanings, applicability, precondition, intended effect or preserved condition, bound, or internal composition. A name, citation, author, catalogue entry, or approval status alone is mention, not method-description membership.
CC-A3.2-3 (No automatic trigger repair). Wording such as algorithm, program, proof, solver, workflow, process, procedure, recipe, or model is only a cue. Classify the episteme as U.MethodDescription only after its claim and admitted Method pass CC-A3.2-1 and CC-A3.2-2.
CC-A3.2-4 (Description not work). Executable-looking material is not a Work occurrence. A program run, proof-checking session, solver run, lab run, or clinical application is Work only after A.15.1 identifies the world-side occurrence, holder system, covering assignment and F.6 attribution, enacted Method, temporal extent, and containing system. Any participant, resource-use, or work-to-referent claim needs its own admitted relation; if none exists, return the corresponding missing-governor result.
CC-A3.2-5 (Description not plan or authority). A method description is not a work plan, gate decision, permission, approval, external-rule authorization, or evidence relation. Those claims may cite the description but require their own governing patterns.
CC-A3.2-6 (Description not mechanism or declaration). A method description is neither a RelationSignature nor A.6.1 OperationAlgebra content and does not close a mechanism claim. If reusable direct-relation participant declaration is current, use A.6.0 and A.6.5. If operation algebra, law set, admissibility predicates, or applicability is current, use A.6.1; transport, audit, realization, evaluation, and evidence-use relations remain with their direct patterns.
CC-A3.2-7 (Description not formal substrate). A method description does not close a formal-substrate or mathematical-lens claim. If variables, equations, invariants, structure, substrate, or mathematical payoff are current, use A.6.0, C.29, or the direct mathematical pattern.
CC-A3.2-8 (No people or calendars inside the description claim). A method description may state role kinds and capability thresholds that bound admissible enactment. Named people, dates, schedules, launch values, and work witnesses belong to work planning, role assignment, or work occurrence claims.
CC-A3.2-9 (Parameters and use time). A method description may state parameter meanings and ranges. A U.WorkPlan names planned values against the declaration that gives them meaning. An actual participant or operation value requires an obtaining subject relation or A.6.1 application binding; otherwise keep it planned and return missing-governor[actual-use].
CC-A3.2-10 (Same subject versus equivalent descriptions). Two descriptions concern the same U.Method only when their EntityOfConcern references resolve to the same A.3.1 method identity. A scheme difference may require an F.9 Bridge to interpret a comparison, but the Bridge does not establish Method identity. Shared subject also does not make the epistemes equivalent: state which claims are preserved, absent, incompatible, or inaccurate for the proposed use. Notation or control structure alone establishes neither a different Method nor equivalent claim content.
CC-A3.2-11 (Edition and refinement). A later file or episteme edition does not by itself refine the Method. Use C.2.1 for the edition relation; state which description claims a comparison preserves or strengthens; and use A.3.1, B.1.5, or another admitted method relation only for an actual refinement claim. If no owner admits refinement, keep the two Methods and stop at the edition or comparison result.
CC-A3.2-12 (Nondeterminism). When a description permits search, optimization, sampling, nondeterministic choice, or learned behavior, state the admissible result range and the criterion that will evaluate actual Work or results. Name that criterion's owner; the description itself establishes neither actual performance nor an evaluation result.
CC-A3.2-13 (Cross-context and semantic-locality boundary). F.9 answers only whether a Bridge obtains between two SchemeSenseCell values. For proposed reuse, state a separate C.2.1 claim with the use, direction, correspondence rule, loss tolerance, and affirmative or negative polarity. Positive polarity alone is not reliance. An ordinary below-threshold use with no assurance claim needs RelianceDisposition=pass on its A.10 path. When an assurance claim is made or the B.3 threshold is met, enter B.3: positive assurance requires a current positive claim and sufficient record, while no claim or an insufficient record stops or narrows the assurance use. A negative or absent use claim, non-passing A.10 disposition, or non-positive B.3 outcome stops or narrows reuse even while the Bridge obtains. None of those premises says that comparison, publication, planning, or Work occurred. Changes of reference scheme, unit, role taxonomy, claim scope, or model use stay under their own patterns.
CC-A3.2-14 (Declarative representation). A declarative graph, query, predicate, or model does not state an ordered work route by layout. Use C.2.P.DR to recover what it represents; assert a route, dispatch, call, or work-control sequence only when its own pattern admits that claim, otherwise stop at the representation.
CC-A3.2-15 (Causal-use boundary). A method description may describe intervention assignment, target-trial emulation, realized-counterfactual sampling, simulation, or causal-evidence collection. It does not by itself establish causal use. If causal effect, intervention success, counterfactual comparison, causal fairness, or policy effect is claimed, use C.28.
Common Anti-Patterns and How to Avoid Them
Consequences
Quick use cards
- Claims first. The claim-bearing episteme can be
U.MethodDescription; its exactU.Method, C.29 representation, publication occurrence, publication form, andU.PresentationCarrierremain distinct. - Executable is still not a run. Runs are Work individuals admitted under
U.Workonly when A.15.1 grounds their occurrences. - Representation is not enough. Read what the code, proof, solver file, procedure, diagram, or workflow actually asserts and name its subject. Only the claim-bearing episteme can pass A.3.2 membership; C.29 keeps the representation correspondence.
- Mechanism needs its declaration. Use
A.6.1when operation algebra, laws, admissibility, or applicability is current; keep transport, audit, realization, evaluation, and evidence-use relations under their direct patterns. - Math needs its own claim. Use
A.6.0andC.29when formal substrate or mathematical-lens use is current. - No ordered-action overread. Use
C.2.P.DRwhen declarative representations are overread as ordered action structures.
Rationale
Projects need reusable claims about ways of doing before any dated work occurs. Treating a file as the method description by appearance hides two decisions that later work needs: which episteme is being relied on, and which admitted method its claims concern. The positive claim threshold makes this distinction usable without demanding a complete procedure card.
The pattern is representation-agnostic because a method can be described through procedural text, code, diagrams, mathematical notation, protocols, or combinations of them. The episteme can be revised and evaluated while its C.29 representations, publication occurrences, publication forms, and presentation carriers change independently. This separation lets a project compare descriptions and judge fitness for a receiving use without turning notation, approval, publication, or enactment into kind membership.
SoTA-Echoing
Refresh this pattern when current work on process theory, effect systems, executable specifications, process modeling, graph and equivalence representations, or FPF's own method, method-description, work, mechanism, and mathematical-lens patterns changes the governing distinction.
Relations
- Builds on:
C.2.1for the identity, grounding, and edition relations of the same claim-bearing episteme;A.3.1for the exactU.Method; andE.24.UKfor admission of the dependent U-kind. - Coordinates with:
A.3.1andB.1.5for actual method parts, method identity, and composite-method organization;A.22for an independently selected structure among several methods;A.1.1only when an independently selectedBoundedModelUseStructurechanges the proposed use;F.9only for cross-contextSchemeSenseCellcorrespondence;C.2.1for the separate claim that one obtaining Bridge suits one bounded use;A.10for ordinary evidence reliance on that claim andB.3only for the assurance or material-threshold branch;C.29for representation correspondence;E.24.PUBfor publication occurrence and form;A.15.2 U.WorkPlan;A.15.1 U.Work;A.2andA.2.1for role and role-assignment claims;A.2.2for capability thresholds;C.28for causal-use claims. - Separates from:
A.6.0formal-substrate declarations;C.29mathematical-lens use;A.6.1 U.Mechanism;E.20mechanism-meaning introduction and revision. - Uses for precision restoration:
E.10,E.10.ARCH,F.18, andC.2.P.DRwhen source wording leaves unclear what claim is made, what object it concerns, or whether a visible route is merely representational.
A.3.2:End
U.Dynamics: State-Space and Transition-Law Episteme
Type: Definitional pattern Status: Stable Normativity: Normative
Problem frame
Use this pattern when a project needs one reusable model of how state changes in a bounded context: a state space, a transition law, an observation relation, and the conditions under which prediction, simulation, calibration, conformance, drift, or gating claims are warranted.
Use it when the working question is:
- which holon, episteme, system-in-role, claim, service, resource bundle, architecture, or other EntityOfConcern has changing state;
- which characteristics define the state space;
- which transition law states how those coordinates evolve;
- which observations or work-derived traces can be compared with the law;
- whether a prediction can be used for comparison, gating, assurance, planning, or control.
Primary EntityOfConcern. The EntityOfConcern is U.Dynamics: an U.Episteme that specifies a state space and a state-transition law for one or more EntitiesOfConcern in a bounded context.
E.24.UK settlement. U.Dynamics is retained as a dependent durable U-kind under the U.Episteme settlement. Its durable value is the reusable state-space and transition-law episteme for changing state in a bounded context. It is not a root change kind, not the changed EntityOfConcern, not a work occurrence, and not a flow structure; components such as stateSpace, transitionLaw, observationRelation, and calibrationOrParameterSource remain slots or claim graphs inside the dynamics episteme unless another governing pattern makes one of them separately addressable.
First useful move. Name the changing EntityOfConcern, the bounded context, the state-space characteristics, the transition law, the observation relation, and the applicability window. If these cannot be named, the current claim is not yet ready for prediction, conformance, or gate use.
What goes wrong if missed. Procedure text becomes "the dynamics", telemetry becomes a law, one observed run becomes a prediction, a dashboard becomes a state space, or a simulation becomes permission to act.
What this buys in practice. Practitioners can compare predictions with traces, decide whether stale predictions may still be used, separate methods from laws of change, and decide where mathematical-lens, temporal, evidence, assurance, or gate patterns must take over.
Not this pattern when. If the source only states a semantic way of doing, use A.3.1. If it states an episteme describing that way, use A.3.2. If it states bounded transformation under conditions, use A.3.4. If it states planned work or dated work, use A.15.2 or A.15.1. If it states a mechanism algebra, use A.6.1 and E.20. If it states only freshness, rhythm, inertia, delay, window, or currentness as a positive temporal aspect, use C.27.TA; if it states adequacy or supported use of an authored temporal claim, use C.27. If it states only evidence or assurance, use A.10 or B.3.
Problem
Without a first-class U.Dynamics, state-change claims collapse into nearby but different claims:
- Recipe becomes law. Teams put procedure text, a control diagram, a workflow diagram, or a method description where a state-transition law should be.
- Trace becomes law. Dated work logs, telemetry, and incident sequences are treated as if past events defined what must happen.
- Dashboard becomes state space. Metric lists appear without characteristics, units, scales, topology, geometry, invariants, or operating region.
- Prediction becomes authority. A model output is used for a gate, release, safety, or work decision without freshness, non-expansiveness, commutation, observation, or assurance conditions.
- Domain vocabulary blocks transfer. Physics, control, finance, reliability, operations, knowledge dynamics, and architecture all talk about change differently; FPF needs one kernel pattern that preserves their differences without inventing separate ontologies.
Forces
Solution
Definition
Within a U.BoundedContext, U.Dynamics is an U.Episteme that specifies a state space and a state-transition law for one or more EntitiesOfConcern, possibly under exogenous inputs, constraints, and observation relations.
U.Dynamics can be deterministic or stochastic, continuous, discrete, or hybrid. It can describe physical systems, software services, organizations, episteme states, claim states, resource states, architecture characteristics, or other holons whose state change is being modeled.
It does not prescribe what an agent should do. A semantic way of doing belongs to U.Method; an episteme describing that way belongs to U.MethodDescription; a dated occurrence belongs to U.Work; a planned occurrence belongs to U.WorkPlan; a mechanism law belongs to U.Mechanism; evidence and assurance claims belong to their own governing patterns.
Dynamics statement
Use this compact statement when applying the pattern:
This statement is not an instruction sequence. It is the smallest episteme-facing record needed to keep the law of change separate from methods, work, evidence, and authority.
Working distinction table
State-space and transition-law fields
stateSpace is the state-space declaration of this U.Dynamics episteme. It uses FPF characteristics with units, scales, and comparability rules, and may cite [A.19](/generated/patterns/A.19) or [C.16](/generated/patterns/C.16) when characteristic or measurement construction is being made. It is not the same object as a receiving-evaluation CharacteristicSpace used to score an object for improvement. The dynamics state space may include topology, geometry, aggregation policy, or coordinate transformations when trajectories or comparisons need them.
transitionLaw is paradigm-agnostic. It can be an equation, relation, kernel, finite-state transition, queueing model, Bayesian update, Petri-net firing relation, simulation rule, learned predictor, or hybrid model, provided the state space and applicability window are declared.
transitionLaw, observationRelation, constraintsOrInvariants, and calibrationOrParameterSource are components or claim graphs inside the U.Dynamics episteme unless another governing pattern makes one of them a separately addressable episteme, source, or relation value. Naming one component does not split U.Dynamics into several unrelated epistemes.
observationRelation separates state from what can be measured, sampled, logged, estimated, or inferred. Identity observation is allowed only when the context says the state coordinate is directly observed.
Evidence, prediction, conformance, drift, and calibration
Let D be a U.Dynamics in context C, and let W be dated U.Work records or observation records produced under C.
Calibration outcomes produce a new or updated dynamics episteme. They do not turn the old law into a dated work record and do not make the new law authoritative for gates without the gate pattern.
Prediction use in comparison or gating
When predicted coordinates from U.Dynamics are used for comparison, release, gate, assurance, or work-preparation use, one of these conditions must hold:
- a fresh observation is available for the gate or comparison window; or
- the applied transition map
Phi_dtis declared non-expansive under the declared distance structure, and the transition commutes with the invariantization or quotient step on the domain of use.
If neither condition is satisfied, prediction does not carry the gate or comparison claim. Use observation, state currentness through C.27.TA, use C.27 when authored temporal-claim adequacy is the concern, or move the gate claim to A.20, A.21, or the direct authority pattern.
Every use of Phi_dt states its applicability window: operating region, horizon, scale band, time step, parameter regime, and source-currentness condition.
A.3.4, C.27.TA, C.27, and C.29 boundaries
A.3.4 governs bounded transformation under conditions. A dynamics episteme can model, predict, simulate, or constrain a transformation, but it is not the transformation itself.
C.27.TA names positive temporal aspects: freshness, delay, rhythm, currentness, inertia, cadence, trajectory, recovery timing, stabilization timing, and validity window. C.27 judges adequacy or supported use of authored temporal claims that use those aspects. A Dyn2TemporalClaimAdequacyCard or temporal classification is not itself a law of change.
Stay in A.3.3 when transitionLaw or observationRelation uses accepted local dynamics, Markov kernels, ODEs, simulations, queueing theory, control theory, or domain theory inside one context.
Use C.29 when the law depends on contested transfer, cross-domain analogy, learned or speculative mathematical lens, scale change, abstraction, quotienting, or reusable explanation across contexts. The C.29 output states preserved structure, lost structure, operating-region or scale window, rival lens when current, lens-use boundary value, and stop condition. A.3.3 remains the governing pattern for state space, transition law, observation, constraints, and calibration semantics.
Method, mechanism, and governing-pattern constellation boundary
A source label such as process, algorithm, dynamics, workflow, model, controller, or simulator may point to linked slot positions under E.10.ARCH, not to one typed value. Recover the relevant slots first, then split the linked values:
U.Methodfor the semantic way of doing;U.MethodDescriptionfor the representation describing that way;U.Dynamicsfor the state-space and transition-law episteme;U.Mechanismfor an admissible operation or law-governed application over a subject kind;U.WorkPlanandU.Workfor planned and dated occurrences;TransformationFlowStructurefor selected flow structure when the source is describing a flow-shaped arrangement of transformations;- evidence, gate, authority, and assurance values when those claims are current.
The linkage among relation positions does not become a process, method, mechanism, dynamics model, plan, work occurrence, or evidence object. Assign one typed value as both U.Method and U.Dynamics only when a governing pattern explicitly admits that dual typing for the current claim.
Archetypal Grounding
Reactor control
A reactor team models temperature and concentration under a nonlinear ODE with disturbances. The ODE, state space, observation relation, and operating region are U.Dynamics. The control policy is U.Method; the controller code is U.MethodDescription when it describes the method, and dated controller runs or mechanism claims stay with their governing patterns. Thermocouple readings become evidence only through A.10 or the direct evidence pattern.
Side-by-side split:
Reliability and operations
A service platform models backlog, arrival rate, and incident recovery with a queueing or birth-death model. The model can predict whether an SLO is feasible, but the service promise remains U.PromiseContent, and release or gate use needs the gate pattern.
Evolutionary architecture
An architecture group tracks latency, coupling, operational cost, and change lead time across releases. A discrete-time transition map over those characteristics can be U.Dynamics. Architecture moves, selected structures, and views stay with architecture patterns; work occurrences and measurements stay with work and evidence patterns.
Knowledge dynamics
A claim portfolio uses belief, evidence weight, source currentness, and contestability as state coordinates. A Bayesian or likelihood update is a dynamics episteme over claim state. The studies, reviews, and source records are evidence values; the dynamics model does not make a claim true by itself.
Natural physical evolution
The Moon orbiting Earth can be modeled as U.Dynamics without pretending that the Moon enacts a method or performs governed work. A role assignment such as satellite classification may be well-formed, but it does not create method-work alignment.
Bias-Annotation
Typical biases:
- recipe-as-law bias: procedure text or controller code is treated as the law of change;
- trace-as-law bias: logs or one observed run are treated as reusable dynamics;
- dashboard-as-state-space bias: visible metrics substitute for declared characteristics, units, scales, and comparability relations;
- prediction-as-authority bias: model output is treated as permission, gate passage, or safety proof;
- mathematical-prestige bias: equations, learned predictors, and simulations are accepted without applicability window, observation relation, and transfer boundary;
- semio-bias: the pattern drifts into arguments about descriptions of dynamics while losing the state-space and transition-law EntityOfConcern.
Conformance Checklist
CC-A3.3-1 (Type). U.Dynamics is an U.Episteme for a state-space and transition-law claim. It is not U.Method, U.MethodDescription, U.WorkPlan, U.Work, U.Mechanism, evidence, assurance, or gate authority.
CC-A3.3-2 (Bounded context). Every U.Dynamics is declared inside a U.BoundedContext. Units, characteristic names, operating region, time base, approximation regime, and source-currentness condition are local to that context.
CC-A3.3-3 (EntityOfConcern). The changing EntityOfConcern is named. It may be a physical holon, service, organization, episteme, claim portfolio, architecture, resource bundle, or other holon with modeled state.
CC-A3.3-4 (State space). The state space enumerates characteristics with units, scales, comparability rules, and any needed topology, geometry, aggregation policy, or invariantization rule.
CC-A3.3-5 (Transition law). The transition law states a relation, map, kernel, equation, rule, learned predictor, or simulation rule suitable for the declared time base and stochasticity.
CC-A3.3-6 (Observation relation). Evidence use states how work records, telemetry, measurements, or source records become observed coordinates. Direct observation is declared rather than assumed.
CC-A3.3-7 (Constraints and applicability). Constraints, invariants, operating region, approximation regime, parameter range, horizon, and scale window are stated before prediction or gate use.
CC-A3.3-8 (No imperative overread). U.Dynamics does not prescribe agent steps, responsibilities, or ordered work occurrences. Planning or control methods that use dynamics belong to U.Method and U.MethodDescription.
CC-A3.3-9 (No actuals on dynamics). Resource actuals, timestamps, work logs, and telemetry attach to work, evidence, or source values. Calibration creates a new or revised dynamics episteme.
CC-A3.3-10 (Prediction use). Predicted coordinates used for comparison or gating require fresh observation or a declared non-expansive, invariant-commuting transition map over the domain of use.
CC-A3.3-11 (Temporal boundary). Positive temporal aspects stay with C.27.TA; temporal-claim adequacy, freshness-use, delay-use, rhythm-use, inertia-use, and currentness-use claims stay with C.27; reusable transition laws stay with A.3.3.
CC-A3.3-12 (C.29 boundary). Contested, cross-domain, learned, speculative, scale-changing, or transferable mathematical-lens use is assigned to C.29; A.3.3 keeps the dynamics semantics.
CC-A3.3-13 (Source-label repair). Process, workflow, algorithm, model, controller, simulator, and dynamics wording must not be repaired to U.Dynamics until the current slot is recovered: method, method description, work plan, dated work, selected transformation-flow structure, transition-law claim graph, evidence relation, or another governed value.
Common Anti-Patterns and How to Avoid Them
Consequences
Quick use cards
- Dynamics predicts. It is a state-space and transition-law episteme.
- Work reveals. Measurements, logs, and actuals belong to work, evidence, or source values.
- Method guides. A method may use dynamics, but dynamics is not the method.
- State space first. No state-space characteristics, no reviewable dynamics claim.
- Observation matters. A law without observation relation cannot be compared with traces.
- Prediction is not authority. Gate and release claims need their governing patterns.
Rationale
FPF needs U.Dynamics because many practical questions are not about what an agent should do, but about how a state changes when the world evolves, a model is simulated, evidence arrives, a resource pool fluctuates, or an architecture changes. Those questions need a law of change, not a procedure, not a work log, and not a promise.
The pattern is deliberately broad because state-change reasoning appears in physics, control, software operations, reliability, strategy, architecture, and knowledge work. The shared kernel is not a universal notation. It is the distinction between state-space, transition law, observation relation, applicability window, and related governed claim families such as method, work, transformation, evidence, assurance, and gate use.
SoTA-Echoing
Lower current use of this pattern when current work on process theory, predictive control, hybrid systems, stochastic dynamics, digital twins, causal dynamics, learned world models, graph representations, equivalence representations, or FPF's own characteristic-space, temporal, mathematical-lens, transformation, work, evidence, and gate patterns changes the governing distinction.
Relations
- Builds on:
A.1.1 U.BoundedContext;A.19 CharacteristicSpace; episteme machinery for description, source, and publication when those claims are current. - Coordinates with:
A.3.1 U.Method;A.3.2 U.MethodDescription;A.3.4 U.Transformation;A.15.2 U.WorkPlan;A.15.1 U.Work;A.6.1 U.Mechanism;E.20;C.27.TA;C.27;C.29;A.10;B.3;A.20;A.21; architecture patterns when dynamics describes architecture-characteristic change. - Separates from: services and promise content; PBS and SBS structural breakdowns; causal-use claims; gate authority; assurance arguments; publication-use claims.
- Uses for precision restoration:
E.10,E.10.ARCH,F.18, andC.2.P.DRwhen source labels hide whether the claim is law, method, method description, mechanism, work, evidence, authority, or dynamics.
A.3.3:End
U.Transformation: Bounded Change Under Conditions
Type: Definitional pattern Status: Stable Normativity: Normative except where a section is explicitly informative
Use This When
Use this pattern when a project must decide whether an actual change occurred and identify that one change. Ask: what continuing subject changed, where the change begins and ends, which facts differ before, during, and after it, and what rule makes this one occurrence rather than unrelated observations.
Use it when the working question is:
- what continuing subject changed: an entity, selected structure, presentation carrier, constituent organization, characteristic-bearing referent, or formal object;
- when a specification's claim content changes, which two C.2.1 epistemes exist, whether their
EpistemeEditionRelationobtains, whether a continuing carrier or constituent organization changed, and whether revisionU.Workfirst constituted the later episteme underA.15.PROD; - which actual characteristic-state and direct-relation facts differ across the boundary;
- what temporal extent, formal ordering, or continuity rule identifies this occurrence;
- which additional claim, if any, is actually being made about method, planned work, performed work, mechanism, flow structure, representation, evidence, publication, or a later use, and which pattern answers that claim.
Primary EntityOfConcern. One actual U.Transformation: the bounded occurrence, not the sentence, plan, trace, formula, or record about it. A task, method, plan, desired state, work occurrence, operation family, morphism, predicate, delta formula, assertion, before-and-after picture, or result record neither proves that the change occurred nor identifies it. Use those objects only in their separate claims about planning, enactment, representation, evidence, or later use.
Primary working reader. A practitioner or modeler who must identify one actual change for a current engineering, scientific, formal, documentary, or architectural use before relating it to method, work, flow, evidence, or production. The informative parked-composition branch additionally addresses an FPF author or reviewer only when that use asks whether several changes compose one change or whether that whole could satisfy A.1.
First useful move. Name the continuing subject and where the change begins and ends. Write the subject facts that hold before, during, and after that boundary, then state the boundary conditions and the continuity or reidentification rule that make this one occurrence. If the material supplies only a desired state, method, plan, model, trace, or assertion, stop: it has not yet grounded an actual U.Transformation.
Open-world guard. Not finding a method, work occurrence, evidence item, publication, delivery, acceptance, or later-use relation does not prove that it is absent. It prevents only the particular claim that needs it. Finding one of those objects likewise does not prove that an actual transformation occurred.
What goes wrong if missed. Method names become change proof, work traces become laws, process diagrams become execution, dynamics models become permission, temporal trends become intervention claims, mathematical constructions become project-world work, and publications or result records are treated as the change itself.
What this buys. The practitioner gets one usable actual-change result without first deciding whether finer changes are its parts. If no composition or holon claim is needed, continue with the ordinary neighboring-object guidance at 4.3. If such a claim is needed, keep the identified changes and return the parked composition blocker; this pattern does not guess the future architecture. Apply A.1 only after an accepted architecture supplies the proposed whole and its construction facts. Method, work, flow, representation, evidence, publication, production, and later-use claims stay separate.
Not this pattern when.
- If the issue is only a semantic way of doing, use
A.3.1. - If the issue is a description of that way, use
A.3.2. - If the issue is a state-space and transition-law episteme, use
A.3.3. - If the issue is a law-governed operation algebra with admissibility predicates, use
A.6.1andE.20. - If the issue is planned or dated work, use
A.15.2orA.15.1. - If the issue is the selected compound transformation-flow structure, its locus, path, path slice, crossing, or flow valuation, use
E.18. - If the issue is a graph, algebra, category, tuple, morphism, quotient, fold, refinement, factorization, or wiring expression used to describe that structure mathematically, use
E.18.2andC.29. - If the issue is a positive temporal aspect of an object or claim, use
C.27.TA. - If the issue is adequacy or admissible use of a temporal claim, use
C.27. - If the issue is holon recognition without a current actual-change identity or constructive transformation-parthood claim, use
A.1.
Problem Frame
FPF often needs to talk about change in physical systems, engineered artifacts, organizations, presentation carriers, constituent organizations, architectures, programs, regulatory situations, and research objects. A revised specification needs an early split: changed claim content identifies two C.2.1 epistemes, not one continuing changed episteme. Test the EpistemeEditionRelation between them. Open A.3.4 only for a continuing carrier, constituent organization, or other subject with its own identity rule; if revision U.Work first creates the later episteme, use A.15.PROD for that first existence. Source phrases such as algorithm, process, workflow, editing, migration, or construction do not settle which of these objects changed.
Those phrases do not tell the reader what actually changed. A CRISPR editing protocol, a nuclear-plant operating change, a platform refactoring, a model update, a document repair, an architecture move, a proof construction, and a method-result carry-through may each concern a different FPF object.
FPF already has strong neighboring patterns:
-
A.3for transformer constitution: acting system bearingTransformerRole, method description, method, and actual work; -
A.3.1forU.Method; -
A.3.2forU.MethodDescription; -
A.3.3forU.Dynamics; -
A.6.0andA.6.5for signatures and slot discipline; -
A.6.1andE.20for mechanisms; -
A.15.2andA.15.1for work plans and dated work; -
E.18for transformation-flow structures; -
E.18.2for mathematical descriptions of transformation-flow structures; -
E.18.1for problem-to-work carry-through; -
C.27.TAfor positive temporal aspects; -
C.27for temporal-claim adequacy; -
C.29for mathematical-lens use; -
evidence, gate, assurance, source, result, decision, and publication patterns for their own claims.
What is missing is a positive first route: identify the actual change, then open only the separate method, work, flow, representation, evidence, publication, or later-use claim the practitioner is making. A checklist or description must not become the transformation ontology.
Problem
Without U.Transformation, projects repeatedly make category errors:
- Method as transformation. A way of doing is treated as if the change already happened or must happen.
- Mechanism as transformation. A law-governed operation algebra is mistaken for the actual or intended change, although it only states how a transformation may proceed.
- Work as transformation law. A dated work occurrence or trace is treated as if it defined the reusable transformation.
- Dynamics as permission. A state-space or transition-law episteme is used as if it authorized action, gate passage, or result acceptance.
- Temporal claim as transformation. A claim about rate, rhythm, recovery, delay, effort, inertia, freshness, or validity window is used as if it specified the whole change and its conditions.
- Formal construction as project-world work. A morphism, proof construction, or formal transformation inside a mathematical substrate is treated as a physical or organizational change without a realization or work relation.
- Publication as transformation. A report, dashboard, diagram, source span, or published specification is treated as if it were the changed object or the change event.
These errors are expensive because the wrong neighboring pattern then receives the claim. The project may seek evidence for a method when it needs a work trace, compare dynamics models when it needs a transformation boundary, or invoke temporal-claim adequacy when the real problem is the missing transformation relation.
Forces
Solution
Identify the actual bounded change
U.Transformation is the FPF ontic for one actual bounded change. Use the five checks below and keep only the facts needed to distinguish this occurrence:
- Changed subject. Name the continuing entity, selected structure, presentation carrier, constituent organization, characteristic-bearing referent, or formal object and apply its identity rule. If an episteme's claim content differs across the boundary, identify two C.2.1 epistemes and test their
EpistemeEditionRelation; do not call either one the continuing changed subject. Use A.3.4 only for another continuing subject, or useA.15.PRODwhen revisionU.Workfirst constitutes the later episteme. - Extent and boundary. State the temporal extent of the change, including only gaps admitted by its continuity rule, or state the ordering boundary in a declared formal substrate.
- Boundary conditions. State the conditions that delimit this change from adjacent persistence, work, or change occurrences.
- Actual change facts. Write the characteristic-state facts and relations that actually hold before, during, and after the boundary. Those facts, not a verbal change label, show what changed.
- Continuity or reidentification. If the subject varies internally, the change pauses, or several intervals are proposed, state the rule that says the subject and this occurrence continue across that variation.
Here, one means one occurrence at the resolution, subject, extent, and boundary needed for this use. It does not mean elementary, atomic, indivisible, or partless. Later refinement may identify finer changes, and future accepted work may establish constructive parts; sampling or subdividing time establishes neither result.
Do not call a possible, desired, planned, predicted, modeled, asserted, or published change actual. Those are claims in an episteme, method, work plan, dynamics model, or publication until the occurrence facts above hold. A formal transformation can be actual within an admitted formal substrate, but its formula or proof term remains a C.29 representation of that independently identified formal change.
Mint vs reuse. A.3.4 reuses the already admitted root U-kind and public name U.Transformation from E.24.UK. It introduces no additional U-kind, relation kind, public composition name, RelationSignature, or local well-formedness identifier. The component-change and whole-configuration-change wording below names only question roles for independently identified occurrences; it asserts no composition.
First-use transformation basis
Use these questions as a recognition aid, not as fields of a transformation record:
Worked first use. For a reactor cooling loop, identify the loop state as the changed subject, the thermal-power step and stabilization interval as the boundary, the measured temperature-profile facts before and after it, and the operating conditions that delimit the episode. These facts ground CoolingLoopTransformation-7 : U.Transformation. The revised operating method, control-law episteme, measurements, safety evaluation, and release decision remain separate objects; none alone is the transformation. This short fixture identifies no dated adjustment U.Work occurrence.
Choose only the next claim that the use actually needs:
- Work. First identify a dated
U.Workoccurrence underA.15.1. If both work and transformation participants are identified, apply the three outcomes in4.2.4. The short reactor fixture has not identified that work occurrence, so it makes no work-to-change claim and does not yet report a missing governor. - Safety evaluation. Use case-local
evaluatesTransformation@PlantSafety-v4(SafetyEvaluation-7, CoolingLoopTransformation-7, CoolingLoopSafetyCriterion-v4)only when all three participants are identified and the predicate's obtaining conditions hold. The evaluation is not thereby a decision. - Publication. Use a C.2.1 assertion whose EntityOfConcern is
CoolingLoopTransformation-7and identify its E.24.PUB publication occurrence. Publication neither creates nor performs the change.
If none of these uses is being claimed, keep the identified transformation and add no neighboring relation.
Choose the next branch now. If the current result is one identified transformation and the use needs no positive claim that several changes compose one change or that the change is a holon, continue directly at 4.3. Sections 4.2.1-4.2.3 are not prerequisites for that ordinary route. Open them only when the use needs one of those two positive claims; the current advanced branch returns the parked blocker and selects no future architecture.
Keep proposed component and whole-configuration changes separate
Use component change and whole-configuration change only as ordinary question roles for actual U.Transformation occurrences already identified through A.3.4:4.1. They are not additional U-kinds, record fields, or evidence that one change is part of another.
Identify every proposed component change and the proposed whole-configuration change independently. A sampled point, arbitrary subinterval, method step, work part, flow node, graph edge, trace segment, formula term, before-and-after image, shared changed subject, or temporal inclusion establishes neither composition nor absence of finer parts.
The neighboring general patterns do not silently answer the composition question. A.22 can identify a selected structure whose relation organization changes; C.27.TA can identify temporal aspects; A.14 and C.13 define structural mereology and a Γ_m construction trace. None of those results by itself says that several actual changes compose one actual change. A materialized Γ_m.sum trace is a C.2.1 episteme about identified entity-part relations, assembly, and direct identity or reidentification conditions. It establishes neither those world-side facts nor transformation composition.
One independently identified change of a selected configuration can therefore remain a valid configuration transformation. If the use needs no positive composition or transformation-holon claim, continue with that transformation and the ordinary neighboring-object guidance in 4.3-4.8. If it does need such a claim, retain the identified changes and stop with missing transformation-composition governor; a proposed local compound claim also stops with missing derivation substrate. Neither stop says that composition is false or that any change is partless.
Keep the composition architecture open (informative)
Transformation composition remains an open research question, not a relation architecture declared by this Stable pattern. Future work must decide what identifies and reidentifies a proposed whole change and its constituents; whether and when method parts, work parts, changed-substrate changes, temporal segments, and causal contributions correspond; which contribution, compatibility, boundary, interface, and whole-level-characteristic laws matter; and what substrate, if any, makes a derived claim valid.
That work must also compare rather than preselect the representation of the answer: one generic relation, several subject-specific relations, bounded local compound claims, or continued non-admission. A.3.4 chooses none of them. It mints no composition relation kind, designator, signature, occurrence-identity law, or local well-formedness identifier.
Apply A.1 only after composition is independently established
Membership in U.Transformation supplies no holonhood. A.1 remains the authority for the constructive criterion. This edition of A.3.4 supplies neither a positive transformation-composition result nor the candidate, constituents, constructive part relations, and assembly needed by A.1. Therefore an independently identified configuration transformation remains a valid U.Transformation, while positive U.Holon classification on the basis of transformation composition stops. The stop is not evidence that no such whole or parts exist.
If future accepted work supplies one whole transformation and its construction facts, apply A.1 without changing its test or assuming which relation form that work chose. A.1 still requires the candidate, constituents, constructive part relations and assembly, reidentification rule, composition-grounded whole-level characteristic, and possible participation in a larger constructive assembly. Recover those facts from the patterns that define them at that time; a name, shared interval or referent, nearby change, trace, diagram, or missing-governor note supplies none of them.
A.1 also keeps world-side satisfaction or failure separate from an A.6.1 true | false | unknown recognition evaluation, an optional C.2.1 assertion, evidence and assurance, G.11 currentness, receiving-work disposition, and B.2 whole reidentification. Follow A.1 for that separation rather than repeating its full table here.
Stress the current boundary before classifying:
- a pressure increase may be identified as one
U.Transformationat the resolution needed by the use; sampling or subdivision establishes neither constructive parts nor absence of such parts; - a switch transition may be treated as effectively instantaneous at the selected temporal resolution and identified as one
U.Transformation; that resolution claim establishes neither indivisibility nor parts; - subintervals of continuous biological growth may each be independently identified as transformations, but this pattern does not decide whether they compose one change;
- a formal transformation can be actual under a selected formal substrate, while its formula, morphism, or proof term remains a C.29 representation and supplies no holonhood;
- mounting, wiring, connection, and whole-configuration changes may each be identified independently; the current edition does not make them constituents of one transformation, so positive A.1 classification on that basis does not begin.
Keep work and production claims outside transformation identity
Do not infer a work-to-change connection from shared timing, a common affected subject, or the word successful. Once the U.Work and U.Transformation participants are both identified, choose exactly one outcome: (1) apply an existing subject predicate whose declared participants and obtaining condition match the case; (2) state an A.6.RCD disposition-2 local compound claim over named base facts and an admitted substrate; or (3) return missing-governor for that exact pair.
Production is a separate question. A post-state, work reference, verbal predicate, continuing changed entity, or U.Holon classification proves neither production-work participation, first existence of an entity, nor production completion. Apply A.15.PROD to the exact work, work part, subject-identity facts, completion criterion, and direct effect facts. A.3.4 contributes only the independently identified transformations; it adds no universal work-to-change or production relation.
Filled positive branch — result: C.2.1 assertion BuildWorkPopulatedStore-12 states the local connection between ReleaseBinary12_BuildWork_2026-07-21T0900_0912 : U.Work and ArtifactStorePopulationTransformation_12 : U.Transformation. The BuildOps predicate BuildWorkPopulatedStore@BuildOps-v12(work, transformation) holds only when that work performs the storeWrite application that changes the same ArtifactStorePartition_12 across the same boundary. BuildApplication_12 supplies the performed application and its builtBinary -> ReleaseBinary_12 binding; the partition's before/after artifact-presence facts ground the transformation. This is an A.6.RCD disposition-2 local compound claim, not a universal FPF work-to-change kind or occurrence.
Pump 14 — current result and earlier no-governor stage: A.3.4 identifies T-P14-PRESSURE-RISE : U.Transformation as the bounded change of continuing HydraulicLoop_P14; the loop's discharge-pressure characteristic is belowBand at the opening boundary and inBand at the closing boundary. The current case record contains relation-declaration episteme P14-REL-2026, owned by Pump14OperationsRelations, which declares AdjustmentWorkCausesPressureRise for exact participants W-P14-ADJUST-1010-1020 : U.Work and T-P14-PRESSURE-RISE; a separately stated case fact satisfies its actual-causation predicate. Therefore write: W-P14-ADJUST-1010-1020 caused T-P14-PRESSURE-RISE; neither shared timing nor transformation identity supplies that fact. In the explicitly earlier case record, P14-REL-2026 is absent; at that epistemic stage, keep the same Work and transformation, return missing-governor: work-to-change claim for <W-P14-ADJUST-1010-1020, T-P14-PRESSURE-RISE>, and route the missing declaration to Pump14OperationsRelations instead of asserting causation.
Keep six layers separate
For one identified transformation, keep these objects distinct:
A verbal predicate does not turn every obtaining relation occurrence into a transformation. Assignment, availability, installation, and temporal order can obtain without change. Conversely, one actual transformation may require several relation facts without being identical to any one of them.
Do not restore the old transformationRelation field. If an existing relation already states the needed fact, use it. Otherwise apply A.6.RCD: a local compound claim is available only when its exact base facts and admitted substrate are present; if either is missing, return missing-governor or missing-substrate. Introduce a reusable predicate-definition episteme only when repeated uses need the same rule. A new durable relation kind still needs its own obtaining and occurrence-identity law; a task, morphism, operation family, or verbal predicate cannot be inserted into one union-valued field.
Add neighboring objects only for the claim being made
A neighboring object is not a slot of U.Transformation. Add it only for the claim the reader is making, and state its relation to the transformation, changed subject, work, or later use.
A declared post-state is part of a transformation description. An actual post-boundary state or changed entity is a fact about the subject. To call that entity or relation a result, name the later use, its participants, and the relation being asserted; acceptance, delivery, publication, and downstream effect remain separate. U.Transformation therefore has no generic ResultRef or OutputConditionOrPortRefs slot.
When the use needs an episteme about the transformation, identify it through C.2.1: exact claim content, the transformation or another subject as EntityOfConcern, and the effective reference scheme. Add scope, viewpoint, empirical grounding, edition, publication, or representation only when the use separately requires that relation.
Neighboring Distinction Table
Description And Publication Boundary
A method description, dynamics model, transformation diagram, transformation-flow structure description, dashboard, result record, source span, publication, or proof may describe a transformation or provide evidence for a use. It is not the transformation.
If the task is about the description, use C.2.1, A.3.2, A.3.3, E.17, E.18, or the applicable publication or source pattern. If the task is about the transformation, keep the description as a neighboring episteme or publication value.
Formal Transformation And Project-World Realization
A morphism, constructive proof, or formal state transition can correspond to an actual transformation of a formal object within the selected formal substrate. The formula, morphism, or proof term is still its C.29 representation.
For a physical, clinical, organizational, architectural, documentary, or epistemic change, a formal expression may specify, predict, constrain, or compare the change but cannot make it actual. First identify the changed subject, boundary, and before/during/after facts. If a later claim says that dated U.Work caused, realized, or participated in that transformation, apply the three outcomes in 4.2.4; return missing-governor when the named pair has neither an existing predicate nor a valid local compound basis. Do not infer realization, evidence, permission, acceptance, or a result relation from the formal construction.
Multi-reading source phrase
Use this slice when one phrase seems to name method, mechanism, formal construction, work, evidence, and transformation at once:
"The workflow algorithm transforms the emergency-stop specification, and the proof shows the new plant boundary is safe."
Keep these objects separate:
- the workflow or algorithm may designate a
U.MethodorU.MethodDescription; - the proof is a claim-bearing episteme using a declared formal substrate;
- when claim content changes, the earlier specification episteme and the later specification episteme are distinct C.2.1 identities;
EpistemeEditionRelationrelates them only when its historical-continuation predicate obtains; - dated editing or review is a
U.Workoccurrence admitted underA.15.1; - edition succession alone establishes no transformation of one continuing episteme. Open A.3.4 only for a separately continuing subject—such as a selected
U.PresentationCarrierunderE.24.PUBor a claim-bearing constituent organization—after naming its boundary, before/during/after facts, and continuity rule; otherwise stop without a transformation claim; - if revision
U.Workfirst constitutes the later episteme, open a separateA.15.PRODfirst-existence question: name the exactproductIdentitySpecificationepisteme, the named applicability predicate or filled local claim that applies it to the candidate basis, subject context, and boundary, theidentityClosingWork, and the work-to-change and change-to-identity predicates or local compound claims. If that specification continues an earlier specification, state the separate C.2.1EpistemeEditionRelationonly when its historical-continuation predicate obtains; without that relation, treat it as a non-continuing replacement and evaluate its applicability independently. Returnmissing-governorfor either named work/change pair whose basis is absent; the word governed cannot supply the link; - a plant change, safety evaluation, assurance claim, gate decision, and publication are separate objects and relations.
If only the proposed wording and proof are available, do not assert a project-world plant transformation. Different claim content gives two epistemes; test their EpistemeEditionRelation. Assert an A.3.4 specification-side transformation only for a separately continuing carrier or constituent organization with its boundary, before/during/after facts, and continuity rule. If the question instead concerns the later episteme's first existence, use A.15.PROD and stop when either direct connection lacks a basis. The proof can support an assertion only through its evidence or derivation use; it does not prove its own project use.
Archetypal Grounding
Physical system change
A nuclear-plant team says that a revised operating method stabilized a temperature profile after a thermal-power change. Result: CoolingLoopTransformation-7 is identified from the loop state, stabilization interval, operating conditions, and before/during/after temperature facts. The method is U.Method; the control-law model is an episteme; measurements and the safety decision use their own patterns. This short case names no dated adjustment U.Work occurrence or work-to-change predicate, so it makes no such connection. If that claim is later needed, name both participants and apply 4.2.4.
Biological editing
A CRISPR project says that an editing protocol changed a DNA target while keeping off-target risk under a bound. Result: identify the biological transformation from the continuing DNA referent, edit interval, boundary conditions, and sequence facts. Keep the protocol description, biochemical mechanism, lab U.Work, sequence measurement, risk evaluation, acceptance verdict, and publication separate. This sketch names neither a lab-work/transformation pair nor a matching predicate, so it asserts no connection between them; apply 4.2.4 only if that later claim is needed. The phrases edited sequence, lab output, and accepted result still name different possible relations.
Spontaneous non-agentive case — result: SeedlingFirstLeafUnfolding-B17 : U.Transformation is an actual first-leaf unfolding without an actor, method, or work claim. The continuing subject is the already existing Seedling-B17. Its boundary runs from unfolding onset t0 to the first stable full-expansion state t1; leaf-configuration and exposed-surface facts before, during, and after distinguish the episode under the stated growth conditions. The same-seedling rule permits ordinary cellular turnover and growth but excludes division, grafting, death, or replacement.
At this resolution the case asserts neither finer transformation parts nor partlessness. Do not add U.System, U.RoleAssignment, enacted method, U.Work, transformer, or production-through-work merely because observations exist. If a later use asks for an actor, apply A.3; if it asks for work, apply A.15.1 and then 4.2.4. Otherwise keep the case non-agentive and do not open A.15.PROD.
Specification repair
A safety specification is revised so that an emergency-stop boundary no longer permits two incompatible readings. First result: EmergencyStopSpec-E1 and EmergencyStopSpec-E2 are different C.2.1 epistemes because their claim content differs. EpistemeEditionRelation(EmergencyStopSpec-E1, EmergencyStopSpec-E2) may relate them when its historical-continuation predicate holds; neither is one continuing changed episteme.
A.3.4 may instead identify a change of EmergencyStopSpec-Carrier-17 : U.PresentationCarrier if E.24.PUB identifies the same carrier across the editing interval and the before/during/after borne-expression facts plus carrier-continuity rule are present. If the carrier identity, facts, or rule are missing, no carrier transformation follows. If editing U.Work first constituted EmergencyStopSpec-E2, name that work and the transformation by which the later identity closed. Apply 4.2.4 to the work-to-change pair, then apply A.15.PROD to the change-to-identity pair. Each connection needs a matching predicate or valid local compound basis; return missing-governor for either pair that lacks one. The repair method, ambiguity-removal assertion, review result, and publication of the later episteme remain separate.
Formal construction
A proof constructs a formal object and shows that a morphism preserves an invariant. Result: within the declared formal substrate, the formal object and ordered boundary can ground one formal transformation. The proof term and morphism expression are representations; publishing the proof is another relation. No physical or organizational U.Work follows from those facts. If a later claim says that dated work realized the transformation, apply 4.2.4 and return missing-governor when the named pair has neither an existing predicate nor a valid local compound basis.
Architecture change
An architecture team performs dated architecture U.Work. During the same interval, a selected structure undergoes a separately identified transformation: an interlevel conflict decreases while a key architecture characteristic stays within bounds. Result: the work and transformation are both present, but this sketch does not connect them. If that connection is needed, name both participants and apply 4.2.4; use a matching predicate or valid local compound claim, otherwise return missing-governor for the pair. Characteristic evaluation, decision, and publication remain separate.
Functional transformer in a flow
When a sentence says that a system transforms input to output or implements an algorithm, split at least four questions: which system and role assignment are claimed; which subject actually changed; which participant, port, or operation bindings hold at the boundary; and where the transformation sits in the selected E.18 flow. Add a method or method description only if the sentence also makes that claim.
Examples:
- A pump can be the acting system while the actual transformation is the bounded pressure change of an identified fluid volume. Inlet and outlet pressure facts are characteristic-state and port facts; the pump curve is a model episteme.
- A warehouse can perform receiving
U.Workwhile pallet-location and inventory-state changes occur. Co-occurrence connects none of them. If a later use needs a work-to-change claim, name the pair and apply4.2.4. Orders and pallets keep their work, transfer, resource, or affected-subject relations; they are not one input-output kind. - A neural-network block can participate in an activation transformation. Tensor-shape declarations, the attention method, dated inference work, benchmark evaluation, and architecture allocation stay separate and use their own patterns.
A flow position, algorithm label, module name, or output record establishes neither actual transformation nor work.
Assembly changes before PumpSkid identity
Before asking whether PumpSkid 7 exists as one entity, identify the already existing base frame BF-7, pump unit PU-7, motor MU-7, junction enclosure JE-7, pipe spool PS-7, cable set CS-7, and their still-open mechanical, electrical, and fluid interfaces. AssemblyConfiguration-7 is the A.22 selected structure made from those referents and their actual attachment, terminal, and flange-connection organization during assembly. It is not another name for a future PumpSkid 7 entity.
The mounting transformation changes the frame-to-pump and frame-to-motor attachment facts. The wiring transformation changes cable-to-terminal connections. The fluid-connection transformation changes spool-to-flange and seal facts. Identify each independently through its subject, extent, boundary conditions, before/during/after facts, and continuity rule. The change of AssemblyConfiguration-7 can also be identified if those attachment, terminal, flange, and seal relations have declared participants and obtaining rules and the selected structure has its own boundary and continuity rule. Call that occurrence the configuration transformation. The other three changes do not become its components merely because they occur in the same assembly episode.
No current FPF relation in this case says that the mounting, wiring, fluid-connection, and configuration changes compose one transformation. Keep all four changes and stop before a part or whole-transformation claim. The result from 4.2.1 is missing transformation-composition governor; a proposed local compound claim also lacks an admitted derivation substrate.
Positive A.1 classification on that basis stops as well, because no accepted composition result supplies an exact whole candidate and its six constructive components. The point at which a separate PumpSkid 7 identity rule first becomes true remains an entity-identity inception question; production completion, commissioning work, evidence, acceptance, and any B.2 whole-reidentification claim also remain separate.
Bias-Annotation
Lenses tested: Onto, Arch, Prag, Epist, Gov.
This pattern keeps the actual change separate from a composition question, holon classification, facts about the changed subject, method, work, flow structure, representation, assertion, evidence, evaluation, publication, production, and later use. It resists software narrowing, method-as-effect, model-as-authority, trace-as-law, formal-as-project-work, relation-verb-as-change, sampled-slice composition, blanket transformation holonhood, work-caused-change-as-production, and result-word-as-kind errors.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
- FPF gains one place to identify actual bounded transformations without turning method, work, relation expressions, descriptions, evidence, or publications into the change.
- Current-resolution identification remains cheap: one bounded change can be identified without settling its finer composition. This says neither that finer parts exist nor that they do not.
- An independently grounded change of a selected configuration remains usable without asserting whether nearby changes compose it or are its parts.
- A use that needs positive transformation composition receives the one parked result from 4.2.1: missing governor, and also missing substrate when it proposes a local derived or compound claim. No relation kind, signature, occurrence law, or definition identifier is minted here.
- If a future accepted architecture supplies an exact whole transformation and its construction facts, A.1 then applies its own six-component test; this edition supplies no positive transformation-holon classification.
- Each subject pattern keeps its own change,
U.Work, and production facts. A work/transformation connection uses the existing-predicate or local-compound branch in4.2.4; otherwise the named pair remainsmissing-governor. - E.18 can arrange or locate transformation occurrences in a selected flow structure without becoming their occurrence ontology.
- Ordinary result wording remains usable after the reader names the later use, its participants, and the relation being asserted; no universal transformation-result or production relation is introduced.
- Readers whose use stops with one actual transformation skip 4.2.1-4.2.3. Only a composition- or transformation-holon-dependent use opens that advanced branch, whose current result is the parked blocker.
Rationale
U.Transformation gives FPF one object for an actual bounded change. Identify it from the continuing subject, boundary, before/during/after facts, boundary conditions, and continuity or reidentification rule. Keep task, method, plan, work, operation family, predicate, representation, assertion, evidence, evaluation, publication, and later-use claims visible as separate objects rather than fields of the transformation.
An independently identified configuration transformation is not made into a whole with transformation parts merely because separately identified changes occur in the same episode or concern referents selected into that configuration. A.3.4 deliberately stops before choosing the missing architecture. It does not prescribe constituent identity, contribution, compatibility, substrate, reidentification, or whether the eventual answer is a generic relation, subject-specific relations, bounded local compound claims, or continued non-admission. The truthful current result is the independently identified changes plus the parked blocker, not a provisional kind or future definition law.
A.1 remains an independent second test. If future accepted work supplies one exact whole transformation and all six A.1 construction facts, A.1 can judge that same entity. Until then, a whole or composite label, a trace, and the parked blocker supply no holonhood.
This separation also keeps production and result claims honest. U.Work can cause or participate in change only through one of the three 4.2.4 outcomes, and even a positive work-to-change claim does not make every such change production. A post-boundary entity may be the same continuing entity rather than a newly constituted one. Production-work participation, first existence, production completion, delivery, acceptance, and downstream effect each need their own participants, relation, and criterion.
SoTA-Echoing
A.3.4 uses four current source branches for four different questions. None of them makes a task, event description, graph, proof, work trace, or construction label an actual U.Transformation, and none admits transformation composition for FPF.
For cases 5.1-5.7 the action is stable: identify the changed subject, boundary, actual facts, and continuity rule first; keep task, dynamics, work, participation, representation, assertion, and publication separate; return the 4.2.1 blocker for a composition claim and the 4.2.4 blocker for a work-to-change claim with no basis. Reopen these source-use decisions only if the constructor-theory branch changes the task-versus-occurrence boundary, a stronger foundational event account changes the separation among identity, participation, causation, and representation, or applied constructional ontology supplies evidence for reopening the deliberately unselected composition architecture. A new notation, process diagram, or modeling tool alone is not enough.
Relations
- Builds on:
A.1for the independent holon criterion,A.6.RCDformissing-governorormissing-substrate,C.2.1for blocker and assertion epistemes, andA.7for category separation. - Coordinates with:
A.3when the use makes an acting-system claim;A.6.RCDif future work selects a bounded compound-claim route;A.6.RELif a future accepted relation architecture needs occurrence identity;E.24andE.24.UKif that work proposes a public relation kind;F.18if durable naming then becomes necessary;A.11for parsimony;A.14andC.13for structural mereology without transformation-composition overread;A.22for a selected changed structure;A.3.1,A.3.2,A.3.3,A.6.1,A.15.1,A.15.2, andA.15.PRODfor method, dynamics, operation, work, and production questions;E.18,E.18.1,C.32.P2S,C.27.TA,C.27,C.29,A.10,B.3,G.11, andB.2; and the work-to-change, evidence, evaluation, gate, decision, source-use, production, delivery, acceptance, transfer, assurance, and publication patterns for those claims.
A.3.4:End
Transformation Ontic Precision Restoration
Type: A.3.4 precision-restoration child pattern Status: Stable Normativity: Normative unless a section is explicitly informative
Plain-name. Transformation wording repair.
Intent. Restore precision when wording about a situation of change hides whether the current FPF object is one bounded U.Transformation, its exact changed referent, a system claimed to act through an exact performed-work attribution or another direct actor-side relation, a distinct influence source kept under its exact kind and current relation, a method, method description, mechanism, work plan, dated work, functioning relation, transformation-flow structure, mathematical description, dynamics episteme, temporal aspect, evidence relation, publication relation, gate, decision, result, or source label.
Use this when. Use A.3.4.P when source or FPF-governed wording such as "pipeline", "dataflow", "flow", "network", "circuit", "path", "slice", "workflow", "process", "operation", "transformation", or "change" seems to name the thing under concern, but the text has not yet recovered what kind of FPF value is actually current.
First useful restoration output. Fill a compact TransformationWordingRepair note: encountered wording, working concern, exact recovered EntityOfConcern, actual-transformation basis or non-transformation disposition, any acting-system claim with its exact governor or unresolved disposition, every influence source's exact kind and current relation, exact neighboring claims, retained use, blocked overread, and remaining reader use. Then rewrite only the wording that depends on the recovered objects.
What goes wrong if missed. The text silently creates a local ontology from a convenient source label: "process" becomes method in one paragraph, dated work in another, and transformation-flow structure in a third; "path" becomes evidence sufficiency, assurance, gate passage, deontic permission, work authorization, or release authorization; "function" becomes behavior, bearer, mathematical function, and software routine at once.
What this buys. The reader gets one small restoration use that keeps bounded transformations, compound transformation-flow structures, formal descriptions, methods, mechanisms, work, evidence, publications, and functional structures in their governing places before any wording is changed.
Not this pattern when.
- If one bounded transformation is already identified and only its ordinary use continues, apply
A.3.4directly. - If the current claim is already a selected transformation-flow structure, use
E.18. - If the current claim is a graph, morphism, category, algebra, path, circuit expression, network expression, or other mathematical description, use
E.18.2andC.29. - If the current claim is only a semantic way of doing, method description, mechanism, work plan, dated work, evidence relation, publication relation, gate, decision, assurance, result, or temporal claim, use the direct governing pattern.
- If the word is quoted source wording with no FPF-governed use, keep it quote-only.
Problem frame
People talk about change with convenient source labels. A manufacturing line has a process, an ML paper has an architecture pipeline, a refrigerator has a cycle, a plant model has a flow graph, a team has a workflow, and a proof has a construction path. Those labels often help recognition, but they do not say which FPF object is current.
The recurring defect is a second ontology by convenience. The same text may treat "process" as method, work occurrence, transformation-flow structure, mechanism, result evidence, and publication diagram. A graph path may become an action route. A network label may become a durable head beside TransformationFlowStructure. A function word may collapse functioning, mathematical function, software routine, module allocation, a system merely named as actor, and a differently typed influence source whose direct relation has not been recovered.
This pattern restores the current U.Transformation ontic first, then assigns linked values to their governing patterns. It is not a word ban and not a synonym table.
Problem
Without this repair:
- Source label becomes kind. "Pipeline", "workflow", "network", "circuit", or "process" is treated as the recovered FPF kind.
- Selected structure becomes one actual transformation. A flow, path, network, or circuit expression is treated as one actual
U.Transformationor as proof of transformation composition without the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis. Identifying one occurrence at the resolution needed by the current use establishes neither finer transformation parts nor partlessness. - Method, mechanism, and work collapse. A method description, law-governed mechanism, work plan, dated work, or source diagram is selected by vocabulary rather than by current claim.
- Functional wording overreaches. A system, module, port, interface, signature, or function label is treated as the transformation or as proof of functioning.
- Mathematical expression becomes world-side ontology. A graph, morphism, algebra, category, path, network, or circuit expression is treated as the project-world change.
- Description or evidence becomes transformation. A publication, dashboard, source span, proof, or evidence path is treated as the changed object or the change itself.
Forces
Solution
Restore the change situation in this order.
- Name the working concern. State what the text is trying to do: identify a change, describe a flow, choose a method, claim evidence, compare architectures, describe functioning, or use a publication.
- Test for one actual
U.Transformation. Recover the exact changed referent; exact temporal extent or exact ordering boundary in a declared formal substrate; boundary conditions; actual characteristic-state and obtaining direct-relation facts before, during, and after that boundary; and the continuity or reidentification rule that makes this one occurrence at the resolution required by the current use. Possible, intended, planned, modelled, predicted, or merely asserted change remains claim content and identifies no actual transformation until this subject-side basis obtains. - Separate an acting-system claim from influence. For performed work, recover one exact dated Work occurrence admitted under
U.Work, the exact coveringU.RoleAssignment, and directperformedBy(WorkOccurrenceSlot, RoleAssignmentSlot); then recover separately the realization, causal, production, or other exact work-to-change relation required by the current use. Role assignment alone and generic transformation participation prove no action. For a non-work functional or physical actor-side claim, recover the exact system and the participant, operation-application, functioning, causal, or other direct actor-side relation supplied by its governor; otherwise leave the actor claim unresolved. Each manufacturing organization, certification organization, design organization, toolchain, communication system, selected structure, method, method family, or other possible influence source first keeps its exact kind—a method or method family is not a holon by label—and receives only the exact architecture, work, communication, constraint, or candidate-synthesis relation current for the claim. - Test neighboring claims. Decide whether the wording points to a method, method description, mechanism, work plan, dated work, functioning relation, transformation-flow structure, mathematical description, dynamics episteme, temporal aspect, evidence, source, publication, gate, decision, assurance, result, refresh, reopen relation, or another direct subject claim.
- Use the exact governing relation for each neighboring value. A neighboring object keeps its own kind and governor; state its current relation to the transformation, changed referent, work, architecture candidate, or receiving use instead of placing it inside a transformation record.
- Rewrite only after kind and relation recovery. Keep ordinary wording when it is not FPF-governed, write quote-only source wording when no current use is admitted, or rewrite into the recovered FPF kind and exact relation named by value.
- Leave one reader use. The repaired text must say what the reader may do now: use
A.3.4, useE.18, useC.29, use a method, work, mechanism, architecture, or evidence pattern, keep a quote-only cue, or block the stronger claim.
TransformationWordingRepair note
Use this note only when wording is doing FPF-governed work.
ActualTransformationDisposition is one of: actual bounded transformation recovered, not a transformation, not recovered, not current for this claim, quote-only source wording, or blocking missing value.
TransformationWordingRepair is a temporary wording-use restoration aid. Its retained output is the wording to keep or rewrite, the blocked overread, and the next governing-pattern application. ActingSystemDisposition and ArchitectureInfluenceDisposition are temporary note fields, not FPF kinds or universal relations. An actual transformation occurrence is grounded only through its subject-side occurrence basis.
For performed work, an acting-system claim needs one exact dated Work occurrence admitted under U.Work, the exact covering U.RoleAssignment, direct performedBy(WorkOccurrenceSlot, RoleAssignmentSlot), and the separately governed realization, causal, production, or other work-to-change relation required by the use. For a non-work actor-side claim, use an exact participant, operation-application, functioning, causal, or other direct relation supplied by its governor. If no such relation is recoverable, keep the actor claim unresolved. Every influence source retains its exact kind and only its current architecture, work, communication, constraint, or candidate-synthesis relation; influence establishes no acting fact by itself.
If an episteme asserts possible, intended, planned, modelled, predicted, or actual change, identify that episteme separately through C.2.1 when the assertion is current. Empirical grounding remains optional and, when current, uses its own exact relation; neither the assertion nor its grounding relation substitutes for the actual transformation basis. Project records, gate decisions, work plans, and work occurrences are created only by their direct governing patterns.
Direct governing-pattern selection
Common source-label settlements
Functional change-situation settlement
When change-situation wording includes function, functional, functioning, transforms, or implements, use this pattern only to recover the exact current claims:
- Is one actual bounded
U.Transformationestablished by changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification? - Is a selected
TransformationFlowStructurecurrent without being treated as the acting system or the change occurrence? - Is performed work being attributed to a system? Recover the exact dated Work occurrence admitted under
U.Work, exact coveringU.RoleAssignment, and directperformedBy(WorkOccurrenceSlot, RoleAssignmentSlot). Then state separately the realization, causal, production, or other exact work-to-change relation required by the claim. A role assignment, work record, common timestamp, or generic transformation-participant fact does not prove performance. - Is a non-work functional or physical actor-side claim current? Recover the exact system and the participant, operation-application, functioning, causal, or other direct actor-side relation supplied by its governor. A changed referent, resource, port-bound object, module, or other participant is not an actor merely because it participates. If no actor-side governor is recoverable, leave the actor claim unresolved.
- Is a distinct influence source current? First recover its exact kind. A manufacturing, certification, or design organization may be a system under its direct governor; a toolchain or communication system needs its own admitted kind; a selected structure remains a structure; and a method or method family is not a holon by label. State only the exact architecture, work, communication, constraint, or candidate-synthesis relation current for that value. Influence alone establishes no role, work, actor status, or transformation participation.
- Are exact participant, port, operation-application, relation-signature, or functioning relations current at the boundary? Use their direct governors; do not turn them into generic transformation inputs or outputs.
Do not introduce a TransformerHolon kind, a generic transformer role, or a universal architecture-influence relation to bridge these claims. After recovery, apply A.6.F when the question is which function-like kind or relation is being claimed. A.3.4.P selects the direct governor; it does not infer mathematical function, software routine, capability, quality, work, method, architecture allocation, evidence, assurance, gate, or decision from functional wording.
Description, publication, and evidence boundary
A diagram, model, dashboard, report, source span, proof, graph, or publication may describe, assert, evidence, or help compare a transformation. It is not the transformation and does not supply its subject-side occurrence basis. If the description, assertion, or publication is current, use the episteme, publication, source, or declarative-representation pattern; C.2.1 empirical grounding remains an optional separate relation when the use requires it. If the actual transformation is current, keep every description, assertion, publication, and evidence use as an exact neighboring claim.
Archetypal Grounding
Refrigerator functional diagram
Source wording says: "The refrigeration circuit moves heat through the cycle."
Repair: recover whether the current claim is a refrigerator subsystem transformation, a TransformationFlowStructure over compressor, condenser, expansion, and evaporator transformations, a thermodynamic mechanism, a functional architecture view, or a schematic publication. The circuit label may stay as ordinary domain wording, but FPF use names the selected structure, mechanism, or publication relation.
Neural-network block
Source wording says: "The attention block transforms activations in the model pipeline."
Repair: the block may be an architecture locus or module allocation, but that fact alone establishes no actor. If dated inference work is claimed, recover its exact Work occurrence admitted under U.Work, covering U.RoleAssignment, direct performedBy, and the separately governed work-to-activation relation required by the use. If a non-work block action is claimed, recover the exact operation-application, functioning, causal, or other direct actor-side relation; otherwise leave action unresolved. A design organization, method or method family, toolchain, or communication system that shaped the block first keeps its exact kind and then only its exact architecture, work, communication, constraint, or candidate-synthesis relation. Activation and tensor-shape claims use exact participant, port, operation-application, or signature relations; attention may be a method description or mathematical lens; the pipeline may be a transformation-flow structure. Benchmarks or ablations are evidence or evaluation relations only when their governing patterns are current.
CRISPR editing workflow
Source wording says: "The guide-selection workflow changes the target gene."
Repair: the target-gene edit is only a candidate U.Transformation until the exact biological referent, edit boundary, boundary conditions, actual sequence and direct-relation facts, and reidentification rule establish one occurrence. Guide selection may be method, method description, work plan, evidence-facing table, or performed lab work according to the current claim. A table rank or workflow diagram establishes neither actual edit, gate passage, deontic permission, work authorization, release authorization, nor performed lab work.
Evidence path near a plant change
Source wording says: "The evidence path lets the valve-change flow proceed."
Repair: an evidence path may be a legitimate A.10 provenance relation for a named claim. The valve change still needs its exact changed referent, boundary, boundary conditions, actual subject facts, and continuity or reidentification basis; work plan, dated work, gate, assurance, result, and receiving use remain exact neighboring relations when current. The path establishes no work authorization, release authorization, gate passage, performed work, or actual transformation by shape or name.
Filled minimal repair note
Bias-Annotation
Lenses tested: Onto, Arch, Prag, Epist, Gov.
This pattern intentionally biases toward kind recovery before wording repair. It resists:
- source-label ontology: familiar labels such as pipeline, process, network, circuit, or workflow become FPF kinds;
- graph or path overread: graph path, evidence path, and carrier path become action route, evidence sufficiency, assurance, deontic permission, work authorization, release authorization, or work sequence;
- function collapse: functioning, functional element, module allocation, mathematical function, software routine, and everyday purpose collapse into one "function";
- semio displacement: descriptions and publications of transformations replace the transformation under concern;
- neighboring-object fusion: a method, mechanism, work occurrence, system, influence source, or evidence record is inferred from wording and then treated as the transformation, its actor, or a transformation participant; generic participation is also treated as action without exact
performedBy, work-to-change, or other direct actor-side relation.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
- FPF gains one reusable restoration pattern for language about change situations without making every subject pattern carry its own cue list.
A.3.4becomes easier to use because source labels are tested against the exact subject-side transformation basis and then routed to exact neighboring relations.E.18,E.18.2, andC.29stay distinct: selected compound structure, mathematical expression, and mathematical-lens use do not collapse.- Architecture, method, work, mechanism, function, evidence, publication, and temporal patterns can point to the transformation ontic without becoming transformation patterns.
- The cost is one small restoration note when wording is FPF-governed and hides several candidate kinds.
- Reopen this pattern at the smallest affected row when
A.3.4,E.18,E.18.2,C.29, method, mechanism, work, function, temporal, evidence, publication, or architecture patterns change the governing kind boundary, or when FPF wording repair repeatedly finds a change-situation label that the current settlements cannot recover by value.
Rationale
The current transformation ontology gives FPF one compact way to speak about bounded actual change. That compactness only helps if wording repair returns common source labels to the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis. Otherwise source labels reappear as local mini-ontologies: a process ontology here, a graph ontology there, a function ontology elsewhere.
A.3.4.P is placed under A.3.4 because the recurring repair is not about words in general. The repair starts from the U.Transformation ontic and asks whether the current use is an actual occurrence established on that basis, a performed-work actor claim grounded by one exact Work occurrence admitted under U.Work, performedBy, and its required work-to-change relation, a non-work actor claim under another exact direct actor-side governor, a differently typed influence source under its exact relation, a compound structure, a mathematical description, or another neighboring object connected by an exact current relation. E.10 recognizes the wording-use problem; E.10.ARCH:2.2 distributes direct governing, ontic-level restoration, and facet-level restoration; this pattern performs the ontic-level transformation restoration.
SoTA-Echoing
SoTA use is conservative: this pattern relies on the current FPF settlements already carried by A.3.4, C.2.P.DR, and the governing neighboring patterns; it contributes the reusable restoration use for transformation-situation wording.
Relations
- Builds on:
A.3.4,E.10,E.10.ARCH,E.24,A.6.5, andE.8. - Coordinates with:
E.18for a selected structure that positions, relates, or locates transformation loci and adjacent governed values without establishing transformation composition, parthood, or partlessness; and withE.18.2,C.29,A.3.1,A.3.2,A.3.3,A.6.0,A.6.1,E.20,A.15.2,A.15.1,A.6.F,A.6.M,C.30.ASV,C.27.TA,C.27,A.10,C.2.P.DR,C.2.1,E.17, and direct gate, decision, assurance, result, source, publication, and release patterns when those claims are current. - Coordinates with:
E.10.MOVEwhen source wording about a move, next action, pattern-use recommendation, work-entry readiness, language-state transition, architecture candidate use, or call-planning next action is not actually transformation wording. - Selected by:
E.10recognition row for change-situation wording when FPF wording repair needs transformation-ontic precision restoration. - Specializes:
A.3.4for wording-use precision restoration around situations of change.
A.3.4.P:End
Temporal Duality & Open‑Ended Evolution Principle
“A holon is born in design‑time, lives in run‑time, and is reborn when the world talks back.”
Problem frame
A holon’s blueprint and its lived reality are never identical for long. Pumps wear out, theories meet anomalous data, workflows face unanticipated load. FPF therefore requires a temporal framework that:
- Physically grounds every modification (via the Transformer Principle, A 3).
- Supports unbounded improvement cycles (P‑10 Open‑Ended Evolution).
- Works identically for physical, epistemic, operational (method, work) and future holon flavours.
Problem
Forces
Solution - Temporal Duality Model
FPF assigns every holon state to one—and only one—of two temporal scopes:
Temporal invariants
Open‑Ended Evolution Principle
A holon may repeat the cycle ad infinitum:
Observation itself is a transformation:
the observing side is a U.RoleAssignment whose holderRef names the acting U.System
and whose roleRef=TransformerRole@ObservationContext. That holder executes a
measurement method whose output is an epistemic holon containing observations.
Thus the traditional “External Observer Pattern” collapses into the universal external
Transformer pattern.
Archetypal Grounding
(Diagrammatic lineage table omitted for brevity but included in annex.)
Conformance Checklist
Consequences
Rationale (extended)
-
Why separate scopes? Real-world systems expose the as-intended versus as-is gap. By formalising that gap, FPF prevents silent assumption of perfect fidelity and allows quantified error (
U.Error) to drive evolution. -
Why treat observation as transformation? Physics tells us measurement changes state (energy, information, even quantum collapse). Making the observer just another
Transformermeans: no special metaphysics, full energy/provenance accounting, seamless tie‑in with Constructor Theory (see A 3 Rationale §2). -
Why insist on open‑endedness? Perfect finality is unattainable outside mathematics mandates that holons must be improvable in principle; this pattern encodes that mandate structurally: version n+1 is always possible.
-
Why no overlap (Tᴰ ∩ Tᴿ)? The instant a holon is mutable (design) it ceases to be the “same” operational asset relied upon for guarantees. Overlap would break trust calculations and violate A.7 Strict Distinction.
This pattern therefore realises three core principles in concert:
- Temporal Duality – explicit tagging of states.
- Open‑Ended Evolution – guaranteed pathway for refinement.
- Ontological Parsimony – one mechanism (Transformer) for all state changes, avoiding specialised “observer” or “installer” types.
“Blueprints dream; instances speak. Evolution is the conversation between them.”
A.4:End
Open‑Ended Kernel & Extension Layering
Status. Transitional stub (informative). This section defines no dedicated “module” subsystem. Enforceable boundary discipline lives in A.6.0 U.Signature and A.6.1 U.Mechanism, with guard‑rails in E.5.3 (Unidirectional Dependency) and E.10 (LEX‑BUNDLE stratification).
Problem frame
FPF’s ambition is to act as an “operating system for thought.” That ambition can only be realised if the framework:
- (i) remains stable and self‑consistent over multi‑decade timespans;
- (ii) invites, rather than resists, the continual influx of new disciplinary knowledge; and
- (iii) allows multiple, even competing, explanatory lenses to coexist without forcing a “winner‑takes‑all” unification.
Historically, grand “total” ontologies—Aristotle’s Categories, Carnap’s Logical Construction of the World, Bunge’s TOE—failed precisely because each tried to embed every domain’s primitives directly into a single monolith. Once the monolith cracked under domain pressure, the whole edifice became unmaintainable.
Problem
If FPF were to let domain‑specific primitives creep into its Kernel, two pathologies would follow:
A minimal, extensible design is therefore mandatory.
Forces
Solution
FPF’s modularity is declarative, not “callable”: pattern texts publish law‑governed declarations (vocabulary + laws + applicability) that can be reused and specialised. They are not subroutines, services, or protocol endpoints in the software‑architecture sense; treat “module” as a metaphor at most.
To keep the Kernel open‑ended without a bespoke plug‑in patterns standard, FPF relies on the boundary stack that already exists elsewhere in Part A/E/F:
- Kernel minimality (C‑5). Domain knowledge (physics, biology, economics, …) stays outside the Kernel by default; it enters as extension vocabularies and laws.
- Boundary packaging via
U.Signature(A.6.0). Reusable bundles are published as signatures with an explicitSignatureManifest(imports,provides). - Dependency vs specialisation are separate relations.
importsforms a dependency DAG constrained by E.5.3; refinement/extension (⊑,⊑⁺) is expressed separately (e.g., A.6.1U.MechMorph) and should not be conflated withimports. - Registry references stay references. Bridges, policy‑ids, and edition‑ids (Part F) are registry identifiers: they are cited/pinned where needed, not treated as exported symbols in
provides.
This section is intentionally lightweight: it provides architectural intent and neighboring-pattern pointers only. Any new enforceable modularity constraints belong in the A.6.* boundary patterns (or in E.* guard‑rails), not here.
A.5:End
Last Updated: 2026-07-28 — upstream FPF commit 17edd955 (github.com/ailev/FPF)