Part A - Kernel Architecture Cluster

Preface node heading:part-a-kernel-architecture-cluster:1151

What this page is

This is generated FPF reference text from the specification preface or supporting sections. It helps interpret FPF; it is not FPF Reference product documentation.

Methodology

Use it to understand how the specification wants to be read, then return to a route, pattern, or work packet for active work. Cite generated IDs only when the wording changes the task decision.

Content

Onboarding Glossary (NQD & E/E‑LOG)

One‑screen purpose (manager‑first). This pattern gives newcomers a plain‑language starter kit for FPF’s generative engine so they can run an admissible problem-solving or search loop on day one. It explains the few terms you must publish when you generate, select, and ship declared set results or typed portfolio publications (not single “winners”), and points to the formal anchors you’ll use later. (OEE is a Pillar; NQD/E/E‑LOG are the engine parts.)

Builds on. E.2 (P‑10 Open‑Ended Evolution; P‑2 Didactic Primacy), A.5, C.17C.19 - Coordinates with. E.7, E.8, E.10; F.17 (UTS); G.5, G.9G.12 - Constrains. Any pattern/UTS row that describes a generator, selector, typed portfolio publication, or set-return publication surface.

Keywords & queries. novelty, quality‑diversity (NQD), explore/exploit (E/E‑LOG), declared set result, typed portfolio publication, illumination map (report‑only telemetry), parity run, comparability, ReferencePlane, CL^plane, ParetoOnly default

Problem Frame

Engineer‑managers meeting FPF for the first time need a plain, on‑ramp vocabulary for the framework’s generative engine so they can run an informed problem‑solving/search loop on day one—before formal specifications. Without that, Part G and Part F read as assurance/alignment only, and teams default to single “best” options. This undercuts P‑10 Open‑Ended Evolution and harms adoption.

Problem

In current practice:

  • Single‑winner bias. Teams look for “the best” option and publish a leaderboard, suppressing coverage & diversity signals essential to search.
  • Metric confusion. “Novelty” and “quality” are used informally; units and scales are omitted; ordinal values are averaged, breaking comparability.
  • Hidden policies. Explore/exploit budgets and governor rules are implicit; results are irreproducible and refresh‑unsafe (no edition/policy pins).
  • Tool lock‑in. Implementation terms (pipelines, file formats) leak into the Core, violating Guard‑Rails.

FPF needs a short, normative glossary that names the generative primitives in Plain register and ties each to its formal anchor—so declared set results and typed portfolio publications, not single scores, become the default publication.

Forces

ForceTension
Readability vs RigorOne‑liners for managers ↔ lawful definitions with editions and scale types.
Creativity vs AssuranceOpen‑ended search (OEE/QD) ↔ conformance, parity, and publication discipline.
Comparability vs LocalityShared N‑U‑C‑D terms ↔ context‑local CG‑frames and bridges with CL.
Tool‑agnostic CoreConceptual publication in UTS ↔ engineering teams’ urge to cite specific tools.

Solution - Normative onboarding glossary and publication hooks

4.1 Plain one‑liners (normative on‑ramp; formal anchors in C.17–C.19)

TermPlain definition (on‑ramp)See
Novelty (N)*How unlike the known set in your declared CharacteristicSpace. Compute admissibly (declared DescriptorMapRef + DistanceDefRef; no ad-hoc normalisation).C.17, C.18
Use‑Value (U / ValueGain)*What it helps you achieve now under your CG‑Frame; tie to acceptance/tests; publish units, scale kind, polarity, ReferencePlane.C.17, C.18
Constraint‑Fit (C)Satisfies must‑constraints (Resource/Risk/Ethics); legality via CG‑Spec; unknowns propagate (never coerce to zero).C.18, G.4
Diversity_P (declared retained set)*Adds a new niche to the declared retained set or portfolio-publication surface; measured against the active archive/grid, not a single list; declare ReferencePlane for each head.C.17, C.18
E/E‑LOGNamed, versioned explore↔exploit policy; governs when to widen space vs refine candidates; policy‑id is published.C.19
ReferencePlaneWhere a value lives: world (system), concept (definition), episteme (about a claim). Plane‑crossings add CL^plane (penalties to R only); cite policy‑id.F.9, G.6
Scale Variables (S)The monotone knobs along which improvement is expected (e.g., parameterisation breadth, data exposure, iteration budget, resolution). Declare S for any generator/selector claimed to scale.C.18.1
Scale Elasticity (χ)Qualitative class of improvement when moving along S (e.g., rising, knee, flat in the declared window). Used as a selection lens; numeric laws live in domain contexts.C.18.1
BLP (Bitter‑Lesson Preference)Default policy that prefers general, scale‑amenable methods over domain‑specific heuristics, unless forbidden by deontics or overturned by a scale‑probe.C.19.1, C.24
Iso‑Scale ParityFair comparison across candidates at equalised scale budgets along S; may also include scale‑probes (two points) to test elasticity.G.9, C.18.1

(Registers & forbidden forms per LEX‑BUNDLE; avoid “axis/dimension/validity/process” for measurement and scope.)

4.2 Publication & telemetry duties (where these terms show up)

  1. UTS surface (Part F). When a UTS row describes a generator, selector, typed portfolio publication, or set-return publication surface, it MUST surface N, U, C, Diversity_P, E/E‑LOG policy‑id, ReferencePlane, with units, scale, and polarity typed under MM‑CHR and CG‑Spec, and admissible references to DescriptorMapRef and DistanceDefRef. (Row schema: F.17; shipping via G.10.)
  2. Parity & edition pins (Part G). When QD/OEE is in scope, pin DescriptorMapRef.edition and DistanceDefRef.edition (and, where applicable, CharacteristicSpaceRef.edition, TransferRulesRef.edition) and record policy‑id + PathSliceId. Treat illumination/coverage as report‑only telemetry; publish an Illumination Map where G‑kit mandates parity records. Declare S (Scale Variables) and run at least one scale‑probe (two points along S) when claiming scale‑amenability. Dominance policy defaults to ParetoOnly; including illumination in dominance MUST cite a CAL policy‑id.
  3. Tell‑Show‑Show (E.7/E.8). Any architectural pattern that claims generative behaviour MUST embed both a U.System and a U.Episteme illustration using this glossary (manager‑first didactics).

4.3 Minimal first-day construction

  1. Declare CG‑Frame (what “quality” means; admissible units and scales) and ReferencePlane.
  2. Pick 2–4 Q components + a simple DescriptorMap (≥2 dims) for N/D; publish editions.
  3. Choose an E/E‑LOG policy (explore↔exploit budget); record policy‑id.
  4. Apply G.5 selection/dispatch with parity pins; return a declared set result (Front, Archive, Shortlist, or RankedShortlist as appropriate), not a single score or an unnamed "portfolio".
  5. Publish to UTS + PathIds/PathSliceId; Illumination Map is report‑only telemetry by default.

Archetypal Grounding

Informative; manager‑first (E.7/E.8 Tell‑Show‑Show).

Show‑A - SRE capacity plan (selector returns a set). Frame. We must raise service commitment headroom for Q4 without breaking latency SLOs. Declared retained set. {cache‑expansion, read‑replicas, query‑shaping, circuit‑breaker tuning, schema‑denorm}. Glossary in action. U = latency@p95 & error‑rate, C = budget ≤ $X, risk ≤ R, N = dissimilarity to current playbook, Diversity_P = adds a previously empty niche in our archive (e.g., “shifts load to edge”). E/E‑LOG starts Explore‑heavy, flips Exploit‑heavy once ≥ K distinct niches are lit. (Publish UTS row + parity pins; illumination stays report‑only telemetry.)

Show‑B - Policy search with QD archive (MAP‑Elites‑class). Frame. Robotics team explores gaits that trade stability vs energy use. Glossary in action. CharacteristicSpace = {step‑frequency, lateral‑stability}, ArchiveConfig = CVT grid, N from descriptor distance, U = task reward, Diversity_P = coverage gain; PortfolioMode=Archive. Families include MAP‑Elites (2015), CMA‑ME/MAE (2020–), Differentiable QD/MEGA (2022–), QDax (2024); publish editions and policy‑ids; treat illumination as report‑only telemetry.

(Optional) Show‑C - OEE parity (POET/Enhanced‑POET). Co‑evolve declared {environment, method} sets; publish coverage/regret as telemetry metrics; pin TransferRulesRef.edition; return sets, not a single winner.

Show‑Epi - Evidence synthesis (U.Episteme). Frame. A living review compares rival causal identification methods (e.g., IV vs. DiD vs. RCT‑adjacent surrogates) across policy domains. Glossary in action. U = external‑validity gain @ F/G‑declared lanes, C = ethics & data‑licence constraints, N = dissimilarity in **ClaimGraph** transformations, D_P = coverage of identification niches in the archive. ReferencePlane = episteme. Illumination/coverage stays report‑only telemetry; selection returns a declared retained-set result or portfolio-publication view of methods per niche. (Publish UTS rows; cite Bridges + CL for cross‑domain reuse; edition‑pin Descriptor/Distance defs where QD applies.)

Bias-Annotation

Scope. Trans‑disciplinary; glossary applies to both System and Episteme work. Known risks & mitigations. Over‑aggregation: forbid mixed‑scale sums; use CG‑frame and MM‑CHR. Terminology drift: enforce LEX‑BUNDLE registers; ban tool jargon in Core. Optimization monoculture: require declared set-result or typed portfolio publication where G‑kit mandates parity; illumination stays report‑only telemetry unless a CAL policy promotes it (policy‑id cited).

Conformance Checklist (SCR/RSCR stubs)

IDRequirementPurpose
CC‑A0‑1If a pattern/UTS row describes a generator, selector, typed portfolio publication, or set-return publication surface, it MUST surface N, U, C, Diversity_P, ReferencePlane, and E/E‑LOG policy‑id; units, scale, and polarity MUST be declared.Makes generative claims comparable and auditable (UTS as publication surface).
CC‑A0‑2When QD/OEE is in scope, pin editions: DescriptorMapRef.edition, DistanceDefRef.edition (and, where applicable, CharacteristicSpaceRef.edition, TransferRulesRef.edition); log PathSliceId and policy‑ids.Enables admissible parity and refresh; edition-aware telemetry.
CC‑A0‑3No mixed‑scale roll‑ups; ordinal data SHALL NOT be averaged; any roll‑up MUST live under a declared CG‑frame.Prevents illegal scoring; keeps comparisons lawful.
CC‑A0‑4Where the G‑kit requires parity, publish an Illumination Map (coverage per niche); single‑number leaderboards are non‑conformant on the Core surface when a ParityReport is required.Declared-set-first / typed portfolio-publication posture; avoids single‑winner bias.
CC‑A0‑5Keep illumination/coverage as report‑only telemetry; dominance policy defaults to ParetoOnly; any change is CAL‑authorised and cited by policy‑id.Separates fit from exploration; preserves auditability.
CC‑A0‑6Apply E.7/E.8: include a U.System and a U.Episteme illustration when claiming generative behaviour; obey E.10 register hygiene; use the exact subsection title “Archetypal Grounding.”Locks didactic primacy; prevents jargon drift.
CC-A0-7ReferencePlane declared for every N/U/C/Diversity_P head and CL^plane penalties route to R only; Φ_plane policy-id published when planes differ.Prevents plane/stance category errors; aligns with Bridge/GateCrossing visibility guards (Bridge+UTS+CL/Φ_plane).
CC‑A0‑8Diversity_P ≠ Illumination. Diversity_P may enter dominance; Illumination remains report‑only telemetry unless explicitly promoted by CAL policy‑id.Matches QD triad semantics and parity defaults.
CC‑A0‑9If a generator/selector is claimed scale‑amenable, declare S (Scale Variables) and an E/E‑LOG scale policy‑id; otherwise mark S = N/A.Makes scale assumptions explicit and comparable across contexts.
CC‑A0‑10For scale‑amenable claims, execute a scale‑probe (≥ 2 points along S) and report a Scale Elasticity class (rising/knee/flat) in the UTS row.Forces early strategy‑relevant evidence without over‑specifying numerics.
CC‑A0‑11Apply Iso‑Scale Parity in parity runs when S is declared; where infeasible, state the loss notes and treat results as non‑parity with an explicit penalty in R.Keeps comparisons fair and auditable under scale constraints.
CC‑A0‑12BLP default. If a domain‑specific heuristic is selected over a general, scale‑amenable method, record a BLP‑waiver reason: deontic, scale‑probe overturn, or context‑specific.Prevents silent violations of the Bitter Lesson; improves selector transparency.

Consequences

Benefits.Immediate usability for engineer‑managers (plain one‑liners) with formal anchors for auditors. • Declared-set-first / typed portfolio-publication culture (typed set results & illumination) instead of brittle leaderboards. • Edition‑aware comparability; parity/refresh is routine, not ad‑hoc.

Trade‑offs & mitigations. • Slightly longer UTS rows → mitigated by consistent schema and copy‑paste snippets. • Requires discipline on units and scales → mitigated by CG‑frame templates.

Rationale

This pattern instantiates P‑10 Open‑Ended Evolution by making generation‑selection‑publication operational at the on‑ramp: readers get just enough shared vocabulary to run search as standard practice. It aligns with Didactic Primacy (P‑2) and LEX‑BUNDLE (E.10) by keeping definitions plain‑first and scale‑lawful, and with Patterns Layering (P‑5) by pointing to C.17C.19 for formal anchors without tool lock‑in. The post‑2015 line (MAP‑Elites → CMA‑ME/MAE → Differentiable QD/MEGA → QDax; POET/Enhanced‑POET/Darwinian Goedel Machine) normalised quality‑diversity and open‑endedness as first‑class search objectives; this glossary surfaces those ideas as publication standards, not tool recipes.

Relations

Builds on. E.2 Pillars (P-10, P-2, P-6), A.5 (Open-Ended Kernel), B.5/B.5.2.1 (Abductive loops + NQD integration), C.17C.19 (Creativity-CHR, NQD-CAL, E/E-LOG).

Coordinates with. E.7/E.8 (Archetypal Grounding; Authoring template), E.10 (LEX‑BUNDLE), F.17 (UTS), G.5/G.9G.12 (set‑returning selectors, iso‑scale parity, shipping & refresh). Constrains. Any generator/selector/typed portfolio publication on the Core surface: N‑U‑C‑Diversity_P + policy‑ids; S/Scale‑probe where applicable; parity pins; lawful scales; declared-set publication where mandated. (Ties into UTS rows and parity records.) Editor’s cross‑reference. For agentic orchestration of scalable tool‑calls under BLP/SLL, see C.24 (Agent‑Tools‑CAL).

Scope of this glossary

This pattern is an on‑ramp: it does not replace C.17C.19. It binds Plain definitions to publication/telemetry expectations so newcomers can use NQD/E/E‑LOG immediately while experts follow the formal trails.

Early set-result and metric-kind vocabulary

  • Use Palette for a plurality-preserving set with no dominance semantics yet.
  • Use TraditionPalette only when the members are traditions gathered before later comparison or choice semantics are declared.
  • For methods, hypotheses, environment-method pairs, candidate explanations, or other member kinds, use Palette plus explicit SubjectKind instead of borrowing the TraditionPalette head.
  • Use Front only for a non-dominated set under one declared DominanceSet.
  • Use Q-Front when the declared DominanceSet is the declared Q components.
  • Use Archive for a retained set whose purpose is coverage, stepping-stone retention, or frontier expansion rather than current non-domination.
  • Use ExplorationArchive for the broad retained exploration surface; it is the exploration-specific specialization of Archive.
  • Use SteppingStoneSet only for one narrower retained subset whose stated purpose is future frontier reach rather than the whole archive. It is not part of the ordinary first-pass public-head family for retained exploration.
  • Use Shortlist for the set chosen from one declared source set by one named lens.
  • Use RankedShortlist only when that shortlist is explicitly rank-ordered.
  • Use ShortlistId for the stable public token of one emitted shortlist; it is not the shortlist itself.
  • Use ChoiceSet only when the mathematical set object underlying one shortlist must be named explicitly; do not let it replace the public shortlist head.
  • Use Q-set for the declared current objective tuple that may ground the current DominanceSet.
  • Use LearningProgressSignal for an optional policy-side signal that says further exploration is expected to improve capability or competence; it is not part of Q or dominance by default.
  • Use CompetenceModelRef for the cited model or evidence surface that makes a capability or competence estimate reviewable.
  • Use GoalSpaceExpansionCue for a declared reason to widen the goal or task palette; it is a pool-policy/probe cue, not proof that one candidate is already on the current front.
  • Use GoalSpaceExpansionPolicyRef for the declared pool policy that says when learning-progress or competence evidence justifies widening goals, tasks, or curricula; it governs archive/curriculum growth, not default dominance.
  • When future reach depends on transition or transfer potential, cite that reachability or transfer rule together with LearningProgressSignal, CompetenceModelRef, or GoalSpaceExpansionCue; keep that bridge on the archive/pool-policy side unless one explicit policy promotes it.
  • If one front is meant to be current-Q by default, say so as Q-Front or as Front over the declared Q components rather than leaving the relation between Q-set and DominanceSet implicit.
  • Use-Value may be one member of the Q-set only when the current Context declares it there; it is not the whole Q-set or the default Q-set by itself.
  • Metric-kind doctrine: the Q-set is the candidate/front-facing objective tuple; Novelty@context is one context-relative candidate signal; DeltaDiversity_P is one set-relative marginal diversity contribution; IlluminationSummary is one report-only archive telemetry summary unless one explicit policy promotes it.
  • Minimal mathematical lens: the current front lives in one declared comparison or outcome space, while the exploration archive may depend on one declared search, niche, or reachability space. Keep both spaces explicit when they differ.
  • Keep Novelty@context, DeltaDiversity_P, Surprise, and IlluminationSummary outside the default Q-set unless one declared PromotionPolicy says otherwise.
  • A reader should be able to tell whether one sentence is talking about a Palette, a Front, an Archive, a SteppingStoneSet, a Shortlist, or one explicit RankedShortlist, and whether one selected set came from one declared source set, before later policy or geometry detail arrives.
  • Use portfolio only when the portfolio or set-result field is a declared retained set plus a selection/retention rule or a portfolio-publication posture. Do not use bare portfolio when Palette, Front, Archive, SteppingStoneSet, Shortlist, or RankedShortlist is already recoverable.

Helper declarations for set-result language

  • Ordinary public set-result family heads are Palette, TraditionPalette, Front, Q-Front, Archive, ExplorationArchive, Shortlist, and RankedShortlist.
  • ExplorationArchive is the exploration-specific specialization of Archive; use Archive as the wider family head only when that exploration-specific subtype does not matter.
  • SteppingStoneSet is one narrow retained-subset head only when that subset itself is the visible published surface; do not treat it as the ordinary public head for retained exploration.
  • ShortlistId is the stable public token or id companion for one emitted shortlist; it is not a set-result family head.
  • ChoiceSet is only the mathematical set gloss for a shortlist when that object itself must be named.
  • SetResultFamily is a declaration field naming which public set-result family is being emitted; it is not another public head, not a publication face, not a publication form, not an interop publication form, and not a carrier kind.
  • SourceSetFamily is a declaration field naming the immediate source-set family acted on by a lens, such as Q-Front, ExplorationArchive, Front, Archive, or TraditionPalette; it does not carry derivation, composition, or object-id load, it does not rename the emitted Shortlist or RankedShortlist, and it is not a publication face kind, publication form kind, interop publication form kind, or carrier kind.
  • SourceSetComposition is an optional declaration field naming a multi-source composition such as Front+Archive when one lens genuinely acts over more than one declared source-set family; it is not itself a kind.
  • SubjectKind is a declaration field naming what the members are, such as traditions, methods, hypotheses, environment-method pairs, candidate explanations, or other subject-kinded alternatives.
  • EligibilitySet, DominanceSet, TieBreakerSet, and TelemetrySet are the comparison-bundle sets behind the published set result, not rival publication heads: EligibilitySet says what may enter, DominanceSet says what counts for current non-domination, TieBreakerSet says what may order or choose among survivors, and TelemetrySet says what may be reported without changing dominance.
  • PromotionPolicy is the policy pin that authorizes one tie-breaker or telemetry signal to move into dominance. Without that pin, novelty, diversity, surprise, illumination, or similar signals remain outside the current DominanceSet.
  • DerivedViewKind is an optional declaration field for a derived view, such as one tradition view used for interpretation or publication. It must leave the base SourceSetFamily, SetResultFamily, and emitted shortlist family recoverable.
  • BasePaletteRef is an optional cited id/ref for the base palette when one derived tradition view or shortlist depends on that palette; it is a ref, not a kind.
  • Stable values for SetResultFamily, SourceSetFamily, SourceSetComposition, SubjectKind, and DerivedViewKind should come from controlled tokens, cited ids, or already-declared head labels; do not let one ad hoc local prose label become a de facto field value.
  • When the upstream object is SoTAPaletteDescription and its members are traditions, TraditionPalette may be used as the reader-facing tradition-only palette head for that same palette declaration. It is an aliasing head over the same palette declaration, not a separate palette declaration with its own authority-reference relation. When the members are not traditions, keep SoTAPaletteDescription or Palette + SubjectKind explicit instead of widening TraditionPalette.
  • RetentionIntent=steppingStone is a field value on retained archive membership when the purpose is future frontier reach; it is not the same publication move as publishing a SteppingStoneSet, which names a narrower retained subset only when that subset itself is the published set result being discussed and not the default archive head.

First public wording for shortlisted results

  • When one reader needs the visible selected set, say Shortlist from <SourceSetFamily> under <LensId> rather than one generic choice set or portfolio.
  • When the selected set must be cited as one stable emitted object, say ShortlistId and keep one nearby line that names the shortlist and its source set.
  • When the shortlist is ordered, say RankedShortlist and keep the underlying shortlisted set result recoverable rather than jumping straight from Front to ranking.
  • Use choice set underlying that shortlist only when the mathematical set object itself is the point of the sentence.
  • A reader should be able to recover on first pass what source set was acted on, what shortlist came out, and whether the text is naming the published set result, the token, or the mathematical set object.

Set/space reading reading glosses

The current set/space reading terms should read plainly as follows:

  • SearchSpaceRef
    • one declared reference to the CharacteristicSpace currently used to search, compare, or navigate candidate possibilities
    • it is one role-named ref field over the existing CharacteristicSpaceRef / SpaceRef idiom, not one brand-new space kind
  • OutcomeSpaceRef
    • one declared reference to the CharacteristicSpace currently used to judge outcomes, effects, or realized value
    • it is one role-named ref field over that same idiom, not one synonym for SearchSpaceRef
  • DeclaredSubstrateInterpretiveView
    • the ordinary/common head of one optional interpretive-view family laid over one already-declared substrate-bearing line or one source set or one set result whose substrate remains recoverable
    • it helps the reader see the current inspection question; it does not replace the base source set or silently invent one new substrate
  • DeclaredSubstrateAtlasView
    • one richer optional interpretive view that keeps several declared views, spaces, mappings, or qualifiers visible together
    • use it only when the current reading truly needs that composite interpretation, and say why thinner interpretation is not enough; it is not the default meaning of palette, front, archive, shortlist, or candidate set
  • TypedSetViews
    • one explicit list of which declared set-view heads the current atlas/support reading is holding together
    • use it when several declared views must stay visible together; it does not create one new set result and should not hide the active source set or active set result
  • OutcomeMapRef
    • one explicit OutcomeMapRef or named map ref that shows how one declared source or set result bears on into one outcome-side or effect-side declared space/ref when that map materially matters
    • it qualifies the reading; it does not rename the source set into the outcome-side declared space/ref
  • SpaceMetricRef
    • one explicit metric-ref qualifier for the metric, neighborhood, distance, density, or reachability discipline being used inside one declared space
    • it qualifies how the reader is comparing positions in that space; it is not the space itself and not one substitute for SearchSpaceRef or OutcomeSpaceRef
  • TransitionRelationRef
    • one explicit transition-ref qualifier for the transition, cross-scale state-change, dynamic-coupling, or phase-change basis that the reading depends on
    • it explains why motion or cross-scale state change is being read a certain way; it does not by itself decide policy, planning, or publication
  • BridgeDistortionNote
    • one explicit note that a bridge, projection, aggregation, or derived reading is useful but not perfectly faithful
    • it tells the reader where comparability bends or information is lost, so a reading that claims bridge, substitution, or reliance beyond the declared note does not over-claim

Practitioner-facing reading cue

  • If the question is “Which space are we searching or navigating?”, look for SearchSpaceRef.
  • If the question is “Which space are we judging outcomes in?”, look for OutcomeSpaceRef.
  • If the question is “What optional overlay helps me read several declared views or set results together?”, look for DeclaredSubstrateInterpretiveView.
  • If that overlay also keeps several declared views, spaces, mappings, or qualifiers together, it is the richer DeclaredSubstrateAtlasView.
  • If the atlas/support reading must keep several declared set views visible at once, look for TypedSetViews.
  • If the overlay depends on one explicit source-to-outcome mapping, look for OutcomeMapRef.
  • If the overlay depends on one metric, neighborhood, or reachability discipline inside one declared space, look for SpaceMetricRef.
  • If the overlay depends on one transition, cross-scale state-change, or dynamic-coupling basis, look for TransitionRelationRef.
  • If the overlay depends on one bridge or projection that may lose fidelity, look for BridgeDistortionNote.

First-use classification check

  • Start with DeclaredSubstrateInterpretiveView when the NQD/OEE task is simply to keep one declared palette, front, shortlist, or archive readable while comparing candidate material.
  • Start with it only when any cited SearchSpaceRef, OutcomeSpaceRef, mappings, or qualifiers are already declared elsewhere and remain recoverable through the base substrate, source set, or set result.
  • Escalate to DeclaredSubstrateAtlasView only when the reading must hold several declared views, spaces, mappings, or qualifiers together to explain why one specialization, evaluation, or boundary judgement stays admissible, and state why thinner interpretation is insufficient.
  • If the reading keeps several declared set views together, name TypedSetViews explicitly instead of letting atlas wording hide that view-set choice.
  • If the reading depends on one source-to-outcome map, name OutcomeMapRef explicitly instead of letting the overlay silently stand in for that map.
  • If the reading depends on one metric or neighborhood discipline, name SpaceMetricRef explicitly instead of letting the space name stand in for that metric.
  • If the reading depends on one transition, cross-scale state-change, or dynamic-coupling basis, name TransitionRelationRef explicitly instead of letting the overlay silently absorb that transition-support requirement.
  • Not this glossary-side interpretive-view stack when the real move is to invent one new search doctrine, one new outcome metric family, or one new publication surface. Those decisions stay with the governing patterns for the object itself.

A.0:End


Holon Ontic Foundation (U.Holon and Admitted Holon Kinds)

Type: Part A architectural ontology pattern Status: Stable Normativity: Normative unless a section is explicitly informative

Use This When

Use this pattern when a project must say what kind of thing is under concern before it can rely on parts, wholes, boundaries, acting systems, roles, methods, work, architecture, or descriptions.

Typical moments:

  • a team calls everything a "system" and then asks physical or operational questions about theories, documents, models, dashboards, or descriptions;
  • an episteme is treated as an acting agent that decides, performs work, authorizes, promises, or revises itself;
  • a product, organization, machine, document family, research program, discipline, work occurrence, or model family must be treated as a whole with parts;
  • a list, batch, fleet, pool, clientele, community, or supplier base is expected to act, but no acting system has been constructively recognized;
  • architecture or selected-structure claims need the holon whose structure is being selected.

Primary EntityOfConcern. One exact U.Entity candidate whose actual construction may or may not satisfy the constructive recognition criterion for one already admitted holon kind.

Primary working reader. A practitioner or modeler who must decide whether part-whole, acting-system, or claim-bearing-holon reasoning is admissible for the exact entity under concern before relying on neighboring work, architecture, evidence, or publication claims.

First useful move. Name the exact U.Entity under concern. Then test whether its actual construction satisfies the A.1 holon-recognition criterion under an already admitted public holon kind. E.24.UK admits the public kind once at ontology level; A.1 does not repeat that decision for each candidate.

What goes wrong if missed. A document edits itself, a theory gets ports, a list becomes an organization, a lathe becomes the super-holon of the workpiece it changes, and architecture is discussed without naming the holon whose structure is selected.

What this buys. FPF gets one compact part-whole foundation without turning every whole into a physical system: identity starts at U.Entity; part-whole treatment starts at U.Holon; acting work attaches to U.System; claim-bearing knowledge is carried by U.Episteme; method holonhood is governed by U.Method; other admitted holon kinds keep their own governing patterns.

Not this pattern when.

  • If the current question is a selected bounded model-use relation organization, use A.1.1.
  • If the current question is episteme identity, constitution, or neighboring-relation discipline, use C.2.1.
  • If the current question is relation vocabulary or component, portion, aspect, and phase discipline, use A.14.
  • If the current question is constructive part-whole grounding, use C.13; use B.3.5 for Working-Model assurance grounding.
  • If the current question is selected structure over a holon, use A.22.
  • If the current question is architecture of a holon, use C.30.
  • If the current question is transformation, method, role, work, capability, or functioning, use the direct governing pattern before relying on A.1.

Problem Frame

FPF cannot use system as its universal root. A pump, theory, software product, legal code, dashboard, research program, work occurrence, discipline, and team can all be objects under concern, but they do not all act, exchange matter, execute methods, or carry physical ports.

A.1 separates four questions that are often collapsed:

  • reference: what can be individuated as U.Entity;
  • part-whole treatment: which exact candidates satisfy the constructive recognition criterion for U.Holon or another already admitted public holon kind;
  • acting eligibility: which recognized holons also satisfy the kind-specific criterion for the already admitted U.System kind;
  • claim-bearing knowledge: which recognized holons also satisfy the kind-specific criterion for the already admitted U.Episteme kind.

Entity identity and world-side holon recognition have a context-independent base. Claim scope, effective reference scheme, and selected model-use structure can qualify a particular assertion or use, but none identifies the candidate, makes the constructive criterion true, or admits a public U-kind.

Other admitted holon kinds are not created by title, by filling one locally named slot, or by ordinary-language label. They remain governed by their direct patterns. Current accepted examples include U.Method under A.3.1, U.Work under A.15.1, and U.Discipline under C.20. BoundedModelUseStructure under A.1.1 is U.Structure, not a holon kind.

Problem

Without A.1:

  1. System-bias spreads. Physical and operational assumptions are projected onto epistemes, descriptions, theories, documents, dashboards, and source records.
  2. Epistemes become agents. A document, model, theory, pattern, or report is said to decide, promise, authorize, perform work, or revise itself.
  3. Collections become collectives by wording. A set of people, services, files, claims, assets, or suppliers is treated as an acting whole without boundary, coordination, role assignment, capability, method, or work evidence.
  4. Transformation becomes containment. A system that changes another holon is treated as that holon's super-holon or as a part-whole relation by the fact of interaction.
  5. Architecture loses its grounding holon. A structure, view, graph, diagram, or architecture claim floats free of the holon whose selected structure is under concern.
  6. Slot filling creates false kinds. A system, episteme, holon, relation occurrence, or other value is given a new intrinsic kind merely because it fills one slot of a role-assignment, evidence, publication, description, or another direct relation.

Forces

ForceTension
Universal root vs domain comfortPractitioners know words such as system, model, product, team, document, program, and discipline; FPF needs a cross-domain root that does not import one domain's assumptions.
Identity vs compositionA thing can be individuated before FPF knows whether it has parts or belongs to a larger whole.
Acting vs claim-bearingSystems can enact roles, methods, plans, and work; epistemes can be changed, published, cited, compared, and relied on, but they do not act by themselves.
Open-world modeling vs premature completionA holon slot can be relevant even when not yet filled; omission means "not current or not recovered", not absence in the world.
Collection usefulness vs collective agencyCollections can have whole-level characteristics without being acting systems.
Architecture usefulness vs math-lens driftGraphs, algebras, matrices, and embeddings can describe structures; they do not become the structure or holon by spelling.

Solution

Use A.1 to distinguish an exact referenceable entity from a candidate that satisfies the constructive holon criterion under an already admitted public holon kind.

U.Entity
  U.Holon
    U.System
    U.Episteme
    U.Method           only under A.3.1 and direct method-composition patterns
    U.Work             only under A.15.1
    U.Discipline       only under C.20
    named C.3 U.Kind   only when a direct governing pattern admits holon treatment

This is not a classical taxonomic ladder and not a publication hierarchy. [E.24.UK](/generated/patterns/E.24.UK) owns public U-kind admission; A.1 owns recognition of exact candidates under the admitted holon kinds and the kind-specific patterns shown above. A selected U.Structure, including BoundedModelUseStructure, remains dependent relation organization rather than a holon kind.

U.Entity

U.Entity is anything that can be individuated and referenced. It carries no part-whole, acting, claim-bearing, model-use, or architecture assumption by itself.

Use U.Entity when the current move only needs to point to something: a number, claim, named product, material batch, data value, legal clause, role value, reference, document, or another object under concern.

Do not apply holon aggregation, part-whole grounding, acting-system roles, or architecture claims to a bare U.Entity unless its actual construction satisfies the A.1 criterion for U.Holon or a kind-specific criterion for another already admitted public holon kind.

U.Holon And Context-Independent Recognition

U.Holon is the broad part-whole EntityOfConcern: an exact U.Entity whose actual construction supports treatment as a whole with parts and as a possible part of a larger whole.

Keep ontology admission and candidate recognition separate. E.24.UK owns the one-time FPF decision that admits U.Holon and every other public holon kind. A.1 owns the constructive criterion by which an exact candidate is recognized under an already admitted kind. C.3.2 supplies three-valued discipline only for project-local kind membership; it does not own recognition under an admitted public holon kind. Candidate classification is a judgment about that exact entity; it is not a direct relation to a pattern edition, criterion episteme, evaluator, evidence set, or status value.

For one exact candidate, recover six distinct constructive components. Do not let one component stand in for another:

  1. Exact candidate. Identify one exact U.Entity under its direct identity rule.
  2. Exact constituents. Identify the entities claimed to constitute this candidate. Nearby entities, members of a set, sampled points, and arbitrary slices are not constituents by inclusion or wording.
  3. Constructive part relations and assembly. Recover the exact obtaining part-relation occurrences under their direct patterns and the assembly by which those constituents compose this candidate. A list, diagram, or shared boundary does not establish those relations.
  4. Reidentification rule. State the rule that distinguishes this whole and says which constituent, relation, boundary, or phase changes preserve or end its identity.
  5. Composition-grounded whole-level characteristic. Recover at least one exact characteristic whose value or state is produced or sustained by the composition and is not attributable to one constituent alone.
  6. Possible participation in a larger constructive assembly. Recover the candidate's actual boundary, interfaces, relevant characteristics, and identity-preservation conditions. Those facts must satisfy the applicability and compatibility conditions of at least one governed larger-assembly construction method or rule under which an admissible construction would include this candidate as a constituent while preserving its identity. One exact episteme may describe that method or state that rule and its conditions; the episteme does not create applicability, compatibility, or possibility.

Name the already admitted holon kind and its direct kind-specific pattern separately from those six components. The candidate satisfies the A.1 criterion when all six world-side components hold and any kind-specific condition is satisfied; it fails when a required component or condition does not hold. Satisfaction or failure does not vary with current evidence availability or evaluator access. Replacing a constituent or part-relation occurrence preserves the same holon only when the reidentification rule admits that change. An unassembled collection fails even when a project card calls it a holon.

Exact dated classification work belongs to A.15.1. When a reusable typed recognition-evaluation operation is current, A.6.1 governs its declared arguments and result plus the actual application bindings. The evaluation returns true when its governed inputs determine satisfaction, false when they determine failure, and unknown when missing evidence or an unavailable dependency prevents either determination. unknown is an evaluation result, not a third candidate state: the same candidate can satisfy or fail the criterion while the current evaluation remains unable to determine which.

When another use must inspect or cite the judgment, identify an optional C.2.1 classification-assertion or evaluation-result episteme whose exact EntityOfConcern is the candidate. Its claim content names the admitted kind, the A.1 criterion, the constituent and part-relation facts, reidentification rule, whole-level characteristic, candidate-side compatibility facts, exact construction-method-or-rule episteme, evaluation frame, and true | false | unknown judgment needed by that use. The assertion creates none of the candidate, constituents, part relations, assembly, characteristic, compatibility facts, method or rule, larger-assembly possibility, or holonhood.

Exact evidence and assurance relations support or warrant assertion claim content. G.11 separately governs whether the selected assertion edition is current. Receiving work separately decides whether to rely, decline to rely, defer, or reopen. B.2 owns the different question whether the existing whole is no longer the right EntityOfConcern for a receiving use. A.1 satisfaction, failure, or evaluation uncertainty supplies neither warrant for a B.2 claim nor grounds for selecting B.2.

In ordinary use, stop after naming the candidate, six constructive components, admitted kind, kind-specific condition, and resulting judgment needed by the work. Materialize a classification assertion only when a specific downstream task must inspect or cite that judgment.

Admitted Holon Kinds

Current accepted holon-kind examples are:

  • U.System, governed here as the acting physical or operational holon kind;
  • U.Episteme, governed here only as a non-agentive claim-bearing holon, with full slot discipline in C.2.1;
  • U.Work, governed by A.15.1 as the admitted kind for dated 4D occurrence holons;
  • U.Discipline, governed by C.20 as a field-level practice-and-knowledge holon;
  • U.Method, governed by A.3.1 and method-composition patterns such as B.1.5 as a non-agentive method holon whose submethods compose into a whole method across levels.

No blank "other kind" escape hatch is selected. A project-local holon classification names its concrete C.3 U.Kind, the A.1 criterion, any kind-specific criterion, and the direct patterns for the construction facts it uses. A proposed public U.* holon kind first passes E.24.UK and gains one direct governing pattern. Neither route may rely on part-whole, architecture, role, work, evidence, or source-use claims before the candidate-side criterion is recoverable.

Candidate recognition is decided by the six candidate-side constructive components in A.1:4.2, not by agentivity, wording, evidence availability, or a B.2 whole-reidentification result. Grounding work selects the participating objects from the surrounding practice or world, fixes their boundaries, identifies constituents and exact part relations, recovers the assembly and reidentification rule, and tests the resulting whole-level characteristic and larger-assembly compatibility. Relations may arrange, constrain, assign, qualify, or describe constituents; those relations do not become constituents by that fact.

U.Role and U.Method are therefore not decided by whether they act. U.Episteme already shows that a non-agentive object can be a holon. The ontology decision is: U.Method is a non-agentive holon kind, and U.Role is not a holon kind. A method can have submethods composing into whole methods with whole-level preconditions, effects, invariants, interfaces, constraints, and assurance hooks; the resulting method can participate in a larger method. A step label or step description is not a method part by label: it is first recovered as a U.Method submethod rather than a method-description node, order relation, work-plan item, or work occurrence. A role value states what a holder is being under one assignment relation and role-taxonomy interpretation; assignment, state, capability, responsibility, permission, commitment, obligation, method participation, and role relation structure remain neighboring objects or relations rather than role parts.

U.System

U.System is an acting physical or operational holon kind. It can participate in work-facing role assignments, capability relations, method enactment, mechanism realization, work occurrences, transformations, functioning relations, and responsibility-bearing claims when their direct patterns make those claims current.

Its kind-specific condition is acting eligibility: the recognized whole has an actual physical or operational organization through which it can causally participate in work or transformation while preserving its identity. Capability evidence or actual participation can support a classification assertion; a role assignment, work occurrence, or capability relation does not create the system by participation alone.

Keep those relations separate:

  • A.2.1 governs the role-assignment occurrence whose HolderSystemSlot is filled by the system.
  • A.2.2 governs capability claims about that system.
  • A.3.1, A.3.2, and the mechanism family govern method, method description, and mechanism realization.
  • A.15.1 governs performed work and the exact relation through which the system is attributed as performer.
  • A.3.4 governs the bounded transformation; the exact direct subject-relation pattern governs the system's participation in it.
  • Functioning, evidence, assurance, temporal, and dynamics claims remain with their direct patterns.

A.1 introduces no omnibus participation relation over references to all those occurrences. Listing them together in a worked case creates no additional world-side relation. If the selected organization among several direct relations changes an engineering decision, select that organization as U.Structure under A.22 and keep every constituent occurrence under its direct identity. Claim scope, effective reference scheme, and optional model-use structure qualify each dependent assertion only where its direct pattern makes them current.

U.Episteme

U.Episteme is a claim-bearing, non-agentive holon kind. It can be changed, used, cited, published, represented, versioned, structured, compared, interpreted, or relied on by acting systems, but it does not act by itself.

Use C.2.1 for episteme identity, EpistemeConstitutionRelation, and the direct empirical-grounding and edition relations declared there. Use the neighboring direct patterns for viewpoint, view, claim scope, bounded model use, evidence, publication, source use, carrier, and representation. A.1 only says that an episteme can be treated as a holon when part-whole treatment of the claim-bearing object is current.

A system in role decides, approves, performs work, promises, revises, authorizes, or bears responsibility with or about an episteme. The episteme does not perform those acts by itself.

Recover Holon Delimitation And Boundary Crossing

When a claim concerns where a holon is delimited, recover the exact delimitation relation, criterion, or selected structure supplied by the direct holon, mereology, architecture, or domain pattern. Do not force an identity rule, membership relation, environment relation, selected structure, and boundary condition into one universal relation signature. Those objects have different kinds and predicates.

When one direct relation crosses that delimitation, keep the direct relation occurrence under its own pattern and use F.9 for the exact crossing or bridge claim. State the delimited holon, the direct crossing relation, direction, fit, loss, scope, and qualification window that are current for that use. A crossing classification does not replace the signal, control, measurement, transformation, source-use, publication-use, evidence-use, coupling, or other direct relation occurrence.

Do not call every boundary an interface. Use interface language only when a governing signature, module, architecture, port, or interface pattern makes interface meaning current.

External holon vocabularies do not admit FPF kinds or establish candidate holonhood by label. Recover the current FPF claim first. Acting-agent and organization claims test the U.System criterion; data, document, and projected-content claims usually use U.Episteme, publication, source-use, evidence, or description patterns; process-holon wording uses work, method, work-plan, or transformation patterns; portal or traversal wording uses an access, crossing, policy, or evidence relation. A.1 recognizes only the exact candidate-side holon or system claim when its criterion is satisfied.

A Markov blanket is not a holon boundary by name. First recover whether the source names accepted local Markov dynamics, a mathematical or probabilistic lens, an exact holon-delimitation claim, a physical interface module or component, a functional element, a boundary description, or an agency-threshold claim. Apply the direct governing pattern. A.1 recognizes the exact holon candidate only when its constructive criterion is satisfied; it does not turn the neighboring delimitation claim into holonhood.

Collections, Collection-As-Whole, And Acting Collectives

A list, set, batch, fleet, pool, clientele, community, supplier base, or coverage zone does not become a U.System by wording.

First recover the current claim: membership under A.14; collection-as-whole constructive grounding under C.13 and B.3.5 when assurance is current; whole-level characteristic under C.16; acting collective recognition under the U.System criterion plus A.15.1 work; or whole reidentification under B.2.

An acting collective U.System has a boundary, coordination, role assignments, capability or method evidence, and work-facing participation. If those are not current, keep the object as a collection or collection-as-whole claim under direct governing patterns.

Constructional Grounding

A.1 governs constructive holon recognition. It does not replace exact part-relation patterns, C.13 constructional grounding, or E.24.UK public-kind admission.

Use A.14 and the direct part-relation patterns to identify the exact obtaining component, portion, aspect, phase, member, or other part relations. Use C.13 to show how those independently grounded constituents and relations assemble the candidate. If a C.13 trace is materialized, it is a C.2.1 episteme about that construction; writing or publishing the trace creates neither the constituents, the obtaining part relations, the assembly, nor the whole. Use B.3.5 only when a named assurance use needs grounding or warrant for a structural assertion.

Systems, epistemes, methods, dated work occurrences, and disciplines are admitted holon kinds under their direct patterns. C.13 may describe their construction only after those patterns supply exact parts and whole-forming relations for the candidate. A selected U.Structure, including BoundedModelUseStructure, organizes already identified relations for a use; selection or a diagram gives it no constituents, parthood, agency, holonhood, or B.2 transition.

FPF avoids unrestricted composition. A set of nearby objects, graph, diagram, role bundle, method algebra, work breakdown, or source table does not become a holon merely because it can be listed or represented as a whole. Several independently identified transformations likewise do not become parts of one composite transformation from shared timing, a changed referent, a method or work decomposition, or a C.13 trace. When the work requires positive transformation composition or transformation holonhood and no direct composition governor supplies the candidate whole, constituents, contribution, compatibility, and reidentification rule, retain the exact blocker and stop before A.1 classification.

Slot Filling Does Not Create A Kind

A system that fills HolderSystemSlot of a role-assignment occurrence remains a system. An episteme that participates as the EntityOfConcern in an EpistemeConstitutionRelation remains an episteme. A system can participate in a transformation through an exact governed direct relation without becoming the changed holon's super-holon. A holon that participates as the EntityOfConcern of a structure-description episteme remains that holon rather than becoming the description.

The SlotSpec belongs to the direct relation declaration. Its SlotKind names the local participant slot; its ValueKind constrains admissible fillers. Filling that slot establishes neither a new intrinsic kind for the filler nor a new relation occurrence unless the direct obtaining predicate and identity rule are also satisfied. Use the direct governing pattern before introducing any durable kind name.

Archetypal Grounding (Worked Cases)

Pump As Acting System

Pump #37 is first an exact U.Entity. Its actual construction satisfies the A.1 criterion for the already admitted U.System kind:

  • the casing, impeller, seal, motor, and flanges are exact constituent entities;
  • exact fastening, enclosure, shaft-coupling, sealing, and connection occurrences constructively assemble those constituents as Pump #37 under their direct part-relation patterns;
  • the installed-assembly reidentification rule distinguishes Pump #37 and permits specified maintenance replacements;
  • pump-level flow, pressure, and operating characteristics arise from the composition rather than from one constituent;
  • its actual boundary, inlet and outlet interfaces, load envelope, and identity-preservation conditions satisfy the applicability and compatibility conditions of the governed plant-installation method by which the pump can remain one constituent of a larger cooling-water system;
  • E.24.UK already admits U.System, while A.1 supplies the common holon criterion and its U.System clause supplies acting eligibility.

Those world-side facts make the criterion true whether or not the current project has enough evidence to determine it. Classification work with adequate inputs can return true and support a separate C.2.1 assertion. If evidence or one dependency is unavailable, evaluation returns unknown; Pump #37 and its criterion satisfaction do not change. Replacing the seal preserves Pump #37 only when the reidentification rule admits that maintenance phase.

If instead an exact coupling, load-envelope, or boundary-interface fact violates a condition of the governed plant-installation method, the candidate fails the criterion even when the drawing and rule-description episteme are current. Governed evaluation returns false when that incompatibility is available to it and unknown when the needed input is unavailable; neither result changes the world-side failure. Renaming or republishing the cited criterion pattern changes its episteme designation, edition, or currentness, not Pump #37 or the candidate-side facts.

Separate direct relations then state that Pump #37 fills the holder-system slot of its cooling-water circulation role assignment, has a flow-rate capability envelope, is attributed as performer of inspection work WO-1842, and participates in the water-moving transformation. No omnibus participation or candidate-classification relation is added. The pump can have selected structures; its maintenance model may participate in a separately selected BoundedModelUseStructure, but that structure neither identifies the pump nor makes it a holon.

Scientific Theory As Episteme Holon

Newtonian gravitation in one exact selected edition is first a C.2.1 U.Episteme candidate. Its actual claim-bearing constitution can satisfy the A.1 criterion for the already admitted U.Episteme kind:

  • exact law, definition, derivation, diagram, exercise, and evidence-relation epistemes are the candidate constituents;
  • exact claim-composition and episteme part relations organize those constituents as one governed claim-bearing whole;
  • the selected-edition reidentification rule distinguishes the theory episteme and states which revisions preserve or end that identity;
  • inferential and explanatory characteristics arise from the organized claim-bearing whole rather than from one constituent;
  • its actual inferential interfaces, effective reference scheme, applicability conditions, and identity-preservation conditions satisfy the applicability and compatibility conditions of at least one governed method for composing it as a constituent of a larger explanatory or educational episteme;
  • E.24.UK already admits U.Episteme, while C.2.1 supplies the kind-specific constitution condition.

A textbook publication can make this edition available, but the publication form and the episteme that describes the composition method do not create the theory's compatibility or holonhood. Classification work may evaluate the criterion and a separate C.2.1 assertion may state the result; evidence, warrant, edition currentness, receiving reliance, and any B.2 whole-reidentification question remain separately governed.

The theory does not teach itself, revise itself, or authorize laboratory work. A system under an exact role assignment may explain, revise, publish, compare, or use the episteme through separately governed work and relation occurrences.

Fleet As Collection Or Acting Collective

A fleet list is a membership claim. Fleet availability is a whole-level characteristic. A fleet-coordination organization that coordinates vehicles, drivers, rules, and work can be an acting collective U.System only after boundary, coordination, role assignments, capability or method evidence, and work-facing participation are recovered.

If a source says "the fleet responded", recover the actual claim: individual vehicle work, fleet-coordination system work, collection-as-whole characteristic, or B.2 whole reidentification.

Lathe Changing A Workpiece

A lathe can change a workpiece during manufacturing without becoming the workpiece's super-holon.

Use A.3.4 to identify the bounded transformation from the exact changed referent, extent, boundary conditions, actual change facts, and continuity rule. Use the direct subject patterns for the lathe's participation, method, dated work, work-to-change facts, and evidence. Use A.14 or C.13 for part-whole only when an exact grounded part relation independently obtains.

Stop Before A Whole Is Constructed

A pallet holding an unconnected pump, motor, baseframe, and manifold is a collection of exact entities. The list and physical proximity do not supply the fastening, coupling, enclosure, connection, assembly, or reidentification facts needed to recognize a skid holon. A construction drawing is an episteme about a possible assembly; it does not turn the collection into that assembly.

A selected BoundedModelUseStructure may organize model-applicability, delimitation, maintenance, and crossing relations for an engineering use. It remains dependent U.Structure; selecting it, naming it, or drawing it supplies no part relations, whole-level characteristic, acting eligibility, or B.2 whole reidentification.

Mounting, wiring, and fluid-connection changes may each be exact U.Transformation occurrences. Their participation in one work episode or one flow description does not identify a composite transformation. Without a direct transformation-composition governor, retain the separate changes and stop before transformation parthood, composite identity, or A.1 holon recognition. This stop does not say that the changes are atomic or have no finer parts.

Bias-Annotation

Lenses tested: Onto, Arch, Epist, Prag, Gov, Did.

This pattern intentionally resists:

  • system-bias: treating all objects as acting physical systems;
  • episteme-agent bias: assigning work, authority, or decision to claim-bearing epistemes;
  • collection-bias: treating any collection as an acting collective;
  • boundary-bias: treating boundary words, diagrams, folders, or sections as holon delimitation by appearance;
  • interaction-bias: using one word for transformation, signal, source use, publication use, evidence relation, probe relation, and control relation;
  • math-lens drift: treating graph, algebra, matrix, tuple, or embedding expressions as the ontology-side structure by spelling;
  • publication-form bias: treating a document, dashboard, model, register, or digital twin as the holon it describes.

Conformance Checklist

CheckConformance condition
CC-A1-1The exact candidate is first individuated as U.Entity; E.24.UK already admits the public holon kind before A.1 tests candidate recognition under that kind.
CC-A1-2A current recognition use separately recovers the exact candidate, exact constituents, constructive part-relation occurrences and assembly, reidentification rule, composition-grounded whole-level characteristic, and candidate-side compatibility with an applicable governed larger-assembly construction method or rule; it then names the already admitted holon kind and its direct kind-specific condition.
CC-A1-3A proposed new public holon kind first passes E.24.UK; its direct pattern then states the kind-specific membership condition without changing the common A.1 criterion for exact candidates.
CC-A1-4Candidate classification is not reified as a status relation. World-side satisfaction or failure, classification work, `true
CC-A1-5Role assignment, capability, method, work, transformation, functioning, evidence, and temporal claims remain separate direct relations; their reference bundle is not asserted as another occurrence.
CC-A1-6U.Episteme is non-agentive; systems may transform, publish, cite, or use epistemes, but the episteme does not act by itself.
CC-A1-7Collection membership, collection-as-whole, acting collective system, whole-level characteristic, and B.2 whole reidentification are kept distinct.
CC-A1-8Boundary wording recovers an exact delimitation relation, criterion, or selected structure from its direct pattern; crossing wording preserves the exact crossing relation occurrence and uses F.9 without minting universal delimitation or crossing relation kinds.
CC-A1-9A system changing another holon is not treated as that holon's super-holon unless a separate grounded part-whole relation obtains.
CC-A1-10A.14 and the direct part-relation patterns identify exact obtaining parthood; C.13 may ground an assembly only from those facts and does not create them; B.3.5 is opened only for a named assurance use.
CC-A1-11Publication forms, construction traces, and descriptions of holons remain distinct from the holons and world-side construction facts they describe.
CC-A1-12A candidate U.System, U.Episteme, U.Method, U.Work, or U.Discipline may use constructive grounding only after its direct patterns identify exact parts and whole-forming relations; a selected dependent U.Structure is not a holon by selection or name.
CC-A1-13Several actual changes are not classified as one composite transformation or holon without a direct transformation-composition governor; a missing governor neither proves composition nor proves atomism.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
System as universal rootA theory, document, model, source, or dashboard receives physical system properties.Re-type as U.Episteme, publication, source-use object, or another direct object before using system claims.
Document edited itselfA model, theory, or document is said to perform a revision.Name the U.System in role that performed the work and the U.Episteme or publication that changed.
Collection as actorA list, batch, pool, fleet, or community is said to decide or perform work.Recover membership, collection-as-whole, whole-level characteristic, acting collective system, or B.2 whole reidentification.
Interaction as one umbrellaSignal, source use, publication use, transformation, measurement, and control are all called interaction.Recover the exact direct relation; use F.9 for a current crossing claim and A.3.4 when bounded change is current.
Omnibus participation relationReferences to role, capability, method, work, transformation, evidence, and time are packed into one additional relation-shaped record.Keep the direct relation occurrences separate; select their organization as U.Structure only when that organization changes the receiving use.
Boundary by drawingA box, folder, section, dashboard view, or diagram is treated as the holon boundary.Recover the exact delimitation relation, criterion, or selected structure from its direct pattern; keep the drawing as a description or view.
Architecture without holonA selected structure is discussed without the holon whose structure is selected.Use A.1 to name the holon, then A.22 and C.30 for selected structure and architecture.

Consequences

Positive consequences:

  • FPF can talk about physical systems, organizations, documents, theories, models, work occurrences, disciplines, research programs, and selected structures without making them all systems or holons.
  • Acting work stays attached to systems in roles.
  • Epistemes can be changed, described, compared, published, and relied on without becoming agents.
  • Architecture and selected-structure claims gain a grounding holon.
  • Collection-as-whole and acting collective claims become inspectable instead of lexical.

Costs:

  • Practitioners pay the cost of replacing umbrella uses of "system", "boundary", "interaction", "level", "emergence", and "collection" with exact governed claims.
  • A reviewable holon-recognition claim states the exact constituents, construction, reidentification, larger-assembly compatibility, whole-level characteristic, admitted kind, and direct governing pattern on which it relies.
  • Some familiar sentences need repair: "the document decided" becomes a claim about a system in role, a decision relation, and an episteme or publication.

Rationale

A.1 prevents category errors by separating individuation, constructive part-whole recognition, acting eligibility, and claim-bearing. U.Entity gives the minimal referenceable object. U.Holon adds six separately recoverable constructive components: exact candidate, exact constituents, exact part relations and assembly, reidentification, a composition-grounded whole-level characteristic, and compatible possible participation in a governed larger assembly. U.System adds acting eligibility. U.Episteme adds claim-bearing structure without agentivity. U.Work and U.Discipline are holon-kind examples only through their governing patterns; BoundedModelUseStructure is selected U.Structure, not another holon kind.

The recognition base cannot depend on a prior context object without recursion. It begins with the exact candidate and world-side construction facts. Public-kind admission is the separate one-time E.24.UK decision. Classification work may evaluate the criterion, but its true | false | unknown result, a C.2.1 assertion, evidence, currentness, and receiving disposition neither participate in a candidate-side relation nor alter the candidate's identity.

This also prevents ontology duplication. A theory under concern, a theory description, a publication of that description, and the system that edits the publication can all be named without turning the filling of one participant slot into a new kind. Architecture likewise starts from the exact holon recognized under an admitted kind whose selected structures matter; diagrams and structure descriptions remain epistemes.

The constructional stance is conservative: FPF avoids unrestricted composition and uses A.14, C.13, and B.3.5 before a part-whole claim is relied on for another claim or work occurrence. This keeps holonic thinking useful without letting every collection, expression, graph, selected structure, or source label become a holon.

SoTA-Echoing

A.1 draws on current constructional-ontology, applied-foundational-ontology, and physics-side construction traditions for different questions. None of these sources admits an FPF kind, establishes a candidate's construction, or replaces the direct patterns that govern part relations, work, evidence, or publication.

Current source and practice answerExact use in A.1Adoption status and blocked overread
Florio and Linnebo, Introduction to Constructional Ontology, 2024, distinguish constructors, constructor inputs, constructional processes, and the identity consequences of construction choices.A.1 requires exact constituents, obtaining constructive part relations, assembly, reidentification, and a composition-grounded whole-level characteristic before recognizing a candidate whole.Adapt. A.1 adopts construction-sensitive identity but keeps public-kind admission with E.24.UK and direct subject facts with their own patterns; a construction description or selected constructor does not make the candidate a holon.
Borgo and Righetti, “Towards Applied Constructional Ontology”, FOIS 2025, show that applying constructional ontology still requires explicit choices about mereology, dependence, and identity.A.1 sends exact part-relation vocabulary and constructive grounding to A.14 and C.13, preserves a separate reidentification rule, and uses B.3.5 only when assurance grounding is current.Adopt. The demand for explicit applied choices is adopted; A.1 rejects the shortcut that a constructional-ontology label already settles constituents, parthood, whole identity, or warrant.
Deutsch, Constructor Theory, 2012, and Deutsch and Marletto, “Constructor theory of time”, 2025, treat possible transformations through substrate attributes and constructor conditions rather than through a written task alone.A.1's larger-assembly component requires the candidate's actual boundary, interfaces, relevant characteristics, and identity-preservation conditions to satisfy the applicability and compatibility conditions of a governed construction method or rule.Adapt. The modal discipline is adopted for candidate recognition; a task, rule episteme, drawing, or evidence item does not create applicability, compatibility, possibility, work, or assembly.
Partridge, BORO Ontology, C-FORS 2025, supplies a current 4D extensional and unrestricted-composition comparator.A.1 makes identity through change and actual construction explicit, while using A.14 and C.13 before relying on a part-whole claim.Reject wholesale; retain the identity test. A.1 rejects unrestricted composition and import of BORO's category system, while retaining pressure to state the exact candidate, extent-sensitive reidentification, and construction facts.

For the Pump #37 and scientific-theory cases in A.1:5, the practical consequence is the same: recover the candidate and its subject-side construction first; use a governed method or rule only to test larger-assembly compatibility; keep evaluation, evidence, assertion, description, and publication as separately governed neighboring objects.

Treat a stronger source as current only when it changes the root split among U.Entity, U.Holon, U.System, admitted holon kinds, delimitation, boundary crossing, or publication-form separation. A new tool, notation, or diagram style is not enough unless it changes that ontology-side claim.

Relations

  • Builds on: E.24.UK for one-time public U-kind admission, A.14 and C.13 for exact part relations and constructive assembly, and B.3.5 when Working-Model assurance grounding is current.
  • Coordinates with: A.15.1 for dated classification work; A.6.1 for a current typed evaluation operation and actual bindings; C.2.1 for classification-assertion or evaluation-result episteme identity; A.10 and B.3 for evidence and warrant; G.11 for assertion-edition currentness; B.2 for the separate whole-reidentification question; A.1.1 for bounded model-use structure; A.22 for selected structure; C.30 for architecture; A.3.4 for transformation; C.20 for discipline; and E.10.ARCH for wording-use restoration.
  • Used by: patterns that need an exact recognized holon, an already admitted holon kind, an acting system, a non-agentive episteme, a grounded part-whole claim, a collection-versus-collective distinction, a delimitation relation, or a boundary-crossing relation.

A.1:End

Bounded Model-Use Structure and DDD Bounded-Context Recovery

Type: Part A architectural ontology pattern Status: Stable Normativity: Normative unless marked informative

Practitioner entry

Working reader and current decision. This pattern is for a domain architect, systems engineer, or service owner deciding whether several facts about one model must be treated together for the next engineering move. The reader starts from that decision—change scope, release scope, ownership boundary, integration boundary, or whether two uses belong together—not from a team name, repository, diagram, or the word context.

Governed object in plain language. A.1.1 governs the selected organization of where one exact model applies, how it is actually used in assigned Work, and whether concrete expressions still agree with it. The Tech name is BoundedModelUseStructure; the familiar Plain retrieval name is bounded context. It is a U.Structure, not a container for systems, teams, Work, documents, or publications.

First useful move — take the smallest branch.

  1. Name one exact model edition and one exact place or thing about which it is used.
  2. Ask what the present decision needs. If applicability alone answers it, recover ModelApplicabilityRelation and stop. If actual use is current, recover the exact role assignment, performed Work, and ModelUseRelation and stop. If maintained expression content is current, recover the fixed model content, fixed expression content, declared coherence predicate, and comparison scheme, then decide ModelExpressionCoherenceRelation and stop.
  3. Recover the remaining direct relations only when their joint organization changes the decision. Select BoundedModelUseStructure only then.
  4. Keep every boundary crossing separate. A proposed source, target, direction, required fit, permitted loss, and claim scope is useful planning content, but it is not an occurrence and cannot identify either endpoint structure.

First-minute success case. A press-control team must decide whether a controller-code change may be handled as a local code edit or must enter the independently governed release review together with model applicability and operating use.

  1. PressControlModel-5 is the exact claim-bearing model edition, Press-3 is the use locus, and the model applies within SafetyControlClaimScope; this is one ModelApplicabilityRelation occurrence.
  2. Exact F.6 performedUnderAssignment(PressOperationWork-91, OperatorAssignment-8) obtains. The assignment holder actually uses PressControlModel-5 during that Work concerning Press-3; this is one ModelUseRelation occurrence.
  3. ControllerImplementsControlModelPredicate checks the fixed contents of PressControlModel-5 and PressControllerCode-17 under PlantControlReferenceScheme. It returns true, so one ModelExpressionCoherenceRelation occurrence obtains. The predicate is the test value, not the occurrence or an evaluation procedure.
  4. Because independently governed PlantReleaseRule-3 needs model applicability, operating use, and fixed-content coherence together when each is material, select their organization and present those three facts jointly to the release review. This selection supplies the review's subject matter; it neither requires the review nor authorizes release.
Named selection-use frameExact questionAdmissible actionNearest non-admissible overread
PressControlReleaseFrameMust this change be considered as code alone, or together with current applicability, operating use, and fixed-content coherence?Give the three exact occurrences and applied constraints as the joint subject matter of the independently governed release review.Neither A.1.1, the selected structure, nor the engineer gains authority to require review or authorize release.

This row names the selection-use frame reconstructed in the full assurance replay in section 5.1; the first-minute action does not require unpacking its A.22 identity proof. If the decision asked only whether the model applies to Press-3, stop after step 1. If PlantReleaseRule-3 were absent or did not require the three facts together, stop at the direct relations: the structure grants no review obligation. No crossing is asserted.

Three quick recognition situations.

SituationFirst direct resultWhen the structure becomes current
Industrial controlApplicability, assigned-Work use, or fixed-content coherence for one control model and machine.Their exact three-relation organization, exact applied constraint claims, and a filled selection-use frame change an engineering decision.
Clinical and billing terminologySeparate F.6 attributions, A.1.1 use occurrences, and A.2.6 scopes for diagnosis and billing Work.Each positive structure has its own complete three-relation organization, applied constraints, and selection-use frame; a shared model does not merge them.
Published classification modelActual assigned-Work use of one published model concerning an organization.Applicability, use, coherence, constraints, and one classification-use frame jointly change the classification decision; publication alone is insufficient.

Short glosses. A model episteme is one exact claim-bearing model edition. A model-use holon is one already admitted system or other concrete whole about which the model applies or is used; it is not a context container. Work (U.Work) is one exact dated doing, not its method, plan, or result. A claim scope (U.ClaimScope) is the set-valued boundary of context slices for one claim. A relation occurrence is a world-side relation actually obtaining under its predicate; an assertion, name, or diagram does not create it. A reference scheme is the interpretation basis for claim content. A structure here is a selected organization of already governed constituents, obtaining relations, applied constraints, and one exact selection-use frame; it is not another whole.

Adoption test. After applying A.1.1, name the exact organization that changes the present decision and the nearest overread that remains unavailable. If either is missing, stop at the direct relation or direct owner.

Names for retrieval. The Plain label is bounded context and the Tech label is BoundedModelUseStructure. F.18 and F.17 own their designation history, public row, lineage, and refresh evidence; A.1.1 keeps only the names needed to apply this pattern. Authors MUST NOT publish U.BoundedContext as a U-kind. The retained labels create neither a structure individual nor any applicability, use, coherence, or crossing occurrence.

Problem frame

Use this when. Use this pattern when a current decision depends on the organization of three distinguishable facts about one exact model edition: where it applies, how it is actually used in assigned Work, and whether maintained expression content remains coherent with it. Physical location, team ownership, a document title, or the word context is not enough.

First useful move. State the decision, model, and use locus; recover only the direct relation that answers the question and stop when it suffices. Select the wider structure only when several already governed relations, applied constraints, and one exact selection-use frame together change the decision.

What goes wrong if missed. Systems, Work, epistemes, and publications are merged into a context-shaped proxy. One subsystem under two models is treated as one context by location, while one model used coherently across several loci is split by an implementation boundary. Local vocabulary, rules, units, status, or evidence use is also forced into a context object even when a direct semantic-locality owner answers the question.

What this buys. Actual participants retain their identities. Applicability, use, and fixed-content coherence remain inspectable direct relations; their decision-relevant organization can be selected as U.Structure; and ordinary semantic locality is returned to its exact value, relation, and governing pattern.

Not this pattern when. If only a term sense, role value, rule or invariant, admissible inference, unit or measurement basis, status, evidence use, claim scope, description, publication, or direct relation is current, use the A.1.1:4.4 triage and stop at that direct result. Do not select BoundedModelUseStructure unless the relation organization itself changes the decision.

Problem

DDD bounded-context practice couples several real concerns: a model is defined and applicable within a boundary; actual systems in assigned roles use it; code and descriptions contain expressions of it; integration and maintenance work aims to keep those expressions consistent; and maps describe relationships among model uses. These are practical prompts to recover exact FPF claims, not evidence that maintenance caused coherence or that a described crossing obtains. Their objects are related, but they are not parts of one additional whole by that fact.

FPF needs this joint model-use relation organization selectable as U.Structure so it can serve as EntityOfConcern for comparison and maintenance work without becoming a heterogeneous holon, a description, or one universal semantic-locality reference.

Forces

ForceTension
Actual loci vs selected organizationSystems, work, teams, and epistemes keep direct identities, while their model-use relations may need treatment as one structure.
Model applicability vs semantic localityA model-use boundary can change the next engineering move; ordinary local meaning often needs only a reference scheme, scope, or governing episteme.
One subsystem vs several modelsPhysical or organizational location does not distinguish two competing model organizations over the same subsystem.
One model vs several lociA coherent model use can span several actual loci when one applicability, actual-use, and model-expression-coherence organization relates them.
Structure vs holonA selected relation organization is useful without claiming that its substrates are parts of another whole or pass a meta-holon transition.
World-side use vs descriptionA boundary description can be stale or absent while actual applicability, use, and model-expression-coherence relations continue.
Source vocabulary vs FPF kindsDDD uses context, mapping, and map as practice terms; FPF must recover method, structure, view, publication, and actual participants separately.

Solution

Recover the Plain bounded context as one BoundedModelUseStructure, governed as a U.Structure. Identify it from one exact model episteme, exact already-admitted model-use holons, the selected organization of obtaining model-applicability, actual model-use, and fixed-content model-expression-coherence occurrences, exact applied constraint claims used by the selection judgment, and one exact selection-use frame. Each U.ClaimScope remains only a participant of its selected ModelApplicabilityRelation; a separate applied constraint claim may refer to that scope or its A.2.6 membership predicate. A bare scope, slice, membership outcome, boundary display, or carrier enters no A.22 discriminator. No boundary crossing participates in this identity. A later model edition has another C.2.1 episteme identity; continuity across it additionally requires exact EpistemeEditionRelation(earlierModelEpisteme, laterModelEpisteme) and the A.1.1 continuity rule.

Select structure, not another holon

Use the four A.22 identity discriminators. The following sketch is a description of the selected organization, not the structure itself and not a relation signature:

BoundedModelUseStructure : U.Structure
  exact constituents:
    one selected model episteme
    exact admitted model-use holons
  exact selected obtaining relations:
    ModelApplicabilityRelation occurrences
    ModelUseRelation occurrences
    ModelExpressionCoherenceRelation occurrences
  exact applied constraint claims used by the selection judgment:
    one exact C.2.1 constraint proposition may refer to a U.ClaimScope or its A.2.6 membership predicate
    other exact applicability, coherence, release, or use-rule constraint propositions applied here
    no bare scope, slice, membership outcome, boundary display, or carrier episteme
  one named selection-use frame:
    exact question
    admissible action or stop
    nearest non-admissible overread

A selection-use frame is this exact three-part plain value; it is not a new kind, card, or record. A phrase such as current use, appropriate structure, or bounded-model-use frame does not fill it. Changing the question, admissible action, or nearest overread changes that identity discriminator.

The structure depends on its constituents and selected relation organization. It is not a holon whose parts are the substrate systems, Work, methods, or epistemes. Their identities, direct part relations, and any construction or whole-reidentification questions remain separately governed.

Recover the direct relations

A.1.1 states each direct predicate and its occurrence-identity rule. An obtaining occurrence is an instance of a relation kind already admitted under U.Relation; its existence does not depend on a project deciding to expose it. A named receiving use may justify explicit individuation and reference under A.6.REL. A reusable RelationSignature episteme declares the participant SlotSpecs. An assertion or occurrence description may designate the actual participants by value or reference. Each table below is a readable presentation of one signature declaration. Its rows and cells are neither relation participants nor occurrences; they make neither the relation predicate true nor a relation occurrence obtain.

The two named temporal-extent ValueKinds below are local to A.1.1, not U-kinds. They can type a temporal extent stated in an assertion or occurrence description; they are not participant ValueKinds in either RelationSignature. For ModelApplicabilityRelation and ModelUseRelation, the direct obtaining history determines the maximal continuous extent used by the occurrence-identity rule. A filled assertion may state an open or closed extent, but that epistemic statement makes neither the relation predicate true nor a relation occurrence obtain and supplies no additional world-side participant.

Local ValueKindBoundary and continuity semantics
ModelApplicabilityIntervalThe maximal interval during which one fixed model episteme remains applicable to one fixed holon under one fixed claim scope, interpreted by that model episteme's own effective reference scheme.
ModelUseIntervalThe maximal interval within one fixed work occurrence for which exact F.6 performedUnderAssignment(work, assignment) obtains, during which that assignment's holder actually uses one fixed model concerning one fixed use-locus holon.

For these two temporally varying relation kinds, continued obtaining extends the same open occurrence; a demonstrated gap ends it, and later resumption begins another occurrence. ModelExpressionCoherenceRelation instead has the participant-determined identity declared below: it has no temporal-extent discriminator. Revising an assertion changes the episteme, not any world-side occurrence.

ModelApplicabilityRelation. Its participants are one model episteme, one exact holon, and one declared claim scope. Its predicate asks whether that model applies to that holon over the exact U.ContextSlice values delimited by that scope. The model episteme's C.2.1 effective reference scheme supplies the interpretation basis; it is not a fourth participant.

SlotKindValueKindrefModeParticipant meaning
ApplicableModelEpistemeSlotU.EpistemeU.EpistemeRefThe model episteme whose distinctions and predicates are applied.
ModelApplicabilityHolonSlotU.HolonU.HolonRefThe exact holon about which the model is applicable.
ApplicabilityClaimScopeSlotU.ClaimScopeByValueThe scope whose A.2.6 member(slice, scope) predicate delimits the claim.

Well-formedness constraint WF-A1.1-APP. ModelApplicabilityRelation(M,H,S) obtains exactly when S is the model-declared applicability scope or scopeSubset(S, modelDeclaredScope(M)), both scope expressions are interpreted under effectiveReferenceScheme(M), and the model's declared applicability conditions hold for H over every slice x for which member(x,S) is true. coversSet(S,T) applies only when T is an exact finite ContextSliceSet.

When S imports a local sense from another semantic setting, the interpretation branch exists exactly when the source and receiving F.17 SchemeSenseCell values are resolved and an F.9 Bridge obtains in the source-to-model orientation. Different schemes, shared spelling, or a Bridge Card does not establish that branch.

Well-formedness constraint WF-A1.1-APP-USE. A positive applicability assertion or structure selection that relies on the imported branch is admissible only when a separate current C.2.1 claim affirmatively states that the Bridge is suitable for this named scope-comparison use, direction, rule, and loss tolerance. For a use below the B.3 material-reliance threshold that makes no assurance claim, the same use must have an exact A.10 evidence-provenance graph relation with RelianceDisposition=pass. If an assurance claim is made or the threshold is met, a current positive B.3 assurance claim must carry the same bounded use and have a sufficient minimum reliance safety assurance record.

Use guidance. If the Bridge, bounded-use claim, or selected reliance branch is missing, return respectively missing claim-scope interpretation bridge, missing claim-scope interpretation use claim, or missing claim-scope interpretation reliance. These stops block the receiving assertion or selection; they do not make an otherwise obtaining Bridge false. Any membership judgment, operation application, assertion, or Work remains under A.2.6, A.6.1, C.2.1, or A.15.1.

The occurrence is reidentified from the actual identities of the model episteme, holon, and claim scope together with the derived maximal continuous ModelApplicabilityInterval. Repeating the model's effective scheme adds no independent discriminator. ModelUseRelation. Its participants are one exact role-assignment occurrence, one model episteme, one performed Work occurrence, and one exact use-locus holon. Its predicate is actual use of that model content by the assignment holder while that system performs the same Work concerning that holon.

SlotKindValueKindrefModeParticipant meaning
ModelUserRoleAssignmentSlotU.RoleAssignmentU.EntityRefThe role-assignment occurrence paired with the Work by exact F.6 performedUnderAssignment.
UsedModelEpistemeSlotU.EpistemeU.EpistemeRefThe model episteme whose content is actually used.
ModelUseWorkSlotU.WorkU.WorkRefThe performed Work in which use occurs.
ModelUseLocusHolonSlotU.HolonU.HolonRefThe exact holon concerning which the model is used.

Well-formedness constraint WF-A1.1-USE. ModelUseRelation(A,M,W,H) obtains exactly when F.6 performedUnderAssignment(W,A) obtains and HolderSystem(A) actually uses the content of M while performing W concerning H. The holder system is derived, not copied as a fifth participant. A method, if current, remains related to W under A.3.1.

The occurrence is reidentified from the four participant identities and the derived maximal continuous ModelUseInterval. A useful probe holds those participants fixed and asks whether a relevant model-content change can change how the Work is performed; availability or mention alone is not actual use. Scope delimitation is not another direct relation kind here. The U.ClaimScope participating in ModelApplicabilityRelation is a set-valued scope over U.ContextSlice; A.2.6 governs its primitive membership predicate. A membership assertion or an evaluation result is an episteme about that predicate. Neither creates a separate delimitation occurrence.

Local predicate-value declaration. ModelExpressionCoherencePredicate is an A.1.1-local ValueKind, not a U-kind and not an evaluation procedure. A by-value candidate belongs to this kind only when it declares (1) the ordered model-content and expression-content input meanings, (2) the exact comparison domain and local senses, (3) a Boolean truth condition, (4) the treatment of required congruence and permitted loss, and (5) every dependency whose absence makes application stop rather than return false. Two predicate values are identical exactly when those five by-value components are identical. A changed input meaning, domain, truth condition, congruence or loss rule, or dependency identifies another predicate value; a changed label, evaluator, evidence set, result episteme, representation, or publication does not. A label or procedure lacking the complete five-part declaration is not a member.

ModelExpressionCoherenceRelation. Its participants are one exact model episteme, one exact expression episteme, one by-value criterion admitted as ModelExpressionCoherencePredicate, and one exact U.ReferenceScheme used as the comparison basis.

SlotKindValueKindrefModeParticipant meaning
CoherenceModelEpistemeSlotU.EpistemeU.EpistemeRefThe model episteme whose fixed claims supply one side.
CoherentExpressionEpistemeSlotU.EpistemeU.EpistemeRefThe expression episteme assessed against that model.
ModelExpressionCoherencePredicateSlotModelExpressionCoherencePredicateByValueThe admitted five-part criterion value; its label, evaluator, result, or evidence cannot substitute for it.
ModelExpressionCoherenceReferenceSchemeSlotU.ReferenceSchemeByValueThe shared scheme or the receiving comparison basis used by the admitted bridged branch.

Well-formedness constraint WF-A1.1-COH. ModelExpressionCoherenceRelation(M,E,P,R) obtains exactly when either (a) R equals the C.2.1 effective schemes of both epistemes, or (b) P resolves every differing source and receiving F.17 SchemeSenseCell pair and names an obtaining F.9 Bridge for each required correspondence; and, after that semantic branch is established, the fixed predicate value P returns true for the fixed claim contents of M and E under R. An unresolved cell, missing Bridge, shared spelling, common label, Bridge Card, or mere interpretability establishes no bridged branch.

The Bridge profile carries relation semantics only. Comparison direction, use-specific rule, permitted loss, and reliance belong to the separate bounded-use claim and reliance path.

Well-formedness constraint WF-A1.1-COH-USE. A receiving assertion or structure selection that relies on a bridged coherence occurrence is admissible only when a separate current C.2.1 claim affirmatively states that the Bridge is suitable for this fixed-content comparison use, direction, rule, and loss tolerance compatible with P. For a use below the B.3 material-reliance threshold that makes no assurance claim, the same use must have an exact A.10 evidence-provenance graph relation with RelianceDisposition=pass. If an assurance claim is made or the threshold is met, a current positive B.3 assurance claim must carry the same bounded use and have a sufficient minimum reliance safety assurance record.

Use guidance. Return missing model-expression interpretation bridge, missing model-expression interpretation use claim, or missing model-expression interpretation reliance for the corresponding missing condition. A use stop does not make the Bridge or predicate false and does not erase or reidentify an otherwise obtaining coherence occurrence. Comparison Work, an assertion episteme, and an A.22 selection use remain separate.

One occurrence is participant-determined by <M,E,P,R>; it has no temporal-extent discriminator and no later recurrence for the same tuple. Changed claim content identifies another episteme and tuple. Changed predicate value or comparison scheme likewise changes the tuple. Changed evidence, bounded-use claim, reliance result, card, publication, evaluator, or timestamp does not. Maintenance remains one separate dated Work individual admitted under U.Work, performed by an admitted system under an exact obtaining U.RoleAssignment. Its affected-referent, resource, parameter, premise, method-enactment, and operation-application facts use their direct relations or A.6.1 bindings. C.2.1 identifies any report or repaired episteme separately; only an exact A.15.PROD entity-inception claim may relate that episteme's first existence to the performed maintenance. An admitted system under an exact obtaining role assignment may separately perform evaluation Work. C.2.1 identifies any result episteme asserting whether the coherence predicate holds, and only its exact A.15.PROD inception basis may relate its first existence to that performed Work. Neither that result episteme nor its provenance is the coherence occurrence. Failed maintenance work remains actual work even when the changed episteme tuple has no obtaining coherence occurrence.

BoundedModelUseStructure selects obtaining participant-determined ModelExpressionCoherenceRelation occurrences. Maintenance methods and Work remain separate objects even when they change the receiving decision; if their organization must itself be selected, that is a distinct A.22 structure and does not enter this bounded-model-use identity.

Coherence-work stress cases. Coherence can obtain before any selected maintenance episode. Successful maintenance that leaves both episteme identities fixed leaves the same participant tuple; maintenance that changes expression claim content gives another C.2.1 episteme and a different tuple to evaluate. Failed maintenance may leave a changed expression episteme and a separately identified evaluation result while the new tuple has no obtaining coherence occurrence. Automated integration work and non-software maintenance use the same separation among fixed-content correspondence, work, result, evaluation, evidence, and provenance.

Occurrence-identity stress case. Exact F.6 performedUnderAssignment(InspectionWork-42, InspectorAssignment-17) obtains, and its holder Robot-7 uses DefectModel-3 concerning Pump-6 during that work. An observation at 10:00 supports continued obtaining of the same occurrence whose ModelUseInterval began at 09:00 and remains open; it does not create another occurrence. If model use demonstrably stops at 10:15 and resumes at 10:30 during the same work occurrence and assignment attribution, the resumption begins a second model-use occurrence. Correcting an assertion's timestamp without evidence of a world-side gap changes only that assertion.

Use guidance — unsupported crossing. First identify both endpoint BoundedModelUseStructure values without the crossing and state source, target, direction, required fit, permitted loss, and claim scope. Well-formedness constraint WF-A1.1-CROSS. A positive cross-structure member exists only when a current direct pattern supplies compatible endpoint SlotKinds, an obtaining crossing predicate, an occurrence-identity rule, and all four A.22 discriminators; the proposal, F.9 sense Bridge, label, diagram, or card supplies none of them. Otherwise preserve the six-part proposal, omit it from both endpoint identities and every positive cross-structure member, and return missing CROSS-LOCALITY-BRIDGE governor.

A.1.1 is the direct governing pattern for these three relation kinds. A.6.0 governs their RelationSignature epistemes, A.6.5 governs the SlotSpecs inside those declarations, and A.6.REL governs progressive explicit individuation. A.2.6 separately governs claim-scope membership. BoundedModelUseStructure is the selected organization of the resulting occurrences under those scope values; no context record copies their participants.

Use the settled public relation names

The direct definitions, SlotSpecs, obtaining constraints, and occurrence-identity rules above govern the three relation kinds. A.1.1 uses only the settled Tech labels and their shortest Plain relation sentences:

Tech labelPlain relation sentenceNearest non-use
ModelApplicabilityRelationthis model applies to this holon within this claim scopenot scope membership, an applicability assertion, or the derived interval
ModelUseRelationthis assignment's holder uses this model during this Work concerning this holonnot availability, method application, Work, assignment, or a use record
ModelExpressionCoherenceRelationthis model content and this expression content satisfy this declared coherence criterion under this comparison schemenot maintenance, implementation, evaluation, evidence, or the predicate value itself

F.18 and F.17 carry candidate-name history, public-row state, lineage, and refresh evidence. Those naming epistemes create neither a relation kind nor an obtaining occurrence, assertion, Work, interval, or structure. ModelExpressionCoherencePredicate remains an A.1.1-local five-part criterion ValueKind; it has no public F.17 row unless a later durable naming use independently reopens F.18.

Identify continuity through model use

At one observation time, the structure has the four A.22 discriminators:

  1. exact independently identified constituents—the selected model episteme and admitted model-use holons;
  2. exact selected obtaining applicability, use, and coherence occurrences;
  3. exact applied constraint claims used by this selection, each with a recoverable proposition and C.2.1 identity; a claim may refer to one U.ClaimScope or its membership predicate, but the bare scope, membership outcome, boundary display, or carrier is not this discriminator; and
  4. one exact named selection-use frame containing its question, admissible action or stop, and nearest non-admissible overread.

No crossing or proposed six-part crossing record enters those discriminators.

At a later observation time, reidentify the same structure only when every continuing constituent is reidentified under its direct rule; any replacement model is connected by exact C.2.1 EpistemeEditionRelation and admitted by the declared continuity rule; every continuing relation occurrence retains its direct identity; every replacement occurrence is explicitly admitted; and all four A.22 discriminators remain the same under that rule.

The continuity rule therefore compares the exact constituents, selected occurrence organization, exact applied constraint claims, and the complete selection-use frame. A changed constraint proposition reopens the third discriminator; changing only a membership assertion, boundary rendering, carrier, or evidence about an unchanged constraint claim does not. A changed question/action/overread frame reopens structure identity even when every substrate and relation occurrence remains unchanged. A changed page, wording, rendering, carrier, description edition, or publication does not. File history, edition labels, publication order, a shared name, or membership in an edition collection establishes neither EpistemeEditionRelation nor bounded-model-use continuity; A.14 governs any separately selected collection of editions.

Missing evidence creates uncertainty about a continuity claim; it does not by itself end a world-side relation or structure. Any selected substrate holon may separately participate in a larger whole under A.14 and C.13; that is not parthood of BoundedModelUseStructure.

Resolve semantic locality through direct values and relations

When the question is local meaning rather than joint model-use organization, recover the smallest direct result and stop:

Exact practitioner questionDirect governed resultGoverning patternStop or nearest overread
What does this term or predicate mean here?one exact claim-bearing episteme, its C.2.1 effective U.ReferenceScheme, and the needed F.17 SchemeSenseCell valuesC.2.1 and F.17spelling or a broad domain label supplies no sense
Over which slices is this claim made, and which slices belong?one U.ClaimScope and its A.2.6 member(slice, scope) factsA.2.6do not replace scope with a context or structure
Which role value is assigned, to whom, and when?First recover one obtaining U.RoleAssignment: its holder system, exact U.Role value, role-taxonomy episteme, and effective reference scheme. If the question also needs a reportable time, recover a separate assignment assertion or occurrence-description episteme whose content states the currently known AssignmentInterval.A.2 and A.2.1; A.2.7 only for an independently current role-relation questionthe interval is not a fifth participant, does not make the assignment obtain, and does not replace uninterrupted-obtaining occurrence identity; an organizational title supplies no assignment
Which rule, policy, invariant, or inference is local?one C.2.1 episteme with the exact ClaimGraph and effective scheme, the A.2.6 claim scope, and the truth or admissibility predicate owned by the direct subject patternC.2.1, A.2.6, and that direct subject or predicate patternif no direct predicate owner can state when the rule or inference holds, preserve the claim and stop; do not globalize it
Which unit or measurement reading is local?one C.16 measurement basis naming bearer, characteristic, scale, coordinate or level, U.Unit when applicable, polarity, and evidence stubC.16a unit label or dashboard value alone is not a comparable measure
How is an episteme used as evidence, or how is a status consumed?the exact episteme or status bearer, target claim, scope, polarity or status value, relevance window, provenance constraint, and intended useA.2.4 and A.10 for evidence use; F.10 for status family and status use; B.3 only for assurancea badge, report, status word, or publication supplies no permission, gate passage, or assurance
Can a field, department, technology, or shared spelling choose the local semantics?no; restate the live question and recover its exact model-use structure, scheme and sense cells, role value or assignment, rule or status, or Bridge from the corresponding row abovethe direct owner selected by that questionthe broad label selects none of those values or relations and supplies no authority to reuse them
Which admitted holon grounds a description's empirical claims?one exact C.2.1 EpistemeEmpiricalGroundingRelationC.2.1a reference field or selected structure supplies no grounding occurrence
Does one joint model-use organization change this decision?an independently selected BoundedModelUseStructure with all four A.22 discriminatorsA.1.1 and A.22omit modelUseStructureRef when one direct value or relation answers the question

For movement between local meanings, resolve the exact source and receiving F.17 sense cells and then apply F.9. An obtaining Bridge states correspondence between those readings; the separate bounded-use claim states direction, rule, and tolerance, and A.10 or B.3 governs reliance. The Bridge is not the rule, unit, status use, inference, or receiving action.

If a direct owner still asks for a generic U.BoundedContext or BoundedContextRef instead of the exact values above, do not fabricate that participant. Preserve the exact value or relation already recovered and stop at the owner's unresolved interface. The transfer is not complete merely because A.1.1 names a destination.

Heterogeneous semantic-locality replays

Hospital operating-room replay. No context holon is created.

DistinctionDirect move and first result
Local vocabularyC.2.1 identifies the operating-room policy episteme and its effective scheme; F.17 resolves the local senses of case, time-out, and independent auditor.
Local rule and inferenceA C.2.1 claim episteme states the surgeon/auditor incompatibility rule within the exact surgical-case claim scope. A.2.1 supplies the actual SurgeonAssignment-12 and candidate IndependentAuditorAssignment-13; exact F.6 performedUnderAssignment(SurgicalCaseWork-42, SurgeonAssignment-12) establishes the current Work attribution. When the same-holder incompatibility predicate holds, A.2.7 recovers the obtaining RoleIncompatibilityRelation but performs no check and rejects nothing. SurgicalAdmissionService-4 : U.System applies IndependentAuditorAdmissionMethod-3 : U.Method to those assignment occurrences in dated AuditorAdmissionCheckWork-43 : U.Work; the receiving admission method's result episteme AuditorAdmissionCheckResult-43 records reject. The rule is not global.
Evidence and status useA sterility-audit episteme is used for one named claim only through A.2.4/A.10 with scope, polarity, window, and provenance. A Ready status is separately typed by F.10 for its exact target and use; neither item grants release permission or assurance.
Cross-setting approximationFirst ask whether the local meanings correspond at all. OperatingRoomCaseSenseCell means one surgical episode governed by the operating-room policy; BillingCaseSenseCell means one billable service record. In this replay, OperatingRoomCaseBillingBridge obtains under F.9 as an exact Partial-overlap relation between those cells, independently of any coding use. Separate C.2.1 claim HospitalCaseCodingUseClaim proposes coding the named surgical episode as one billable service record; its content names the operating-room-to-billing direction, a rule requiring the same patient, encounter, performed procedure, and date, a tolerance that permits omission of internal time-out and auditor-assignment detail from the billing record but no patient or procedure change, affirmative polarity, and HospitalCodingScheme-2026 as the effective scheme. A.10 or B.3 states separately whether current reliance on that proposition passes. If a later claim says coding occurred, recover the exact coding Work and resulting billing assertion, publication, or operation application under their direct owners. A different operating-room-to-staffing sense pair needs its own Bridge profile and use claim. Changing only either use claim leaves the Bridge identity unchanged; neither the Bridge nor passing reliance performs or authorizes the action.

This replay selects no BoundedModelUseStructure unless one exact model's applicability, assigned-Work use, fixed-content coherence, applied constraints, and selection-use frame also become current.

Two further retained uses.

Prior useDirect replay without a context holonStop
Special relativityC.2.1 and F.17 identify the selected theory-edition episteme, effective scheme, postulate and inference senses; a later theory edition has another C.2.1 episteme identity and needs exact EpistemeEditionRelation for a continuity claim; A.2.6 scopes the claim; C.16 carries units and measurement readings; A.2.4/A.10 carries evidence use; F.10 carries any current status use. F.9 identifies only the exact low-speed semantic correspondence between the selected relativistic-reading and Newtonian-reading sense cells. A separate C.2.1 bounded-use claim proposes interpreting specified relativistic low-speed readings with the named Newtonian approximation rule, in the relativistic-to-Newtonian direction, within a stated velocity and error tolerance, with explicit polarity and effective scheme; A.10 or B.3 states only whether current reliance on that proposition passes. If a later claim says the approximation occurred, recover its exact inference or operation application, any comparison Work, and the result claim episteme under their direct owners; absent those objects, no approximation has happened.No theory truth, edition continuity, global equivalence, inference permission, or approximation use follows from the label relativity, the Bridge, the bounded-use claim, or passing reliance alone.
FPF pattern qualityStart with the bearer and evaluation frame under C.16.Q. For example, first-use affordability of this exact pattern edition for a named practitioner and task is the E.21 UseAffordabilityAndApparatusProportionality coordinate, not a free quality label. C.2.1 identifies the pattern edition and any separately authored PatternQualityEvaluation result episteme; E.21 governs that evaluation record, its coordinates, and declared use; A.2.4/A.10 governs evidence use and F.10 any status use. If bare quality is still ambiguous, C.16.Q first distinguishes pattern quality from a product-reliability characteristic or C.25 bundle, a C.16 manufacturing-yield characteristic and measurement, B.3 safety assurance, a service-satisfaction characteristic or bundle, and ordinary praise. Resolve exact senses before any F.17/F.9 cross-scheme relation; a Bridge, bounded-use claim, and reliance path neither compare nor reuse the evaluation by themselves.The word quality supplies neither a bearer, evaluation frame, shared characteristic, evaluation result, assurance claim, manufacturing-yield reading, nor cross-setting substitution.

Keep descriptions and publications separate

A bounded-context description is a U.Episteme. Under its C.2.1 declaration, the description's entityOfConcernRef designates the exact EntityOfConcern named by the description's claims. EntityOfConcernSlot is the SlotKind in that declaration; it does not itself point to the world-side object. A meta-description designates that description episteme through ordinary C.2.1 recursion.

When a description claim needs empirical grounding, recover one exact C.2.1 EpistemeEmpiricalGroundingRelation between the description episteme and the admitted grounding holon. GroundingHolonSlot is only the signature-local participant meaning in that relation's declaration; a groundingHolonRef in a card or description merely designates the participant and does not make the relation obtain. The selected structure cannot fill that participant because it is not a holon. Viewpoint, claim scope, effective reference scheme, publication use, rendering, and presentation carrier remain separately governed.

A stale description has another episteme edition or an obsolete currentness claim. Neither condition by itself changes the model-use structure or its world-side relations.

Recover DDD context mapping by direct object

Start with three questions: what reusable way of mapping was used, what work actually happened, and what claim-bearing product resulted? Identify that product under C.2.1. Call the same episteme a view only after it passes one exact E.17.0 viewpoint-conformance test. Keep the relation structure it describes and every diagram, page, or publication separate.

DDD source term or useFPF object
Bounded Context when the joint model-use organization changes an engineering moveBoundedModelUseStructure, governed as a U.Structure
subsystem at the boundarythe exact existing U.System under its direct pattern
work performed by a team system at the boundaryone exact dated Work individual admitted under U.Work, the performer U.System, its exact obtaining U.RoleAssignment, and the F.6 performedUnderAssignment attribution
code base or database schema at the boundaryfirst classify the exact referent: claim-bearing code or schema content is a C.2.1 episteme; a repository, file, publication form, or carrier stays under its direct representation, publication, or carrier pattern; a deployed database or software organization stays a U.System or selected U.Structure under its direct owner; the source phrase supplies no common kind
bounded-context boundary descriptionU.Episteme whose C.2.1 EntityOfConcern reference designates the exact referent named by its claims
Context Mapping as a reusable way of doingU.Method; any work plan, performed mapping work, evaluation work, and evaluation result remain separate
relations among several bounded contextsconditional A.22 membership for one already identified U.Structure, available only after independently governed exact obtaining crossings are selected among several bounded model-use structures and all four A.22 base discriminators are established; A.22 retains a local pending label for this rule but F.17 publishes no public cross-structure term
candidate product called Context Mapone independently identified C.2.1 episteme whose EntityOfConcern is the proposed or described crossing organization while a direct crossing governor or A.22 base identity is missing; only after both are established may a corresponding episteme designate the exact structure admitted by A.22's conditional cross-structure rule; either episteme has dependent U.View membership only when exact E.17.0 EpistemeViewpointConformanceRelation obtains
visual or interactive expression and availability of an already admitted Context Map viewany C.29 representation and correspondence, rendering work, publication occurrence, publication form, and U.PresentationCarrier remain separate under their direct patterns

Code/schema split. Start from the exact claim, not the source phrase. Claim-bearing source-code or schema content such as PressControllerCode-18 is a C.2.1 episteme with an exact EntityOfConcern and effective scheme. A repository, file, publication form, or presentation carrier that bears that content remains under its direct representation/publication/carrier pattern. A deployed controller, database, or software organization remains an actual system or selected structure under its direct owner. The phrase code base or database schema grants none of those identities and never supplies one universal kind.

Positive case: the fixed claims expressed by PressControllerCode-18 participate as the expression episteme in ModelExpressionCoherenceRelation. Near misses: PressControllerRepository-2 is only the repository or carrier being referred to, and DeployedPressDatabase-4 is the deployed database system or structure. Neither near miss may fill an episteme participant merely because source practice calls it a code base or schema.

This dispatch table is a reading aid for selecting the governing FPF object and pattern. Only that direct pattern supplies object identity, relation obtaining, or dependent-kind membership. If a separately current claim says that the candidate episteme first existed through the performed mapping Work, apply A.15.PROD only to that exact local inception claim. If an earlier episteme participates as source, use C.2.P to recover the exact source expression and route the source-use relation to its direct governor. Evaluation Work and any result episteme remain separate. None of those facts, and no product name, representation, rendering, publication occurrence, form, or carrier, grants U.View membership.

FPF Map remains the mapping-method head for mapping subjects to coordinates in a declared Space. The quoted DDD product name stays a retrieval cue; by itself it grants neither dependent U.View membership, the FPF Map reading, nor identity with the structure.

BoundedModelUseStructure and A.22's conditional cross-structure rule concern different structures. First identify every bounded model-use structure from its own model, admitted holons, three direct relation families—including each applicability occurrence's exact U.ClaimScope participant—exact applied constraint claims, and named frame. A scope or membership result is not copied into the constraint discriminator. Only then may a distinct A.22 structure select several such endpoints and independently governed obtaining crossings among them. Until those crossing occurrences and all four A.22 base discriminators exist, no member of that conditional specialization is asserted and its A.22-local label remains pending. Maintenance Work remains separate from both structures. A candidate context-mapping episteme may carry claims about a proposed crossing organization without designating an exact structure. Once the direct crossing and A.22 identity exist, a corresponding C.2.1 episteme may designate that exact cross-structure and its participants without becoming any of them. Only an explicit C.29 representation may show the structure or proposal; the episteme is a U.View only after exact E.17.0 conformance obtains.

Preserve the lightweight path

Most local claims need no bounded model-use structure declaration. Name the exact current participant, semantic-locality value, role-assignment occurrence, or direct relation occurrence under its governing pattern and stop.

Select and expose BoundedModelUseStructure only when the joint organization of independently governed model applicability, actual model use, fixed-content model-expression coherence, exact applied constraint claims, and the named frame changes the next engineering move. Keep each claim scope solely in its applicability occurrence unless a distinct applied constraint proposition refers to it. If a crossing matters, open the separate A.22 cross-structure question only after its direct governor makes that exact crossing obtain between already identified endpoint structures; never add it to either endpoint identity. Recognize an episteme as U.View only after exact E.17.0 conformance. Publish that already recognized view under E.24.PUB only when a declared audience and use need it.

Archetypal Grounding

Full control-model assurance replay

The first-minute case in section 0 is enough for ordinary entry. This longer replay checks the ontology and stop conditions without turning them into the first-use path.

  1. Applicability decision. ModelApplicabilityRelation obtains among model episteme PressControlModel-5, system Press-3, and claim scope SafetyControlClaimScope. C.2.1 fixes PlantControlReferenceScheme as the model episteme's effective scheme, so it supplies the interpretation basis without becoming a fourth participant. The derived ModelApplicabilityInterval remains open while the model's declared applicability conditions hold for Press-3 over the exact U.ContextSlice values admitted by member(slice, SafetyControlClaimScope) under that scheme.
  2. Actual-use decision. Exact F.6 performedUnderAssignment(PressOperationWork-91, OperatorAssignment-8) obtains. The assignment holder is Operator-12 : U.System; that system actually uses PressControlModel-5 concerning Press-3 during the same PressOperationWork-91 : U.Work. Those four relation participants plus the derived maximal continuous ModelUseInterval reidentify one ModelUseRelation occurrence.
  3. Scope boundary. Under the A.2.6 membership predicate, EmergencyStopContextSlice belongs to SafetyControlClaimScope. This membership claim explains part of the applicability boundary; it is not another relation occurrence selected into the structure.
  4. Fixed-content coherence decision. ControllerImplementsControlModelPredicate is an admitted local predicate value. Its ordered inputs are the fixed claim contents of PressControlModel-5 and PressControllerCode-17; it returns true exactly when the code expresses every controller-command and feedback distinction required by the model, and false when a required distinction is missing. Both epistemes have PlantControlReferenceScheme as their C.2.1 effective scheme, so the relation-side comparison scheme is that same value and no Bridge is inferred. The predicate returns true for these participants, so their participant-determined ModelExpressionCoherenceRelation occurrence obtains before any selected maintenance episode.
  5. Maintenance and change stay separate.
    • Work: Engineer-4 : U.System performs ControllerCoherenceWork-22 : U.Work under exact obtaining ControllerEngineerAssignment-7 : U.RoleAssignment; exact performedUnderAssignment(ControllerCoherenceWork-22, ControllerEngineerAssignment-7) and enactsMethod(ControllerCoherenceWork-22, ControllerAlignmentMethod-2) obtain.
    • Transformation and later episteme: A.3.4 independently identifies PressControllerCodeCarrierChange-24 : U.Transformation as the bounded change of continuing PressControllerCodeCarrier-6 : U.PresentationCarrier, using the exact edit boundary, before-and-after code-expression facts, and the carrier-continuity rule. Changed claim content identifies later episteme PressControllerCode-18 under C.2.1.
    • Stop: No current FPF relation says that ControllerCoherenceWork-22 caused or realized PressControllerCodeCarrierChange-24, so return missing work-to-change governor; temporal overlap and a shared code referent do not supply it. A.15.PROD remains closed for a claim that the Work first constituted PressControllerCode-18 until its exact entity-inception basis, including that missing link, is governed.
  6. Evaluation and result stay separate.
    • Evaluation Work: Evaluator-2 : U.System performs CoherenceEvaluationWork-23 : U.Work under exact obtaining CoherenceEvaluatorAssignment-5 : U.RoleAssignment; exact performedUnderAssignment(CoherenceEvaluationWork-23, CoherenceEvaluatorAssignment-5) and enactsMethod(CoherenceEvaluationWork-23, CoherenceEvaluationMethod-4) obtain. State any needed operation application through its exact A.6.1 binding.
    • Result: C.2.1 separately identifies result episteme CoherenceEvaluation-23, which asserts whether the coherence predicate holds; only an exact A.15.PROD inception basis may relate that episteme's first existence to the evaluation Work. The result's assertion, evidence-use relation, and provenance remain distinct.
    • Next tuple: Because PressControllerCode-18 has different claim content, it forms another participant tuple with PressControlModel-5; predicate truth for that tuple decides whether another coherence occurrence obtains. Maintenance, method enactment, changed referent, evaluation, result, evidence, and provenance neither substitute for that truth nor enter the relation's participant set or identity.
  7. Crossing stop. If a diagnostics crossing matters, first retain the independently identified source and target structures, then record direction, required fit, permitted loss, and claim scope. Current F.9 cannot turn that record into a relation over those structures. Omit it from any positive cross-structure member and return missing CROSS-LOCALITY-BRIDGE governor. The already governed endpoint relations remain available for their own selections.

Filled A.22 basis for the press-control structure. Its exact constituents are model episteme PressControlModel-5, use-locus system Press-3, and expression episteme PressControllerCode-17. Its selected occurrences are ModelApplicabilityRelation(PressControlModel-5, Press-3, SafetyControlClaimScope), ModelUseRelation(OperatorAssignment-8, PressControlModel-5, PressOperationWork-91, Press-3), and ModelExpressionCoherenceRelation(PressControlModel-5, PressControllerCode-17, ControllerImplementsControlModelPredicate, PlantControlReferenceScheme) as established in steps 1–4. OperatorAssignment-8 and PressOperationWork-91 remain actual participants used to establish the selected ModelUseRelation; they are not copied into the constituent plurality. Its exact applied constraint claims are PressSafetyScopeUseConstraintClaim, whose proposition says that every target slice used in the release judgment satisfies member(targetSlice, SafetyControlClaimScope); PressCommandFeedbackConstraintClaim, whose proposition says that the change preserves the model's command-versus-feedback distinction; and PlantJointReviewConstraintClaim, whose proposition says that, under independently governed PlantReleaseRule-3, all three selected occurrences are required inputs to the release review when each is material. SafetyControlClaimScope, any membership outcome, boundary rendering, and the claim carriers enter no discriminator by themselves. Its fourth discriminator is PressControlReleaseFrame from section 0: ask whether the change is code-only or jointly model/use/coherence-relevant; provide that joint subject matter to the release review; do not infer review or release authority from the structure. Missing any discriminator leaves the direct relations in place but blocks this structure selection.

The relation sentences above assert direct world-side occurrences; the scope sentence states an A.2.6 membership claim. Publishing either episteme does not create an occurrence or change scope membership. If the question is only whether the model applies to the press, stop at ModelApplicabilityRelation. Select BoundedModelUseStructure only when the selected applicability, operating-use, and expression-coherence occurrences plus the exact applied constraint claims and frame change the decision or Work plan.

One subsystem, one model. The press-control replay above is the filled case. The machine keeps its U.System identity; the selected structure uses the exact constituents, three obtaining relations, applied constraints, and PressControlReleaseFrame. Without that complete basis, stop at the direct relations. A diagram or later crossing is unnecessary for the positive selection.

One subsystem, two competing models. DeviceSubsystem-2 remains one system. Two structures are available only because each organization is independently complete:

Selected structureExact constituents, relation occurrences, and applied constraintsNamed selection-use frame
DeviceMaintenanceModelUseStructureconstituents DeviceStateModel-4, DeviceSubsystem-2, and MaintenanceProcedureEpisteme-9; applicability of DeviceStateModel-4 to DeviceSubsystem-2 within MaintenanceClaimScope; selected ModelUseRelation established by exact F.6 performedUnderAssignment(DeviceMaintenanceWork-31, MaintenanceAssignment-12) plus actual use during that Work; coherence of DeviceStateModel-4 and MaintenanceProcedureEpisteme-9 under DeviceStateMaintenanceCoherencePredicate and DeviceStateReferenceScheme; applied claim MaintenanceScopeUseConstraintClaim says every equipment-state slice used in the maintenance diagnosis satisfies member(slice, MaintenanceClaimScope), and MaintenanceStateDistinctionConstraintClaim says the diagnosis preserves the model's available/degraded/failed distinctionsMaintenanceDiagnosisFrame: ask which current device-state distinctions govern diagnosis; use this organization for the maintenance diagnosis; do not use it to decide redesign capability or infer authority over redesign Work.
DeviceCapabilityModelUseStructureconstituents CapabilityModel-6, DeviceSubsystem-2, and CapabilityDesignExpression-12; applicability of CapabilityModel-6 to DeviceSubsystem-2 within RedesignClaimScope; selected ModelUseRelation established by exact F.6 performedUnderAssignment(CapabilityRedesignWork-44, RedesignAssignment-15) plus actual use during that Work; coherence of CapabilityModel-6 and CapabilityDesignExpression-12 under CapabilityDesignCoherencePredicate and CapabilityDesignReferenceScheme; applied claim RedesignScopeUseConstraintClaim says every design slice used in the redesign analysis satisfies member(slice, RedesignClaimScope), and CapabilityDistinctionConstraintClaim says the analysis preserves current-versus-proposed capability distinctionsCapabilityRedesignFrame: ask which capability distinctions govern the proposed redesign; use this organization for redesign analysis; do not replace the maintenance diagnosis or infer that the two models are editions of one another.

An exact C.2.1 EpistemeEditionRelation may separately establish historical continuation; it does not merge simultaneous organizations. Near miss: if either side lacks its coherence occurrence, an applied constraint, or its complete frame, that side has useful applicability and use facts but no selected BoundedModelUseStructure yet.

One model, two use loci. ClinicalTerminologyModel-7 participates in two independently complete non-software structures:

Selected structureExact constituents, relation occurrences, and applied constraintsNamed selection-use frame
DiagnosisTerminologyModelUseStructureconstituents ClinicalTerminologyModel-7, PatientEncounter-42, and DiagnosisExpression-11; applicability within DiagnosisClaimScope; selected ModelUseRelation established by exact F.6 performedUnderAssignment(DiagnosisWork-7, DiagnosticianAssignment-4) plus actual use concerning PatientEncounter-42; coherence of the model and DiagnosisExpression-11 under DiagnosisTerminologyCoherencePredicate and ClinicalTerminologyReferenceScheme; applied claim DiagnosisScopeUseConstraintClaim says every encounter slice used in the diagnosis claim satisfies member(slice, DiagnosisClaimScope), and ClinicalMeaningConstraintClaim says a clinical finding is not inferred from a billing codeDiagnosisUseFrame: ask which terminology distinctions govern this diagnosis; use the selected organization for the diagnosis claim; do not carry billing meaning or billing authority into that claim.
BillingTerminologyModelUseStructureconstituents ClinicalTerminologyModel-7, ReimbursementClaim-42, and BillingExpression-14; applicability within BillingClaimScope; selected ModelUseRelation established by exact F.6 performedUnderAssignment(BillingWork-9, BillingAssignment-9) plus actual use concerning ReimbursementClaim-42; coherence of the model and BillingExpression-14 under BillingTerminologyCoherencePredicate and ClinicalTerminologyReferenceScheme; applied claim BillingScopeUseConstraintClaim says every reimbursement slice used in the coding claim satisfies member(slice, BillingClaimScope), and CodingMeaningConstraintClaim says the selected reimbursement code does not assert a clinical diagnosisBillingUseFrame: ask which terminology distinctions govern this coding claim; use the selected organization for the coding claim; do not carry clinical inference or diagnosis authority into that claim.

Across these five filled structures, each assignment occurrence and dated Work stays only in its selected ModelUseRelation and in the evidence establishing that occurrence. Changing either one reopens that relation and therefore the selected-occurrence discriminator; it is not also an independent constituent replacement. One spanning structure is available only when one exact constituent plurality, relation-occurrence organization, applied-constraint set, and selection-use frame genuinely spans both uses. Shared model identity alone neither merges nor splits them. Near miss: exact diagnosis and billing Work plus a shared model, without one side's coherence occurrence or filled frame, supports only the direct facts on that side.

Published classification model. A NAICS publication remains an episteme. Exact F.6 performedUnderAssignment(ClassificationWork-4, ClassificationAssignment-3) and actual use of that model content concerning an organization supply the use branch. A positive NAICSClassificationModelUseStructure additionally needs exact applicability with ClassificationClaimScope as that relation's scope participant, fixed-content coherence with the classification expression, exact applied constraint claims stating which edition and classification distinctions the judgment must preserve, and NAICSClassificationFrame: ask which NAICS edition and distinctions govern this classification; use the complete organization for the classification claim; do not infer that publication makes the model used, that a Conformist label creates a crossing, or that NAICS is a system part. The bare scope or one membership result is not an applied constraint. Without the complete basis, stop at publication availability or the direct relation that actually obtains.

When a proposed directional dependency is called Conformist, retain its source, target, direction, required fit, permitted loss, and claim scope. Return missing CROSS-LOCALITY-BRIDGE governor until a compatible direct relation exists; the label does not create or identify the crossing. Stale description. An already recognized Context Map view is six months old while the same already governed applicability, actual-use, and model-expression-coherence relations continue. Its currentness claim can become obsolete; revising the U.View episteme or publishing another rendering changes those epistemic and publication objects only. The structures remain until their direct relation organization changes.

Context-mapping assurance case. This case tests the heavier method, product, view, and publication boundaries after the ordinary entry path has succeeded.

  1. Method and Work. Exact F.6 performedUnderAssignment(ContextMappingWork-14, ArchitectureAssignment-6) obtains, and the assignment holder is Architect-9 : U.System. Exact enactsMethod(ContextMappingWork-14, ContextMappingMethod-3) obtains for ContextMappingMethod-3 : U.Method. The repeatable method and this dated ContextMappingWork-14 : U.Work remain different objects.
  2. Candidate product. C.2.1 independently identifies episteme ContextRelationsAnalysis-8. Its EntityOfConcern is the six-part proposed crossing organization: source, target, direction, required fit, permitted loss, and claim scope. The episteme is not the proposed organization.
  3. Current stop. No independent direct governor currently makes the proposed crossing obtain. A.22 therefore lacks the relation-occurrence discriminator needed for base identity, and the candidate episteme does not designate an exact member of the conditional crossing-analysis specialization. Stop at the proposed organization.
  4. Later positive route. Only if a future direct governor admits that exact crossing and all four A.22 discriminators are recovered may a corresponding C.2.1 episteme designate the resulting exact structure. Changing the EntityOfConcern remains subject to C.2.1 episteme identity.
  5. Source use and inception. If a current claim says ContextRelationsAnalysis-8 first existed through the mapping Work, A.15.PROD governs only that exact local inception claim. If source episteme ContextNotes-7 participates, C.2.P recovers its exact source expression and routes the source-use relation to its direct governor.
  6. View evaluation. Reviewer-6 : U.System separately performs ContextViewConformanceEvaluationWork-15 : U.Work under exact obtaining ContextViewReviewerAssignment-10 : U.RoleAssignment; exact performedUnderAssignment(ContextViewConformanceEvaluationWork-15, ContextViewReviewerAssignment-10) and enactsMethod(ContextViewConformanceEvaluationWork-15, ContextViewConformanceEvaluationMethod-5) obtain. Any result episteme and any A.15.PROD inception claim about that result remain separate. ContextRelationsAnalysis-8 becomes a U.View only when exact EpistemeViewpointConformanceRelation(ContextRelationsAnalysis-8, ContextMappingViewpoint-4) obtains under E.17.0.
  7. Representation and publication stop. The product name, mapping method, performed Work, source use, evaluation result, representation, rendering, publication occurrence, form, and carrier grant neither crossing-structure identity nor U.View membership and remain under their direct patterns.

Bias-Annotation

This pattern has a DDD lineage bias because bounded context is the source term. Outside software, use A.1.1 only when the domain has one claim-bearing model edition, explicit applicability, actual use in assigned Work, fixed-content expression coherence, and a present decision changed by their joint organization. Industrial control, clinical or billing terminology, and published classifications can meet that test through different direct governors; a familiar context label cannot.

It has a structure-selection bias. The lightweight stop rule prevents mere local terminology, model mention, or implementation and organizational partition from becoming a structure without the required model-use relation organization.

It also has a model-coherence bias. Actual systems, work, methods, transformations, epistemes, and role assignments keep their own identities and can remain the referents designated by receiving epistemes when the joint relation organization is not the subject of the receiving use.

Conformance Checklist

  1. A positive BoundedModelUseStructure exposes all four A.22 discriminators: exact constituents, exact selected obtaining applicability/use/coherence occurrences, exact applied constraints, and one named question/action/overread selection-use frame.
  2. The three direct relation declarations satisfy WF-A1.1-APP, WF-A1.1-USE, and WF-A1.1-COH; any imported-sense receiving use additionally satisfies WF-A1.1-APP-USE or WF-A1.1-COH-USE. Missing conditions return the named stop rather than a positive assertion.
  3. Every ModelExpressionCoherencePredicate value satisfies the local five-part membership and value-identity rule. Every ModelExpressionCoherenceRelation occurrence is participant-determined by <model episteme, expression episteme, predicate value, comparison scheme> and has no interval discriminator.
  4. BoundedModelUseStructure is governed as U.Structure; no context holon, context parthood, meta-holon transition, crossing, description, or publication enters its identity.
  5. Reidentification compares all four discriminators and then applies A.1.1:4.3. A changed applied constraint or changed question/action/overread frame reopens identity even when constituents and relation occurrences are unchanged; a changed page, graph, rendering, or publication does not.
  6. Semantic locality follows the direct-value triage in A.1.1:4.4. A local rule, inference, unit, evidence use, or status use remains at its exact direct owner; a broad label or unrepaired generic-context field cannot manufacture the missing participant.
  7. A description episteme designates its exact EntityOfConcern under C.2.1. Empirical grounding requires one exact EpistemeEmpiricalGroundingRelation; a reference field, structure, view, or publication does not make it obtain.
  8. DDD Context Mapping is recovered as method, dated Work, claim-bearing product, proposed or obtaining crossing organization, view conformance, representation, and publication under their separate owners. WF-A1.1-CROSS blocks a positive cross-structure member while the direct crossing governor or an A.22 discriminator is missing.
  9. A code/schema cue is classified from the exact claim as claim-bearing episteme content, repository/file/form/carrier, or deployed system/structure; the cue itself supplies no common kind.
  10. Two model uses over one subsystem yield two structures only when each independently supplies all three obtaining relation families, applied constraints, and its exact selection-use frame. Missing coherence or another discriminator leaves that side at its direct relations.
  11. The structure is omitted when its joint organization changes no receiving decision. The reader can name both the admissible action and the nearest overread; otherwise the reader stops at the direct relation or direct owner.

Common Anti-Patterns and How to Avoid Them

Anti-patternFailureRepair
Context holonNearby systems, Work, and epistemes become parts of one extra whole.Keep their direct identities; select only the decision-relevant relation organization as U.Structure.
Subsystem shortcutLocation or team ownership identifies the bounded context.Recover all four A.22 discriminators. One subsystem can support several model-use structures.
One-relation or missing-frame shortcutApplicability or actual use alone is expected to carry coherence, constraints, or the selection decision.Stop at the direct relation until all three relation families, applied constraints, and one exact frame are current.
Description or publication substitutionA map, code repository, schema file, view, or publication is treated as the model-use organization or an occurrence.Classify the exact content, carrier, system, structure, and publication claims under their direct owners.
Locality inflationA term, rule, unit, evidence use, or status use gets a context or structure proxy.Apply the A.1.1:4.4 triage and keep the direct governed value or relation.
Crossing by labelMapped, Conformist, or shared wording is treated as an obtaining structure crossing.Preserve the proposal and apply WF-A1.1-CROSS; stop until the direct crossing governor exists.

Consequences

Benefits. Teams can compare model-use boundaries without inventing an enclosing whole. Competing models over one subsystem and one model across several loci become expressible through complete structure bases. Local vocabulary, rules, inferences, units, evidence use, and status use remain recoverable through direct owners rather than a context proxy.

Costs. A load-bearing structure claim must recover three direct relation families, exact applied constraints, and one question/action/overread frame. Semantic transfer sometimes stops at a direct owner that still cannot express the claim without a generic context field; that stop is preferable to inventing a participant or claiming false parity.

Limits. A.1.1 does not decide model truth, role assignment, rule validity, measurement, status, evidence, claim-scope membership, reference-scheme construction, system parthood, Work performance, release authority, or publication currentness. It selects only the bounded model-use organization after those direct claims are available.

Rationale

The selected object must survive two decisive tests. One subsystem under two models needs two bounded contexts without duplicating the subsystem. One model coherently used across several loci may need one bounded context without pretending those loci are parts of another whole. A dependent U.Structure over exact relations passes both tests.

The practical DDD lesson retained here is that boundaries matter because model applicability, actual use, expression consistency, and relationships can change engineering decisions. FPF does not copy that sentence as one ontology: it separates participant-determined fixed-content coherence from maintenance Work, identifies each bounded model-use structure without crossings, and routes any independently governed crossing into a distinct A.22 structure over already identified endpoints.

SoTA-Echoing

The source line is not one settled ontology. The 2015 reference defines a bounded context as a description of a boundary. The January 2026 worked case also uses the term for an actual system part and for use of the published NAICS model. FPF keeps those three readings distinct instead of choosing one of them as a universal context object.

Source line and currentnessWhat the source saysPractical problem changedExact FPF adaptationLimit, rejected overread, and reopen condition
Eric Evans, Domain-Driven Design Reference, 2015 — historical lineageA bounded context is a description of a boundary, typically a subsystem or one team's work, within which one model is defined and applicable. The pattern then asks practitioners to set actual boundaries in team organization, application use, code bases, and database schemas and to keep model concepts and terms consistent.A boundary description cannot stand in for the systems, Work, model edition, expressions, or applicability facts that an engineering decision depends on. Several models at one locus must not be mixed merely because one description names the locus.Keep the boundary description as a C.2.1 episteme. Recover actual participants under their direct patterns and use A.1.1 only when the organization of independently governed applicability, actual-use, and fixed-content coherence occurrences changes the decision. A source mention of relationships does not create a structure crossing.This historical source neither supplies BoundedModelUseStructure nor declares A.1.1's three relation kinds. A newer DDD case does not rewrite what the 2015 text said. Reopen only this lineage reading if a better primary edition or correction changes the cited passage.
Evans, Context Mapping with an AI-based Component, 6 January 2026 — current AI-component worked caseIn this case a bounded context corresponds to an actual part of the system; NAICS is treated as a distinct bounded context and a Published Language; and an honest context map must show the system as built rather than a wished-for design.The same practice term reaches both a concrete system part and use of a published model. A map can also describe a proposed arrangement that the actual system does not yet realize. Treating all three as one kind would hide the difference between world-side use, model publication, and a claim-bearing description.Keep the actual system part as its own U.System; keep NAICS as a published model episteme whose actual use must be shown separately; identify a mapping product as an episteme about the described or proposed organization. Require E.17.0 conformance before calling it a U.View. A proposed crossing remains the six-part unsupported-use record until a compatible direct governor makes that exact crossing obtain and A.22 can identify the resulting structure.This one worked AI-integration case does not establish a universal identity rule for every bounded context, an A.1.1 relation signature, or an obtaining crossing. Reopen only this row's adoption if the article is materially revised or later current DDD work changes the system-part, published-language, or honest-map claim.
Florio and Linnebo, Introduction to Constructional Ontology, 2024; Borgo and Righetti, Towards Applied Constructional Ontology, 2025 — current but exploratory constructional lineThe 2024 line separates constructors, admissible inputs, constructional process, and output identity. The 2025 study makes a first exploratory comparison with BFO, DOLCE, and UFO and says that successful application to current foundational ontologies still needs further investigation.Co-occurring model-use participants and relations do not by themselves warrant another constructed whole. A claimed context holon must show its constructor, admitted inputs, construction, and identity rather than borrow them from a label or diagram.Use constructional ontology only as a stress test for a construction claim. Failure to supply that construction basis blocks admission of a new context holon; it leaves the already governed participants and relation occurrences available for an A.22 structure-selection question.The sources do not prove that the selected object is U.Structure, do not declare A.1.1's three relations, and do not prove a general negative conclusion about every possible context whole. Reopen only this construction-claim stress test when applied constructional work supplies materially stronger reconstruction and identity criteria.
Current FPF A.22 selected-structure disciplineA structure is a selected relation organization over a declared substrate, exact applied constraint claims, invariants, and a decision-facing use. It is not a holon, view, or representation by form.Practitioners need to reason about a useful organization without duplicating the actual systems, Work, and epistemes as parts of another whole.Test whether the already governed A.1.1 relation occurrences and exact applied constraint propositions form one decision-relevant BoundedModelUseStructure; keep each U.ClaimScope only in its applicability occurrence unless a separate constraint claim refers to it, and preserve every substrate and occurrence identity.BoundedModelUseStructure and the exact three-relation architecture are the scoped FPF synthesis stated below, not an entailment of the external sources. Reopen this adaptation if A.22's membership, identity, or admissible-use rule changes.
Current FPF C.2.1, A.2.6, A.10, B.3, E.17.0, E.24.PUB, C.29, and F.9C.2.1 governs episteme identity and effective reference scheme; A.2.6 governs claim scope and slice membership; A.10 governs bounded evidence reliance; B.3 governs assurance and its material-reliance threshold; E.17.0 governs conformance-dependent U.View membership; E.24.PUB governs publication occurrence and bounded availability; C.29 governs representation correspondence; F.9 governs Bridges between exact F.17 SchemeSenseCell values.A model, its scope, a use claim, evidence reliance, assurance, a view, a representation, a publication, and an interpretation Bridge can otherwise be collapsed into one “context” or used as proxies for world-side relation occurrences.Route each object and claim to its exact owner. For an A.1.1 comparison across schemes, first require the obtaining F.9 Bridge, then the separate affirmative C.2.1 claim about the exact comparison use and its current A.10 or B.3 reliance basis; recover any comparison Work, assertion, publication, direct relation, or operation application only from its own governor. For a proposed structure crossing, preserve source, target, direction, required fit, permitted loss, and claim scope, then stop at missing CROSS-LOCALITY-BRIDGE governor until a compatible direct relation kind exists.None of these neighbours creates an A.1.1 relation occurrence or structure by reference. Reopen only the affected adoption when that exact neighbour interface changes; a publication or representation change alone does not reopen the world-side structure claim.

Scoped FPF synthesis hypothesis and defeaters. This edition hypothesizes that, for the bounded uses declared here, the decision-relevant organization is one BoundedModelUseStructure over exactly the three direct relation kinds ModelApplicabilityRelation, ModelUseRelation, and ModelExpressionCoherenceRelation, its exact model-use substrate, exact applied constraint claims, and named frame. Each claim scope remains only the applicability-relation participant unless a distinct applied constraint proposition refers to it. Crossings belong only to a distinct A.22 structure over already identified bounded model-use structures. The hypothesis is usable only while each direct relation has coherent participant meanings, an obtaining rule, and an occurrence-identity rule, each applied constraint proposition is recoverable, and selecting their joint organization changes a concrete practitioner decision.

Fail this edition for the affected case, or reopen only the affected part of the synthesis, when:

  1. any one of the three direct relations lacks coherent participant meanings, a coherent obtaining rule, or a coherent occurrence-identity rule;
  2. a DDD case needs a materially different relation organization rather than this three-relation organization; or
  3. selecting the joint organization changes no practitioner decision compared with stopping at the direct relations.

The external sources therefore change recognition and the tests applied to the working problem. Current FPF direct governors and the scoped, defeasible synthesis above supply the normative Solution. Constructional ontology tests a construction claim; it neither chooses the FPF kind nor proves the no-holon conclusion by citation.

Relations

  • A.1 governs constructive recognition of exact candidates under already admitted holon kinds and its locally declared U.System/U.Episteme distinctions. Direct identity patterns govern candidate identity; E.24.UK governs public-kind admission; A.14 and direct part-relation patterns govern parthood; C.13 governs constructive assembly. A.1 does not supply those decisions by itself.
  • A.22 governs base U.Structure identity through exact constituents, selected obtaining relations, applied constraints, and one named selection-use frame. It also governs the conditional cross-structure question after a direct crossing governor exists.
  • C.2.1 governs model, expression, rule, inference, and description episteme identity, effective reference schemes, exact EntityOfConcern and ClaimGraph content, EpistemeEditionRelation, and empirical grounding. It also identifies the separate bounded-use claim about an F.9 Bridge.
  • A.2.6 governs U.ClaimScope, U.ContextSlice, and membership. C.16 governs measurement bases, readings, scales, units, and direct comparability. A.2.4 and A.10 govern evidence use; F.10 governs status family and status use; B.3 governs assurance.
  • A.2, A.2.1, and A.2.7 govern role taxonomy, role assignment, and role-relation structure in model-use loci.
  • A.3.1, A.15.1, and E.18 govern Context Mapping method, performed mapping Work, and transformation-flow structures. A.15.PROD enters only for a separately needed local entity-inception claim.
  • F.17 and F.18 govern sense cells, durable public labels, candidate-name history, public rows, lineage, and name refresh. A.1.1 consumes the settled names without copying their dossiers.
  • F.9 governs an obtaining Bridge between exact F.17 SchemeSenseCell values. A Bridge carries relation semantics, not a receiving-use decision or a structure-to-structure crossing. A separate C.2.1 claim states bounded suitability; A.10 or B.3 governs reliance.
  • E.17.0, E.24.PUB, and C.29 separately govern view conformance, publication occurrence and availability, representation, rendering, form, and carrier.
  • C.2.P recovers an exact source expression and routes any source-use relation to its direct governor.
  • A.6.0 and A.6.5 govern the RelationSignature and SlotSpecs declared here; A.6.REL governs progressive explicit individuation after the direct relation kind, obtaining condition, and occurrence-identity rule exist.

A.1.1:End

Role Taxonomy

Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative

Use This When

Plain name. Work-facing role value.

Use this pattern when a project needs to say what an admitted U.System holder, such as a system, organization-as-system, person, team, tool, agent, machine, motor, pump, or component, is being in a bounded context before method, plan, work, transformation, functioning, evidence, responsibility, or naming claims can be made safely.

Typical moments:

  • a project sentence says "engineer", "reviewer", "operator", "supplier", "model verifier", "agent", "service provider", "drive motor", "cooling circulator", "load-bearing brace", or another role-like name, and it is unclear what holder, context, and work, transformation, or functioning claim are current;
  • a team treats a role name as if it created capability, commitment, obligation, permission, method, work, or evidence;
  • a standard, report, dataset, model card, publication, requirement, or definition is described as having a "role" in evidence, status, assurance, source use, or publication use;
  • a method, plan, work occurrence, or result is attributed to a role without naming the holder and role assignment under which the work is performed;
  • role names must be kept reusable across contexts without making each context-local role into a new system kind;
  • a role boundary is being decomposed into factors, states, responsibilities, or method participation, and the project must recover the current neighboring object instead of treating role as a holon.

Primary EntityOfConcern. The EntityOfConcern is U.Role: a context-bound enactment-facing role value in the role ontologicalNeighborhood. A role value names what an admitted U.System holder is being for a bounded context when method admission, role-state checking, transformation or functioning participation, or work attribution depends on that role. U.Role is a root U-kind, but it is not an admitted holon kind: role decompositions resolve to assignment, state, capability, responsibility, permission, commitment, obligation, method, work, or role-relation owners rather than to role parts.

Primary working reader. The first reader is an engineer-manager, analyst, or FPF author who must separate role value, holder, role assignment, method, plan, work, evidence, and source-use claims before acting or writing a pattern. The downstream reader is the project participant who needs role language to answer who held what role, in which context, for which claim.

First useful move. Name the role value, the bounded context, and whether the current claim is about role identity, a role assignment, role description, role state, role relation structure, capability-fit condition, functional or transformation participation, method role-admission condition, planned work, performed work, or an episteme used as evidence, source, standard, requirement, definition, explanation, status bearer, or publication.

What goes wrong if missed. Role words become an ontology shortcut. A document becomes a "verifier role"; a capability becomes a role; a role name is treated as evidence that work happened; a method is treated as a role's hidden behavior; a publication is treated as if it acted. FPF then grows a second role ontology for epistemes, status labels, access labels, relation arguments, and source labels.

What this buys. A small role vocabulary can serve many projects without type explosion. The same system can hold different roles in different contexts; work remains performed by a holder under a role assignment; epistemes remain used through their own evidence, status, source, publication, requirement, definition, explanation, and assurance relations.

Not this pattern when.

  • If the current claim is the assignment relation linking holder, role, context, and window, use A.2.1.
  • If the current claim is capability, use A.2.2.
  • If the current claim is role state, use A.2.5.
  • If the current claim is role-admission substitution, incompatibility, qualification, or bundles, use A.2.7.
  • If the current claim is method, method description, work plan, or performed work alignment, use A.15.
  • If the current claim is an episteme used as evidence, source, standard, definition, requirement, explanation, status bearer, publication, or assurance input, use the direct evidence-use, status-use, source-use, publication-use, requirement-use, definition-use, explanation-use, or assurance pattern. Do not force it through U.Role.
  • If the current issue is only a confusing role-like word, first use A.6.RSIR to recover the governed object or claim kind.

Problem Frame

FPF needs role language because the same holon can be used, treated, expected, or named differently in different bounded contexts. A pump can be a cooling circulator in one plant context and a test article in another. A person can be verifier in one work package and author in another. A service can be supplier in one agreement-like relation and consumer in another. Without a role value, these contextual uses either become new system subtypes or remain vague source language.

At the same time, role language is dangerous. Everyday phrases such as "the role of this standard", "the role of this dataset", "the role of this theorem", "the role of this dashboard", or "the role of this interface" can hide several different FPF claims. They may be evidence-use, source-use, publication-use, status-use, requirement-use, explanation-use, interface, signature, capability, method, or work claims. They are not automatically U.Role claims.

A.2 therefore keeps U.Role real, but narrow. A role is a context-bound enactment-facing role value. Enactment-facing does not mean "human job" or "social agent only": a motor can be assigned as a drive motor, a pump can be assigned as a cooling circulator, and a valve can be assigned as a regulator inside a functional or transformation context. A method or method description may name role-admission conditions; performed work cites a U.RoleAssignment; transformation and functioning claims may also need the same role value. A role becomes operational through neighboring relations, especially U.RoleAssignment in A.2.1, role-method-work alignment in A.15, transformation participation in A.3.4, and functional precision restoration in A.6.F when function wording is current. It does not absorb every relation in which a value participates.

Problem

Without this pattern:

  1. Type explosion returns. Each contextual use becomes a new system kind such as PumpAsCoolingCirculator or ReviewerReportSystem.
  2. Role and assignment collapse. The role value, the holder, the context, and the time window are treated as one vague label.
  3. Role and capability collapse. A role name is treated as if it created ability.
  4. Role and method collapse. A role name is treated as if it contained the method by which work is done.
  5. Role and evidence collapse. A document, dataset, standard, proof, or model card is treated as a role holder because it is used as evidence or source material.
  6. Role and work collapse. A role label is treated as evidence that work was performed.
  7. Argument-position drift appears. "Role" is used for relation argument positions or slot positions, competing with A.6.5 SlotSpec discipline.
  8. Role-whole overclaim. A role is decomposed into factors, responsibilities, states, permissions, obligations, or method participation and then treated as a holon, although U.Role is not admitted as a holon kind. The recoverable objects are neighboring relations or values, not role parts.

Forces

ForceTension
Context reuse vs type explosionOne role value can be reused inside a bounded context; making every contextual use a system subtype loses reuse.
Role identity vs assignment relationU.Role must stay a role value, while U.RoleAssignment links holder, role, context, and window.
Role boundary vs false role holonA role decomposition may be useful, but A.2 must route factors, responsibilities, permissions, obligations, role states, capability-fit conditions, and method role-admission conditions to their direct owners instead of treating them as role parts.
Ordinary speech vs FPF kind discipline"Role of X" is common language, but FPF must recover whether X is a holder, source, evidence, status bearer, method, work, relation argument, or publication.
Work-facing roles vs episteme useSystems perform work, including physical and operational work by motors, pumps, devices, organisms, services, teams, and people; epistemes are used, cited, asserted, published, evaluated, refreshed, or relied on through direct relations.
Minimal kernel vs practical traceabilityA small role kernel is useful only if it can still connect to role descriptions, role states, role relation structure, capability-fit conditions, method role-admission conditions, work, and evidence about performed work.

Solution

Use U.Role as a context-bound role value, not as a generic contextual classifier.

U.Role answers the question: what is this admitted U.System holder being, in this bounded context, for the current method, transformation, functioning, or work claim?

It does not answer by itself:

  • who holds the role;
  • whether the holder can do the work;
  • which method is selected;
  • which work was planned or performed;
  • which evidence justifies a claim;
  • which publication or description expresses the role;
  • which status applies to a document, method, result, or claim;
  • which relation argument position or SlotKind is current.

Those claims belong to neighboring patterns.

Core Definitions

U.Role. A U.Role is a context-bound enactment-facing role value: a reusable value that names what an admitted U.System holder is being in a bounded context. It is enactment-facing because its primary practical use is to govern or explain role assignment, method role-admission conditions, transformation or functioning participation, work attribution, role-state checks, role naming, and role-related evidence about work.

Plain gloss: a role is a contextual functional mask. The gloss is helpful only if the normative object stays clear: the role value is not the holder, not a system part, not the function itself, and not the work.

U.RoleAssignment. A U.RoleAssignment is a typed assignment relation value governed by A.2.1. It links a holder, a U.Role, a bounded context, and any current assignment window. A.2 names why this relation is needed; A.2.1 governs its SlotSpecs.

Role holder. A holder of a U.RoleAssignment is an admitted U.System selected by the governing work, transformation, functioning, or method pattern as the system-like performer for the bounded context. The word "performer" here includes physical and operational performance by motors, pumps, valves, organisms, teams, services, and devices; it does not imply consciousness, social agency, or responsibility unless a neighboring pattern makes that claim current. An episteme is not admitted as holder merely because it is used as evidence, source, standard, requirement, definition, explanation, status bearer, publication, or assurance input.

Role description. A role description is an episteme that describes, constrains, teaches, publishes, or stores a role value or role assignment. The description is not the role value by default.

Role boundary. A role boundary is grounded by a bounded context, the holder class or known holders, the assignment or admission use, the method, transformation, functioning, or work claim, and any current role description, role-state relation, role-relation structure, capability-fit condition, method role-admission condition, or evidence about performed work. A proposed decomposition of a role does not supply role holonhood. Recover whether the decomposed objects are role-admission fit relations, factors or qualifications, bundle expressions, separate role values, role-state refinements, capability-fit conditions, responsibility, permission, commitment, or obligation relations, or coupled method/work structures.

Do not infer role parts from slots or relation richness. Systems hold roles. Role assignments, role states, evidence uses, and other relation-bearing structures may have SlotSpecs. Epistemes such as role descriptions may have constituent parts. Those slots and description parts are not parts of the U.Role value.

Role relation-neighborhood. A role value is surrounded by relations that are not parts of the role:

Relation familyGoverning patternWhat it preserves
Role identity and role descriptionA.2, Part F role-description and naming patternsThe role value and the descriptions that make it recognizable.
Role assignmentA.2.1, A.6.5Holder, role value, bounded context, window, and assignment-specific work, transformation, or functioning qualifiers.
Capability-fit conditionsA.2.2Ability constraints of a holder under stated conditions; a role name does not create ability.
Role characterization and role stateA.2, A.2.5, A.19 when currentCharacteristic scales and state predicates used to accept or reject role use.
Role relation structureA.2.7Context-local role-admission substitution, incompatibility, qualification, and role bundles.
Method role-admission conditionsA.15, A.3.1, A.3.2Method or method-description preconditions, capability-fit conditions, role-admission conditions, constraints, interface commitments, or exclusions linked to a role or assignment.
Work and transformation attributionA.15, A.15.1, A.3.4, A.6.F when function wording is currentWork or transformation participation is attributed to the holder under a role assignment; the role value itself does not act.
Evidence and status about role claimsA.10, B.3, F.10, C.2.1, direct evidence-use and status-use patternsEpistemes used as evidence or status bearers stay outside U.RoleAssignment.

Do not turn every relation in this neighborhood into a slot of U.Role. Use SlotSpec discipline only when the governing pattern declares a slot-bearing relation.

Work-Facing Role Assignment Boundary

Use the short readable notation only as a notation for a typed assignment relation:

Holder#Role:Context@Window

The normative assignment relation is governed by [A.2.1](/generated/patterns/A.2.1), not by the notation. Its core slots are:

RoleAssignmentCoreSlotSpec:
  HolderSlot:
  RoleValueSlot:
  BoundedContextSlot:
  AssignmentWindowSlot:

HolderSlot is filled by an admitted U.System selected as system-like performer for the current work, transformation, functioning, or method claim.

RoleValueSlot is filled by U.Role.

BoundedContextSlot is filled by the context that gives the role value its local meaning.

AssignmentWindowSlot is filled when assignment currentness, work attribution, role-state admission, or source freshness depends on a window. An open-world missing slot means unknown, not asserted, not recovered, or not current for this claim; it does not mean no such value exists.

Direct work-role patterns may add work-role qualifier slots. Evidence-use and status-use slots are not work-role qualifier slots and do not belong in assignment provenance.

What Does Not Become U.Role

The following are not role values merely because source language says "role":

Source phrase or temptationRecover as
"the role of this standard"standard-use, requirement-use, source-use, or publication-use relation around an episteme.
"the role of this dataset"evidence-use, source-use, freshness, provenance, or measurement relation.
"the role of this theorem"claim-use, proof-use, formal-substrate, or evidence-use relation.
"the role of this status badge"status assertion, status-use relation, gate result, or assurance-use relation.
"the role of this parameter"SlotKind, ValueKind, RefKind, method parameter, model parameter, or source label according to the governing pattern.
"the role of this interface"module-interface claim, port, signature, API, protocol, service-access package, publication face, or boundary claim.
"the role of this capability"capability-fit condition, holder capability, method role-admission condition, or role description claim.
"the role of this relation argument"SlotKind or relation position under A.6.5, not U.Role.

If the direct kind is not yet clear, use A.6.RSIR.

Role Taxonomy Inside a Bounded Context

Inside one bounded context, roles may be organized by:

  • role-admission substitution;
  • role incompatibility;
  • role bundles;
  • role-state predicates;
  • holder eligibility constraints;
  • capability-fit conditions;
  • method role-admission conditions or exclusions;
  • naming and description conventions.

A.2.7 governs role relation structure. It is context-local role architecture in life, not mereology, not class subsumption for systems, not generic concern algebra, not MethodRelationStructure@BoundedContext, and not method algebra. Algebraic, graph, matrix, embedding, or neural descriptions are only lenses over selected role relation structure when a project explicitly uses them.

Typical work-facing role families include:

Role familyOrdinary useBoundary
TransformerRoleAn admitted U.System holder changes, produces, maintains, selects, derives, or controls an EntityOfConcern by work under a method or transformation relation.The role does not change anything by itself; the holder performs work or participates in the transformation.
DriveMotorRoleA motor supplies mechanical drive in a bounded machine, pump, vehicle, or plant context.The motor is the holder; the role is not a component of the motor and not the motor's capability envelope.
CoolingCirculatorRoleA pump circulates coolant in a plant or machine context.Circulation capability, method, actual work occurrence, and evidence remain neighboring claims.
ObserverRoleAn admitted U.System holder measures, samples, inspects, monitors, or records.The measurement record is an episteme; the observing work remains work by the holder.
VerifierRoleAn admitted U.System holder checks a claim, result, method, or work product.The report or proof produced by verification is evidence or publication, not the verifying role holder.
CoordinatorRoleAn admitted U.System holder coordinates other role assignments, plans, or work occurrences.Coordination work is still dated work under method and plan claims.

Domains may define roles such as DriveMotorRole, CoolingCirculatorRole, BridgeInspectorRole, ClinicalTrialCoordinatorRole, ModelCardReviewerRole, or ShipyardOperatorRole. Define them in their bounded context and connect them to role assignment, capability, method, transformation, work, and evidence only when those claims are current.

Reduced Use and Reopen Conditions

A role-like word may stay in reduced use when it only helps people recognize a local conversation and no claim depends on holder, assignment, context, time, capability, method, work, evidence, status, source, publication, or gate use.

Use the fuller role pattern when a claim based on the role-like word would change what can be done, claimed, checked, relied on, or attributed:

  • use A.2 when the role value itself, bounded context, role taxonomy, or role relation-neighborhood is current;
  • use A.2.1 when holder, role value, context, window, assignment source, or work-role qualifier is current;
  • use A.2.2 when ability or capability is current;
  • use A.2.5 when role-state admission, currentness, or role-state gate is current;
  • use A.2.7 when role-admission substitution, incompatibility, qualification, or role bundles are current;
  • use A.15 when method, method description, work plan, or performed work is current;
  • use direct episteme-use patterns when evidence, status, source, publication, requirement, definition, explanation, assurance, or gate use of an episteme is current;
  • use A.6.5 when the word "role" is only a relation position or SlotKind.

If a reduced-use role label is later used for a stronger claim, do not treat the earlier reduced use as evidence. Recover the needed role value, assignment relation, neighboring value, or direct episteme-use relation before the stronger claim is made.

Archetypal Grounding

Pump in a Cooling Loop

PumpUnit-3#CoolingCirculatorRole:Plant-A@2026-06-01..open

The holder is PumpUnit-3, a system. The role value is CoolingCirculatorRole. The context is Plant-A. The assignment window is open from a named date.

This does not say the pump has the capability to circulate under every condition. Capability claims stay under [A.2.2](/generated/patterns/A.2.2). It does not say which method is used or which work occurred. Method, method description, work plan, and work claims stay under [A.15](/generated/patterns/A.15).

Standard Used in Design Work

"RFC-9110 has the protocol-standard role in this design" is source-side wording that must be repaired.

Current FPF expression:

  • the RFC publication is an episteme or publication used as source, standard, requirement, or method-description source;
  • the design service, engineer, or team is the admitted U.System holding any work-facing role;
  • the design work is performed by that holder under a role assignment;
  • the RFC does not perform the work and does not hold U.Role.

Reviewer and Review Report

A person, team, or agent service can hold ReviewerRole for a review context. The review report produced by that work is an episteme. Later, another project may use the report as evidence or status input. That use is an evidence-use or status-use relation around the report, not a role assignment to the report.

Relation Argument Named "Role"

In a relation signature, "role" may mean an argument position. If the claim is about a relation position, use A.6.5 SlotSpec discipline. Do not create a U.Role merely because the source says "argument role".

Bias Annotation

Bias riskFailureMitigation
Semio-biasThe pattern starts talking mainly about descriptions of roles, cards, records, and publications.Keep U.Role as the EntityOfConcern. Descriptions and publications are neighboring epistemes.
Episteme-as-agent driftA document, proof, standard, dataset, or model card is treated as if it acted.Use evidence-use, source-use, status-use, publication-use, requirement-use, definition-use, explanation-use, or assurance-use relations.
Slot-role driftRole is used as a generic slot position.Use A.6.5 for SlotKind and relation positions; keep U.Role for enactment-facing role values.
Capability-role driftA role name is treated as ability.Use A.2.2 for capability; role assignment may cite capability-fit conditions but does not create ability.
Method-role driftA role name is treated as the method itself.Use A.15, A.3.1, and A.3.2 for method and method-description claims.

Working Guidance

  1. Start with the source phrase and recover the current project concern.
  2. If the phrase names what an admitted U.System holder is being in a bounded context, recover a U.Role value.
  3. If the phrase names the holder-role-context-window relation, recover U.RoleAssignment under A.2.1.
  4. If the claim decomposes a role, do not open role mereology. Use A.2.7 and neighboring owners to recover role-admission fit, factor or qualification, bundle expression, separate role value, role-state refinement, capability-fit condition, responsibility, permission, commitment, or obligation relation, or coupled method/work structure.
  5. If the phrase names ability, recover capability under A.2.2.
  6. If the phrase names performed work, intended work, or governing method, use A.15 and its neighboring method and work patterns.
  7. If the phrase names evidence, source, standard, requirement, definition, explanation, publication, status, assurance, or gate use of an episteme, use the direct episteme-use relation pattern.
  8. If the phrase only names a relation position, field, parameter, or argument, use A.6.5.

Conformance Checklist

IDCheck
CC-A2.1A U.Role is a role value, not a system subtype, part, capability, method, work occurrence, commitment, obligation, permission, description, publication, or SlotKind.
CC-A2.2A U.RoleAssignment holder is an admitted U.System selected as system-like performer by the governing work, transformation, functioning, or method pattern.
CC-A2.3An episteme used as evidence, source, standard, definition, requirement, explanation, status bearer, publication, or assurance input is not a U.RoleAssignment holder.
CC-A2.4Role claims name or recover the bounded context that gives the role value its local meaning.
CC-A2.5Work, transformation, and functioning claims cite the holder under U.RoleAssignment when role attribution is current; the role value itself does not act.
CC-A2.6Capability-fit conditions are governed by A.2.2, not hidden inside the role value.
CC-A2.7Method role-admission conditions, method-description acceptance conditions, preconditions, constraints, and interface commitments are governed by A.15, A.3.1, and A.3.2, not hidden inside the role value.
CC-A2.8Role-admission substitution, incompatibility, qualification, and bundles are context-local role relation structure under A.2.7, not mereology and not system-kind subsumption.
CC-A2.9Relation argument positions and SlotKinds are governed by A.6.5; they do not become U.Role.
CC-A2.10Role decomposition claims are recovered as role-admission fit, factor or qualification, bundle expression, separate role value, role-state refinement, capability-fit condition, responsibility, permission, commitment, or obligation relation, or coupled method/work structure; U.Role is not placed in a role partOf chain.
CC-A2.11Role descriptions, role cards, registers, and publications describe, cite, or store role values or assignments; they are not the role value by default.

Common Anti-Patterns

Anti-patternWhy it failsRepair
TransformerSystem as a system subtypeIt fuses system identity with a contextual role.Use U.RoleAssignment(holderRef=<system>, roleRef=TransformerRole@Context, boundedContextRef=<context>) when a holder role assignment is current.
AssistantReviewerRole partOf ReviewerRoleIt treats a role boundary as role mereology, but no role-part constructive assembly has been recovered.Use A.2.7: decide whether the current object is role-admission fit, factor or qualification, bundle expression, separate role value, role-state refinement, capability-fit condition, responsibility, permission, commitment, or obligation relation, or method/work decomposition.
"The PDF enforced the rule"The episteme did not perform work.Name the admitted U.System that performed enforcement work, and name the PDF's source, requirement, or evidence use separately.
"The report has EvidenceRole"It treats evidence use as a role held by an episteme.Use an evidence-use relation around the report, target claim, grounding holon when current, claim scope, polarity, relevance window, and provenance constraints.
"The role grants capability"A role name does not create ability.Name capability under A.2.2 and link it through the current capability-fit or checking relation when current.
"The role contains the method"A role value is not a method.Name method and method description through A.15, A.3.1, and A.3.2.
"Argument role equals U.Role"A relation position is not an enactment-facing role value.Use A.6.5 SlotKind and relation signature discipline.

Consequences

GainCost or tradeoff
Role names remain reusable without creating system subtypes.Authors must name bounded context instead of relying on global role meanings.
Work attribution becomes inspectable through holder, role assignment, method, plan, and work.Simple sentences may need a small role-assignment note when claims become reliance-bearing.
Episteme use remains precise: evidence, status, source, standard, requirement, definition, explanation, publication, and assurance uses stay in direct relation patterns.Everyday "role of this document" wording must be repaired before it becomes FPF vocabulary.
Slot discipline and role discipline stop competing.Authors must distinguish role value from SlotKind when reading relation signatures.
Role relation structure remains context-local and bounded.Cross-context reuse requires explicit alignment rather than silent synonymy.

Rationale

Roles are needed because holons participate in different contexts without changing their substantial identity. A role value gives this context-local participation a name. The pump remains the same pump while being a cooling circulator in one context and test article in another. The engineer remains the same person while holding verifier or author roles in different work packages.

The selected ontology keeps three levels separate:

  1. U.Role: the context-bound role value.
  2. U.RoleAssignment: the typed relation value linking holder, role, context, and window.
  3. Neighboring values: capability, method, method description, work plan, work occurrence, evidence-use relation, status-use relation, source-use relation, publication-use relation, and role description.

This is a compact architecture. It avoids type explosion, but it also avoids the opposite error of making role a generic slot word for anything that participates in anything else. A role is a real role value when an admitted U.System holder is being something in a bounded context for work, transformation, functioning, method, or attribution. Other participation claims use their own relation patterns.

SoTA-Echoing

Practice lineSelected source examplesWhat FPF adoptsUser-facing implication
Conceptual modeling with UFO and OntoUML treats roles as context-dependent, anti-rigid, relation-dependent descriptors rather than structural parts.Guizzardi et al., "UFO: Unified Foundational Ontology", Applied Ontology 2022; current OntoUML and UFO conceptual-modeling practice.Keep roles distinct from system kinds, mereological parts, and relation argument positions.A project can name VerifierRole or CoolingCirculatorRole without creating a new system subtype.
Bounded-context practice in domain modeling treats role names as local to a context and unsafe across boundaries without translation.Domain-driven design and socio-technical architecture practice around bounded contexts and explicit translation.Require bounded context for role use and reject global role meaning.Two teams can reuse the same role word only after context and alignment are named.
Assurance and evidence practice treats documents, standards, reports, datasets, and proofs as evidence or source objects rather than agents.Safety, assurance-case, model-card, provenance, and evidence-management practice; ISO 26262:2018 and NIST SP 800-53 Rev. 5 are ordinary engineering examples.Keep epistemes outside work-facing role holding.A standard, model card, theorem, report, or dashboard can be evidence or source material without becoming the doer of work.
Relation and signature modeling treat argument positions as relation positions, not as social or work roles.A.6.5 SlotSpec discipline and ontology-design-pattern practice for typed relation positions.Keep SlotKind and role value distinct."Argument role", "parameter role", and "field role" are repaired through relation-slot discipline before any role claim is made.

Relations

Builds on: A.1 for holon and system grounding; A.6.5 for SlotSpec discipline; E.24 for ontic and slot-relation discipline; A.6.RSIR for first-level wording-use recovery.

Governs with: A.2.1 for role assignment; A.2.2 for capability; A.2.5 for role state; A.2.7 for role relation structure and role-algebra lens boundary; A.15 for role-method-work alignment; Part F role-description and naming patterns for durable role names.

Keeps separate from: A.10, B.3, C.2.1, C.28, E.17, F.10, and direct evidence-use, status-use, source-use, publication-use, requirement-use, definition-use, explanation-use, assurance-use, and gate patterns for episteme use.

Precision-restoration applications: If source wording uses "role" for interface, signature, argument, field, parameter, capability, method, function, concern, interest, status, evidence, or publication, apply A.6.RSIR only until the governed object or claim kind is recovered, then apply the direct governing pattern.

A.2:End

U.RoleAssignment - System Role Assignment

Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative

Use This When

Plain name. System role assignment.

Use this pattern when another claim must rely on which admitted U.System holds which enactment-facing U.Role, under which role vocabulary and interpretation scheme, during which assignment window.

Typical moments:

  • a method description names InspectorRole, but the current holder and assignment window are still unstated;
  • a performed-work attribution is needed: one exact dated Work occurrence W and one exact assignment RA participate in performedUnderAssignment(W, RA), the direct relation governed by F.6; the actual performer is the admitted holder System S = RA.HolderSystemSlot, and a separate assertion may designate W and RA;
  • the same system receives the same role during two separate assignment episodes;
  • a DDD-style model-use organization changes the interpretation of an otherwise identical role assignment;
  • a constituting decision or installation relation may establish a specialized assignment occurrence;
  • a roster entry, configuration line, observation, or evidence relation may support an assignment claim without becoming an assignment slot.

Primary EntityOfConcern. The EntityOfConcern is one obtaining U.RoleAssignment relation occurrence. Its four required actual participants are an admitted U.System holder, one U.Role value, the role-taxonomy episteme, and the effective U.ReferenceScheme under which that value is interpreted. The occurrence has a maximal continuous temporal extent determined by uninterrupted obtaining; an assignment assertion or occurrence description may state the currently known extent as an AssignmentInterval.

Primary working reader. The first reader is an engineer-manager, analyst, method author, or FPF author who must make role admission or work attribution inspectable without turning role, capability, method, performed work, evidence, or publication into one assignment relation occurrence.

First useful move. Write a readable assignment assertion naming the four required participants and the assignment episode being claimed. State the currently known temporal extent separately. Explicitly individuate the relation occurrence only when a receiving claim must distinguish this assignment episode from another rather than merely recognize that the direct relation obtains.

What goes wrong if missed. A role label is mistaken for an assignment, repeated episodes collapse into one timeless relation, or a database row is treated as what makes the assignment obtain. Work may then be attributed to the wrong holder or assignment episode, while evidence, capability, and method claims become hidden fields of the assignment.

What this buys. Assignment identity becomes stable enough for method admission, role-state checking, and work attribution while ordinary prose remains lightweight. The assignment relation has one exact identity rule; all support, decision, capability, method, work, evidence, and publication claims keep their direct governing patterns.

Not this pattern when.

  • Use A.2 for role-value interpretation and the role taxonomy itself.
  • Use A.2.2 for holder capability, A.2.5 for role state, and A.2.7 for selected relations among role values.
  • Use A.3.1, A.3.2, and A.15 for method and role-admission conditions.
  • Use A.15.1 and F.6 for performed work and its attribution through an assignment.
  • Use the direct decision, responsibility, commitment, evidence, reliance, provenance, publication, external-rule, or currentness pattern when that relation is current.
  • Use A.6.5 when an external relation notation labels a participant role and the current task is to recover its exact SlotKind and ValueKind.

Problem Frame

A role value does not assign itself. InspectorRole may be understood under a role taxonomy, yet no robot, person, or service holds it until an assignment relation obtains. Conversely, the same system can hold several roles without changing system identity, and the same holder-role pair can enter several assignment episodes.

An admitted holder may be a person or another kind of U.System. Holding the role does not by itself establish consciousness, intention, legal or ethical accountability, permission, or gate passage; each stronger claim needs its direct governing pattern.

Role meaning is local to a role-taxonomy episteme and effective reference scheme. Assignment locality therefore needs those four actual relation participants directly, not a mandatory U.BoundedContext. When an actual DDD-style model-use organization changes one receiving interpretation, the receiving assertion or work use may designate the selected BoundedModelUseStructure; the structure is not an optional participant of generic U.RoleAssignment.

Assignment is also not performed work. A current assignment may exist before any work occurs. When work does occur, the admitted holder System S = RA.HolderSystemSlot performs exact Work W under exact assignment RA; F.6 owns the direct performedUnderAssignment(W, RA) relation. Capability, role state, method admission, responsibility, assignment decisions, and evidence remain separate relations with their own obtaining and currentness conditions.

Problem

Without this pattern:

  1. a role name is used as if it identified a holder and assignment episode;
  2. role value, taxonomy episteme, interpretation scheme, holder, and time are compressed into one label;
  3. two assignments with the same holder and role but disjoint windows become one occurrence;
  4. assignment is treated as proof of capability, method admission, role state, performed work, or authorization;
  5. a constituting assignment decision or installation relation and epistemic evidence or provenance collapse into one untyped justification field;
  6. an optional DDD model-use structure is made mandatory or identity-bearing without showing that it changes interpretation.

Forces

ForceTension
Readable assertion vs explicit occurrence identityMost conversations need only a direct sentence; later work attribution may need a stable relation reference.
Stable participant meanings vs repeated episodesHolder, role, taxonomy, and scheme may stay the same while an interruption ends one occurrence and a later resumption begins another. A temporal description must report that distinction without turning the interval into a fifth participant.
Semantic locality vs mandatory U.BoundedContextRole taxonomy and reference scheme supply generic assignment locality; any interpretation-changing model-use structure is designated by the receiving assertion or use.
Assignment traceability vs slot overreachEvidence and assignment-establishing work may support the claim without becoming generic assignment slots.
Assignment vs enactmentA system can hold a role without performing work, and performed work can only be claimed through its own dated occurrence.

Solution

State the direct assignment in readable prose first. When another claim needs reusable participant typing or occurrence identity, use the RelationSignature for U.RoleAssignment governed here and declared through A.6.0 and A.6.5. The signature is an episteme about the relation kind; it is not the world-side assignment occurrence. Its SlotSpecs are:

SlotKindValueKindrefModeMeaning in U.RoleAssignment
HolderSystemSlotU.SystemU.EntityRefA reference resolving to the admitted system that holds the role.
RoleValueSlotU.RoleByValueThe enactment-facing role value.
RoleTaxonomyEpistemeSlotU.EpistemeU.EpistemeRefA reference resolving to the exact role-taxonomy episteme used for interpretation.
EffectiveReferenceSchemeSlotU.ReferenceSchemeByValueThe reference-scheme value effective for this assignment.

The four SlotSpecs declare all participant meanings of generic U.RoleAssignment. No SlotSpec is declared for the occurrence's temporal extent or for a selected model-use structure used only to qualify a receiving interpretation.

AssignmentInterval is a local content ValueKind for an assignment assertion or relation-occurrence description, not a U-kind and not the ValueKind of a relation-participant SlotSpec. An assignmentInterval field states the currently known temporal extent through a temporal reference, a start boundary, an end boundary or explicit open end, and the continuity claim used to recognize one uninterrupted assignment episode. The world-side occurrence has that temporal extent under its direct identity rule. The field describes the extent and does not make the relation obtain. A shift label is sufficient only when those temporal facts can be resolved. C.27.TA governs fuller temporal-aspect description when the temporal reference or interval itself becomes a relied-on object.

U.RoleAssignment obtains when the admitted system holds the role value, interpreted by the named role-taxonomy episteme under the effective reference scheme, throughout one continuous assignment episode. An assignment assertion is a U.Episteme claiming that this relation obtains. A roster entry or configuration line may express that assertion, and a publication may expose it; evidence may support relying on it. None of those epistemic or representation-side objects makes the world-side relation obtain merely by existing.

Relation-Occurrence Identity

Do not replace the identity rule with a tuple key. One generic U.RoleAssignment occurrence begins when the assignment predicate starts obtaining for one fixed holder system, role value, role-taxonomy episteme, and effective reference scheme. It continues while that predicate obtains without interruption for those same four actual participants. It ends when the predicate ceases to obtain or one of those participants changes. A later resumption starts another occurrence.

An assignment assertion or occurrence description may carry an AssignmentInterval stating the currently known temporal extent of that occurrence. [start, open] can designate the current episode before its end is known. Recording the end boundary later refines the description of the same occurrence when obtaining was continuous. A gap in available evidence remains unknown and does not by itself split the occurrence. A demonstrated period of non-assignment ends the occurrence; a later resumption begins another. Two descriptions refer to the same occurrence only when they resolve to the same four participants and to temporal information belonging to that one uninterrupted period.

A selected model-use structure does not enter generic assignment identity. A genuinely structure-dependent relation species requires its own direct pattern, a required identity-bearing structure participant, a stronger predicate, and an explicit occurrence-identity rule.

Filling the Declared Slots

Resolve HolderSystemSlot through U.EntityRef and check that its referent is an admitted U.System. Embed RoleValueSlot and EffectiveReferenceSchemeSlot by value. Resolve RoleTaxonomyEpistemeSlot through U.EpistemeRef to the exact episteme edition used for interpretation. If a receiving assertion or work use depends on a selected BoundedModelUseStructure, designate that structure in the receiving episteme or use relation under its direct governor.

Those four required designations correspond to the actual participants under the declared participant meanings. State the currently known temporal extent separately as assignmentInterval in the assertion or occurrence description. Assignment decision, responsibility, evidence, provenance, installation work, role state, capability, performed work, selected model-use structure, and publication remain separate objects or relation occurrences under their own governing patterns.

Well-Formedness Predicates

RA-1 HolderAdmission:
  the U.EntityRef filling HolderSystemSlot resolves to an admitted U.System.

RA-2 RoleInterpretation:
  the U.Role filling RoleValueSlot is interpreted through the exact
  taxonomy episteme and effective reference-scheme fillings.

RA-3 AssignmentEpisode:
  the assignment predicate obtains without interruption for the four required
  actual participants; any assignmentInterval states the currently known
  temporal extent in an assertion or occurrence description.
RA-4 NoAssignmentOverread:
  the assignment occurrence alone does not establish capability,
  role state, method admission, performed work, responsibility,
  authorization, evidence sufficiency, or publication currentness.

RA-5 InterpretationQualification:
  any selected model-use structure is designated by the receiving assertion
  or work use, not as a participant of generic U.RoleAssignment.

An evidence gap makes the assignment claim unknown or unrecovered; it does not demonstrate that the assignment predicate failed. A demonstrated non-assignment interval, by contrast, ends the current occurrence.

Demand-Driven Materialization

Ordinary use can stop at a readable direct assertion:

During Shift-17, Robot-7 holds InspectorRole as interpreted by
MaintenanceRoles-2026 under Maintenance-Scheme-A.

Expose the relation occurrence explicitly only when a receiving claim needs to refer to it, distinguish it from another episode, or use it as a participant. If any required participant filling or the continuity of the assignment episode cannot be recovered, keep the assertion reduced or lower the receiving claim. Do not insert a dummy filling or put a value of another kind into a declared slot.

Direct Neighboring Relations

Current questionDirect exitWhy it stays separate
Is the holder able to do the work?A.2.2 capability and capability-fit relationAssignment does not create ability.
Is the assignment in an enactable state now?A.2.5 role-state relationState predicate, evidence, and state window differ from assignment identity.
Which method admits this role?A.3.1, A.3.2, A.15Method and method-description claims do not assign a holder.
Was work performed under the assignment?A.15.1, F.6U.Work is a dated occurrence and has its own identity.
What helps constitute a specialized assignment?direct decision, installation, responsibility, or commitment relationIt is constitutive only when the specialized assignment ontology says so.
What supports knowledge or use of the assignment claim?direct evidence, reliance, or provenance relationIt refers to the assignment occurrence or assertion without making the world-side relation obtain.
Does a DDD organization change this receiving interpretation?A.1.1 plus the receiving assertion or work-use patternThe receiving episteme or use may designate the selected structure; generic U.RoleAssignment gains no optional participant.

A constituting decision, installation relation, or another assignment-establishing occurrence can help make a specialized assignment relation obtain only when that direct ontology says so. Evidence, reliance, and provenance relations instead support knowledge or use of the assignment claim. Do not use epistemic support as the world-side constituting condition by default.

Performed-Work Attribution

When dated work is performed under role holding, name the admitted holder System, exact Work, and exact assignment directly:

Robot-7 performed InspectionWork-17 under RoleAssignment-17.
performedUnderAssignment(InspectionWork-17, RoleAssignment-17)

Robot-7 is the admitted System in RoleAssignment-17.HolderSystemSlot. [A.15.1](/generated/patterns/A.15.1) governs InspectionWork-17; [A.2.1](/generated/patterns/A.2.1) governs RoleAssignment-17; [F.6](/generated/patterns/F.6) owns the attribution relation. The assignment does not prove that work occurred, and the work occurrence does not alter assignment identity.

If source wording says RoleEnactment, recover the dated U.Work occurrence, exact U.RoleAssignment, admitted holder System, and direct performedUnderAssignment(W, RA) relation. Do not introduce a second run-time U-kind or relation occurrence beside work and assignment.

Legacy Context Shorthand

Holder#Role:Context@Window is source notation, not the assignment ontology. Context is an untyped source label here. Recover the exact referent, its kind, and the direct relation that makes it relevant. If it denotes an independently selected BoundedModelUseStructure that changes a receiving interpretation, designate that structure in the receiving assertion or work use. Otherwise keep the recovered referent in its own direct relation; never invent a generic context or model-use participant for U.RoleAssignment.

Archetypal Grounding

Robot Assigned for One Inspection Shift

RoleAssignmentAssertion:
  participantDesignations:
    HolderSystemSlot: Robot-7
    RoleValueSlot: InspectorRole
    RoleTaxonomyEpistemeSlot: MaintenanceRoles-2026
    EffectiveReferenceSchemeSlot: Maintenance-Scheme-A
  assignmentInterval: [2026-07-13T09:00, 2026-07-13T17:00]

The four SlotKind-labelled fields designate the actual relation participants. The assignmentInterval field states the assertion's temporal description of the occurrence; it is not a fifth relation-participant designation. During the shift, the direct assignment predicate obtains for the four actual participants—Robot-7, InspectorRole, MaintenanceRoles-2026, and Maintenance-Scheme-A; the displayed RoleAssignmentAssertion states those participant designations and describes the occurrence's temporal extent. Sensor capability, current role state, the inspection method, and any performed inspection work remain separate claims.

Repeated Assignment Episodes

Robot-7 is assigned the same role again on the next day under the same taxonomy and scheme. The four stable participant fillings match, but the assignment predicate does not obtain continuously across the two shifts. The second shift is therefore another U.RoleAssignment occurrence. A staffing table that reuses one row identifier must not collapse the two world-side episodes.

Motor Holding a Drive Role

RoleAssignmentAssertion:
  participantDesignations:
    HolderSystemSlot: Motor-M1
    RoleValueSlot: DriveMotorRole
    RoleTaxonomyEpistemeSlot: PumpAssemblyRoles-v4
    EffectiveReferenceSchemeSlot: Pump-A-Operating-Scheme
  assignmentInterval: [2026-07-01T08:30, open]

The open end says that this episteme does not yet state the occurrence's end. Extending or later closing that temporal description does not create another assignment while the direct predicate obtains continuously for the same four participants. The holder is the motor as a U.System. Pump Assembly A is the actual system in which installation and work occur; it is not an assignment context slot. Torque capability, electrical interface relations, installation work, and a later pumping run remain direct neighboring claims.

DDD Model-Use Structure Changes a Receiving Interpretation

Two software teams use ApproverRole under different model vocabularies. In the fulfilment model it admits acceptance of a fulfilment-state transition; in the payment model it admits payment authorization. The generic assignment still has exactly four participants:

RoleAssignmentAssertion:
  participantDesignations:
    HolderSystemSlot: ApprovalService-2
    RoleValueSlot: ApproverRole
    RoleTaxonomyEpistemeSlot: FulfilmentRoles-v3
    EffectiveReferenceSchemeSlot: Fulfilment-Approval-Scheme
  assignmentInterval: [2026-07-13T10:00, 2026-07-13T18:00]

ReceivingInterpretationUse:
  roleAssignmentRef: ApprovalService-2-ApproverAssignment
  selectedModelUseStructureRef: Orders-Fulfilment-ModelUseStructure

The second block belongs to the receiving assertion or work use. It does not add a fifth participant to U.RoleAssignment and does not change generic occurrence identity. The selected structure was independently recovered under [A.1.1](/generated/patterns/A.1.1); it neither assigns the service nor performs approval work. If a future dependent relation species truly obtains only with one selected structure, its direct pattern must declare that structure as a required identity-bearing participant.

Reviewer and Review Report

ReviewService-4 holds ReviewerRole through ReviewService-4-ReviewerAssignment and, as that assignment's admitted holder System, performs ReviewWork-82 under it through F.6 performedUnderAssignment(ReviewWork-82, ReviewService-4-ReviewerAssignment). ReviewReport-82 is a separately identified U.Episteme; when the work first constitutes that exact episteme and the inception claim matters, A.15.PROD recovers the local work/change/identity claim. Its content may state a review judgment under the direct evaluation pattern. A later evidence relation may use the report for another claim; the report never fills HolderSystemSlot merely because it is useful.

Bias Annotation

Bias riskFailureRepair
Record-first biasA roster row or database identifier is treated as the assignment occurrence.State the assignment predicate and apply the direct occurrence-identity rule; keep the row as an assertion or publication.
Universal-context biasEvery assignment receives a U.BoundedContext or optional model-use participant.Use the four exact generic participants; place any selected model-use structure in the receiving assertion or use.
Assignment-as-work driftCurrent assignment is treated as evidence that work happened.Name exact dated U.Work W, exact assignment RA, and the admitted holder System S = RA.HolderSystemSlot; state that S performed W under RA through F.6 performedUnderAssignment(W, RA).
Assignment-as-capability driftHolding a role is treated as proof of ability.Use A.2.2 and a capability-fit relation.
Episteme-as-holder driftA standard, report, model, or dataset fills HolderSystemSlot.Keep the episteme in its direct evidence, reliance, external-rule, or publication relation.
Structure-qualification driftA selected model-use structure is appended to the generic signature without changing its obtaining law.Keep the designation in the receiving assertion or use; admit a dependent species only through its own direct pattern and stronger identity law.

Working Guidance

  1. State the assignment predicate in ordinary language.
  2. Name the four required relation participants, then state the currently known temporal extent separately as an AssignmentInterval in the assertion or occurrence description.
  3. Decide whether a receiving use needs explicit occurrence identity. Stop at the readable assertion when it does not.
  4. Distinguish repeated episodes by temporal extent; do not use a database row identifier as the discriminator.
  5. Keep capability, role state, method admission, performed work, responsibility, decision, evidence, reliance, provenance, and publication under their direct patterns.
  6. When a selected model-use structure changes a receiving interpretation, designate it in that receiving assertion or use; do not extend the generic assignment signature.
  7. For old Context shorthand, recover its exact referent, kind, and direct governing relation before continuing.

Conformance Checklist

IDCheck
CC-A2.1-1The relation predicate states when one admitted U.System holds one U.Role.
CC-A2.1-2The RelationSignature declares each participant through one complete SlotSpec with exact SlotKind, ValueKind, and refMode.
CC-A2.1-3AssignmentInterval is assertion or occurrence-description content, not a relation-participant SlotSpec; it states one currently known continuous temporal extent.
CC-A2.1-4The identity rule uses the four stable participant fillings plus uninterrupted obtaining of the assignment predicate; representation keys remain separate.
CC-A2.1-5Closing an open interval can refine the same uninterrupted occurrence; a demonstrated non-assignment gap ends it.
CC-A2.1-6Generic U.RoleAssignment has exactly four participants; any selected model-use structure is designated only by a receiving assertion or use.
CC-A2.1-7Role state, capability, method admission, work, responsibility, decision, evidence, reliance, provenance, and publication are not assignment slots.
CC-A2.1-8Performed work is attributed through direct performedUnderAssignment(W, RA); the actual performer is the admitted System in RA.HolderSystemSlot.
CC-A2.1-9An assignment assertion, roster row, identifier, and publication remain epistemic or representational objects distinct from the relation occurrence.
CC-A2.1-10Every reference filling has its exact RefKind and resolves to the ValueKind declared by that SlotSpec.
CC-A2.1-11An evidence gap is not treated as a demonstrated interval in which the assignment predicate failed.
CC-A2.1-12Reduced use stops before explicit individuation when no receiving use needs an assignment reference.

Common Anti-Patterns

Anti-patternWhy it failsRepair
Alice is reviewer, used for work attributionTaxonomy, scheme, and assignment episode are unavailable.Recover the four required participant fillings and the continuous assignment episode before attributing exact Work W under it through performedUnderAssignment(W, RA).
Alice#ReviewerRole:ReviewContext@WindowThe token hides the kind behind Context and omits taxonomy and scheme.Expand to the exact U.RoleAssignment declaration and recover the denoted value and its kind through the direct pattern.
One assignment row reused for every shiftStorage identity collapses repeated relation occurrences.Identify each assignment episode by its temporal extent under A.6.REL.
Assignment proves workRole holding is confused with dated enactment.Name exact U.Work W, exact assignment RA, its admitted holder System, and the direct performedUnderAssignment(W, RA) relation.
Durable RoleEnactment kind or occurrenceA derived attribution duplicates Work and assignment.Let A.15.1 govern the exact Work occurrence and F.6 alone govern performedUnderAssignment(W, RA); do not create another enactment kind or occurrence.
Report holds EvidenceRoleAn episteme is made a system holder.Use the direct evidence relation around the report and claim.

Consequences

GainCost or tradeoff
Assignment episodes become referenceable and distinguishable.Reliance-bearing use must recover the required participant fillings and continuity of the assignment episode.
Ordinary prose remains lightweight.Authors must decide when a receiving use really needs explicit occurrence identity.
Role meaning no longer depends on a mandatory U.BoundedContext.Taxonomy episteme and reference scheme must be named rather than assumed.
Work attribution becomes inspectable without a duplicate enactment occurrence.Assignment and Work must remain distinct occurrences linked by performedUnderAssignment(W, RA), with the admitted System in RA.HolderSystemSlot named as actual performer.
Evidence and assignment-establishing decisions keep their own ontology.A single assignment row can no longer hide every supporting claim.

Rationale

U.RoleAssignment is admitted because a role value and holder identity answer different questions. U.Role is the admitted kind for role values; one exact role value carries the work-facing participation meaning. One obtaining assignment occurrence RA : U.RoleAssignment relates one admitted System to that role value through one role-taxonomy episteme and one effective reference scheme over its maximal continuous extent. A separately identified assignment assertion or description may designate those four participants and state the occurrence's temporal extent. U.Work is the admitted kind for work individuals; one W : U.Work is the world-side dated occurrence. A separate assertion or record may say that W occurred and state its obtaining relations.

The assignment is a relation occurrence, not a relation value stored in a row. Its participant meanings and temporal episode provide the domain identity required by A.6.REL. This prevents two opposite errors: treating every role label as a complete assignment, and requiring explicit assignment-occurrence individuation for casual recognition text.

The role-taxonomy episteme and effective reference scheme provide semantic locality directly. They remove the need for mandatory U.BoundedContext. A selected model-use structure remains available to a receiving assertion or work use without becoming an agent, role taxonomy, generic assignment participant, or identity component.

SoTA-Echoing

Practice lineSource and statusFPF mutationPractical consequence
Current foundational ontology distinguishes role-like classification, relation aspects, and explicit relation occurrences.Almeida, Guizzardi, Sales, and Fonseca, gUFO, 2026 preprint; used as a current comparator rather than an imported hierarchy.Keep role value, assignment relation occurrence, participant SlotKinds, and performed work distinct; apply FPF's own holder and occurrence-identity rules.The same system can hold several roles and enter repeated assignments without new system kinds.
DDD makes model interpretation local to an actual model-use organization.Eric Evans, Domain-Driven Design Reference, 2015 mature reference; Evans, Context Mapping with an AI-based Component, 2026 current worked practice.Let a receiving assertion or work use designate a selected BoundedModelUseStructure only when that organization changes the receiving interpretation; taxonomy and scheme remain the generic assignment participants.Physical and organizational assignments need no fabricated U.BoundedContext, while a real DDD use can retain its selected structure without changing generic relation identity.
FPF relation-occurrence discipline separates predicate obtaining, assertion, explicit individuation, identifier assignment, and reference use.Current A.6.REL line.Materialize a role-assignment occurrence only when another claim needs its identity; use temporal extent to distinguish repeated episodes.A staffing sentence stays readable, while a work-attribution claim can reference the exact shift assignment.

Relations

Builds on: A.2 for U.Role; A.6.REL for relation obtaining and occurrence identity; A.6.5 for SlotSpec discipline; C.2.1 for the role-taxonomy episteme and effective reference scheme.

Coordinates with: A.2.2 for capability; A.2.5 for role state; A.2.7 for selected role relation structure; A.3.1, A.3.2, and A.15 for method admission; A.15.1 and F.6 for performed-work attribution.

Uses when current: A.1.1 for an optional selected model-use structure; F.9 and A.6.9 for cross-scheme alignment; direct responsibility, decision, evidence, reliance, provenance, currentness, and publication patterns for claims about the assignment occurrence.

Does not replace: role value, role state, capability, method, work, assignment decision, evidence, publication, or their descriptions.

A.2.1:End

U.Capability - System Ability Envelope and Measures

Status: Stable

U.Capability is the FPF object for "can do within bounds".

Use this pattern when a project claim says that a person, team, machine, software service, organization, composite cell, or other system can produce a kind of result, perform a class of work, or meet a performance threshold. The claim is about a holder's capability instance, not about who is assigned, which method is described, which work occurred, or what was promised to another party.

Primary EntityOfConcern. The EntityOfConcern is U.Capability: an E.24.UK-admitted dependent durable U-kind name for holder-dependent capability instances. An individual U.Capability instance is a holder-dependent concrete governed object of a named U.System, recognized as that system's ability to perform a work family or produce a result class within a declared envelope, measure set, qualification window, and currentness condition. A statement, report row, certification, evidence relation, source-use relation, dashboard display, or currentness assessment about that instance is a neighboring governed record or relation, not the capability instance itself.

Primary working reader. A manager, architect, engineer, safety assessor, scheduler, or model author who needs to decide whether a holder can be used for a work claim, method step, service promise, or architecture move without smuggling role assignment, method description, past work, evidence, or quality wording into the capability instance.

First useful move. Ask: who is the holder system, what work family or result class is the ability about, under what envelope, with what declared measures, during which qualification window, and which separate statement, evidence relation, source-use relation, or currentness assessment currently supports reliance on that capability?

What goes wrong if missed. A role label becomes a hidden proof of ability, a method description is treated as if it can perform work, a single successful run is generalized into a stable ability, or a promise is made without a measured capability behind it.

What this buys. Capability becomes checkable and reusable: a work-admission claim can test role assignment, role state, method-side admission conditions, and capability thresholds separately.

Not this pattern when.

  • If the current claim is who holds a work-facing role in a bounded context, use A.2.1.
  • If the current claim is whether that assignment is in an enactable state, use A.2.5.
  • If the current claim is a role value, role description, role name, role relation structure, or role bundle, use A.2, Part F role patterns, or A.2.7.
  • If the current claim is a way of doing, use A.3.1; if it is an episteme describing that way, use A.3.2.
  • If the current claim is dated performed work or planned work, use A.15, A.15.1, or A.15.2.
  • If the current claim is a promise to others, use the promise-content and commitment patterns.
  • If the current claim is evidence, source, status, assurance, publication, or description use of an episteme, use the direct episteme-use pattern. Do not make the episteme a capability holder.
  • If the current claim is one measured aspect with a declared scale, use U.Characteristic through C.16.P, A.19, and the current characteristic or scale owner.
  • If the current claim is a composite quality family such as availability, resilience, security, or maintainability, use C.25 Q-Bundle.
  • If the current claim is an architecture-characteristic starter head, project criteria row, architecture eval reading, or architecture-description concern, use C.32.HCS, C.32.ACS, C.32.ACE, or C.30 as applicable.

Problem Frame

In ordinary work, the same sentence often carries several typed values:

  • "The welding robot is the welder on this line."
  • "The welding robot can weld seam type W at 12 seams per minute."
  • "The welding procedure says how to weld seam type W."
  • "The robot welded batch B at 10:20."
  • "The supplier promises 12 seams per minute."

Only the second sentence can support a U.Capability instance when the holder, work family, envelope, measures, and currentness conditions are recoverable. The sentence itself is a statement about the capability instance. The others may be role assignment, method description, performed work, or promise content. When FPF collapses them, project reasoning becomes brittle:

  1. Role assignment becomes fake ability. "Assigned as verifier" is treated as "able to verify".
  2. Method description becomes fake ability. A recipe or algorithm is treated as if it can execute itself.
  3. Past work becomes fake ability. One successful work occurrence is treated as stable capacity.
  4. Promise content becomes fake ability. A service promise hides the real system envelope and measured bounds.
  5. Description becomes fake holder. A standard, report, model card, or dashboard is said to "have capability" because it is useful in a capability argument.
  6. Unbounded ability becomes unreviewable. "Can machine titanium" does not name conditions, measures, version, calibration, or currentness.

Kind and Boundary

U.Capability is retained as a dependent durable U-kind name under E.24.UK. A concrete U.Capability instance is the holder-dependent capability instance of a named U.System; its identity is grounded by the holder, work family or result class, envelope, measure set, qualification window, and currentness condition. The statement that asserts the ability, the evidence that supports reliance, and the fit predicate that tests work admission are separately governed records or relations rather than the U.Capability instance.

CapabilityUKindAdmissionDecision:
  CandidateSpelling: U.Capability
  Disposition: retained as dependent durable U-kind name
  E24Settlement: dependent capability instance under the named U.System holder settlement, governed here by A.2.2
  RootSubjectUKind: U.System holder whose ability is being stated
  DependentInstance: holder-dependent concrete U.Capability instance
  semanticArea: system ability, work admission, capability planning, and method threshold use
  ontologicalNeighborhood: U.System holder, U.RoleAssignment, U.Method, U.MethodDescription, U.WorkPlan, U.Work, U.Characteristic, Q-Bundle, architecture-characteristic row, evidence relation, source-use relation, currentness assessment, and capability-fit predicate
  IdentityGroundingOrRecognitionRule: holder plus work family or result class plus envelope plus measure set plus qualification window plus currentness condition
  admissibleUse: state or test that a named holder can perform a work family or produce a result class within declared bounds for planning, promise support, role-method-work admission, or architecture move feasibility
  nonUseBoundary: do not use U.Capability for statements, reports, evidence, source-use relations, currentness assessments, characteristics, Q-Bundles, architecture-characteristic rows, fit predicates, role assignments, method descriptions, work plans, or work occurrences
  NonUSubstitutionBoundary: statements, evidence, source-use relations, currentness assessments, Q-Bundles, characteristics, architecture-characteristic rows, and fit predicates do not become U.Capability

ConcreteCapabilityInstance:
  CapabilityHolderRef: U.System
  WorkFamilyOrResultClassRef:
  CapabilityEnvelope:
  CapabilityMeasureSet:
  QualificationWindow:
  CapabilityCurrentnessCondition:
  DependentInstancePolicy: dependent on holder identity and declared envelope/measure/window boundary

SupportAndUseReferencesAroundCapability:
  CapabilityStatementRefs?: governed episteme or publication records that describe the instance
  EvidenceRelationRefs?: governed evidence relations that support reliance
  SourceUseRelationRefs?: governed source-use relations used to justify or constrain the statement
  CurrentnessAssessmentRefs?: dated assessment relations evaluating the currentness condition
  CapabilityFitConditionRefs?: admission predicates or gate relations that test this instance for a use

CapabilityHolderRef. The holder is a U.System: a physical system, cyber system, socio-technical system, organization, team, composite cell, software service as deployed system, or other acting holon admitted as system for the claim. A role assignment, method, method description, work record, episteme, publication, standard, or dashboard is not the capability holder merely because it appears in the sentence.

WorkFamilyOrResultClassRef. The ability is about a class of work results or a method family the holder can enact. It may refer to a U.Method, U.MethodDescription, method family, result class, or work family, but the reference does not turn the method or description into the holder.

CapabilityEnvelope. The envelope states the bounded conditions under which the ability holds: input range, environment, resources, configuration, system version, calibration state, staffing composition, access constraints, safety limits, or other current conditions.

CapabilityMeasureSet. The measures state achieved or required bounds with units, scales, tolerances, success predicates, reliability, throughput, latency, precision, defect rate, or other declared characteristics. A measure may cite a U.Characteristic, Q-Bundle slot, or architecture-characteristic criteria row as an input for a capability-fit check, but that characteristic, Q-Bundle, or architecture row does not become the capability.

QualificationWindow. Capability is stable enough to plan with but not timeless. The instance may depend on software version, calibration horizon, team training state, wear, operating season, regulatory state, or other temporal currentness relation.

CapabilityStatementRefs. A CapabilityStatement is a governed episteme or publication-side record that says a capability instance exists, describes its holder, envelope, measures, and window, or cites it for planning. It is not U.Capability, but it is still a governed record under its own episteme or publication pattern.

EvidenceRelationRefs and SourceUseRelationRefs. Evidence, tests, certifications, prior work summaries, simulations, audit records, standards, and model results can justify a capability statement through direct evidence or source-use relations. These are governed relations or records. They do not become the capability and do not become its holder.

CurrentnessAssessmentRefs. A currentness assessment is a dated assessment relation saying whether the capability instance remains usable under its qualification window and current conditions. It is not the capability instance, but it is still a governed assessment relation. CapabilityCurrentnessCondition states what must remain true; an assessment evaluates that condition.

CapabilityFitConditionRefs. A capability-fit condition is an admission predicate, threshold, or gate relation that tests a holder capability and any declared characteristic, Q-Bundle, or architecture-characteristic inputs against a current role, method step, work plan, work occurrence, bounded context, or gate need. It is a governed relation or predicate. Unless a separate E.24.UK admission is written, it is not a U.* kind.

Neighboring-term boundary. When a neighboring pattern uses U.WorkScope, recover the set-valued condition part of CapabilityEnvelope: the inputs, environment, resources, configuration, and assumptions against which an intended work slice is checked. When it uses U.WorkMeasures, recover CapabilityMeasureSet. JobSlice names the intended work slice for a work-admission check. QualificationWindow names the temporal currentness relation for the capability instance. These are neighboring governed terms, not substitute names for U.Capability.

Positive Solution

Use U.Capability when the object under discussion is the holder's ability to achieve a result class within a declared envelope and measure set.

Minimal capability instance:

ConcreteCapabilityInstance:
  holder: U.System
  canDo: WorkFamilyOrResultClass
  envelope: CapabilityEnvelope
  measures: CapabilityMeasureSet
  qualificationWindow: QualificationWindow
  currentnessCondition: CapabilityCurrentnessCondition

Separate supporting record:

CapabilityStatementRecord:
  describedCapabilityRef: ConcreteCapabilityInstance
  statementSourceRef:
  evidenceOrSourceUseRefs:
  currentnessAssessmentRefs?:

Plain sentence form:

<System> can perform <work family or result class>
within <envelope>
at <measures>
during <qualification window>,
with <evidence or source-use relation>.

This sentence form is a publication or statement about the capability instance. It is deliberately not a method description. It does not list the step order or algorithm. It also does not assign the holder to a role, assert that a work occurrence happened, prove an architecture characteristic, or make the evidence relation into the capability.

Separation From Neighboring Values

Source wordingRecovered FPF values
"Engineer role can approve the design."U.Role and U.RoleAssignment for who may act; U.Capability only if the holder's ability to approve is being measured or qualified.
"The robot is assigned as welder."U.RoleAssignment; add U.Capability only if the claim also says the robot can meet a welding envelope and measures.
"The solver has the scheduling algorithm."U.MethodDescription or deployed software-system relation; U.Capability only for the deployed system's ability to produce schedules within bounds.
"The report has evidence capability."Evidence-use relation around an episteme; no capability holder unless a system can perform evidential work.
"The team did one successful run."U.Work occurrence; capability only after a separate capability instance is established with envelope, measures, and currentness.
"We promise five-day close."Promise content and commitment; capability is the holder-dependent capability instance that makes the promise credible.
"The architecture provides resilience capability."Architecture-characteristic or Q-Bundle material under C.30, C.32.HCS, C.32.ACS, and C.25; add U.Capability only when a named holder system has a capability instance to produce or maintain a result class within a capability envelope. Resilience characteristics may constrain a capability-fit condition; they are not capability by name.

Work-Admission Use

A method step or work claim may require both role and capability conditions.

WorkAdmissionCheck:
  roleAssignmentCurrent: A.2.1
  roleStateAdmitsWork: A.2.5
  methodStepRequires: A.3.1 or A.3.2
  holderCapabilityRef: A.2.2
  capabilityFitCondition: admission predicate over declared capability measures and any named characteristic, Q-Bundle, or architecture-characteristic inputs
  performedWorkRecord: A.15.1 after execution

The checks are separate:

  • role assignment says who is acting in which context;
  • role state says whether that assignment is in a work-admitting state;
  • method or method description says what capability threshold is required;
  • capability names the holder's capability instance within the envelope, measure set, and window;
  • capability-fit condition tests whether that instance meets the current threshold or gate need;
  • performed work says what actually happened.

Do not put the threshold into the role name. Do not treat a role assignment as proof of ability. Do not let a capability instance perform the work. Do not treat a fit predicate, Q-Bundle, architecture-characteristic row, evidence relation, or currentness assessment as the capability instance.

Worked Cases

Manufacturing Cell

RobotArm_A is assigned as WelderRole on AssemblyLine_2026. That assignment alone says who is eligible to act in the line context.

The capability instance is separate; a statement or record may describe it:

ConcreteCapabilityInstance:
  holder: RobotArm_A
  canDo: Weld_MIG_v3 seam family
  envelope: steel grades S235-S355, ambient 18-30 C, argon mix 92-95 percent, torch T-MIG-07
  measures: bead width 6.0 mm plus or minus 0.2 mm, throughput up to 12 seams per minute, defect rate below 0.5 percent
  qualificationWindow: calibration valid through 2026-09-30
  currentnessCondition: calibration and configuration remain inside the qualification window
SupportAndUseReferencesAroundCapability:
  evidenceOrSourceUse: latest welding test report and calibration source relation

If a method step requires WelderRole and bead width tolerance below 0.2 mm, the role assignment and the capability are both checked. The assignment does not supply the tolerance, and the capability does not assign the robot to the shift.

Software Service as Deployed System

PlannerService_v4 is a deployed system. It may have capability to generate job-shop schedules for 50-500 jobs and 5-40 machines, with benchmark optimality above 0.95 and latency below 20 ms in PlantScheduling_2026.

The algorithm paper and method description are not the capability. The deployed system has the capability only while its version, dependencies, input range, and operational measurements satisfy the declared currentness condition; a benchmark report or model card is support for a statement about that instance.

Organization or Team

FinanceDept can close books for eight legal entities under IFRS with ERP v12, staffing at or above six qualified people, and close duration below five business days. That is a capability of the organizational system.

The monthly-close service promise is a promise content claim. The actual close for March 2026 is performed work. Staff assignments and role states are neighboring role claims. The capability instance keeps the ability of the department visible and measurable; the management report describing it is a statement about that instance.

Episteme Anti-Case

"ISO 26262 has safety capability" is not a capability statement about a holder-dependent capability instance. The standard is an episteme used as source, requirement, or assurance input. A safety engineering team or toolchain may have a capability to perform safety-case work using that standard within a declared envelope.

Capability Currentness and Lowering

Lower or reopen a capability instance, or lower reliance on a statement about it, when any of these changes:

  • the holder system changes composition, version, calibration, staffing, training state, toolchain, or environment;
  • the envelope no longer covers the intended work slice;
  • measures no longer meet the required threshold;
  • the qualification window expires or becomes contested;
  • evidence, source-use, test, audit, or simulation relations become stale or are reclassified, lowering the support or currentness assessment rather than becoming the capability;
  • the method or method description changes the required capability threshold;
  • the role assignment or role state changes, causing a work-admission claim to fail even though capability remains true;
  • a composite holder changes dependency conditions.

Repair the smallest object that changed. A stale calibration window lowers the capability currentness assessment and may lower reliance on the capability instance; it does not rewrite the role value. A failed role assignment lowers work admission; it does not by itself lower the holder's measured ability. A stale report lowers a statement or evidence relation before it lowers the capability instance itself.

Composite Capability

A composite system may have a capability that none of its parts has alone. Treat the composite as the holder.

ConcreteCapabilityInstance:
  holder: Cell_3
  canDo: place 12 PCB per minute
  envelope: feeder, vision, head, controller, and operator conditions
  measures: placement tolerance, throughput, fault rate
  qualificationWindow: current configuration and calibration window
  dependencyNotes: feeder and vision subsystem conditions

The concrete capability instance is asserted for Cell_3, not for every part and not for the method description. Dependencies may be named, but the bounded capability claim is about the composite holder.

Checklist

CheckQuestion
CC-A2.2-01Is the holder a U.System or acting holon admitted as system for this claim?
CC-A2.2-02Does the capability instance name the work family or result class?
CC-A2.2-03Does the capability instance name the envelope: inputs, environment, configuration, resources, constraints, or conditions?
CC-A2.2-04Does the measure set bind measurable bounds to units, scales, thresholds, predicates, declared U.Characteristic values, Q-Bundle slots, or architecture-characteristic rows without making those inputs the capability?
CC-A2.2-05Does the capability instance name the qualification window and currentness condition, while dated currentness assessments remain separate relations?
CC-A2.2-06Are statements, evidence, source-use relations, certifications, reports, dashboards, and currentness assessments expressed as neighboring support records or relations, not as U.Capability or capability holders?
CC-A2.2-07Are role assignment, role state, method-side admission or fit condition, performed work, and promise content kept separate?
CC-A2.2-08For work admission, are role, capability instance, and capability-fit predicate all visible when all are current?
CC-A2.2-09For composite holders, is the capability stated at the whole whose ability is being claimed?
CC-A2.2-10Are lowering and reopen conditions local enough to change only the affected capability instance, statement, evidence relation, currentness assessment, or fit predicate?

Anti-Patterns and Repairs

Anti-patternSymptomRepair
Role-as-capability"The inspector role can detect this defect."Keep the role value and role assignment; state capability for the holder system only when a currentness assessment supports reliance on the measured detection capability instance.
Assignment-as-capability"Assigned, therefore able."Use A.2.1 for assignment and A.2.2 for the holder-dependent capability instance.
Method-description-as-capability"The procedure has capability."Use U.MethodDescription for the episteme; use U.Capability for the system that can enact the method within bounds.
Work-as-capability"We did it once, so we can."Keep the work occurrence; add a separate capability instance only when envelope, measures, and currentness are justified.
Promise-as-capability"The SLA is our capability."Use promise content or commitment for what is offered; capability is the internal measured ability that makes the promise credible.
Episteme-as-holder"The report has assessment capability."Use evidence, source, status, or assessment relation for the episteme; capability holder remains a system.
Unbounded capability"The tool can machine titanium."Add material grade, tolerances, feed range, environment, version, qualification window, and measurement evidence.
Capability threshold in role nameHighPrecisionWelderRole hides a measured threshold.Keep role name clean; put the precision threshold in the method-side admission or fit condition and the holder capability instance.
Characteristic-as-capability"Low latency is a capability."Use U.Characteristic with declared scale for latency; add U.Capability only when a named holder can produce a result class within an envelope that includes the latency measure.
Q-Bundle-as-capability"Resilience is our capability."Use C.25 for the composite quality family; cite a capability only when a currentness assessment supports reliance on a holder-dependent capability instance and a fit predicate tests the relevant bundle slot.
Architecture-row-as-capability"Maintainability row gives capability."Use C.32.ACS for the architecture-characteristic criteria row; it may constrain a capability-fit condition but is not U.Capability.

Consequences

Benefits.

  • Planning separates "can do" from "is assigned now".
  • Method steps can name capability thresholds without putting extra meaning into role names.
  • Work records can be judged against the capability instance and fit predicate current at the time of work.
  • Promise content becomes less magical because the internal ability and measured envelope are explicit.
  • Composite-system ability can be stated at the right holder instead of scattered across parts.

Costs.

  • Capability tables need envelope, measures, and currentness fields.
  • Teams need to stop using role labels as shortcuts for ability.
  • Some old "function", "service", "process", and "algorithm" sentences need kind recovery before they can be used in FPF.

The cost is intentional: without it, FPF cannot distinguish authorization, ability, method, and performance.

SoTA-Echoing

Current practice or research lineWhat FPF takesPractical implication
Capability-based planning in defense and enterprise architecture keeps ability, mission need, activities, systems, and portfolio planning separate.The U.Capability name governs holder-dependent capability instances with envelope and measures; each instance is not a role, method, work record, promise, statement, evidence record, or quality bundle.A capability instance can be compared across candidate systems without selecting the implementation too early.
Current model-based systems engineering, including SysML v2 work, increases semantic precision and traceability between system model elements, requirements, measures, and stakeholder concerns.Capability instances name holder, result class, envelope, measures, and qualification window; statements, evidence, and currentness assessments remain separate typed values.The reader can see which object changed when a requirement, holder, measure, source, or context changes.
Current uncertainty and verification work for cyber-physical and autonomous systems treats operating conditions and currentness as first-class modeling concerns.Qualification windows and lowering triggers are part of the capability instance boundary; evidence, source-use refs, and currentness assessments support or lower reliance without becoming capability.A stale calibration, changed version, or out-of-envelope input lowers the currentness assessment or capability instance locally.
Modern access-control and zero-trust practice separates subject, role relation, current state, policy decision, and resource action.A role assignment or role state may admit a work attempt, but it does not grant capability."Allowed to act" and "able to achieve the measured result" remain separate checks.

Source-currentness note: DoDAF and TOGAF are used here as stable capability-planning practice lineage, not as the full current frontier. Current pressure comes from SysML v2 and 2025-2026 MBSE work on semantic precision, uncertainty, stakeholder-context formalization, and model integration. The NIST zero-trust line is used only for the split between current authorization and measured ability.

Relations

PatternRelation
A.1Supplies holon and system grounding.
A.2Governs U.Role; role values do not carry capability by label.
A.2.1Governs U.RoleAssignment; assignment relation can cite a holder that separately has capability.
A.2.5Governs role states and enactable-state admission; role state is not capability.
A.2.7Governs role relation structure; role-admission substitution or incompatibility does not create capability structure.
A.3.1Governs U.Method; method may require capability thresholds.
A.3.2Governs U.MethodDescription; a method description can describe required capability.
A.3.3Governs U.Dynamics, the state-space and transition-law episteme; dynamics may explain or predict capability but is not the holder-dependent capability instance.
A.15, A.15.1, A.15.2Govern method, plan, and performed work alignment; capability is one input to work admission, not work itself.
A.6.5Supplies SlotSpec discipline for capability relation fields and capability-use relations.
A.6.FRepairs function and functionality wording that may hide capability, method, work, math function, or functional-architecture claims.
A.6.RSIRRecovers relation, signature, interface, role, and slot wording before capability repair when the source sentence is mixed.
C.27Governs temporal currentness, windows, rhythm, and drift when capability timing is material.
C.2.1, A.10, B.3, C.28, F.10, E.17Govern episteme, evidence, assurance, counterfactual, status, and publication-use relations that may justify or qualify a statement or reliance use about a capability instance.
C.16.P, A.19Govern characteristic, scale, and characteristic-space recovery when capability measures depend on declared measured aspects.
C.25Governs composite quality families and Q-Bundles that may supply slots for capability-fit checks.
C.30, C.32.HCS, C.32.ACS, C.32.ACEGovern architecture-characteristic material, project criteria rows, and eval readings that may constrain capability use without becoming U.Capability.
Promise-content and commitment patternsGovern outward promise and commitment relations; a promise or commitment claim may cite a capability relation, but capability does not become promise or commitment.

Excluded Objects

Do not use U.Capability as the current object for:

  • role value, role assignment, role state, role relation structure, or role description;
  • method, method family, method description, or algorithm description;
  • work plan, work occurrence, run record, or measurement trace;
  • evidence graph, source record, model card, standard, report, dashboard, publication, or specification-use relation;
  • promise content, commitment, permission, authority relation, or policy decision;
  • U.Characteristic, scale row, coordinate, score, metric, indicator, or threshold;
  • C.25 Q-Bundle, quality-family label, mechanism, status, or evidence slot;
  • architecture-characteristic starter head, project criteria row, eval program, eval reading, selected-structure adequacy claim, or architecture-description concern;
  • capability-fit predicate, gate, admission relation, or work-entry readiness record;
  • structural part, module, interface, port, or functional structure unless the current claim is the ability of a holder system expressed through that structure.

These values may be related to a capability instance, a statement about it, or a fit check over it. They do not become the capability by adjacency. Name the neighboring value, record, relation, or predicate through its own governing pattern when that neighboring claim is current.

A.2.2:End

U.PromiseContent (Promise Content)

Type: Definitional promise-content episteme pattern Status: Stable

Kind Settlement

U.PromiseContent is a dependent durable promised-outcome episteme under the episteme settlement. It is not a root beside U.Episteme, not a commitment, not work, and not a U.PresentationCarrier.

Use This When

Use this pattern when a project needs to state what is promised to a consumer before asking who is obligated, what work occurred, which system exposes access, or which evaluation method and A.10 evidence relations support a fulfilment assertion.

Typical moments:

  • an SLA publication, service catalog, product offer, public API promise, utility offer, or government-service description contains a statement about what a consumer may rely on;
  • a team says "the service" but might mean promise content, provider organization, API, access point, delivery system, method, ticket, or performed work;
  • a fulfilment claim needs evaluation work that applies declared acceptance criteria to exact delivery-work facts, affected entities and post-work states, and any exact delivery or acceptance relation current for the use; the actual evaluation-operation result binding, optional verdict episteme, and A.10 evidence relations remain separate;

Primary EntityOfConcern. The EntityOfConcern of this pattern is U.PromiseContent: a consumer-facing promise-content episteme. At species level, its C.2.1 EntityOfConcernSlot is filled by the A.7 OutcomeSpec episteme denoted by promisedOutcomeSpecRef. Its claim graph states the promised outcome, any eligibility predicate, and acceptance claims; accessSpec separately describes the access method when that description is current.

First useful move. Write the promise content as a clause: what outcome is promised, which consumer role and claim scope are eligible, how access is described when relevant, and which acceptance criteria selected work facts and post-work states must satisfy. Name the evaluation method, evidence epistemes, and A.10 evidence relations separately so a fulfilment assertion can be checked. Then use U.Commitment only when an accountable subject is assigned to that content.

What goes wrong if missed. The word "service" starts naming provider, API, method, ticket, work, department, and promise at once. Teams then judge work against an implicit promise, treat access systems as obligations, or count performed work without knowing which promised outcome it was meant to satisfy.

What this buys. One consumer-facing promise-content episteme with direct exits to commitment, role assignment, access, PromiseContentUse, performed delivery work, affected entities and states, evaluation-operation results, optional verdict epistemes, evidence, acceptance, and publication patterns. Each neighboring claim keeps its named EntityOfConcern and direct relation instead of being collapsed into one undifferentiated service referent.

Not this pattern when. If the current EntityOfConcern is the accountable deontic relation, use A.2.8; if it is the performed delivery work, use A.15.1; if it is the access point or delivery system, use system and architecture patterns plus A.6.8 service wording repair; if the current move is Contract Bundle unpacking, use A.6.C.

Problem frame

Across domains the word service is used for many different things: a server or provider, an API, a procedure, a run, a department, even a product bundle. Such polysemy is productive in everyday speech but toxic in a normative model.

FPF therefore reserves U.PromiseContent for one kernel meaning: a consumer-facing promise content clause. When "service" denotes something else, recover the current referent: a provider or access point as U.System, provider participation as U.RoleAssignment, an access description as U.MethodDescription, performed delivery as U.Work, or the named direct relation governed by its own pattern. Normative prose uses an explicit facet head phrase per A.6.8 (RPR-SERV).

This keeps the kernel minimal while keeping the prose readable to non‑mathematicians: the canonical symbol is U.PromiseContent, and the head kind in normative text is always promise content.

Modularity note. A.2.3 defines the promise-content episteme and PromiseContentUse. Role assignment, access specification, delivery work, actual operation application and result binding, result-episteme identity, affected-subject change, A.10 evidence relations, evaluation, commitment, delivery, acceptance, speech act, and publication remain with their direct governing patterns. A.6.8 restores which service facet the wording denotes; it does not replace the named participants and their direct relations with a locally minted service-situation relation. A.6.C governs the Contract Bundle lens when contract, SLA, or guarantee wording must be unpacked.

Plain reading. Promise content says what a consumer may rely on. A system holding the provider role through a named U.RoleAssignment occurrence performs delivery work by enacting a U.Method; a U.MethodDescription describes that method. PromiseContentUse obtains between the delivery-work occurrence and the selected promise-content edition during the named interval. Exact work-participation, affected-referent, actual-change, delivery, and acceptance relations state what happened. A separately performed evaluation applies the declared operation or method; its actual result binding states the evaluation value. If another use needs a verdict episteme, C.2.1 governs that episteme and A.15.PROD governs any current entity-identity-inception claim. Evidence relations support the relied-on assertions. No universal work-result relation is presumed.

Lexical note (L-SERV and RPR-SERV). Bare service does not determine one FPF referent. When that word carries a relied-on claim, use A.6.8 to select the service facet: for example, a promise-content episteme and an access-point system have different kinds and participate in different relations. E.10 L-SERV triggers that recovery; after the facet is known, its direct governing pattern applies.

Problem

Without a first-class U.PromiseContent, a project description tends to make five recurring category errors:

  1. Provider = Service. Calling the provider system or team “the service” collapses that provider referent with the promise-content episteme.
  2. API = Service. Treating an interface or endpoint as the service hides the promised consumer-side outcome and its acceptance criteria.
  3. Method or plan = promise content. Treating a semantic method, a method-description episteme, or a work plan as the promise content hides the consumer-facing outcome and acceptance claims.
  4. Run = Service. Logging Work as "a service" erases the promise-content episteme and acceptance specification needed for SLA reasoning.
  5. Business ontology lock-in. Large domain schemes are imported wholesale, losing FPF universality and comparability across projects and domains.

Forces

ForceTension
External promise vs internal capabilityPromise content must be consumer‑facing, while capability is provider‑internal.
Specification vs executionPromise content remains an episteme; exact delivery-work facts, affected entities, post-work states, and separately governed delivery or acceptance relations are evaluated against the promised predicates. The evaluation operation's result binding and any verdict episteme remain distinct from those subject facts.
Universality vs domain richnessOne kernel meaning must cover IT, utilities, healthcare, public services—without absorbing domain taxonomies.
Reviewable acceptance vs method autonomyConsumers need named outcome predicates, characteristics, scales, target values, and acceptance criteria. Systems assigned provider roles retain freedom to select delivery methods through method-selection work; deontic accountability enters only through an explicit U.Commitment.
Stability vs evolutionA changed promise creates a new promise-content episteme edition, while earlier work occurrences and evidence relations retain their own identities.

Solution - Define U.PromiseContent as the promise-content episteme

Definition (normative). A U.PromiseContent is an externally oriented promise-content episteme. Its claim content states a promised consumer-side outcome, any eligibility predicate, and acceptance criteria by which fulfilment is evaluated. Its optional accessSpec describes the access method. Interpretation is fixed by its effective U.ReferenceScheme; U.ClaimScope states where the claims hold.

U.PromiseContent is not a deontic commitment relation. One or more explicit U.Commitment occurrences under A.2.8 may have the promise content in their referents position; the promise-content episteme does not obligate an actor by itself.

In normative prose, the head phrase is promise content. Service offering clause and service promise clause are admissible Plain twins under A.6.8; bare service does not identify a promise-content episteme.

Species-level identity follows C.2.1:

PromiseContentIdentity = <
  content,
  promisedOutcomeSpecRef,
  effectiveReferenceScheme
>

promisedOutcomeSpecRef is the species-level realization of EntityOfConcernSlot; it is a U.EpistemeRef that resolves to the A.7 OutcomeSpec episteme about which the promise claims are made. OutcomeSpec is a specification-use episteme form, not a separately admitted U-kind. claimScope and optional modelUseStructureRef qualify interpretation and applicability of the promise-content claims; they are not generic identity positions. A direct dependent species may strengthen identity only through its own governing pattern.

  • FPF kind: U.Episteme.
  • Time stance: the promise content can be authored before delivery; later exact delivery-work facts, affected entities, post-work states, and any current delivery or acceptance relations are tested against the declared outcome and acceptance predicates. Evaluation work and the actual operation-result binding remain separate; when a verdict episteme is constituted, C.2.1 and A.15.PROD govern its identity and inception, while A.10 evidence relations support the relied-on assertions.
  • Orientation: consumer-facing promise claims, not provider capability claims.
  • Publication boundary: isCarriedBy may obtain between a U.EpistemePublication and a U.PresentationCarrier. Promise-content identity follows the C.2.1 episteme identity rule; neither the isCarriedBy occurrence nor carrier identity enters that rule.

Promise-content schema

U.PromiseContent : U.Episteme {
  content                  : U.ClaimGraph,
  promisedOutcomeSpecRef   : U.EpistemeRef, resolving to OutcomeSpec,
  effectiveReferenceScheme: U.ReferenceScheme,
  providerRole             : U.Role,
  consumerRole?            : U.Role,
  claimScope?              : U.ClaimScope,
  accessSpec?              : U.MethodDescription,
  acceptanceSpec           : U.Episteme,
  unitOfDelivery?          : U.Episteme,
  modelUseStructureRef?    : U.StructureRef
}
  • content carries the promised-outcome, eligibility, and acceptance claims together with the optional accessSpec value when an access-method description is current; it is not an untyped text slot.
  • providerRole and consumerRole are U.Role values carried by value in the claim graph. accessSpec, acceptanceSpec, and unitOfDelivery are episteme values carried by value in the claim graph; a publication or other declared representation may express them through U.EpistemeRef values that resolve to those same epistemes without changing their kinds. Changing any of these values changes content and therefore the promise-content identity.
  • promisedOutcomeSpecRef resolves to the A.7 OutcomeSpec episteme. It is neither a U.Work occurrence, an affected or delivered entity, an actual operation-result binding, nor a verdict episteme.
  • effectiveReferenceScheme makes the claim graph and its references interpretable.
  • providerRole and consumerRole are role values; actual providers and consumers enter through named U.RoleAssignment occurrences.
  • claimScope states the operating conditions, populations, locales, or other slices over which the promise claims hold.
  • accessSpec describes the access method enacted when a holder system under an eligible consumer U.RoleAssignment requests access; an access-point system remains separate.
  • acceptanceSpec states the acceptance criteria, identifies the evaluation method through its U.MethodDescription, and states evidence-admissibility conditions for supported assertions; actual evidence relations remain separate.
  • unitOfDelivery states how accepted delivery work is counted when counting is current.
  • modelUseStructureRef is present only when an independently selected BoundedModelUseStructure changes interpretation for the current PromiseContentUse occurrence.
  • An internal delivery method remains U.Method. An already identified episteme is a U.MethodDescription only when its exact EntityOfConcern resolves to that Method and at least one claim says how that Method is done. A promise-content or acceptance claim may cite that episteme for one named use; Method-selection work, performed work, and PromiseContentUse remain separately governed.

Promised outcome spec (disambiguation: work vs post-work result)

promisedOutcomeSpecRef points to an A.7 OutcomeSpec episteme that makes explicit what is promised in kind form and specification form without collapsing it into either:

  • the promise content clause itself (U.PromiseContent),
  • the delivery work that happens at run‑time (U.Work), or
  • the post-work state or affected referent after the work.

This is a controlled semantic precision restoration for the everyday metonymy "outcome" or "service outcome", which different communities use to mean (i) the work performed, (ii) the achieved result, or (iii) both.

Terminology bridge (informative). In loose contract talk people say promiseOutcomeSpec (the description of what will be delivered) and promiseOutcome (what was actually delivered). Those lexical forms are metonymic: sometimes they mean “the work performed”, sometimes “the post‑work result”, and sometimes the pair.

In FPF:

  • promiseOutcomeSpec -> A.7 OutcomeSpec, referenced via promisedOutcomeSpecRef.

  • promiseOutcome -> an extensional delivered outcome instance. It does not have one kernel kind; it is the run-time reality that satisfies the outcome specification, interpreted according to OutcomeSpec.mode:

    • WorkOnly → the set of delivery U.Work episode(s) that satisfy workSpec (and, if present, the promised methodConstraintRef).
    • ResultOnly → the post‑work state of the described referent(s) on the declared statePlaneRef that satisfies resultSpec.postConditionRef (regardless of how it was achieved).
    • Composite → the pair: (delivery Work episode(s), post‑work state).

    FPF identifies the extensional delivered outcome by citing the relevant U.Work occurrences, exact affected or delivered entities, applicable actual-change and delivery relations, and the selected Delta expression for affected referents together with their pre-work and post-work states on the declared state plane (A.15.1:4.2 item 10). Evidence epistemes derived from telemetry may enter A.10 evidence relations supporting claims about those facts and states and about later evaluation-result epistemes; neither an evidence episteme nor the U.PresentationCarrier filling the carrier position of its isCarriedBy relation is the delivered outcome.

When bundling, invoicing, or dispute handling needs a downstream claim to identify the delivered instance, that claim's episteme separately references the delivery-work occurrences, affected entities, post-work states, evidence epistemes, and A.10 evidence-relation occurrences under their direct governing patterns. It does not create a local OutcomeInstance kind, collapse the delivered reality into OutcomeSpec, or let an invoice, dispute record, other record form, or U.PresentationCarrier become either the episteme or the delivered instance.

A conforming OutcomeSpec uses this explicit-RefKind reading of the specification-use shape in A.7:5.10.2:

OutcomeSpec : U.Episteme ::= {
  mode: WorkOnly | ResultOnly | Composite,

  workSpec?: {
    methodConstraintRef?: U.EpistemeRef,          // resolves to the U.MethodDescription constraining the promised work
    workPredicateRef: U.EpistemeRef               // resolves to a predicate on selected facts about U.Work occurrences
  },

  resultSpec?: {
    entityOfConcernRef?: U.EntityRef,             // affected referent whose declared FPF kind is named
    statePlaneRef?: StatePlaneRef,                // where the predicate lives (A.7:3 pins)
    postConditionRef: U.EpistemeRef               // resolves to the post-state predicate; evidence supports the resulting claim separately
  }
}
  • workSpec corresponds to the work-as-promised facet: it states the consumer-facing kind of work (optionally constraining method) and the work predicate (e.g., duration, method ban, safety limit).
  • resultSpec corresponds to the result-as-promised facet: entityOfConcernRef identifies the affected entity, statePlaneRef identifies the state plane when current, and postConditionRef identifies the required post-work state predicate.
  • Counting is not part of OutcomeSpec. Counting lives in U.PromiseContent.unitOfDelivery as the countingRule mini-schema (A.7:5.10.3). Outcome specifications say what counts as delivery; unit-of-delivery specifications say how much to count and how to avoid double counting.

Examples (informative):

  • “Work 5 minutes” → mode=WorkOnly; workPredicateRef states duration ≥ 5 min; methodConstraintRef may be omitted.
  • “Dig a hole” → mode=ResultOnly; postConditionRef describes the hole’s target state; method choice remains provider‑autonomous.
  • “Hairstyle in ≤ 20 min, must be haircut+styling (not a wig)” → mode=Composite; workSpec expresses time + method constraint; resultSpec expresses the target hairstyle state.

Naming note (normative). The head noun outcome is intentionally broad. Do not replace it with result when referring to the combined work-and-result specification. If a passage means the affected entity, name that entity and link it to resultSpec.entityOfConcernRef. If it means the required post-work state, name the state predicate and link it to resultSpec.postConditionRef. If it means the promised work occurrences, say work as promised and link them to workSpec.

Projects may express acceptanceSpec with the following small schema when downstream evaluation work requires replayable criteria and verdict semantics:

AcceptanceSpec (recommended) ::= {
  targetOutcomeSpecRef?: U.EpistemeRef,          // resolves to OutcomeSpec; default is SC.promisedOutcomeSpecRef
  criterionRefs: [U.EpistemeRef],                // each resolves to one evaluation-criterion episteme
  evaluationMethodDescriptionRef: U.EpistemeRef, // resolves to the U.MethodDescription for evaluation work
  verdictScaleDescriptionRef: U.EpistemeRef,     // resolves to one declared scale description
  GammaTimePolicyRef?: U.EpistemeRef             // resolves to the policy selecting the evaluation window
}
  • targetOutcomeSpecRef makes explicit which promised outcome is being judged; if omitted, it is the containing promise content’s promisedOutcomeSpecRef.
  • criterionRefs resolve to evaluation-criterion epistemes. Their predicates are evaluated over the same selected work facts and post-work state references used for the targeted OutcomeSpec; direct evidence relations separately support assertions about those facts and states.
  • evaluationMethodDescriptionRef resolves to the U.MethodDescription for the method enacted by evaluation work. The description does not perform the evaluation.
  • verdictScaleDescriptionRef resolves to one scale-description episteme governed by the characteristic and scale patterns. That description states the admitted verdict values and how non-delivery is represented. Informative examples include Boolean pass/fail, trichotomy pass/partial/fail, or named graded values, with non-delivery represented as fail, N/A, or Inconclusive; these values are examples, not defaults.
  • GammaTimePolicyRef keeps temporal selection explicit and non-retroactive (F.10 and F.12): it resolves to the policy stating whether judgement is per work occurrence, reporting window, or another named temporal selection. Population and locale remain in U.ClaimScope; they are not temporal-policy values.

This mini-schema is a recommendation only: it does not admit another U-kind. An acceptance-specification episteme may contain these declared schema fields by value or refer to their values through the declared RefKinds. The resulting episteme remains inspectable and bridge-ready without turning its publication form into identity.

What U.PromiseContent is not

  • Not a provider: use a named provider U.RoleAssignment occurrence whose holder is the provider U.System.
  • Not a deontic commitment: that is U.Commitment (A.2.8) whose referents include the promise content when that accountable relation is current.
  • Not an access point: addressable "services", servers, desks, or endpoints are U.System (see A.6.8: service access point and service delivery system).
  • Not a method or method description: the semantic way of doing is U.Method; a recipe or other episteme describing that way is U.MethodDescription.
  • Not delivery work or its description: performed delivery is U.Work; a ticket, case description, or incident description is a separately governed episteme about planned or performed work.
  • Not a schedule: that is U.WorkPlan.
  • Not a capability: capability is the provider system's admitted ability to perform a declared work family and meet any declared result-class predicate within its U.WorkScope, measure set, qualification window, and currentness condition. Delivery under a promise may depend on one or more capability instances, but the promise-content episteme is not a capability.
  • Not its scope or use interval: U.ClaimScope states where the promise claims hold, U.WorkScope states where a provider capability can deliver work, and PromiseUseIntervalSlot states when one PromiseContentUse occurrence obtains. These are three different values.

Promise content, delivery work, and evaluation work

  • Before delivery work: The promise-content episteme declares its effective U.ReferenceScheme, named U.ClaimScope, promised outcome specification, access specification when current, and acceptance specification. The provider system's ability remains a holder-dependent U.Capability instance under A.2.2. A capability-fit predicate tests that instance against the thresholds selected for the planned delivery work, including any threshold stated by the chosen method description. Method-selection work may yield a C.11 ChoiceResult; enactsMethod obtains between the later delivery-work occurrence and the selected U.Method. A relied-on episteme is a U.MethodDescription only when it meets A.3.2 membership, and the promise-content or acceptance claim may cite it for the named use. That citation establishes neither Method selection, later enactsMethod, PromiseContentUse, evidence, nor acceptance.

  • Run‑time: The admitted holder system S = consumerRA.HolderSystemSlot of the named consumer U.RoleAssignment performs request or visit U.Work under that assignment. When the attribution is stated explicitly, use performedUnderAssignment(requestWork, consumerRA). The admitted holder system S = providerRA.HolderSystemSlot of the named provider U.RoleAssignment performs delivery U.Work under that assignment. When the attribution is stated explicitly, use performedUnderAssignment(deliveryWork, providerRA). A system performing evaluation work enacts the evaluation method described by acceptanceSpec; the actual evaluation-operation application carries its exact argument bindings and evaluation-result value. When another use needs a durable verdict episteme, C.2.1 governs that episteme and A.15.PROD governs any current entity-identity-inception claim. The counting rule stated by unitOfDelivery maps admitted fulfilment occurrences to unit counts. The verdict episteme may assert whether a named service-level objective or another acceptance criterion was satisfied during the declared window. When a separately obtaining U.Commitment has the same U.PromiseContent in its referents position, the supported assertion concerns fulfilment of content that is also a referent of the obligation. Neither the operation-result binding, verdict episteme, nor commitment is a property of the promise-content episteme.

    In each performedUnderAssignment(W, RA) occurrence, WorkOccurrenceSlot is filled by W and RoleAssignmentSlot by the named A.2.1 assignment occurrence RA; the admitted holder system S = RA.HolderSystemSlot is the actual performer. The assignment does not act, and no provider-assignment or consumer-assignment pseudo-kind is introduced.

Memory hook: Promise content states what is promised. A method constrains possible work. A system performs work. Evaluation binds a result value. A verdict episteme states the judgment. Evidence supports that assertion.

Didactic card: Relations around one service-delivery evaluation

Didactic (non-normative). This representation keeps each promise-content episteme, access-description episteme, work occurrence, and direct relation in one delivery evaluation visible without prescribing an order of work. Promise content and an access description remain epistemes; commitment and role assignment remain relations; delivery and evaluation remain work occurrences; evidence remains in its A.10 relations. When order matters, describe semantic method order in U.MethodDescription, intended dated order in U.WorkPlan, and transformation dependencies in the governing TransformationFlowStructure.

U.PromiseContent states the promise. An A.2.8 U.Commitment relation may refer to that content; its accountable-subject position is filled by the accountable subject. In a provider U.RoleAssignment, the holder-system and role-value positions are filled by the provider system and provider role. Delivery U.Work occurs. Evidence relations support claims about selected delivery-work facts and post-work states. A system performing evaluation work enacts the evaluation method; the actual operation application carries its result binding, while any verdict episteme is separately governed by C.2.1 and any current identity-inception claim by A.15.PROD.

This informative diagram is a publication-side representation, not new ontology. It prevents two category errors: treating U.PromiseContent as the addressable access system, and treating a publication-side list or diagram of service senses as a relation occurrence that replaces the direct relations shown here.

flowchart LR
  SC["Promise content<br/>(U.PromiseContent episteme)"]
  C["Commitment<br/>(deontic relation, when current)"]
  RA["Provider role assignment<br/>(A.2.1 relation occurrence)"]
  W["Delivery work<br/>(U.Work occurrence)"]
  EV["Evidence epistemes<br/>(observations used as evidence)"]
  EW["Acceptance evaluation<br/>(U.Work occurrence)"]
  ER["Evaluation result<br/>(U.Episteme with verdict value)"]

  C -->|"refers to"| SC
  %% The accountable-subject position of the commitment is filled directly; no universal commitment-to-assignment relation is asserted.
  W -->|"performedUnderAssignment"| RA
  EW -->|"evaluates selected facts about"| W
  EW -->|"criteria from"| SC
  EW -->|"evaluation operation; result binding stated in ER"| ER
  EV -->|"A.10 evidence relation supports verdict assertion in"| ER

Reading guide (one breath).

  • The promise content is the consumer-facing outcome and acceptance statement.
  • In the A.2.8 commitment relation, the accountable-subject position is filled directly and the referents position contains the promise-content clause.
  • The provider role assignment identifies the holder system, provider role, role-taxonomy episteme, effective reference scheme, and assignment window. The holder system acts under that assignment.
  • A.6.8 recovers the selected facet denoted by "service" wording. It adds no service-situation participant: provider assignment, access description, access-point system, delivery system, delivery method, promise content, and work occurrence retain their direct kinds and governing patterns; A.10 separately governs the evidence relations.
  • Delivery work is what happened. Evidence relations support claims about selected facts concerning that occurrence and any post-work state expressed by its selected effect Delta. A system performing evaluation work enacts the declared evaluation method over those facts and states; the actual evaluation operation has its own result binding, and a separately constituted evaluation-result episteme may carry the verdict assertion.

Litmus rule (addressability). If the current claim is about invocation, connection, visitation, restart, or scaling, its EntityOfConcern is an actual U.System, not the promised-outcome statement. Use a service access point when the interaction boundary is current and a service delivery system when the realization system is current.

Archetypal grounding (engineer‑manager friendly)

DomainPromise-content epistemeProvider and consumer assignmentsAccess specificationDelivery workEvidence and evaluation
Cloud storageStore and retrieve blobs up to 5 TB under declared criteria—for example, 99.9% availability and 11x9 durability; these values illustrate targets and are not defaults.CloudStoragePlatformSystem holds StorageProviderRole; BackupControllerSystem holds StorageConsumerRole, each through a named A.2.1 assignment occurrence.S3ApiDescription-vX, a U.MethodDescription; the endpoint remains a separate U.System.Dated PUT, GET, replication, and integrity-check work occurrences participating in PromiseContentUse.Request and integrity observations enter direct evidence relations; actual evaluation applications bind availability or durability results, and separately constituted verdict epistemes state the judgments.
Manufacturing utilityDeliver compressed air at 8 bar in Zone B under stated pressure, flow, and purity criteria.CompressedAirPlantSystem holds UtilityProviderRole; LineBSystem holds UtilityConsumerRole.ZoneBManifoldAccessDescription, a U.MethodDescription; the manifold remains a separate U.System.Dated compression and delivery work occurrences.Pressure, flow, and purity observations support delivery claims; an actual evaluation application binds the comparison result under the declared scale and window, and a verdict episteme states the judgment.
Public passport serviceIssue an admissible passport within 20 days under declared defect and eligibility criteria—for example, a ≤ 1% defect target; this value is illustrative, not a default.IssuingAgencySystem holds PassportIssuerRole; ApplicantPersonSystem holds PassportApplicantRole.PassportApplicationAccessDescription, a U.MethodDescription; portal and service desk remain access-point U.System values.Dated application-handling and passport-issuance work occurrences.Submission, issuance, elapsed-time, and defect observations support claims; actual evaluation applications bind lead-time or defect results, and separately constituted verdict epistemes state the judgments.

Key takeaway. The same pattern yields one promise-content episteme in each domain without treating the promise as the provider, access point, method, work occurrence, evidence, operation-result binding, or verdict episteme. Direct role-assignment, PromiseContentUse, evaluation-operation, evidence, acceptance, and publication relations retain their own participants and governors; evaluation remains separately performed U.Work.

Bias-Annotation

A.2.3 repairs the collapse of several service-related referents into one service label. A visible service name often denotes provider, access point, method, work, commitment, ticket, evidence, and promised outcome without saying which claim is current. The pattern recovers the promise-content episteme first; A.2.8 then governs commitment, A.2.1 provider participation, A.3.2 access description, A.15.1 delivery work, A.10 evidence claims, and the direct outcome and acceptance patterns their respective relations.

In a contract or SLA agreement, an A.2.8 U.Commitment may have promise content in its referents position. A contract document, SLA publication, service catalog, API page, or offer publication may be a U.PresentationCarrier for U.EpistemePublication values describing the agreement, promise content, commitment, or fulfilment work. These relations, epistemes, and carriers retain separate identities.

Mapping the common “service” picture to FPF (didactic bridge)

A common service diagram is a representation. Recover the represented systems, epistemes, work occurrences, and relation occurrences as follows:

  • Provider participation -> one named U.RoleAssignment occurrence with holder system, provider role value, role-taxonomy episteme, effective reference scheme, and assignment window. The admitted holder system performs each selected delivery-work occurrence under that assignment; when stated as a direct relation, use performedUnderAssignment(deliveryWork, providerRA).
  • Acceptance criterion -> an evaluation-criterion episteme in U.PromiseContent.acceptanceSpec; its target values, verdict scale, and GammaTimePolicyRef remain explicit. A U.WorkPlan is added only when planned delivery or evaluation work is current.
  • SLA obligation -> an A.2.8 U.Commitment occurrence whose referents position is filled by the relevant U.PromiseContent. Use A.6.C when one SLA publication combines wording about commitment, promise content, evidence specification, and publication relations and must be unpacked through its Contract Bundle lens.
  • Published SLA terms -> the U.EpistemePublication for the promise content, together with its isCarriedBy relation to a U.PresentationCarrier. When publication work also communicates or institutes a commitment, add the named A.2.9 speech-act and A.2.8 commitment relation occurrences; publication alone neither creates the commitment nor establishes fulfilment.
  • Operating conditions -> the named U.ClaimScope under A.2.6. The acceptance specification may cite that scope; it does not replace it.
  • Promised subject -> resolve promisedOutcomeSpecRef, then use the resulting OutcomeSpec.resultSpec.entityOfConcernRef together with the exact affected referent, post-work state, and any direct delivery or acceptance relation current for the claim.
  • Customer material—“ours versus theirs.” -> If the current claim depends on who owns or has custody of data, an asset, or a case, name the exact governed role assignment or ownership/custody relation and its actual participants. Do not make ownership or custody a kernel-global property of U.PromiseContent.
  • Access -> accessSpec : U.MethodDescription describes the method enacted when an eligible consumer holder system requests access. Actual endpoints, desks, and manifolds remain access-point U.System values.
  • One PromiseContentUse occurrence -> consumer request work and provider delivery work remain separate occurrences, each attributed through its own performedUnderAssignment(W, RA) relation to a named assignment whose holder system actually performs the work. When request work follows accessSpec, its A.15.1 methodDescriptionRef resolves to that same U.MethodDescription; following the description does not by itself introduce a second relation occurrence. PromiseContentUse obtains between selected delivery work and the selected promise-content edition during PromiseUseIntervalSlot.
  • Consumer-side changed entity or relation -> recover the exact affected-referent and actual-transformation facts, plus any local entity-identity-inception, delivery, acceptance, or receiving-use claim that the current promise evaluation needs. If the changed entity is a holder system and its post-work state calls for a new or revised U.Capability instance, use A.2.2 for that capability instance and its currentness relations.
  • Service-enabled consumer-side capability or activity -> If the question is about ability, identify the consumer holder's U.Capability instance and state its A.2.2 qualification and currentness claim. If the question is about activity, identify the consumer-side dated U.Work under A.15.1. If the claim also says that delivery changed the consumer or was used by that Work, state only the exact actual-change or receiving-use relation that currently obtains; otherwise keep the objects separate. Do not create another U-kind or a generic capability-use relation. When a domain claim concerns catalog entries, exposure relations, charging relations, or entitlement relations, govern those entries, participants, and relations directly. Relate them to U.PromiseContent only through named relations; do not treat them as components of U.PromiseContent or replace their direct relations with a locally minted context relation.

Conformance Checklist (normative)

CC‑A2.3‑0 (Prose head phrase). In normative prose, an instance of U.PromiseContent SHALL be referred to as a promise content (or service offering clause or service promise clause) and SHALL NOT be referenced by the bare head noun service. Unqualified service usage (and the co-moving cluster service provider or server) SHALL be unpacked per A.6.8 (RPR-SERV).

CC‑A2.3‑1 (Type). U.PromiseContent IS a consumer-facing promise-content U.Episteme. One or more U.EpistemePublication values may be related to U.PresentationCarrier values through isCarriedBy without changing the promise-content episteme identity; no presentation carrier is the promise content. U.PromiseContent is not a U.System, U.Method, U.MethodDescription, U.Work, or U.WorkPlan.

CC-A2.3-2 (Semantic locality). Every promise content names its effective U.ReferenceScheme, promisedOutcomeSpecRef, and U.ClaimScope when claim extent matters. Cross-scheme or cross-scope reuse uses the identified F.9 bridge occurrence and A.2.6 scope relations. modelUseStructureRef appears only when an independently selected BoundedModelUseStructure changes interpretation. CC-A2.3-3 (Role values stay distinct from holders and assignments). providerRole and, when present, consumerRole are U.Role values interpreted through a named role-taxonomy episteme and effective reference scheme. Actual provider and consumer systems enter through named U.RoleAssignment occurrences; a role label alone does not identify a performer.

CC-A2.3-4 (Acceptance). acceptanceSpec MUST be present and MUST define how delivered U.Work is judged as pass, fail, or a declared grade against named evaluation criteria and target values. Any SLA deontics are represented through U.Commitment. The promise content MUST declare Claim scope (G) where operating conditions, populations, locales, or another claim extent matter. Every verdict cites an explicit Gamma_time window. If the acceptance criteria mention measurable characteristics such as availability, latency, accuracy, cost, or safety, each characteristic MUST be introduced through C.16 and C.25 with its scale, unit when applicable, U.DHCMethod measurement template, and direct evidence relation. If the reading depends on a particular way of measuring, cite the U.MethodDescription that describes that measurement method. The characteristic is referenced by its exact identifier rather than by an unqualified KPI label.

CC‑A2.3‑5 (Access). When the promised use relies on a request-facing access method, accessSpec MUST identify the A.3.2-admitted U.MethodDescription that describes that method. The endpoint, desk, manifold, or other access point remains a separate U.System. If no access-method description is current because access is ambient, accessSpec may be omitted. In either branch, keep an eligibility predicate in the promise content when eligibility is part of the promise; when eligibility depends on a separately obtaining admission relation, refer to that relation under its direct governing pattern.

CC‑A2.3‑6 (Unit of delivery + counting rule). When fulfilment work is counted, declare unitOfDelivery (for example, one request, kWh, or case). The resulting count may fill a declared quantity position in a separately governed charging relation; that charging relation does not determine the unit-of-delivery specification. When declared, unitOfDelivery MUST include a countingRule that maps accepted delivery work episodes (W✓) to unit counts (A.7:5.10). If omitted, the default is “1 unit per accepted delivery work episode”.

CC‑A2.3‑7 (No actuals on Promise Content). Resource and time actuals belong to the performed U.Work occurrence under A.15.1. An incident-log episteme may describe that occurrence and may separately participate in an evidence relation for a stated claim; neither the log nor its participation in that evidence relation fills a U.PromiseContent slot.

CC-A2.3-8 (Provider capability stays separate). When delivery depends on provider ability, use the A.2.2 U.Capability instance for the provider holder system and the separate capability-fit predicate for the planned delivery work. Do not insert capability into promise-content identity or infer capability or fit from the role name. CC-A2.3-9 (Edition and promise-use interval). A change to content, promisedOutcomeSpecRef, or effectiveReferenceScheme creates a new promise-content episteme edition under the C.2.1 identity rule. Each PromiseContentUse occurrence has one promise-content edition and one delivery-work occurrence as participants and PromiseUseIntervalSlot as its temporal qualifier; an untyped version or timespan entry fills none of those positions.

CC‑A2.3‑10 (Lexical rule). Unqualified head-noun uses of service (and the co-moving cluster service provider or server) in normative prose MUST be disambiguated per A.6.8 (RPR-SERV) and its lexical trigger L-SERV (E.10).

CC‑A2.3‑11 (No mereology). Do not place a promise content clause in PBS or SBS, or treat it as a part or component. Structural assemblies live in PBS and SBS; the promise clause is an episteme (A.2.3) and "service" talk must be facet-unpacked (A.6.8).

CC-A2.3-12 (Plan, work, and evidence stay distinct). Windows and calendars belong to U.WorkPlan (A.15.2). Performed delivery belongs to U.Work (A.15.1). Evidence epistemes and evidence relations support claims about selected facts concerning that work and any post-work state expressed by its selected effect Delta; they are not slots or parts of the work occurrence.

CC-A2.3-13 (Claim scope, work scope, and promise-use interval). The promise-content episteme names U.ClaimScope when its claims are bounded. A provider capability instance names U.WorkScope. PromiseUseIntervalSlot is the temporal qualifier of each PromiseContentUse occurrence. The ScopeCoverage predicate is satisfied only when the selected context slice is covered under an explicit Gamma_time selector; neither temporal extent nor capability scope replaces claim scope.

CC-A2.3-14 (Scheme and scope bridges). Cross-scheme or cross-scope reuse names the identified F.9 bridge occurrence, direction, loss, and congruence level. A bridge may support a narrower mapped U.ClaimScope; it does not mutate the original promise content or create a universal context. CC-A2.3-15 (OutcomeSpec typing). promisedOutcomeSpecRef MUST be a U.EpistemeRef resolving to an A.7 OutcomeSpec specification-use episteme. It MUST NOT point at a concrete U.Work occurrence, affected or delivered entity, actual operation-result binding, verdict episteme, or downstream effect, and OutcomeSpec MUST NOT be written as an independently admitted U.OutcomeSpec.

CC-A2.3-16 (OutcomeSpec is explicit and mode‑complete). promisedOutcomeSpecRef MUST be present and MUST reference an OutcomeSpec that declares mode in {WorkOnly, ResultOnly, Composite} and satisfies A.7:5.10 mode completeness:

  • WorkOnlyworkSpec present, resultSpec absent
  • ResultOnlyresultSpec present, workSpec absent
  • Composite → both workSpec and resultSpec present

CC-A2.3-17 (OutcomeSpec predicates and delivery-work relations). For any delivery U.Work occurrence named by PromiseContentUse, let OS be the A.7 OutcomeSpec resolved from SC.promisedOutcomeSpecRef.

  • If OS.workSpec is present, the selected facts about the work occurrence satisfy OS.workSpec.workPredicateRef; when methodConstraintRef is present, the enacted method is compatible with that constraint.
  • If OS.resultSpec is present, the exact affected referent and post-work state expressed by the selected effect Delta satisfy OS.resultSpec.postConditionRef on its declared state plane; any production, delivery, acceptance, or receiving-use claim remains separately governed.
  • A.10 evidence relations obtain between each relied-on satisfaction assertion and its supporting evidence epistemes. Those evidence epistemes are neither delivery-work occurrences, affected or delivered entities, operation-result bindings, verdict epistemes, nor values of OutcomeSpec.workSpec or OutcomeSpec.resultSpec.

Explicitly individuate PromisedOutcomeDeliveryRelation only when a downstream relation or claim must refer to its occurrence identity and only after these mode-specific conditions are established; otherwise retain the readable deliversPromisedOutcome(W, OS) assertion. CC-A2.3-18 (Acceptance evaluation supports rather than constitutes fulfilment). A holder system performs evaluation work by the evaluation method described in acceptanceSpec over the same selected work facts and post-work states used to test delivery under SC.promisedOutcomeSpecRef. The actual evaluation-operation application carries its exact argument and result bindings. When a durable verdict episteme is needed, C.2.1 governs its identity and A.15.PROD governs any current entity-identity-inception claim. That episteme may assert an admitted fulfilment verdict only when the selected work facts and post-work state satisfy the acceptance criteria. A.10 evidence relations support the relied-on assertions; the operation-result binding, verdict episteme, and evidence relations support knowledge of PromiseContentFulfilmentRelation but do not make it obtain. A multi-grade verdict-scale description states how non-delivery is represented.

CC-A2.3-19 (OutcomeSpec ↔ unitOfDelivery coherence). If unitOfDelivery is present, its counting rule states a selectorRef that selects only work occurrences eligible to satisfy SC.promisedOutcomeSpecRef in the declared mode. When one occurrence can fulfil several promise contents, the rule states either dedupeKeyRef or a reference to a counting-policy episteme under its direct governing pattern. A selector may denote work occurrences filling FulfilmentWorkOccurrenceSlot in obtaining PromiseContentFulfilmentRelation occurrences; it does not count work for which fulfilment has not been established.

CC-A2.3-20 (Unit-of-delivery is computable from work facts). If unitOfDelivery is present, it MUST declare its counting rule over selected facts about fulfilment work, cite the U.DHCMethod used for any measurement reading, name the U.MethodDescription when a particular measurement method constrains that reading, state evidence-admissibility conditions, and refer to the evidence epistemes and A.10 evidence relations used, per A.7:5.10.3. The default "1 unit per fulfilment work occurrence" is permitted only for a pure count of fulfilment occurrences.

Promise-content use, delivery, evaluation, and evidence

Keep PromiseContentUse, PromisedOutcomeDeliveryRelation, evaluation U.Work, the actual evaluation-operation application and result binding, any verdict episteme, and A.10 evidence relations separate. A direct relation may obtain even when the current episteme about it is unresolved; evidence supports the claim and does not become the relation.

Core relations

PromiseContentUse : U.Relation. This direct use relation obtains between one delivery-work occurrence and one promise-content edition during one named promise-use interval; it makes no fulfilment claim.

PromiseContentUse : U.Relation
  DeliveryWorkOccurrenceSlot: U.Work, U.EntityRef
  PromiseContentSlot: U.PromiseContent, U.EpistemeRef
  PromiseUseIntervalSlot: temporal interval, byValue

Its occurrence key is <DeliveryWorkOccurrenceSlot, PromiseContentSlot, PromiseUseIntervalSlot>. Obtaining of this relation implies neither successful delivery nor intention, judgement, or claim-making by either participant.

PromisedOutcomeDeliveryRelation : U.Relation. This derived relation obtains between one delivery-work occurrence and the A.7 OutcomeSpec resolved from the PromiseContentUse occurrence in which that work participates, when the conditions below hold.

PromisedOutcomeDeliveryRelation : U.Relation
  DeliveryWorkOccurrenceSlot: U.Work, U.EntityRef
  PromisedOutcomeSpecificationSlot: U.Episteme, U.EpistemeRef constrained to A.7 OutcomeSpec

The relation obtains only when one PromiseContentUse occurrence has the delivery work and a promise-content edition as participants, that edition's promisedOutcomeSpecRef resolves to the same OutcomeSpec, and the specification's mode-specific conditions hold. When workSpec is present, selected work facts satisfy workSpec.workPredicateRef. When resultSpec is present, the exact affected referent and post-work state expressed by the selected effect Delta satisfy resultSpec.postConditionRef; any current production, delivery, or acceptance relation remains separately governed. Its occurrence key is <DeliveryWorkOccurrenceSlot, PromisedOutcomeSpecificationSlot>. The readable predicate is deliversPromisedOutcome(W, OS), where OS denotes that resolved OutcomeSpec. An episteme may assert that this relation obtains, and evidence may support that assertion; neither the assertion nor the evidence makes the work facts or post-work state satisfy the specification.

Acceptance evaluation result. A holder system performs evaluation U.Work by the evaluation method described in acceptanceSpec, using the same selected facts about delivery work and post-work states. The actual evaluation-operation application carries exact argument bindings and the verdict value in its declared result binding. When another use needs a durable evaluation-result episteme, C.2.1 governs that episteme, and A.15.PROD governs any current identity-inception claim linking exact work, actual change, and episteme identity. A.10 evidence relations support the relied-on assertions. The promise content does not perform the evaluation or compute the verdict; the operation-result binding, result episteme, and evidence relations support the assertion rather than making the fulfilment relation obtain.

PromiseContentFulfilmentRelation : U.Relation. This derived relation obtains between one delivery-work occurrence and one promise-content edition when the conditions below hold.

PromiseContentFulfilmentRelation : U.Relation
  FulfilmentWorkOccurrenceSlot: U.Work, U.EntityRef
  FulfilledPromiseContentSlot: U.PromiseContent, U.EpistemeRef

The semantic predicate for this relation is satisfied only when PromiseContentUse obtains for the same work and promise-content participants, PromisedOutcomeDeliveryRelation obtains for that work and the OutcomeSpec resolved from that promise content, and the acceptance predicate declared by acceptanceSpec is satisfied for the exact delivery-work facts, affected or delivered entities, post-work state, and any direct delivery or acceptance relation required by the criterion. PromiseContentFulfilmentRelation obtains for the declared participants when that semantic predicate is satisfied. Its occurrence key is <FulfilmentWorkOccurrenceSlot, FulfilledPromiseContentSlot>. The readable predicate is fulfilsPromiseContent(W, SC). A later evaluation may change the supported assertion about whether the relation obtains; it does not change relation identity. When satisfaction of any required predicate is unresolved, no positive fulfilment assertion is available for reliance.

The explicit RelationSignature declarations are warranted only when unitOfDelivery selectors or fulfilment measures refer to relation-occurrence identity. Ordinary prose may stop at the readable predicates when no later relation refers to that occurrence identity.

Invariant: fulfilsPromiseContent(W, SC) implies PromiseContentUse(W, SC, T), deliversPromisedOutcome(W, resolve(SC.promisedOutcomeSpecRef)), and satisfaction of the acceptance criteria declared in SC.acceptanceSpec; an evaluation-result episteme and A.10 evidence relations support the corresponding assertion without becoming relation participants. Invariant: One work occurrence can fulfil several promise contents only when each promise content's counting rule states dedupeKeyRef or refers to a counting-policy episteme under its direct governing pattern; no silent double counting.

Promise-content delivery measures

Let W(SC, T) be the set of delivery-work occurrences for which PromiseContentUse obtains with SC during interval T. Let W✓(SC, T) be the subset for which PromiseContentFulfilmentRelation obtains with SC.

  • Delivered units: delivered(SC, T) is computed from the set W✓(SC, T) using unitOfDelivery’s countingRule (A.7:5.10). Default (when unitOfDelivery is absent): delivered(SC, T) = |W✓(SC, T)| (one unit per accepted delivery work).
  • Rejection rate: rejectRate(SC, T) = 1 − |W✓(SC,T)| / |W(SC,T)| (declare handling of partial).
  • Lead time: declare the characteristic definition and aggregation separately. The definition may use work duration or request-to-completion delta; the aggregation may use an average or named percentile.
  • Availability and uptime claims: select one declared characteristic instead of treating the labels as synonyms. Derive its observed characteristic value from selected work facts and telemetry observations through its C.16 measurement template, Gamma_time policy, and evidence relations; cite a U.MethodDescription when a particular measurement method affects the reading.
  • Cost‑to‑serve: sum of Γ_work over W✓ per resource category (A.15.1).

Each resulting U.Measure claim is derived from selected facts about U.Work occurrences through its C.16 measurement template and named A.10 evidence relations; when a particular measurement method matters, its U.MethodDescription is cited. The promise-content episteme is never the bearer of resource or time actuals. Aggregation across time uses the Gamma_time policy referenced by the named C.16 measurement template or acceptance specification; an unqualified KPI label does not select that policy. When a measure needs a B.1.4 temporal-phase aggregation of one carrier, name one ContextTemporalAggregation@Context record and its exact selected policy—for example, union of observed values or their convex hull—together with carrier identity, time window, coverage and non-overlap conditions, and admissible use. If those one-carrier conditions do not hold, return to the direct aggregation owner instead of using this example. Union and convex hull are policy choices, not defaults; Gamma_time does not select either by itself.

Common misclassification repairs

  • A microservice label is being used for the whole service claim. Ground the current referent. The deployed software is normally a delivery-system or access-point U.System; the consumer-facing outcome and acceptance claims remain in U.PromiseContent.
  • An API label is being used for the whole service claim. When the referent is the interface specification, use U.MethodDescription; when it is the addressable endpoint, use U.System. Neither referent is the promise-content episteme.
  • A process or procedure label is being used for the whole service claim. Recover the semantic way of doing as U.Method, its description as U.MethodDescription, planned work as U.WorkPlan, and performed occurrences as U.Work. Keep the promised outcome and acceptance claims in U.PromiseContent.
  • A ticket or case record is being used for the whole service claim. Recover its claim-bearing content as a ticket or case-description U.Episteme; keep the publication form and U.PresentationCarrier separate. Relate that episteme to the named U.WorkPlan or U.Work occurrence it describes.
  • Cost or elapsed time is attached to the promise content. Keep resource and time actuals on the performed U.Work occurrence. Derive a measure over work occurrences participating in PromiseContentUse only through its declared characteristic, C.16 measurement template, named A.10 evidence relations, aggregation rule, and Gamma_time policy; cite a U.MethodDescription when a particular measurement method affects the reading.
  • Promise content is placed in a product or system breakdown. Keep the promise content as an episteme. The access and delivery systems may have parts and selected structures under A.22 and C.30; the promise-content episteme is not one of those parts.
  • A person or organization name is stored as the provider role. State the U.Role value and role-taxonomy scheme in the promise content, then use a named U.RoleAssignment occurrence for the provider holder system and assignment window.

Existing promise-description repair applications

  1. Name the promises. As an informative first pass, list roughly 5–15 consumer-facing promises used by the project; the range is a prompt, not an admission threshold. Represent each as U.PromiseContent with effective reference scheme, promised outcome specification, acceptance specification, and claim scope, plus access specification and unit of delivery when current.
  2. Separate provider from promise content. Keep people, organizations, machines, and software delivery systems as admitted U.System values; connect the provider holder through a named A.2.1 role-assignment occurrence.
  3. Relate promise content to delivery and evidence. Add PromiseContentUse for every delivery-work occurrence evaluated under the promise. Establish PromisedOutcomeDeliveryRelation only after exact work facts, affected or delivered entities, post-work states, and any direct delivery relation required by the resolved OutcomeSpec satisfy it; establish PromiseContentFulfilmentRelation only after those facts and states satisfy the declared acceptance criteria. Record the actual evaluation-operation result binding, any evaluation-result episteme, the evidence epistemes it cites, and the A.10 evidence relations separately.
  4. Define evaluation characteristics. As an informative first pass, select roughly 2–4 characteristics for each promise content; the range is a prompt, not a conformance limit. Use a recognizable §8.2 formula family—availability over a named window, lead time as a declared delta plus aggregation, rejection rate 1 − |W✓| / |W|, or cost-to-serve as summed Work resource use—or state an exact declared alternative. For each characteristic, name its scale, unit when applicable, C.16 measurement template, Gamma_time policy, direct evidence relations, and exact formula; cite a U.MethodDescription when a particular measurement method affects the reading. Do not let a KPI label stand in for this declaration.
  5. Bridge domain schemes. If a domain ontology already distinguishes business, technical, or internal service kinds and relations, retain its own reference scheme and name the F.9 bridge occurrence used for each selected domain referent and its FPF counterpart.
  6. Tidy language. Apply A.6.8 (RPR-SERV) and L-SERV. When "service" denotes a provider or access-point U.System, an access U.MethodDescription, planned U.WorkPlan, performed U.Work, or a ticket or case-description episteme, use that full kind name and reserve U.PromiseContent for the consumer-facing promise content.

Consequences

ConsequenceBenefitCost or boundary
Promise content becomes explicitEvaluation work can apply declared acceptance criteria to exact delivery-work facts, affected or delivered entities, post-work states, and any direct delivery or acceptance relation required by the criterion.The promise-content declaration and its direct relations must keep provider, access point, method, ticket or case-description episteme, work occurrence, operation-result binding, evidence episteme, evidence relation, and evaluation-result episteme distinct.
Commitments stay distinctA promise-content clause can be referred to from U.Commitment without becoming the deontic commitment relation itself.Accountability still needs an A.2.8 commitment occurrence whose accountable-subject position is filled, plus any current A.2.9 speech-act relation.
Promise use and evaluation become replayablePromiseContentUse obtains between the work occurrence and promise-content edition during the promise-use interval; delivery and fulfilment remain separate derived relations.A downstream fulfilment assertion retains the exact work, affected-subject and delivery facts, selected Delta expression when used, evaluation-operation result binding, named evidence epistemes and A.10 evidence relations, evaluation method description, and any evaluation-result episteme instead of treating the work occurrence or a dashboard as sufficient support.

Rationale

Everyday "service" language is useful because one label can denote promise content, provider systems, access points, commitments, methods, work occurrences, and evidence epistemes. When those claims guide evaluation or work, FPF distinguishes the referents and states their direct relations. U.PromiseContent gives the promised-outcome side one stable episteme, A.6.8 recovers the referent intended by the service wording, and each named direct relation remains governed by its direct pattern.

The pattern keeps promise content in the episteme family because it is a clause or description whose outcome and acceptance predicates state conditions on delivery work, affected referents, and post-work states. A fulfilment assertion and the evidence relations supporting it remain distinct from those referents and from the world-side relations whose obtaining the assertion describes. The episteme never becomes an obligation: the referents position of an A.2.8 commitment relation may contain it, an A.2.9 speech-act occurrence may communicate or institute that commitment, and A.6.C may unpack contract or SLA wording carried by a publication, while gate and policy relations remain separate.

SoTA-Echoing

Service-management, product, utility, platform, and public-service practice all distinguish offers, providers, access channels, service levels, work execution, and evidence of fulfilment, even when everyday language calls all of them "the service". A.2.3 keeps that practical distinction in FPF by giving the consumer-facing promise clause its own episteme value and by returning provider, access, commitment, work, and evidence claims to their governing patterns.

Contract and SLA practice distinguishes promised content from obligation-bearing acts or agreements and from later performance evidence. FPF keeps that separation without importing a domain-specific service taxonomy; the promise-content episteme remains usable across IT, utilities, healthcare, public services, manufacturing support, and other project domains.

Relations

  • Builds on: C.2.1 U.Episteme identity and reference scheme; A.2 U.Role; A.2.1 U.RoleAssignment; A.2.2 U.Capability; and A.2.6 U.ClaimScope and U.WorkScope. A.1.1 is used only when an independently selected BoundedModelUseStructure changes interpretation.
  • Coordinates with: A.3.1 U.Method; A.3.2 U.MethodDescription; A.15.1 U.Work; A.6.1 for actual operation application and result binding; A.15.PROD for current entity-identity-inception claims; A.15.2 U.WorkPlan; direct affected-subject, delivery, acceptance, and evaluation patterns; A.10 for evidence relations; A.2.8 for commitment; A.2.9 for speech act; A.6.8 for service-wording restoration; F.9 for cross-scheme or cross-scope bridges; and A.7 plus the direct publication pattern when specification use or publication is current.
  • Constrained by lexical rules: E.10 L‑SERV (service disambiguation); also L‑FUNC, L‑PROC, L‑SCHED, L‑ACT.
  • Informs: reporting and assurance patterns for measures over work occurrences participating in PromiseContentUse, plus directly governed catalog entries, exposure relations, charging relations, and entitlement relations when those claims are current.

Didactic quick distinctions

  • Promise content. A consumer-facing episteme stating the promised outcome, any eligibility predicate, effective reference scheme, claim scope, and acceptance specification; its optional accessSpec describes the access method.
  • Method and method description. U.Method is the semantic way of doing. U.MethodDescription is an episteme describing that method; neither is delivery work.
  • Delivery work, affected subject, and effect Delta. A provider holder system performs U.Work. Exact affected-referent, actual-change, production, delivery, or acceptance claims state what happened under their own governors; the selected effect Delta is a mathematical-lens expression over the affected referent and its pre-work and post-work states.
  • Evidence and evaluation. Evidence relations support delivery and satisfaction claims. A separately performed evaluation occurrence has an actual operation application with a declared result binding; any verdict episteme is separately constituted and governed.
  • Provider and consumer participation. U.Role values denote participation positions; the role-taxonomy episteme describes their meanings, and the holder-system and assignment-window positions of named U.RoleAssignment occurrences are filled explicitly.
  • Measures. U.Measure claims such as availability or lead-time readings derive from selected work facts through named characteristics, C.16 measurement templates, A.10 evidence relations, aggregation rules, and temporal policies; when a particular measurement method matters, its U.MethodDescription is cited.
  • Structure boundary. Promise content is not a structural part. The systems that expose access or perform delivery retain their own parts, selected structures, and ArchitectureOf@Context relations.

A.2.3:End

Episteme Evidence-Use and Status-Use Relations

Type: Boundary and relation-use pattern Status: Stable Normativity: Normative

Problem Frame

Use this pattern when a report, proof, dataset, measurement file, standard, requirement, dashboard cell, model card, publication face, generated explanation, or other U.Episteme is being used as evidence, source, status bearer, assurance input, or causal-use input for a claim.

Use it when the working question is:

  • which episteme is being used;
  • which claim, theory statement, status assertion, use, or causal-use question the episteme is being used for;
  • which bounded context, claim scope, grounding holon, polarity, relevance window, assurance use, weight model, and provenance constraints are current;
  • whether source wording such as "evidence role", "status role", "standard role", or "the report plays a role" hides an evidence-use, status-use, source-use, publication-use, assurance-use, gate-use, or causal-use relation;
  • whether the evidence-use or status-use relation is sufficiently specified for the intended reliance, or only enough for orientation, source-finding, a reversible probe, or a narrowed use.

Primary EntityOfConcern. The EntityOfConcern is the evidence-use relation or status-use relation around an episteme. It is not U.Role, not U.RoleAssignment, and not a system performing work.

First useful move. Name the episteme, the bounded context, the claim or status being addressed, and the direct governing pattern that owns the use: usually A.10, B.3, C.2.1, C.28, F.10, G.6, E.17, E.10.D2, or a direct gate, source, requirement, definition, explanation, or publication-use pattern.

What goes wrong if missed. A document starts acting like an agent, a dataset is treated as if it held a work-facing role, a dashboard status becomes permission, a proof becomes global evidence without a theory fence, or a simulation-only counterfactual output is relabelled as realized causal evidence.

What this buys. The project can use epistemes as evidence, status bearers, sources, standards, requirements, definitions, explanations, publications, or assurance inputs without creating a second role ontology for epistemes and without losing claim scope, polarity, freshness, provenance, or assurance-use distinctions.

Not this pattern when. If the current claim is a system or acting holon holding a work-facing role, use A.2 and A.2.1. If the current claim is performed work, use A.15.1. If the current claim is the full evidence-provenance graph relation, use A.10. If the current claim is assurance, use B.3. If the current claim is causal use, use C.28. If the current claim is a status family or status mapping, use F.10. If the current claim is publication-use or source-use, use E.17 and E.10.D2 as needed.

Problem

Source text may name U.EvidenceRole or evidence-like role labels for a real need: an episteme can be used as evidence for a claim inside a bounded context, with scope, polarity, time, assurance use, weight, and provenance constraints. The FPF repair is to model that use as an evidence-use relation, not as a non-behavioral role held by the episteme through U.RoleAssignment.

That creates several failures:

  1. Episteme-as-holder drift. A paper, proof, dataset, standard, or dashboard cell is treated as if it held a work-facing role.
  2. Evidence role ontology drift. ModelFitEvidenceRole, MeasurementEvidenceRole, or AxiomaticProofRole look like role kinds instead of evidence-use relation classifications or local evidence-use labels.
  3. Claim relation collapse. Target claim, grounding holon, claim scope, polarity, relevance window, assurance use, weight model, and provenance constraints are hidden behind one role name.
  4. Evidence and status collapse. A status badge, standard reference, approval-looking display, publication face, or requirement source is treated as evidence, status assertion, gate passage, permission, and assurance at once.
  5. Work confusion. The work that produced an episteme and the later use of that episteme as evidence are folded into one relation.
  6. Causal-use laundering. Observational association, intervention, realized counterfactual sample, identified counterfactual estimate, and simulation-only output are relabelled by evidence-wording instead of being governed by C.28.
  7. Cross-context leakage. Evidence accepted in one context is reused in another without an explicit bridge, source-currentness relation, or assurance-use statement.

Forces

ForceTension this pattern resolves
Episteme identity versus episteme useThe same episteme can be used for several claims without becoming several epistemes or several role-assignment holders.
Compact evidence statement versus full evidence graphUsers need a small evidence-use statement first; A.10 still owns full evidence-provenance graph detail.
Formal proof versus empirical evidenceA proof can be stable inside one theory version; empirical evidence usually needs relevance windows, freshness, and provenance constraints.
Status display versus status assertionA visible badge, cell, or label can cue status but does not by itself create permission, gate passage, assurance, or work evidence.
Local acceptance versus cross-context reuseEvidence and status use are context-bound; reuse needs bridge, source-currentness, publication-use, or assurance-use relations.
Causal evidence classes versus ordinary evidence relationCausal-use evidence classes need C.28; A.2.4 only keeps the evidence-use relation from becoming a role assignment.

Solution

Do not create or use U.EvidenceRole as a durable role kind. Do not place an episteme in U.RoleAssignment merely because it is used as evidence, source, standard, requirement, definition, explanation, publication, status bearer, or assurance input.

Use direct relation patterns instead:

Current claimUse
one episteme is used as evidence for one claim, effect, or bounded reliance useA.10, with the A.2.4 evidence-use SlotKinds below
evidence use contributes to assurance, trust, readiness, compliance, safety, release confidence, F, G, R, or CLB.3, consuming A.10 evidence-use relations
the episteme itself is being identified, versioned, or distinguished from publication faces and publication carriersC.2.1
the use is causal, counterfactual, intervention-facing, or simulation-onlyC.28, with A.10 evidence-provenance graph relation and the A.2.4 evidence-use relation as input
the source says "status", "approved", "current", "valid", "stale", "ready", or another status-like valueF.10, A.10, B.3, a gate pattern, or a direct status pattern
the source is a publication face, view, description, source citation, standard, requirement, explanation, or specification-use caseE.17, E.17.0, E.17.2, E.17.EFP, E.10.D2, or the direct source-use pattern
a system, person, team, organization, or acting holon holds a role and performs or prepares workA.2, A.2.1, A.15, A.15.1, or A.15.2

Evidence-Use Relation Slots

An evidence-use relation is a relation around an episteme and a claim or effect. It is not a role assignment.

SlotKindValueKindIdentity and currentness discipline
EvidenceEpistemeSlotU.Episteme used as evidenceIdentity slot for the evidence-use relation.
EvidenceTargetClaimSlotclaim or theory statementIdentity slot whenever the relation is claim-bound; a missing value blocks claim-bound evidence use.
EvidenceClaimGroundingHolonSlotU.Holon grounding the target claim, mirroring C.2.1 GroundingHolonSlotIdentity or currentness-required when changing the grounding holon changes the evidence relation or the claim being evidenced.
EvidenceClaimScopeSlotclaim-scope value governed by B.3, A.10, C.28, or a direct evidence patternIdentity qualifier when changing scope changes the relation; currentness-required when scope changes admissible use.
EvidencePolaritySlotevidential polarity value such as supports, refutes, constrains, or neutral when that value set is currentIdentity qualifier when changing polarity changes which evidence-use relation is asserted.
EvidenceRelevanceWindowSlottemporal relevance window, theory-version fence, freshness policy, or decay policyIdentity or currentness-required when time, version, or freshness changes the evidence use; consideration slot for formal uses where the theory-version fence already carries the boundary.
EvidenceAssuranceUseSlottyping, verification, validation, reliance, gate, release, or another assurance-use value governed by B.3, A.10, or a direct patternIdentity qualifier only when changing assurance use changes the relation; currentness-required for reliance-bearing use.
EvidenceWeightModelSlotweight, confidence, reliability, likelihood, or scoring model referenceConsideration slot; currentness-required when weighted evidence is claimed.
EvidenceProvenanceConstraintSlotprovenance constraints over external work, source, publication, method description, proof check, measurement, publication carrier, or evidence-provenance graph relationCurrentness-required when provenance decides admissible use or a rival explanation.

These SlotKinds are evidence-use relation positions. They are not work-role qualifier slots, not U.Role names, and not new U-kinds by themselves.

Status-Use Relation Slots

A status-use relation is a relation around a bearer, status value, scope, window, source, and use. It is not a status role held by an episteme.

SlotKindValueKindUse
StatusBearerSlotepisteme, claim, method description, publication, role assignment, work occurrence, clause, gate record, or another governed bearer admitted by the direct patternThe value whose status is being asserted or read.
StatusTargetSlotclaim, method, episteme, publication, work result, clause, bearer, or another governed status targetRequired when the status is not simply about the bearer itself.
StatusScopeSlotbounded-context scope, claim scope, admission scope, requirement scope, or use scopeCurrentness-required when scope changes the status assertion.
StatusValueSlotstatus value governed by F.10 or a direct patternRequired for a status assertion.
StatusWindowSlottemporal validity window, freshness policy, status-currentness relation, or source-currentness relationCurrentness-required for time-sensitive status.
StatusUseSlotgate use, assurance use, admission use, source-currentness use, work-plan readiness use, or another direct useRequired when the status is consumed for that use.
StatusProvenanceConstraintSlotsource order, authority source, publication, proof, verification, register, or provenance constraintCurrentness-required when provenance decides status use.

These names do not create a generic status ontic. They are repair vocabulary for status-use relations in the current role and relation-slot settlement. Durable status families remain governed by F.10 or a direct status pattern.

Minimal Evidence-Use Statement

For ordinary use, write only the fields needed for the current reliance question:

Episteme evidence-use statement:
  EvidenceEpisteme:
  BoundedContext:
  EvidenceTargetClaim:
  EvidenceClaimGroundingHolon:
  EvidenceClaimScope:
  EvidencePolarity:
  EvidenceRelevanceWindow:
  EvidenceAssuranceUse:
  EvidenceWeightModel:
  EvidenceProvenanceConstraint:
  DirectGoverningPattern:
  UnsupportedOverread:

UnsupportedOverread names the stronger claim not carried by this relation, such as approval, permission, gate passage, performed work, assurance, causal identification, release confidence, or global truth.

Minimal Status-Use Statement

For status-like cases, write the smallest relation that keeps status from becoming role assignment, gate passage, or assurance by display alone:

Episteme status-use statement:
  StatusBearer:
  StatusTarget:
  StatusScope:
  StatusValue:
  StatusWindow:
  StatusUse:
  StatusProvenanceConstraint:
  DirectGoverningPattern:
  UnsupportedOverread:

If the status is used for a gate, release, work-plan readiness, assurance, or admission decision, apply the direct governing pattern for that use. A.2.4 only keeps the status-use relation typed and prevents role-holder grammar from returning where an episteme-use relation is needed.

Formal, Empirical, and Causal Evidence Uses

Source labels such as AxiomaticProofRole, ObservationEvidenceRole, MeasurementEvidenceRole, ModelFitEvidenceRole, ReplicationEvidenceRole, CalibrationEvidenceRole, and BenchmarkEvidenceRole become evidence-use classifications or local evidence-use labels, not U.Role values.

Formal line:

  • the evidence episteme is a proof, derivation, counterexample, theory note, proof-check result, or formal publication;
  • EvidenceTargetClaimSlot names the theorem or theory statement;
  • EvidenceClaimScopeSlot names the theory domain or declared scope;
  • EvidenceRelevanceWindowSlot usually names a theory-version fence rather than an empirical expiry date;
  • EvidenceProvenanceConstraintSlot names proof checks, source publications, theory version, and dependency conditions when current.

Empirical line:

  • the evidence episteme is a dataset, observation record, measurement report, replication report, calibration result, benchmark result, model-fit report, or similar episteme;
  • EvidenceClaimScopeSlot, EvidenceRelevanceWindowSlot, EvidenceWeightModelSlot, and EvidenceProvenanceConstraintSlot usually decide whether the use is admissible;
  • the producing work remains U.Work under A.15.1, performed by a system or acting holon under U.RoleAssignment where that trace is current.

Causal-use line:

  • the causal-use question belongs to C.28;
  • A.2.4 keeps the evidence-use relation typed so the episteme is not relabelled by vocabulary alone;
  • exact C.28 values such as observationalAssociationSupportBasis, interventionalActionSupportBasis, realizedCounterfactualSampleSupportBasis, identifiedCounterfactualEstimateSupportBasis, and simulationOnlyCounterfactualOutputBasis remain C.28 values, not role names.

Work, Source, and Publication Boundary

The producing work and the later evidence use are different relations.

  • A lab run, proof-checking session, calibration run, benchmark run, review, model evaluation, or data extraction can be U.Work.
  • The report, proof file, dataset, benchmark table, or publication produced by that work can be a U.Episteme.
  • A later project can use that episteme as evidence through an evidence-use relation.
  • A publication face, view, source citation, credential view, dashboard display, or generated explanation can cue evidence or status use, but it does not become the evidence-use relation by itself.

When the source-currentness, publication-use, view, explanation, or specification-use question is current, use E.17, E.17.0, E.17.2, E.17.EFP, E.10.D2, A.10, or the direct source-use pattern before relying on the evidence-use or status-use relation.

Shortcut Cost and Reopen Condition

The baseline is the direct governing pattern: full A.10 for evidence-provenance graph relations, full B.3 for assurance, full C.28 for causal use, full F.10 for status families, full E.17 or E.10.D2 for publication-use and description-use cases, and full A.15.1 when the producing work is current.

A.2.4 is the weaker first-use representation. It saves effort by writing only the relation positions needed to stop role-like source wording from collapsing evidence, status, work, assurance, source, and publication claims. The loss budget is narrow: A.2.4 may name the evidence-use or status-use relation, preserve the named direct governing pattern, and state unsupported overread. It may not decide assurance value, gate passage, causal identification, source-currentness order, publication interpretation, or performed-work truth.

Open the direct governing pattern when the attempted use depends on assurance, safety, release, compliance, causal effect, gate decision, permission, performed work, source freshness, publication use, status currentness, or a contested provenance relation.

Archetypal Grounding

Proof Used as Evidence

Lemma-12.proof is an episteme used as evidence for Theorem-12 in GraphTheory_v3.1.

The evidence-use relation names:

  • EvidenceEpistemeSlot = Lemma-12.proof;
  • EvidenceTargetClaimSlot = Theorem-12;
  • EvidenceClaimScopeSlot = finite DAGs inside GraphTheory_v3.1;
  • EvidencePolaritySlot = supports or an entailment-specific polarity when the local value set declares one;
  • EvidenceRelevanceWindowSlot = theory-version fence GraphTheory_v3.1;
  • EvidenceAssuranceUseSlot = verification use;
  • EvidenceProvenanceConstraintSlot = proof publication, proof-check result, dependency list, and theory version.

No episteme holds AxiomaticProofRole. The proof episteme is used in a claim-bound evidence-use relation.

Calibration Dataset Used as Evidence

Trial-R3.csv is an episteme used as evidence for Sensor S accuracy +/-0.3 C in [0,70] C under lab conditions L.

The evidence-use relation names the claim scope, polarity, relevance window, weight model, producing work runs, method description, measurement traceability, and freshness policy. If a later assurance claim is made, B.3 consumes this relation. If the calibration run itself is being discussed, use A.15.1 for the work occurrence.

Dashboard Status Cell

A release dashboard shows Ready.

That visible cell can be:

  • a status cue;
  • a status assertion if the source, status value, scope, window, and provenance constraints are recoverable;
  • evidence for a gate or release claim only when A.10 and the gate pattern recover the source relation;
  • no evidence-use relation if it is stale, copied, unauthenticated, or disconnected from the decision source.

It is not a status role held by the dashboard episteme.

Standard Used as Requirement or Evidence

An ISO/IEC/IEEE standard clause can be an episteme used as a requirement source, definition source, status source, or evidence source depending on the current claim.

Do not write "the standard has a normative role" as live FPF ontology. Recover the relation governed by the current claim: standard-use, requirement-use, definition-use, source-use, evidence-use, status-use, or assurance-use.

Simulation-Only Counterfactual Output

A simulation output mentions a counterfactual. That output may be an episteme used in an evidence-use relation. The causal-use class still belongs to C.28.

If the current C.28 value is simulationOnlyCounterfactualOutputBasis, the evidence-use relation cannot be relabelled as realizedCounterfactualSampleSupportBasis or interventionalActionSupportBasis by evidence wording, validation wording, or role wording alone.

Bias-Annotation

This pattern mainly blocks six biases:

  • episteme-as-role-holder bias: an episteme is placed in U.RoleAssignment because it is useful as evidence or status;
  • evidence-name-as-kind bias: local evidence-use labels become U.Role names;
  • status-display-as-authority bias: a visible badge or status cell becomes gate passage, permission, or assurance;
  • work-as-evidence-use collapse: producing work, produced episteme, and later evidence use are treated as one relation;
  • scope-free evidence bias: target claim, grounding holon, claim scope, polarity, time, assurance use, or provenance constraints are omitted;
  • causal laundering bias: causal evidence classes are changed by source vocabulary rather than by C.28 causal-use reasoning.

The repair is to recover the episteme first, then recover the evidence-use, status-use, source-use, publication-use, assurance-use, or causal-use relation that is current.

Conformance Checklist

CheckPass condition
CC-A2.4-1 Episteme boundaryThe evidence or status bearer is identified as U.Episteme, publication face, claim, status bearer, or another direct-pattern bearer; no episteme is placed in U.RoleAssignment merely because it is used.
CC-A2.4-2 Target relationEvidence use names the target claim or effect when claim-bound; status use names the status bearer, status value, and target when needed.
CC-A2.4-3 Grounding and scopeClaim grounding holon, claim scope, status scope, or use scope is named when changing it would change the relation or admissible use.
CC-A2.4-4 Polarity and valueEvidence polarity or status value is explicit when the use depends on it.
CC-A2.4-5 Time and freshnessRelevance window, theory-version fence, freshness policy, status window, or source-currentness relation is explicit when the use is time-sensitive.
CC-A2.4-6 ProvenanceExternal producing work, source, publication, proof check, measurement, method description, register, or evidence-provenance relation is named when it decides admissible use.
CC-A2.4-7 Assurance boundaryAssurance, readiness, safety, compliance, release confidence, trust, F, G, R, or CL claims go to B.3; A.2.4 only supplies typed evidence-use or status-use relation positions.
CC-A2.4-8 Causal boundaryCausal-use and counterfactual claims go to C.28; A.2.4 does not mint causal evidence kinds.
CC-A2.4-9 Work boundaryThe producing work remains U.Work; the episteme use remains evidence-use or status-use.
CC-A2.4-10 Publication boundaryPublication face, source citation, generated explanation, credential view, or dashboard display is not treated as evidence-use or status-use until the relation is recoverable.
CC-A2.4-11 No evidence/status role ontology driftLive prose does not teach U.EvidenceRole, status role for epistemes, episteme role holder, or evidence-role assignment through U.RoleAssignment.
CC-A2.4-12 Direct governing patternThe statement names the direct pattern that owns the current use: A.10, B.3, C.2.1, C.28, F.10, G.6, E.17, E.10.D2, or another governing pattern named by value.

Common Anti-Patterns and How to Avoid Them

Source wordingFailureRepair
"The report has EvidenceRole for Claim A."Puts an episteme into role ontology.Use an evidence-use relation with EvidenceEpistemeSlot, EvidenceTargetClaimSlot, scope, polarity, window, and provenance constraints when current.
"Dataset X proves safety."Treats dataset presence as proof, assurance, and safety claim.Use A.10 for evidence, B.3 for assurance or safety assurance, and name unsupported attempted use.
"The standard has normative role."Role word hides standard-use, requirement-use, source-use, or publication-use.Recover the relation governed by the current claim and apply E.10.D2, E.17, F.10, or the direct requirement pattern.
"The badge is current, so release is allowed."Status display becomes gate passage or permission.Use status-use relation plus gate or release governing pattern; dashboard display alone is not a decision.
"Simulation output is counterfactual evidence."Simulation-only output is promoted to realized or interventional causal evidence.Use C.28; keep simulationOnlyCounterfactualOutputBasis distinct unless the causal-use pattern admits another value.
"The work run is the evidence role."Work occurrence and evidence-use relation are collapsed.Use A.15.1 for the work occurrence, C.2.1 for the produced episteme, and A.10 plus A.2.4 slots for later evidence use.

Consequences

The positive consequence is a simpler role ontology. Systems and acting holons hold work-facing roles; epistemes are used through evidence-use, status-use, source-use, publication-use, requirement-use, definition-use, explanation-use, assurance-use, and causal-use relations.

The cost is explicit relation recovery. A phrase such as "evidence role", "status role", "standard role", "proof role", or "benchmark role" no longer closes the claim. The user needs to recover which episteme, claim, scope, status, time window, provenance constraint, and direct pattern are current.

The payoff is that one episteme can be reused honestly across many claims. Each use can have a different target claim, grounding holon, scope, polarity, relevance window, assurance use, weight model, or provenance constraint without multiplying role kinds.

Rationale

Evidence-use and status-use are kept as relation positions because an episteme can support, constrain, display, attest, or refresh different claims without becoming a work-facing role holder. This avoids multiplying role kinds for every publication, credential, dataset, proof, status display, source, and explanation use.

SoTA-Echoing

SoTA lineAdopted or adapted moveFPF consequence
Current digital provenance, content-credential, verifiable-credential, and attestation practice, including C2PA 2.4, W3C Verifiable Credentials 2.0, SLSA Provenance 1.2, and in-toto Statement v1.Adopt the separation of subject, issuer or producing work, proof or status check, time, verifier or relying context, and claim. Adapt it to FPF U.Episteme, U.Work, role-assignment, source-currentness, and publication-use distinctions.A.2.4 uses evidence-use and status-use relation slots instead of an episteme role assignment; credential or provenance display does not become truth, permission, gate passage, or assurance by itself.
Assurance-case and trust-calculus practice separates evidence presence from assurance, safety, readiness, compliance, and release confidence.Adopt the separation between evidence-use and assurance-use.A.2.4 supplies relation positions; B.3 computes or states assurance and names limits, scope, decay, and reopen conditions.
Current causal-inference, target-trial, counterfactual, and simulation-evaluation practice separates observational, interventional, realized-counterfactual, identified-estimate, and simulation-only evidence classes.Adopt the separation of causal evidence classes; use exact value names from C.28.Causal evidence-use wording cannot relabel simulation-only output as realized or interventional evidence.
Foundational-ontology and relation-slot practice, including gUFO, UFO, and OntoUML role, relator, situation, and high-order type work, separates role-assignment holders, relation positions, status assertions, and object use.Adopt the anti-collapse principle: a value may fill a relation position without becoming a new kind or role-assignment holder.U.RoleAssignment stays work-facing, while episteme evidence, status, source, publication, requirement, definition, explanation, and assurance uses stay in direct relations.

Refresh this pattern's source use when those provenance, credential, attestation, assurance, causal-use, or foundational-ontology practices change the separation between evidence presence, status display, assurance, provenance, causal class, and role assignment.

Relations

  • Builds on: A.2 for U.Role, A.2.1 for U.RoleAssignment, A.6.5 for SlotSpec discipline, and C.2.1 for episteme slot relation and episteme identity.
  • Coordinates with: A.10 for evidence-provenance graph relation; B.3 for assurance; C.28 for causal-use evidence classes; F.10 for status families; G.6 for evidence graph and provenance ledgers; E.17, E.17.0, E.17.2, and E.17.EFP for publication, view, and explanation-use cases; E.10.D2 for EntityOfConcern, description episteme, and specification-use discipline.
  • Separates from: A.15.1 for producing work; A.15.2 for planned work; gate patterns for gate passage; A.2.8 and A.2.9 for commitments and speech acts; source-currentness patterns for source freshness and source order.
  • Precision-restoration owners: When source wording says "evidence role", "status role", "standard role", or another role-shaped phrase around an episteme, use A.6.RSIR for relation-slot or role-like slot recovery and E.10.ARCH for ontology-first repair architecture.

Lowering, Repair, and Refresh

Lower an attempted A.2.4 use when the episteme is known but the target claim, scope, polarity, status value, time window, or provenance constraints are not recoverable. The lowered result may be source-finding, orientation, an evidence-needed note, a status-source request, or a narrowed reliance use.

Repair the use when a neighboring relation is actually current: performed work, assurance, causal use, gate passage, permission, commitment, publication-use, source-currentness, requirement-use, definition-use, or explanation-use.

Refresh the use when the episteme edition, target claim, grounding holon, claim scope, theory version, relevance window, source-currentness relation, status source, proof check, measurement trace, method description, or assurance-use relation changes.

A.2.4:End

RoleStateRelation@BoundedContext - Role State Space and Enactable-State Admission

Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative

Use This When

Plain name. Role-state space.

Kind Settlement

A.2.5 does not admit U.RoleStateGraph as a durable U-kind. The governed object is RoleStateRelation@BoundedContext: a selected context-local relation structure over U.Role, U.BoundedContext, role-state values, state predicates, state assertions, and work-admission relations. State-machine or graph notation is a mathematical or representation lens over that relation structure, not the object itself and not a new root beside U.Role.

Use this pattern when a project needs to decide whether a role assignment is currently in a state that admits a work claim, a method-step claim, an incompatibility claim, or a role-readiness claim.

Typical moments:

  • a work record says that a person, team, device, service, agent, or machine acted as technical checker, operator, deployer, verifier, surgeon, sensor, or incident commander, but the current role state is unclear;
  • a method description names a required role, and the project needs to state which role states admit the step;
  • a role assignment is current, but the holder may be suspended, stale, uncalibrated, fatigued, not yet authorized, or otherwise not in an enactable state;
  • a role-relation claim such as role-requirement substitution, incompatibility, or bundle expression depends on role states rather than labels alone;
  • a source says "ready", "approved", "validated", "authorized", "active", "stale", or "blocked" and it is unclear whether this is a role state, an evidence or status relation around an episteme, an admission result, a capability value, or a work occurrence.

Primary EntityOfConcern. The EntityOfConcern is RoleStateRelation@BoundedContext: the selected context-local state-space relation for one U.Role in one U.BoundedContext. It names role states, state predicates, state-change predicates when current, and the subset of states that admit work through a U.RoleAssignment. It is a real FPF object, but it is not a new U.* kind beside U.Role; its identity is carried by the role value, bounded context, state set, state predicates, and work-admission relation.

Primary working reader. The first reader is an engineer-manager, analyst, safety checker, operations lead, or FPF author who needs to keep role assignment, role state, holder capability, method requirement, and performed work distinct while still deciding whether a work claim may proceed.

First useful move. Name the role and bounded context, list the states that matter for the current claim, mark which states admit work, and state what observation, evaluation, speech act, work record, or source relation can justify a StateAssertion for the relevant window.

What goes wrong if missed. A role label becomes a permission slip. A role assignment is treated as ability. A certificate, report, standard, status marker, or dashboard is treated as if it held a work-facing role. Separation-of-duties checks operate on labels instead of states. Source phrases such as "approved evidence role" or unlabeled readiness marks create a second role ontology.

What this buys. Role admission becomes inspectable without making forms heavy. The same role value can have different current states in different contexts and windows; method and work claims can ask only for the state evidence they need; episteme evidence and status uses stay with their direct patterns.

Not this pattern when.

  • If the current claim is the role value itself, use A.2.
  • If the current claim is the assignment relation linking holder, role, bounded context, and assignment window, use A.2.1.
  • If the current claim is ability or operating envelope, use A.2.2.
  • If the current claim is role-requirement substitution, incompatibility, or bundle expression independent of current state, use A.2.7.
  • If the current claim is selected method, method description, work plan, or performed work, use A.15 and the direct A.15 subpattern.
  • If the current claim is an episteme used as evidence, source, standard, requirement, definition, explanation, publication, status bearer, assurance input, or admission input, use the direct pattern for that relation. Do not turn the episteme into a role holder or role state.

Problem Frame

Work-facing role assignment is not enough for safe work attribution. "Dana holds IncidentCommanderRole" may be true while Dana is off-duty, conflicted by another role assignment, outside the current assignment window, or missing a fresh authorization source. "Robot-7 holds InspectorRole" may be true while the robot is uncalibrated. "Thermometer T-17 holds ObserverRole" may be true while the calibration evidence is stale.

The project needs a small state space for each important role in each bounded context. That state space says which role states exist, which state predicates justify them, and which states admit work. It is not a method order, not a task list, not a capability, not a work log, and not an episteme status ontology.

A.2.5 therefore defines RoleStateRelation@BoundedContext as a selected relation structure around a U.Role and bounded context. It uses state-machine or graph notation only as a selected mathematical or representation lens where helpful. The FPF object is the role-state relation used for work admission and role-state claims.

Problem

Without this pattern:

  1. Assignment and state collapse. A holder assigned to a role is treated as currently ready.
  2. Role and capability collapse. A state label such as "ready" is treated as ability instead of a window-bounded state assertion.
  3. Role state and work collapse. Being in a state is mistaken for having performed the work.
  4. State and source collapse. A certificate, report, standard, model card, dashboard, or publication is treated as the state itself rather than as a source or evidence relation for a state assertion.
  5. Label-only incompatibility appears. Incompatibility checks block or admit work by role names rather than by enactable states in a window.
  6. Context drift returns. "Approved" or "Ready" travels across contexts without named state predicates or loss.
  7. Enactment reification survives. RoleEnactment becomes a durable root value even though performed work is governed by U.Work and U.RoleAssignment.

Forces

ForceTension
Minimal use vs safetyOrdinary use needs a small state list; high-consequence work needs windowed state assertions and evidence.
Role assignment vs role stateU.RoleAssignment says who holds the role; RoleStateRelation@BoundedContext says what states that role can be in and which states admit work.
State-machine clarity vs method-order driftState diagrams are useful, but this pattern does not encode method order or work-order structure.
Authorization words vs capability"Authorized", "permitted", and "ready" can be role states, but they do not create capability.
Status words vs episteme use"Approved standard" or "validated dataset" may be an episteme status-use relation, not a work-facing role state.
Context reuse vs local meaningState names are memorable, but their predicates and admission effect stay local to one bounded context unless a bridge or comparison relation is declared.

Solution

Use RoleStateRelation@BoundedContext for the state-space relation of one U.Role in one U.BoundedContext.

RoleStateRelation:
  RoleValueRef:
  BoundedContextRef:
  RoleStateSet:
  EnactableStateSet:
  StatePredicateSet:
  StateChangePredicateSet:
  StateAssertionRelation:
  RoleRelationStructureHooks:
  UKindDisposition: non-U selected relation structure

This is a relation value. A role description, policy, register, diagram, checklist, or publication may describe or store the relation value. The description or register is not the role-state relation itself by default.

Do not promote this object to a separate U.* kind. RoleStateRelation@BoundedContext has action-facing use because it controls role-state admission, but the identity is reducible to slot and relation combinatorics over existing governed values: U.Role, U.BoundedContext, role-state values, state predicates, state assertions, and the work-admission relation through U.RoleAssignment. The durable U-kind remains U.Role; A.2.5 supplies the selected state relation inside the role ontologicalNeighborhood.

Core SlotSpecs

SlotKindValueKindSlot-use dispositionMeaning
RoleValueRefU.Roleidentity slotThe role value whose states are being described.
BoundedContextRefU.BoundedContextidentity slotThe context that gives state names and predicates their meaning.
RoleStateSetfinite set of context-local state valuesidentity slotThe named states relevant to this role in this context.
EnactableStateSetsubset of RoleStateSetadmission slotThe states that admit a work or method-step claim when a valid state assertion exists. Empty set is allowed when the role is never work-admitting in that context.
StatePredicateSetpredicates over role characteristics, observations, evaluations, work records, speech acts, source relations, or context valuesrecognition slotThe predicates used to assert that a holder is in a state for a window.
StateChangePredicateSetpredicates for entering, maintaining, or leaving statesconsideration slotUsed when state change matters. It does not define method order.
StateAssertionRelationrelation from role assignment, state, window, and evidence values to an assertion verdictcurrentness-required when role-state admission is claimedThe relation that justifies "this role assignment is in this state for this window."
RoleRelationStructureHooksreferences to A.2.7 role-requirement substitution, incompatibility, or bundle expressionscurrent when role relation structure affects admissionState-aware checks for role-requirement substitution, incompatibility, and bundles.

The SlotSpecs are open-world. A casual role-state note may only name role, context, and a state. A safety-critical work claim may require state predicates, evidence, assignment window, role-state window, capability checks, and method-step relation. Missing relevant content lowers or blocks the stronger claim; it does not assert that the value cannot exist.

State and State Assertion

Role state. A role state is a context-local value in the RoleStateSet for one U.Role and one bounded context. Names such as Ready, Calibrated, Suspended, Authorized, Stale, or Blocked are local labels until their predicates are named.

Enactable state. An enactable state is a role state admitted by EnactableStateSet. A method-step claim or work-attribution claim that requires the role can use that state only with a current StateAssertion.

State assertion. A StateAssertion says that one U.RoleAssignment is in one role state for one window, with named evidence or source relations.

StateAssertion:
  RoleAssignmentRef:
  RoleStateRef:
  AssertionWindow:
  PredicateEvaluation:
  EvidenceOrSourceUseRefs:
  AssertionStatus:

PredicateEvaluation is governed by the evaluation or evidence pattern that owns the claim. The assertion does not make the evidence episteme a role holder.

Enactable-State Admission

Use this admission predicate when a method or work claim depends on role state:

EnactableStateAdmission:
  requiredRole: U.Role
  roleAssignment: U.RoleAssignment
  requiredContext: U.BoundedContext
  workOrMethodClaim:
  window:
  admitted iff StateAssertion(roleAssignment, state, window)
              and state is in EnactableStateSet(requiredRole, requiredContext)

This predicate admits or blocks the work or method-step claim. It does not create work, select a method, grant capability, or prove that work occurred.

State Predicates and State-Change Predicates

State predicates answer: is this assignment in this state for this window?

Examples:

  • CalibrationAge <= 30 days;
  • AuthorizationDecision exists within the stated window;
  • FatigueScore below threshold;
  • IndependenceFrom(holder, conflictingAssignment) is true;
  • ObservationProcedureActive and calibration trace is current;
  • NoOpenIncident above declared severity.

State-change predicates answer: what evidence or event changes the state relation? They may reuse the same observations or decisions, but their use is different. A predicate that says calibration expired can justify a Stale state assertion; it still does not prescribe the method order for recalibration work.

Role Relation Structure Hooks

When A.2.7 declares role-requirement substitution, incompatibility, or bundle expressions, A.2.5 adds state-sensitive admission.

Role relationState-sensitive reading
AcceptedRoleForRequirement <= RequiredRoleA state assertion for the accepted role can satisfy the required-role requirement only when the context declares a state refinement relation and enactability is preserved.
RoleA incompatibleWith RoleBThe conflict is usually about overlapping enactable states for one holder in one window, not about labels alone.
RoleA plus RoleB bundleA work claim requiring both roles needs state assertions for both role assignments in the same window, unless the bounded context declares a composite role with its own RoleStateRelation@BoundedContext.

Do not construct product state spaces by default. Product states are admitted only when the bounded context actually maintains a composite role value and gives it its own RoleStateRelation@BoundedContext. A graph or state-machine diagram may describe that relation; it is not the relation in life.

Separation From Capability, Method, Work, Evidence, and Status

TemptationRecover as
"Assigned, therefore able"Role assignment in A.2.1 plus capability claim in A.2.2.
"Ready, therefore work happened"State assertion here plus performed-work claim in A.15.1 only if a U.Work occurrence is named.
"Authorized, therefore method selected"Role-state or decision claim here; selected method remains governed by A.3.1, A.3.2, and A.15.
"Report has evidence role"Evidence-use relation around an episteme, not a role state.
"Standard has normative role"Requirement-use, standard-use, status-use, source-use, or publication-use relation around an episteme.
"Dashboard is monitoring role"Publication, interface, source, or evidence relation for the dashboard; observing work belongs to a holder under U.RoleAssignment.
"RoleEnactment occurred"Use U.Work with performedBy = U.RoleAssignment; use RoleEnactmentFact from A.2.1 only as a derived fact when naming the fact helps.

Worked Slices

Incident Commander

Context: SRE_Prod_Cluster_EU_2026.

Role: IncidentCommanderRole.

States:

  • OffDuty - not in the on-call assignment window;
  • OnCall - assignment window and contact source are current;
  • Authorized - escalation decision source is current;
  • Ready - on call, authorized, not conflicted, attention-pressure indicator below threshold;
  • RunningIncident - currently performing incident-command work;
  • Blocked - conflicting assignment or missing source.

Ready and RunningIncident are enactable states for incident-command work in this context. A work record for "Declare severity level" may cite performedBy = Dana#IncidentCommanderRole:SRE_Prod_Cluster_EU_2026, but the work claim is admitted only when a StateAssertion puts that assignment in Ready or RunningIncident for the declaration window.

Thermometer Observer

Context: Metrology_Thermo_2026.

Role: ThermometerObserverRole.

States:

  • Unqualified - no traceable calibration source;
  • Calibrated - calibration source current;
  • Synchronized - time relation within threshold;
  • InRange - drift and environment predicates hold;
  • Measuring - observation procedure is active;
  • Stale - calibration or synchronization window expired;
  • Quarantined - suspected contamination or bias.

Measuring is the only enactable state for the "record temperature" work claim. Calibrated and Synchronized are useful role states, but they do not by themselves admit observation work.

Standard or Dataset With "Status Role" Source Wording

A source may say that a standard has an "approved role" or a dataset has an "evidence role." Do not make a RoleStateRelation@BoundedContext for the episteme unless a direct work-facing role is actually current. Usually the repair is:

  • standard or requirement source: requirement-use, status-use, source-use, or publication-use relation;
  • dataset or report: evidence-use, source-use, measurement, benchmark, freshness, or provenance relation;
  • claim about the worker who approved, measured, verified, or published it: U.Work performed by a holder under U.RoleAssignment, with A.2.5 used only for that holder's role state.

Archetypal Grounding

System side. A role-state relation can govern a person, team, machine, service, software agent, laboratory instrument, organization, or other acting holon through U.RoleAssignment. The holder is still governed by A.2.1; capability by A.2.2; performed work by A.15.1.

Episteme side. A role-state relation may be described by an episteme, and evidence for a state assertion may be an episteme. That does not make the episteme a role holder. If the EntityOfConcern is a report, standard, dataset, requirement, proof, model card, or publication, the current relation is usually evidence-use, status-use, source-use, requirement-use, definition-use, explanation-use, publication-use, assurance-use, or admission-use.

Bias-Annotation

This pattern resists four common biases:

  • status-word bias: treating Approved, Ready, or Validated as self-explanatory instead of context-local state predicates;
  • role-label bias: treating a role assignment as current ability or performed work;
  • semio-bias: making the pattern about records, certificates, diagrams, or publications rather than the role-state relation they describe or evidence;
  • IT-bias: reducing role states to access-control states for software users. Software access is one case; the same ontology applies to surgery, metrology, plant operations, teams, AI agents, and organizations.

Conformance Checklist

CheckQuestion
CC-A2.5-01Is the current EntityOfConcern a RoleStateRelation@BoundedContext, not a capability, method, work occurrence, evidence episteme, status assertion, or publication form?
CC-A2.5-02Are RoleValueRef and BoundedContextRef named or inherited?
CC-A2.5-03Is RoleStateSet finite enough for the current use, with state names local to role and context?
CC-A2.5-04Is EnactableStateSet explicit, including the empty-set case when the role cannot admit work?
CC-A2.5-05Does every work-admission claim name or inherit a current StateAssertion window?
CC-A2.5-06Do state predicates use observable or reviewable values, evaluations, work records, speech acts, or source relations?
CC-A2.5-07Are state-change predicates kept separate from method order and work planning?
CC-A2.5-08Are capability requirements governed by A.2.2, with method claims and work claims governed by A.15 and A.15 subpatterns?
CC-A2.5-09Do evidence use, status use, source use, and publication use around epistemes remain governed by their direct patterns instead of becoming work-facing role states?
CC-A2.5-10Do role-relation hooks preserve state-sensitive role-requirement substitution, incompatibility, and bundle boundaries without product-state explosion by default?

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Assignment-as-readiness"She is assigned as verifier, so the verification work is admitted."Keep U.RoleAssignment; add StateAssertion for an enactable state if the work claim needs it.
Capability-as-role-state"The robot is in Ready because it has the inspection capability."Capability stays in A.2.2; role state predicates may refer to capability evidence only when the relation is explicit.
Method-order driftState-change predicates list the tasks in a procedure.Move ordering to method description or work plan. Keep A.2.5 to state recognition and admission.
Evidence-role driftA report, standard, dataset, or model card receives a role state.Recover evidence-use, status-use, source-use, requirement-use, or publication-use relation around the episteme.
Label-only incompatibilityTwo role labels conflict everywhere even when one assignment is suspended or non-enactable.Declare incompatibility over enactable states and windows where the risk actually appears.
Product-state explosionA bundle role creates every combination of states across component roles.Use separate state assertions unless a composite role with its own RoleStateRelation@BoundedContext is maintained.

Consequences

Good consequences:

  • work admission becomes reviewable without making every role assignment a large form;
  • role relation structure can use current state rather than labels alone;
  • role descriptions can publish state predicates without turning descriptions into states;
  • evidence and status around epistemes no longer create shadow role kinds;
  • cross-context role-state comparison becomes explicit rather than label-based.

Costs:

  • high-consequence work needs state predicates and currentness windows;
  • projects need to decide which role states actually admit work;
  • role-state design can become too detailed if authors encode method order instead of admission predicates;
  • cross-context reuse needs explicit mapping or comparison when state predicates differ.

Lowering and Reopen Conditions

Lower a role-state claim or reopen A.2.5 when any of these changes:

  • the role assignment, assignment window, or bounded context changes;
  • the state predicates, state-change predicates, or enactable-state set change;
  • a StateAssertion window expires, is contested, or loses the evidence or source relation that made it current;
  • a method description changes its required roles or required role states;
  • a capability claim changes the holder envelope needed by a state predicate;
  • a role-relation structure changes role-requirement substitution, incompatibility, or bundle admission;
  • an episteme previously used as evidence, source, standard, requirement, publication, or status value is reclassified by its direct pattern.

The smallest repair is normally local: update the state predicate, state assertion, window, role-relation-structure hook, or neighboring capability, method, work, evidence, or status relation that changed. Do not rewrite the whole role value or role assignment when only one role-state claim changed.

Rationale

FPF keeps role state separate because the surrounding values have different kinds and different failure modes. A role assignment can be valid while the role state is not work-admitting. A holder can be capable while the assignment window is stale. A method can require a role while no current holder has an enactable state. A publication can describe or evidence any of these without becoming the holder, the role, or the state.

The state-machine lens is useful because finite named states, guarded change, and state assertions are easy to inspect. But the pattern does not make every role claim executable behavior. It uses the state lens only where the project needs role-state recognition, admission, currentness, and state-aware role relation structure.

SoTA-Echoing

Practice lineWhat A.2.5 adoptsBoundary kept
Statecharts, SCXML, and UML state-machine practiceFinite named states, guarded transitions, and explicit state configurations are good lenses for role-state design.A.2.5 is not an executable behavior language and does not encode method order.
Runtime verification over finite-state modelsWindowed state assertions and observable predicates make current role claims replayable and checkable.Verification of the larger work system stays with the pattern that owns that claim.
Zero-trust and dynamic access practiceAdmission depends on current subject, context, source, and resource-related attributes rather than static labels.Cybersecurity access is only one specialization; FPF keeps capability, role assignment, role state, method, and work distinct.
Agentic AI task-based authorization researchFor AI agents, role-state admission may need task intent, tool relation, current assignment, and semantic check values.The agentic-AI case does not turn all role-state admission into IT access control.

Relations

Related patternRelation
A.2Governs the role value whose state space is being described.
A.2.1Governs U.RoleAssignment, the relation referenced by StateAssertion.
A.2.2Governs capability and operating envelope; role state may depend on capability evidence but does not replace capability.
A.2.7Governs role-requirement substitution, incompatibility, and bundle expressions; A.2.5 adds state-sensitive admission when current.
A.15, A.15.1, A.15.2Govern method, work plan, performed work, and performedBy = U.RoleAssignment.
A.6.5Governs SlotSpec discipline used to keep role-state relation slots distinct.
A.6.RSIRRecovers whether confusing source words point to role, role assignment, role state, signature, interface, slot, evidence, status, capability, method, or another governed object.
A.10, B.3, C.2.1, C.28, E.17, F.10, G.6, E.10.D2Govern direct evidence-use, status-use, source-use, publication-use, assurance-use, and episteme-boundary cases that do not become role-state ontology.
C.27 and temporal patternsGovern windows, currentness, freshness, and stale-state claims when those are current.

A.2.5:End

Unified Scope Mechanism (USM): Context Slices & Scopes

Status: Stable Type: Ontic pattern

Kind Settlement

U.ContextSlice and U.Scope are the durable USM values for scope work. U.ClaimScope, U.WorkScope, and U.PublicationScope are C.3-governed scope specializations under U.Scope, not independent root ontics. ContextSliceSet := Set[U.ContextSlice] is the mathematical ValueKind whose values are exact sets of independently identified context slices; it is neither a durable scope nor another U-kind. Each exact U.Scope has one ContextSliceSet value as its extension under the effective reference scheme. GammaTimePolicy, work-measure target sets, qualification-window policies, formality thresholds, detail values, abstraction-tier values, scope profiles, coverage metrics, guards, reports, and publication views remain policy values, characteristic values, non-U records, lenses, guard facets, or publication forms unless a direct governing pattern admits them. Dotted forms such as U.Mechanism.Intension name the intension slot or intension form governed by U.Mechanism and A.6.1; they do not admit a separate structural U-kind.

One-line summary. A.2.6 lets a practitioner test one exact U.ContextSlice against one exact set-valued scope. For a claim, ask member(slice, claimScope): true admits the claim-scope condition, false stops that use, and unknown means the available evaluation cannot decide. The predicate is not a U.Relation occurrence, and the evaluation work or result record does not make membership true.

Use this pattern when a receiving action needs to decide whether a claim, capability, or publication use covers one exact combination of standards, environment, local sense, platform, cohort, or time selectors.

First useful move. Name the exact claim, its exact U.ClaimScope, and the target U.ContextSlice; evaluate membership. Stop on false. On unknown, obtain the missing evaluation input, narrow the attempted use, or abstain. Add a result episteme or table only when the receiving use needs one. If exact local senses must be translated, first name the obtaining F.9 Bridge, then state the separate affirmative C.2.1 claim for this translation's direction, rule, and tolerance. Before using the translated scope, establish evidence-based reliance through A.10 or assurance-based reliance through B.3.

What goes wrong if missed. Teams infer coverage from a document, table, “current context” label, or selected structure; treat an unevaluated slice as excluded; or mint ScopeDelimitationRelation occurrences for included and excluded slices. Those moves collapse predicate truth, evaluation, representation, and structure.

What this buys. One set-valued scope algebra supports exact membership, intersection, supported union, translation, widening, narrowing, and refit while keeping claim content, evaluation work, result epistemes, model-applicability relations, and selected structures separate. Vocabulary boundary. Use these scope names in live FPF wording:

  • For epistemes, the only scope type is U.ClaimScope (nick G in F–G–R).
  • For system capabilities, the only scope type is U.WorkScope.
  • For publication carriers (views, cards, and lanes), the only scope type is U.PublicationScope.
  • The abstract architectural notion is U.Scope — a durable scope value identified extensionally through one exact ContextSliceSet value under the effective reference scheme. Intersection, SpanUnion, translation, widening, and narrowing operate on those extensions; refit changes an expression without changing the extension. U.Scope is not a U.Characteristic and MUST NOT appear in any CharacteristicSpace.

Source words such as applicability, envelope, generality, and capability envelope may appear only as explanatory aliases in non-normative notes.

Cross‑references.C.2.3 (Unified Formality F) and C.2.2 (F–G–R): this pattern defines G as U.ClaimScope. — A.2.2 (Capabilities): capability gating now SHALL use U.WorkScope. — F.9 (Bridges): use an exact obtaining Bridge only when membership content must be translated across exact local senses; a different label or reference scheme alone does not trigger translation. F.9 supplies the direct semantic relation only. The separate C.2.1 claim states the exact translation use, direction, rule, tolerance, and polarity; A.10 or B.3 governs reliance on that claim. — Part E (Publication discipline; e.g., E.17 MVPK): publication views, cards, and lanes MAY declare U.PublicationScope to bound where a publication is admissible; U.PublicationScope MUST NOT widen the underlying U.ClaimScope/U.WorkScope. (USM supplies the scope calculus; Part E supplies publication discipline.)

Problem frame - Purpose and Audience

This pattern gives practitioners one exact question: does this slice belong to the scope needed by this use? It applies first to claim scope and reuses the same value algebra for work and publication scopes.

The claim-bearing episteme, capability, or publication object is not the scope. It designates or uses an exact U.ClaimScope, U.WorkScope, or U.PublicationScope. The membership predicate, evaluation work, result episteme, gate, and evidence claim also remain separate.

With USM, a practitioner can:

  • declare exact slice selectors and an exact scope predicate;
  • evaluate membership as true, false, or currently unknown;
  • combine exact scopes by intersection or independently supported union;
  • translate only when exact local senses require an obtaining F.9 Bridge, a separate affirmative C.2.1 claim about this translation, and the current A.10 or B.3 reliance branch; and
  • stop without inventing a relation occurrence, context object, or selected structure.

A.2.6 defines the scope values, membership predicate, mathematical scope algebra, exact reusable A.6.1 operation declarations, and use boundaries. It does not decide a gate, perform evaluation work, establish evidence, identify an A.22 structure, or prescribe which claim should widen.

Context

Cross‑disciplinary pressures

Modern projects couple formal specs, data‑driven models, safety cases, and operational playbooks. Each specification, model, safety case, or operational-playbook publication must say where it is valid—yet terminology drifts:

  • Standards and specs often say applicability or scope.
  • Modeling communities say envelope.
  • Safety and performance documents speak about capability envelope.
  • Knowledge patterns have used generality (G) as if it were “more abstract,” when we actually need “where the statement holds.”

Slice-bounded reasoning

U.ContextSlice is not a bounded-context object or a part of one. It is an addressable value identified by its exact declared selector schema and selector values under the effective reference scheme: for example local senses, named standard editions, environmental values, platform or cohort selectors, and a time selector when that selector belongs to the declared schema. One scope predicate may inspect only a projection of those selectors, but that projection does not reidentify the slice.

The practical question is therefore concrete: does this exact slice belong to this exact scope? A phrase such as “inside the current context,” a project label, or a selected U.Structure does not answer it.

Minimal, composable trust math

In F–G–R:

  • F (formality) is “how strictly a claim is expressed” (C.2.3).
  • G must be “where it holds,” not “how abstract it sounds.”
  • R carries evidence and reliance currentness. Observed semantic mismatch or loss may be evidence about a proposed translation, while the permitted-loss tolerance belongs to the separate C.2.1 claim about that use.

When G is a set‑valued scope, composition becomes precise: serial dependencies intersect scopes; parallel, independently supported lines can publish a SpanUnion—but only where each line is supported.

Problem

  1. Synonym soup. Applicability, envelope, generality, capability envelope—different labels for the same mechanism led to mismatches in gating, review, and reuse.
  2. Abstraction confusion. Calling G “generality” invited teams to treat “more abstract wording” as “broader scope,” silently masking unstated assumptions.
  3. Split mechanics. Episteme vs system text used different algebra and guard language, though the same set operations were meant.
  4. Translation opacity. Exact local-sense translation was confused with ordinary designation resolution, causing automatic Bridge use and hidden changes to the supported slice set.
  5. Overloaded words. Validity clashed with Validation Assurance (LA); operation and operational clashed with Work and Run in A.15, producing governance ambiguity.

Forces

ForceTension to resolve
One mechanism vs two worldsWe must serve both knowledge about the world (claims) and doing work in the world (capabilities) without duplicating concepts.
Exact local interpretation vs interoperabilityScope membership must stay checkable under its effective reference scheme. Cross-scheme translation needs an obtaining F.9 Bridge for the direct semantic relation, a separate C.2.1 claim for the proposed translation, and current A.10 or B.3 reliance, without redefining membership truth.
Expressivity vs minimal vocabularyTeams need to capture rich conditions (time windows, environment, versions) but not explode the lexicon into variants such as “envelope”, “applicability”, or “generality”.
Static content vs operational changeClaims may hold broadly while current operations are narrow (or vice versa). The mechanism must keep “what is true” and “what can be done” aligned yet distinct.
Open‑world exploration vs closed‑world gatingExploration benefits from permissive drafts; gates require crisp, observable checks. The same scope object must support both.

Solution - Overview

USM keeps the following things distinct:

  • U.ContextSlice - one addressable value identified independently of the predicate that later inspects it;
  • ContextSliceSet - the mathematical ValueKind Set[U.ContextSlice], used for scope extensions and finite target sets;
  • U.Scope - one durable scope value whose extension is one exact ContextSliceSet value;
  • U.ClaimScope, U.WorkScope, and U.PublicationScope - C.3 specializations for claim, capability, and publication uses;
  • membership semantics, mathematical scope algebra, and reusable operations - three separate layers: the bivalent predicate, its C.29 set representations, and the exact A.6.1 declarations used only when a receiving use needs an actual application and binding. None is a field or relation occurrence stored on the object being checked.

The primitive claim-scope question is member(x, S) for exact slice x and exact scope S. Intersection handles serial dependence. spanUnion is allowed only for independently supported areas. widen and narrow change the extension; refit preserves it while changing only a scope expression or parameterization. translate is used only when exact local-sense content must cross an obtaining F.9 Bridge and a separate affirmative C.2.1 claim names this translation's direction, rule, and tolerance. A receiving guard relies on that claim only through the current passing A.10 branch or positive B.3 branch; a different label or reference scheme alone selects none of these.

One exact U.ClaimScope may participate in a ModelApplicabilityRelation. That relation, its actual obtaining extent, a selected A.22 structure, a membership evaluation, and a table displaying members remain separate.

Lexical commitments. In normative text and guards, use Claim scope (G), Work scope, and Publication scope. Source words such as applicability, envelope, generality, capability envelope, or validity may remain only when quoted or explained; they do not name additional scope kinds.

Normative Definitions

Predicate semantics, mathematical algebra, and A.6.1 operations

Keep three layers explicit:

  1. Scope semantics. member(x,S) is a bivalent predicate over one exact U.ContextSlice and one exact U.Scope.
  2. Mathematical representation. The formulae below represent membership and set operations under C.29. Operand order and notation do not declare an operation application or create a scope.
  3. Reusable actual operations. When a receiving use needs one identified calculation or evaluation application and its bound result, use one of the exact A.6.1 OperationDeclarations below. These are argument and result declarations, never A.6.5 SlotSpecs.

Mathematical semantics.

member(x, S)                        : Bool
scopeSubset(S1, S2)                 := for every x, member(x,S1) implies member(x,S2)
coversSet(S, T)                     := for every x in T, member(x,S)
extension(intersect(F))             := intersection of extension(S) for S in F
extension(SpanUnion(F))             := union of extension(S) for S in F
extension(translate(B,C_use,S,RS))  := the target-slice image of extension(S) selected by C_use's rule and tolerance over Bridge B under RS
widen(S0,S1)                        := extension(S0) proper-subset extension(S1)
narrow(S0,S1)                       := extension(S1) proper-subset extension(S0)
refit(E0,E1,S)                      := expressions E0 and E1 both designate exact scope S

Here T : ContextSliceSet is a finite target set, F : Set[U.Scope] is a finite scope family, B is an exact obtaining F.9 Bridge, C_use is the exact current C.2.1 claim with B as EntityOfConcern and affirmative polarity for this named scope-translation use, and RS is the exact target reference scheme. The claim's content names the direction, scope-correspondence rule, and permitted-loss tolerance used to select the target image; its effective ReferenceScheme makes those designations interpretable. scopeSubset, coversSet, widen, narrow, and refit are mathematical predicates or comparison classifications, not actual A.6.1 operations in this edition. The formula represents the claim's proposed mapping but proves neither the claim nor reliance on it and declares no operation application. Work that authors or compares scope declarations remains separately governed.

A.6.1 declaration A — ScopeMembershipEvaluationMechanism.

  • EntityOfConcernRef: exact operation family ScopeMembershipEvaluationOperationFamily = {evaluateMembership}.
  • effective U.ReferenceScheme: the scheme under which this mechanism's argument, result, and application meanings are interpreted.
  • SubjectKind: U.Scope.
  • RangedValueKind: U.ContextSlice.
  • ResultKind: declaration-local finite U.Kind MembershipEvaluationValue = {true, false, unknown} under C.3. Its membership rule admits exactly those three values. It is not a world-side third truth value, public U-kind, gate decision, or result episteme.
  • SliceSet and ExtentRule: absent; membership of the kind U.Scope is not slice-dependent in the A.6.0 sense.

OperationDeclaration evaluateMembership:

Declaration-local itemMeaningValueKindBinding designation ruleBinding predicateCardinality
argument targetSliceexact independently identified slice being testedU.ContextSliceByValuethe exact application actually evaluates this sliceexactly 1
argument scopeexact extensional scope against which membership is testedU.ScopeByValuethe exact application actually evaluates against this scopeexactly 1
argument interpretationBasisexact separately identified episteme containing the scope expression, available selector resolutions, and any translation input used by this applicationU.EpistemeByGovernedReferencethe reference resolves to the exact basis actually used; citation or availability alone is insufficientexactly 1
result membershipJudgmentwhat the application could determine about the bivalent predicateMembershipEvaluationValueByValuethe exact application actually returns this valueexactly 1

ApplicationPredicate: with those bindings, evaluate member(targetSlice, scope) under the bound interpretation basis; return true or false when the basis determines the predicate and unknown when a required selector resolution or translation input is unavailable. The application neither makes membership true nor changes either argument.

ApplicationIdentityRule: one application is one independently bounded evaluation invocation selected by the current calculation or evaluation-work locus. Repeating the evaluation with the same arguments is another application when another invocation occurs; argument equality alone does not merge them.

ApplicationExtentRule: the application begins when its exact argument bindings and interpretation basis are fixed for the invocation and ends when membershipJudgment is returned or the invocation stops without a result. A result binding cannot begin before the value is returned.

ScopeMembershipEvaluationMechanism LawSet. With the same exact argument bindings, interpretation basis, and effective reference scheme, evaluation is deterministic. true reports that the basis determines member(targetSlice, scope); false reports that it determines non-membership; unknown reports only that it cannot determine either result. No returned value changes the bivalent predicate.

ScopeMembershipEvaluationMechanism AdmissibilityConditions. Admit an application only after the exact slice, exact scope, and exact interpretation basis are bound. unknown is admitted when that basis records an unavailable required selector resolution or translation input. A missing exact scope, slice, or basis blocks the application rather than creating a guessed binding.

ScopeMembershipEvaluationMechanism Applicability. Use this declaration only for evaluating exact U.ContextSlice and U.Scope values under its effective reference scheme. The receiving use names its exact U.ClaimScope, selected evaluation time when current, selected CHR:ReferencePlane only when the use is plane-dependent, and any mechanism-specific condition; it does not replace them with generic context wording.

ScopeMembershipEvaluationMechanism SignatureManifest (optional). When dependency replay needs it, name the actual imported or provided declarations for U.ContextSlice, U.Scope, and the local MembershipEvaluationValue. A list of nearby policies or operands is not a second operation signature.

ScopeMembershipEvaluationMechanism neighboring objects. An evaluation application can occur within dated work governed by A.15.1. A separately persisted result episteme remains optional under C.2.1; A.15.PROD enters only for a current claim that work first constituted that episteme. Evidence-use and gate occurrences stay under A.10 and A.21. None of those objects, nor another evaluation invocation, reidentifies this mechanism unless it reveals changed declaration content.

ScopeMembershipEvaluationMechanism refinement or conservative extension. A refinement preserves evaluateMembership, its argument and result meanings, binding rules, application predicate, identity and extent, and the bivalent-truth boundary while stating every strengthened law or admission condition. A conservative extension adds exact optional arguments, results, or operations without changing those inherited meanings or admitted uses.

A.6.1 declaration B — ScopeDerivationMechanism.

  • EntityOfConcernRef: exact operation family ScopeDerivationOperationFamily = {deriveIntersectionScope, deriveSpanUnionScope, deriveTranslatedScope}.
  • effective U.ReferenceScheme: the scheme under which this mechanism's operation meanings and returned scopes are interpreted.
  • SubjectKind: U.Scope.
  • RangedValueKind: U.Scope; each derivation operation still returns a U.Scope, so no distinct mechanism-level ResultKind is current.
  • SliceSet and ExtentRule: absent for the same A.6.0 reason stated above.
OperationDeclaration-local itemMeaningValueKindBinding designation ruleBinding predicateCardinality
deriveIntersectionScopeargument scopeFamilyexact finite family whose scope extensions are intersectedSet[U.Scope]ByValuethe application actually uses this exact set value, containing at least two exact scopesexactly 1 set value
result derivedScopeexact extensional scope returned for the intersectionU.ScopeByValuethe application actually returns this independently identifiable scope valueexactly 1
deriveSpanUnionScopeargument scopeFamilyexact finite family whose independently supported extensions are united by the established SpanUnion operationSet[U.Scope]ByValuethe application actually uses this exact set value, containing at least two exact scopesexactly 1 set value
argument independenceBasisexact episteme stating the support lines and their required independenceU.EpistemeByGovernedReferencethe reference resolves to the exact basis actually used by this applicationexactly 1
result derivedScopeexact extensional scope returned for SpanUnion(scopeFamily)U.ScopeByValuethe application actually returns this independently identifiable scope valueexactly 1
deriveTranslatedScopeargument sourceScopeexact source scope whose extension is mappedU.ScopeByValuethe application actually maps this exact scope valueexactly 1
argument bridgeOccurrenceexact obtaining F.9 Bridge whose direct semantic relation is usedU.RelationByGovernedReferencethe reference resolves to the exact obtaining occurrence actually used by this application; it carries no use-specific rule, tolerance, or relianceexactly 1
argument scopeTranslationClaimexact current C.2.1 claim that says the bound Bridge is suitable for this named scope translationU.EpistemeByGovernedReferencethe reference resolves to the exact affirmative claim whose EntityOfConcern is the bound Bridge and whose content names this use, direction, rule, and toleranceexactly 1
argument targetReferenceSchemeexact scheme under which target slices and their local senses are interpretedU.ReferenceSchemeByValuethe application actually interprets the returned target-slice extension under this schemeexactly 1
result derivedScopeexact extensional scope returned for the target image selected by the claim's rule and toleranceU.ScopeByValuethe application actually returns this independently identifiable scope valueexactly 1

ApplicationPredicate rules. deriveIntersectionScope returns the scope represented under C.29 by intersection of extension(S) for S in scopeFamily. deriveSpanUnionScope implements the already established SpanUnion: it is admitted only when independenceBasis establishes the section 7.3 independence condition and returns the scope represented by SpanUnion(scopeFamily). deriveTranslatedScope is admitted only when the bound Bridge obtains and the bound C.2.1 claim has that Bridge as EntityOfConcern, affirmative polarity, and content naming this scope-translation use, its direction, rule, and tolerance. The application applies that rule within that tolerance and returns the scope represented by translate(bridgeOccurrence, scopeTranslationClaim, sourceScope, targetReferenceScheme). The formulae and claim alone declare no application or result binding.

For every governed-reference argument, record presence, citation, or a compatible token is insufficient: the reference must resolve to the exact value actually used. For every result row, the result binding obtains only when that exact application returns the independently identifiable extensional scope. The application and formula do not constitute that scope or make any membership predicate true.

ApplicationIdentityRule: each derivation application is one independently bounded calculation invocation identified through its exact invocation boundary, mechanism edition, and operation designator rather than the argument tuple alone. Repeated calculations with equal arguments remain distinct applications.

ApplicationExtentRule: the application begins after every required argument is bound for that invocation and ends when the derived-scope value is returned or the invocation stops without a result. A result-binding extent cannot begin before that scope value is returned.

ScopeDerivationMechanism LawSet. Serial composition uses intersection. Parallel publication uses the one established SpanUnion and preserves only slices supplied by independently supported lines. Translation returns only the target-slice image selected by the bound claim's rule and tolerance over the bound obtaining F.9 Bridge. No derivation operation widens support by itself.

ScopeDerivationMechanism AdmissibilityConditions. Intersection and SpanUnion require at least two exact scopes. deriveSpanUnionScope additionally requires the bound independence basis to meet section 7.3. deriveTranslatedScope requires both an exact obtaining Bridge and the exact affirmative C.2.1 claim whose named rule and tolerance select the claimed target image. A missing or non-obtaining Bridge or a missing or non-affirmative claim blocks that positive derivation application rather than creating a guessed scope; the latter does not negate an otherwise obtaining Bridge.

ScopeDerivationMechanism Applicability. Name the exact source scopes and reference schemes required by the selected derivation. For translation, also name the bound Bridge and separate C.2.1 claim. Before a receiving guard, assertion, publication, or structure selection relies on the returned scope, require either the exact A.10 evidence-provenance graph relation plus RelianceDisposition=pass for this bounded use, or a current positive B.3 assurance claim that carries this bounded assurance use and has its sufficient minimum reliance safety assurance record. Enter B.3 when an assurance claim is being made or its material-reliance threshold is met, and decide first whether a current assurance claim exists. The threshold requires the minimum record but does not create a positive claim.

A missing or non-affirmative use claim, a non-passing A.10 disposition, or a B.3 no-assurance-claim, insufficient-record, narrowed, rejected, withdrawn, abstaining, or blocked disposition stops or narrows the receiving use without changing membership truth or the Bridge. An A.10 pass or positive B.3 assurance claim supports reliance only for its named use; neither is legal, policy, or deontic authorization, and neither proves that a derivation application or another receiving object occurred. Any required authorization remains under its direct governor. The receiving use also names its exact U.ClaimScope, selected time when current, selected CHR:ReferencePlane only when plane-dependent, and derivation-specific conditions. GammaTimePolicy enters only when time changes membership; ReferencePlane is absent from ordinary set algebra.

ScopeDerivationMechanism SignatureManifest (optional). When dependency replay needs it, name the actual imported or provided declarations for U.Scope and, for translation, the exact F.9 Bridge declaration and C.2.1 claim identity rules. The independence basis, particular Bridge, and particular scope-translation claim are application arguments, not declaration-manifest entries by adjacency. scopeTranslationClaim is only this declaration's argument label; it names no public claim kind. A.10 and B.3 reliance objects remain under their direct owners rather than becoming a common mechanism signature.

ScopeDerivationMechanism neighboring objects. A derivation can occur within dated calculation work governed by A.15.1. Its bound independence-basis episteme, Bridge, and C.2.1 scope-translation claim retain their own identities and direct governors. The exact A.10 relation and disposition or B.3 claim and record govern reliance on the use claim; they are neither mechanism arguments nor results. The returned U.Scope is independently identified by its extension; neither the application nor its C.29 formula constitutes it. Evidence, publication, gate, assurance, and any downstream Work, assertion, relation, or publication occurrence remain with their direct owners. None of those objects, nor another derivation invocation, reidentifies this mechanism unless it reveals changed declaration content.

ScopeDerivationMechanism refinement or conservative extension. A refinement preserves the inherited derivation operations, argument and result meanings, binding rules, application predicates, identity and extent, and the intersection, SpanUnion, and translation semantics while stating every strengthened law or admission condition. A conservative extension adds exact optional arguments, results, or operations without changing those inherited meanings or admitted uses.

Relation between the declarations. These are two independently identified U.Mechanism epistemes, not sections of an undeclared common parent. They coordinate by value: a later evaluateMembership application may bind a scope returned by one derivation application. That reuse does not merge the mechanism identities. If a receiving claim needs a refinement, extension, equivalence, or other direct relation between exact mechanism editions, state its endpoints, predicate, scope, and preserved and changed content under A.6.1; adjacency supplies no relation.

U.ContextSlice - exact membership target

U.ContextSlice is an addressable durable value formed from one exact declared selector schema and one value for every selector present in that schema. A scope predicate may inspect a declared projection of the slice, but it does not determine the slice's identity. A minimal slice declaration contains:

ContextSlice:
  effectiveReferenceScheme:
  declaredSelectorSchema:
  exactLocalSenseRefs?, when included by that schema:
  standardOrInterfaceEditionRefs?, when included by that schema:
  environmentOrPlatformSelectors?:
  cohortOrJurisdictionSelectors?:
  gammaTime?, when included by that schema:
  otherDeclaredSelectors?:

The slice is one value, not a finite set and not a U.BoundedContext, selected structure, project, system part, or description. A finite target is one value of mathematical ValueKind ContextSliceSet. Two slice designators resolve to the same U.ContextSlice exactly when their declared selector schemas match and every declared selector resolves to the same value under the effective reference scheme. A predicate's current argument projection, missing evaluation input, or receiving action cannot merge or split slice identity.

For example, slice_A and slice_B may share substrate Al6061, temperature 140 °C, and rig edition Calib-v3 while carrying different declared cohort selectors. A temperature-only scope predicate can return the same result for both slices, but the slices remain distinct; a cohort-sensitive predicate can distinguish them without reidentifying either one.

Do not write an implicit “current” or “latest” selector. If time changes membership, name the exact point, interval, or policy. If time does not change membership, do not add a fictitious temporal field merely to complete the tuple.

U.Scope - set-valued scope

U.Scope is a durable value with one exact extension of mathematical ValueKind ContextSliceSet. U.ClaimScope, U.WorkScope, and U.PublicationScope are its C.3 specializations for receiving uses; the specialization does not copy the extension or add another identity discriminator. A scope is not its predicate expression, a U.Characteristic, U.Structure, collection holon, context, description, representation, or direct relation occurrence.

For exact scope S and exact slice x, the primitive delimitation semantics is:

member(x, S)

The predicate has the exact slice and exact scope as arguments. It is not by itself an explicitly individuated U.Relation occurrence. Included slices satisfy it; excluded slices do not. The excluded area is not materialized as an unbounded complement entity.

For effective reference scheme RS, define extension_RS(S) := { x : U.ContextSlice | member(x, S) }. Two scope designators resolve to the same extensional U.Scope value when their extensions contain exactly the same independently identified slices under the same or explicitly reconciled reference scheme. An equivalent predicate expression, unit conversion, factoring, or publication change can preserve that value; a boundary change that adds or removes even one slice identifies another scope value.

A set or predicate expression, table, diagram, or query result can represent or designate a scope or a set of evaluated slices under C.29 and C.2.1. Its form does not make membership true, identify the scope by syntax, or create a membership occurrence.

USM admits subset, intersect, spanUnion, translate, widen, and narrow over exact scope extensions. refit is a same-extension normalization: it changes a predicate expression, units, or factoring while preserving member(x,S) for every exact slice under the effective reference scheme. A changed expression may require another declaration or claim-bearing episteme edition under its direct governor; it identifies another U.Scope only when the extension changes.

If a future receiving use genuinely requires stable identity for membership occurrences, A.2.6 must first declare a direct relation kind with exact participant meanings, obtaining condition, recurrence rule, and non-optional occurrence-identity rule under A.6.REL. Until then, do not use ScopeDelimitationRelation, ScopeDelimitationMode, or ScopeDelimitationInterval.

U.ClaimScope (G) and membership evaluation

U.ClaimScope is the exact set-valued scope used to say where one claim holds. The claim-bearing U.Episteme and the scope value are distinct; the episteme designates the exact scope current for that claim.

An evaluation of member(x, S) is also separate:

  • the predicate semantics determine membership;
  • an exact system performs dated evaluation work by an exact method, using a direct evaluation relation or A.6.1 operation binding;
  • a separately current C.2.1 result episteme may state true, false, or unknown;
  • evidence and freshness claims remain under A.10 and their direct governors.

unknown reports that the evaluation cannot currently decide because a required selector, designation resolution, or translation input is unavailable. It does not mean false, does not exclude the slice, and does not create a third world-side membership state. A receiving guard abstains, narrows the attempted use, or follows an explicitly governed reliance policy; it does not rewrite the predicate.

One exact U.ClaimScope participates in ModelApplicabilityRelation when model applicability is current. A declared ModelApplicabilityInterval belongs to an assertion or occurrence description. The actual applicability occurrence uses the maximal continuous extent over which its predicate obtains, as governed by A.1.1; the interval is not another direct participant.

A BoundedModelUseStructure may be selected over exact model-applicability and other governed relation occurrences under applied constraints that refer to exact claim-scope values. Keep three routes distinct. A bare scope, slice, membership outcome, or displayed boundary never enters A.22 identity. One exact U.ClaimScope remains a participant of an independently governed ModelApplicabilityRelation; when that exact obtaining occurrence is selected into the structure, the occurrence contributes through A.22's relation-occurrence discriminator. Separately, one exact applied constraint claim may refer to that scope and contribute through A.22's applied-constraint discriminator. Neither route turns the scope into a structure constituent, a membership-relation occurrence, or a second delimiter. The same scope may participate in differently selected relation occurrences or be referenced by differently identified structures, and a changed structure does not by itself reidentify the scope.

Expression. State a Claim scope as an exact predicate or condition block over slice selectors: assumptions, parameter ranges, cohorts, platform or standard editions, exact local senses when current, and time conditions only when they change membership.

Algebra. Serial dependencies use intersection. Independently supported areas may use spanUnion with the independence basis stated. widen and narrow change the declared set; refit preserves it. translate uses the section 7.5 Bridge-plus-use-claim branch and keeps reliance separate.

U.WorkScope — scope of doing Work (capability)

Carrier. U.Capability (a system’s ability to deliver specified U.Work).

Meaning. U.WorkScope is the set of U.ContextSlice values under which a capability's deliverability claim may be evaluated. Work-measure targets and qualification windows are checked separately at use time; they are not members or identity fields of the scope.

Expression. The capability declaration designates an exact U.WorkScope expressed only as conditions over U.ContextSlice: environment, versioned standards or platforms, resource regimes, exact local senses when current, and gammaTime only when time changes membership. Quantitative deliverables and qualification windows are not part of the scope value:

  • Declare targets as work-measure target sets (e.g., latency <= L, throughput >= T, tolerance <= epsilon) bound in guards (WG‑2).
  • Declare inspection/recertification policies as qualification-window policies bound in guards (WG‑3). The use‑time admission requires all of: WorkScope covers JobSlice AND WorkMeasures satisfied AND qualificationWindowHolds(capability, qualificationWindowPolicy, evaluationTime).

Method–Work gating. A Work step’s guard MUST check that the target slice is covered by the capability’s Work scope and that required measures and qualification windows are satisfied.

Composition and Delta-moves. Work scope uses the same algebra as Claim scope (intersection / spanUnion / translate / widen / narrow / refit). Section 7.5 selects translate only for exact local-sense translation through an obtaining F.9 Bridge plus the separate affirmative C.2.1 claim and its current reliance branch.

Separation from knowledge. A Work scope is a set-valued scope, not an assertion. The capability declaration uses it to delimit where a deliverability claim is evaluated. Measurements and monitoring may support that claim through separately governed evidence and reliance judgments; they do not make a slice a member.

Required guard facets (capabilities).

  • Work-measure target set (mandatory). A set of measurable targets with units and tolerated ranges, evaluated on the JobSlice.
  • Qualification-window policy (mandatory for operational use). A time policy stating when the capability is considered qualified; evaluated at the exact evaluation time selected by the receiving guard, not copied into U.WorkScope. These facets are separate from U.WorkScope and live in the R‑lane (assurance). They MUST be referenced in Method–Work guards (see §10.3 WG‑2/WG‑3).

U.PublicationScope — scope of a publication view or publication form

Carrier. Publication faces, publication forms, interop publication forms, cards, lanes, and MVPK faces are publication-lane objects whose renderings live on carriers; the carrier remains separate from the publication view or form. Meaning. The set of U.ContextSlice where a publication (a view, card, or lane about some object or morphism) is admissible for use without introducing claims beyond its underlying carrier.

Relation to other scopes (normative).

  • If the publication is about an episteme E: PublicationScope(view_E) ⊆ ClaimScope(E).
  • If the publication is about a capability C: PublicationScope(view_C) ⊆ WorkScope(C).
  • If the publication is about a composition, its scope is a subset of the intersection of the exact contributing scopes. When exact local senses require translation, use section 7.5 for each affected source scope: obtaining F.9 Bridge, separate affirmative C.2.1 use claim, and current A.10 or B.3 reliance before the returned scopes are intersected.

Expression. Declare U.PublicationScope as an exact predicate over only the U.ContextSlice selectors that restrict publication use: for example versioned standards, environment, audience, interface availability, exact local senses, or gammaTime when time changes membership. It may be narrower than the underlying scope but must not be wider.

Algebra and Delta-moves. Publication scope uses the USM algebra. A widened publication scope is admissible only when the resulting set remains a subset of every relevant underlying Claim scope or Work scope and the publication conditions support each added slice; the underlying scope need not change when it was already broader.

Orthogonality to measurement. U.PublicationScope is a USM scope object (set‑valued), not a CHR Characteristic and MUST NOT appear as a slot in a U.CharacteristicSpace.

View refinement (profiles). When a stricter publication profile/view refines another (e.g., a typed card that requires additional pins), its U.PublicationScope MUST NOT be wider than that of the less formal view.

Scope Algebra

Membership and coverage

For exact slice x and scope S, evaluate member(x, S).

  • true: the slice is included and the scope condition for the attempted use passes;
  • false: the slice is excluded and that use stops or selects another scope;
  • unknown: the available evaluation cannot decide; the guard abstains or follows an explicitly governed reliance policy without asserting exclusion.

For a finite target set T : ContextSliceSet, coversSet(S,T) abbreviates for every x in T, member(x,S). Scope-to-scope scopeSubset(S1,S2) instead means for every x, member(x,S1) implies member(x,S2). A target set is neither a scope nor a substitute for one. There is no “close enough” membership and no implicit widening.

Membership evaluation work, its inputs and A.6.1 bindings, an optional C.2.1 result episteme, and a C.29 table remain neighboring objects. None changes predicate truth by being performed, recorded, or displayed.

Serial Composition (Intersection)

Rule S‑INT (serial). For an essential dependency chain C1 → C2 → … → Ck that supports a claim/capability, the effective scope along that chain is:

Scope_serial = ⋂_{i=1..k} Scope(Ci)

If Scope_serial = ∅, the chain is inapplicable and MUST NOT contribute to published scope.

Monotonicity. Adding a new essential dependency can only narrow (or leave unchanged) the serial scope.

Parallel Support (SpanUnion)

Rule P‑UNION (parallel). If there exist independent support lines L₁,…,Lₙ for the same claim/capability, each with serial scope S_i, the publisher MAY declare:

Scope_published = SpanUnion({S_i})  =  ⋃_{i=1..n} S_i

Constraints.

  • Independence MUST be justified (different support lines must not rely on the same weakest link).
  • The union MUST NOT exceed the union of supported slices; “hopeful” areas are disallowed.
  • Publishers SHOULD annotate coverage density/heterogeneity (informative) to aid R assessment, but numeric “coverage” is not part of G.
  • Independence criterion. Support lines in a SpanUnion MUST be partitioned so that each line has a set of essential components disjoint from the others’ essential components (no shared weakest link). The partition (or a certificate thereof) SHALL be referenced in the publication.

Why a G-ladder/levels/scales is not needed (and must not be introduced)

1) G is not an ordinal scale; it is set-valued. Under USM, U.ClaimScope is a set‑valued USM scope object over U.ContextSlice. The only well‑typed primitives are membership and set operations (, , ). Imposing ordinal “levels” such as G0…Gk violates the type discipline and produces non‑invariant behavior (the same set could be “rated” with different numbers under different heuristics). (See also LEX‑CHR‑STRICT.)

2) G composes via / SpanUnion, not via min / avg. USM already fixes composition: along a dependent path use intersection; across independent support lines publish SpanUnion. None of these operations relies on (or preserves) any linear order. An ordinal “G ladder” invites people to take minimums/averages, which is incorrect for sets and breaks the established algebra.

3) A G ladder drags in “abstraction level,” which is orthogonal. Early “G ladders” effectively encoded abstraction/typing (instances -> patterns -> formal classes/types -> up-to-iso). That is valuable didactics, but not applicability. We have already separated these concerns: abstraction is captured, if needed, by AbstractionTier (AT) as an optional facet; applicability is U.ClaimScope (G).

4) A G ladder breaks locality and Bridge semantics. When exact local senses require translation, an obtaining F.9 Bridge establishes their direct semantic relation while a separate C.2.1 claim states the proposed mapping rule and tolerated loss. There is no canonical way to translate an ordinal G level: the mapped area may be narrower or differently factored. USM translates exact sets only through that bounded claim and keeps A.10 or B.3 reliance separate rather than rewriting G.

5) A G ladder duplicates ESG guards without adding decision power. What teams often want to “compress into a G number” is actually (a) the quality of expression and (b) the completeness of the declared scope. The first is an F threshold; the second is handled by explicit guards: Scope covers TargetSlice, gammaTime is explicit only when membership varies with time, and a separate freshness-window check when current. A ladder for G adds confusion but no decision power.

Normative directive. U.ClaimScope (G) SHALL remain a set‑valued USM scope object; no ordinal or numeric ladder SHALL be defined for G. If a profile needs scalar reporting, it MAY publish an explicit report‑only proxy CoverageMetric(G), but CoverageMetric(G) MUST NOT substitute for G in norms, gates, Bridge semantics, bounded-use claims, or reliance decisions. Authoring and gating SHOULD use F thresholds (C.2.3) and explicit guard predicates (A.2.6) rather than pseudo‑levels of G.

Translation across exact local senses

Use translation only when ordinary designation resolution cannot settle the exact local senses needed by the target membership predicate. Then proceed in this order:

  1. resolve the source and receiving F.17 SchemeSenseCell values and name the exact obtaining F.9 Bridge that relates them;
  2. state the proposed scope translation separately: name the source scope, target scheme, source-to-receiving direction, scope-correspondence rule, and tolerated loss, then cite the exact current C.2.1 claim with that Bridge as EntityOfConcern and affirmative polarity for this use;
  3. before a guard relies on the claim, require the exact A.10 evidence-provenance graph relation plus RelianceDisposition=pass for this bounded use; when an assurance claim is made or B.3's material-reliance threshold is met, first decide whether a current assurance claim exists, then require a current positive claim carrying this use with its sufficient minimum record, or stop or narrow the use under the exact non-positive B.3 disposition; and
  4. use translate(Bridge, UseClaim, SourceScope, TargetReferenceScheme) as the C.29 mathematical representation, or invoke deriveTranslatedScope with those same four values when one actual calculation and returned scope are needed.

The Bridge establishes the direct semantic correspondence. The separate claim selects this translation's direction, rule, and tolerance. A Bridge profile, Bridge Card, reference-scheme difference, project label, or slice designator cannot supply that claim or its reliance basis. A missing or non-obtaining Bridge blocks the semantic branch. A missing or non-affirmative use claim, a non-passing A.10 disposition, or a non-positive B.3 branch blocks reliance on the translation without making an otherwise obtaining Bridge false.

Meeting B.3's threshold creates the minimum-record obligation, not a positive claim. A passing A.10 classification or positive B.3 assurance claim supports reliance only for the named use; neither authorizes it. Observed mismatch, calibration error, and counterexamples are evidence about the use claim. The permitted loss is the tolerance inside that claim. If the rule and tolerance support only a proper subset of the source area, return that explicitly narrower target scope. Neither the Bridge nor the claim supplies direct support for adding a slice, and neither makes membership true. The exact deriveTranslatedScope application remains an A.6.1 operation application; the claim and reliance basis do not prove that it occurred.

Δ‑Operations (Widen, Narrow, Refit)

  • Δ‑G+ (widen). Monotone expansion: S subsetOf S-prime. Every added slice requires direct support under the receiving use; a Bridge and affirmative translation-use claim can define a mapping but supply no such support by themselves.
  • ΔG− (narrow). Monotone restriction: S′ ⊂ S. Often used to remove areas invalidated by new findings.
  • Refit. A different expression or parameterization designates the same extensional scope after normalization (for example, changing units or factoring common predicates). Refit MUST NOT alter membership and does not create another scope value.

Refit (normalization). A refit MUST preserve membership exactly: extension_RS(S_after) = extension_RS(S_before), so both expressions designate the same scope value. Any change that alters boundary inclusion through rounding, unit conversion, or discretization is a ΔG± change, not a refit.

Edition triggers. A changed extension identifies a different scope value. A changed predicate expression with the same exact extension preserves the scope value but is a content change in the declaration or claim-bearing episteme that carries the expression; its direct governor decides whether another episteme edition is needed.

Discriminating cases. Under one effective reference scheme, 20 °C <= temperature <= 30 °C and the exactly converted 293.15 K <= temperature <= 303.15 K have the same extension and can be related as a refit while designating the same scope. Replacing the inclusive upper boundary with temperature < 30 °C removes every slice exactly at 30 °C; that one membership-boundary change identifies another scope rather than a refit.

Invariants

  • I-LOCAL. Interpret membership under the effective reference scheme and exact local senses current to the declaration. Translate only through an obtaining F.9 Bridge plus the separate affirmative C.2.1 claim for that translation; keep A.10 or B.3 reliance outside membership truth.
  • I‑SERIAL. Serial scope is an intersection; it cannot grow by adding dependencies.
  • I‑PARALLEL. Parallel scope MAY grow by union, but only where independently supported.
  • I‑WLNK. Weakest‑link applies to F and R on dependency paths; G follows set rules (∩ / ⋃).
  • I‑IDS. Idempotence: Intersecting or unioning a set with itself does not change it.
  • I‑EMPTY. Empty scope is a first‑class value; guards MUST treat it as “not applicable”.

Empty & Partial Scopes

  • Empty scope (). No slice satisfies the declared predicate. A receiving guard stops; this does not identify a context, structure, or complement entity.
  • Partial scope. Publishers SHOULD avoid “global” language when actual scope is thin; instead, publish explicit slices and (informatively) coverage hints to guide R assessment.

Locality, Time & Version Semantics

Local interpretation without a context owner

A scope is not owned by a U.BoundedContext. Interpret its predicate under the effective reference scheme and exact local senses named by the claim or scope declaration. Evaluate it against exact U.ContextSlice values.

Do not assume that a similarly named selector elsewhere has the same sense. Use ordinary designation resolution when it suffices. Use translate only when exact local senses need an obtaining F.9 Bridge and a separate affirmative C.2.1 claim states the proposed translation's direction, rule, and tolerance; establish the current A.10 or B.3 reliance branch before acting on the returned scope.

Time selector Γ_time

When membership depends on time, the scope predicate and target slice name an exact gammaTime point, interval, or policy and state which boundary changes a slice from member to non-member or back. Implicit “latest” is forbidden. When time does not change membership, omit the selector. Evidence freshness remains a separate R-lane predicate.

Standards, versions & notations

When a standard, interface, or schema edition affects membership, name the exact edition. A notation change with faithful designation resolution does not change G. If exact local senses require translation, the F.9 Bridge establishes their relation, the separate C.2.1 claim states this translation's rule and tolerance, and A.10 or B.3 governs reliance; none redefines membership truth.

Determinism of evaluation

For a fixed exact scope, exact slice, and available evaluation inputs, the evaluation method returns one reproducible result. false stops the attempted use. unknown also blocks admission but does not assert non-membership.

Interaction with R (freshness & decay)

For empirical claims and operational capabilities, R typically binds evidence freshness windows. Scope does not decay with time; trust in the support does. Guards MAY combine “Scope covers” with “Evidence freshness holds” as separate predicates.

Lexical Discipline (Part E compliance)

L‑USM‑1 (names). Use Claim scope (G) for epistemes, Work scope for capabilities, and Publication scope for publication carriers. Use Scope only when discussing the abstract mechanism. Avoid naming any characteristic as “applicability,” “envelope,” “generality,” “capability envelope,” or “validity”.

L‑USM‑2 (Work and Run). Prefer Work and Run vocabulary from A.15 for system execution contexts. Do not introduce “operation” or “operating” as characteristic names; use Work scope.

L‑USM‑3 (Validation). “Validation/Validate” remain reserved for LA in assurance lanes (Part B). Do not name a scope object “validity”.

L-USM-4 (Domain). “Domain” is a recognition cue, not a guard input. Name the exact U.ContextSlice selectors needed by the membership predicate.

L-USM-5 (First mention). On first use in a pattern or working instruction, write “Claim scope (G)” so the F-G-R meaning is recoverable.

Guard Patterns (ESG & Method–Work)

Common guard shape

A claim-scope guard starts with one exact judgment:

membershipResult := evaluateMembership(TargetSlice, ClaimScope, InterpretationBasis)

Admit the scope condition only when the result is true. Stop on false. On unknown, abstain, obtain the missing input, narrow the attempted use, or apply a separately governed reliance policy. Evidence freshness, formality, time currentness, decision, and assurance remain separate predicates.

Add a translation branch only when the membership predicate uses exact local senses that ordinary designation resolution cannot align. Require the obtaining F.9 Bridge and the separate affirmative C.2.1 claim for this translation before deriving a scope, then require the current A.10 or B.3 reliance branch before the receiving guard relies on it. A different reference scheme or location label alone is not such a trigger.

Claim-scope guard family

EG-1 - Exact membership.

member(TargetSlice, ClaimScope) = true

Name the exact claim-bearing episteme, exact U.ClaimScope, and exact target slice. The episteme, scope, and slice remain different values.

EG-2 - Formality or evidence, only when current. A receiving state may separately require a C.2.3 formality threshold or an A.10 freshness judgment. Neither changes membership.

EG-3 - Unknown evaluation. When a required selector, designation resolution, or translation input is unavailable, return unknown as the result binding of the exact evaluateMembership application, or as the result of the directly governed evaluation when no reusable application is current. Abstain or follow the exact receiving reliance policy; do not assert member = false. Add a C.2.1 result episteme only when a named receiving use needs the conclusion to persist. Use A.15.PROD only when the current claim is that dated work first constituted that episteme.

EG-4 - Translation. When exact local senses differ, require the obtaining F.9 Bridge and the separate affirmative C.2.1 claim naming this scope translation's direction, rule, and tolerance. After the exact A.10 or B.3 branch supports reliance for that use, derive the scope with deriveTranslatedScope(SourceScope, ExactBridgeOccurrence, ExactUseClaim, TargetReferenceScheme), then use that returned scope in evaluateMembership. Scheme difference alone does not select this branch.

EG-5 - Scope-value versus declaration change. Widen or narrow only when the extension gains or loses at least one independently identified slice; that extension change identifies another U.ClaimScope. A changed predicate expression with the same exact extension is a refit: it preserves the exact scope value and may require another scope declaration or claim-bearing episteme edition under its direct governor. A result-record, table, or selected-structure change alone changes neither the scope value nor its declaration.

Method–Work guard families (capabilities)

WG‑1 - WorkScopeCoverage (mandatory). A capability can be used to deliver a Work step only if:

U.WorkScope(capability) covers JobSlice

WG‑2 - work-measure target set satisfied (mandatory for deliverables). Guards MUST bind quantitative measures that the capability promises in the JobSlice:

SLO and target measures satisfied (latency ≤ L, throughput ≥ T, tolerance ≤ ε, … )

WG‑3 - qualification-window policy holds (mandatory for operational use). Operational guards MUST assert that the exact qualification-window predicate (qualification, inspection, or recertification) holds at the receiving guard's exact evaluation time:

qualificationWindowHolds(capability, qualificationWindowPolicy, evaluationTime) = true

WG-4 - Translation branch for capability use.

Translate U.WorkScope only when its condition predicates use exact local senses that differ from those needed by the job slice. Require the obtaining F.9 Bridge and a separate affirmative C.2.1 claim naming this Work-scope translation's direction, rule, and tolerance; establish the exact A.10 or B.3 reliance branch before the capability guard uses the result. A capability object and job slice carry no hidden .Context field that automatically selects this branch.

Observed mapping loss is evidence about the use claim, and permitted loss is its tolerance. When the claim's rule and tolerance support only a subset, return an explicitly narrower Work scope. Neither fact changes membership truth by itself.

WG‑5 - Δ(WorkScope). When widening Work scope (new operating ranges/platforms), the guard MUST require evidence at the new slices (measures + qualification windows). Refit (e.g., new units/parametrization) requires no new evidence.

Translation guard

Use this branch only after the exact local-sense translation need, the obtaining F.9 Bridge, and the separate affirmative C.2.1 claim for this translation are current. The claim names the source-to-receiving direction, scope-correspondence rule, and tolerated loss. Before the receiving guard relies on it, require the exact passing A.10 branch or a current positive B.3 assurance claim that carries this use with its sufficient required record.

translatedScope := deriveTranslatedScope(SourceScope, ExactBridgeOccurrence, ExactUseClaim, TargetReferenceScheme)
membershipResult := evaluateMembership(TargetSlice, translatedScope, InterpretationBasis)

The source claim-bearing episteme designates SourceScope; it does not own that value as a hidden context field. The Bridge relates exact local senses under F.9. The C.2.1 claim supplies this translation's rule and tolerance, and A.10 or B.3 supplies the separate reliance basis. None of them makes the A.6.1 operation application occur. An unmapped slice yields unknown for the attempted evaluation unless the returned scope explicitly excludes it; it is not silently dropped and reported as false.

Time selector

Name gammaTime in the context slice only when the applicable membership predicate varies with time. State the boundary that changes membership. If a work qualification or evidence-freshness condition varies with time, name its exact evaluation time and interval or policy under that condition's direct governor rather than copying it into scope. For example, qualificationWindowHolds(controller, Recertification90d, evaluationTime) is a separate guard; it is not a scope selector.

Do not write implicit “latest.” When time does not affect membership, omit the selector instead of inventing a nominal current value.

Archetypal Grounding - Worked Examples

Claim-scope membership boundary

Claim-bearing episteme E_adhesive states that Adhesive X retains at least 85 percent tensile strength on Al6061 for two hours at 120-150 °C under rig edition Calib-v3. It designates exact claim scope G_adhesive.

  • slice_in = {substrate=Al6061, temp=140°C, dwell=90min, rig=Calib-v3}. member(slice_in, G_adhesive) is true.
  • slice_out = {substrate=Al6061, temp=160°C, dwell=90min, rig=Calib-v3}. Membership is false; the attempted use stops.
  • slice_unknown = {substrate=Al6061, temp=140°C, dwell=90min, rigEdition=unavailable}. Evaluation returns unknown. It neither excludes the slice nor permits the use.

LabEvaluator_A may perform exact membership-evaluation work through the declared USM operation. When a named audit or replay use needs a judgment to persist, a C.2.1 episteme may record it. Neither the work nor the optional episteme makes membership true. A table showing the three rows is a C.29 representation and creates no ScopeDelimitationRelation.

The same G_adhesive may participate in two independently governed model-applicability relation occurrences and may be referred to by exact applied constraint claims in two A.22 structures. Only a selected obtaining model-applicability occurrence or an exact constraint claim as applied contributes through its corresponding A.22 discriminator; the common scope itself contributes through neither path and neither merges nor identifies the relations or structures. A declared applicability interval in either occurrence description is separate from the actual maximal continuous obtaining extent.

Translation only when local senses require it

An assembly use expresses temperature through an exact local calibration sense different from the laboratory sense used in G_adhesive. F.9 Bridge B-lab-assembly-temp obtains between those two cells under its calibration-correspondence profile; the profile contains no translation-use rule or loss tolerance.

Separate C.2.1 claim C-adhesive-scope-translation has that Bridge as EntityOfConcern and affirmative polarity. Its content names use translate G_adhesive for the assembly membership check, direction laboratory-to-assembly, the calibration rule for mapping the source interval, and tolerance no selector-meaning loss and at most 2 °C boundary uncertainty.

Use that translation only while exact A.10 relation EP-adhesive-scope-translation connects the claim and that bounded use to evidence record CalibrationComparisonRecord.Calib-v3-to-AssemblyCalibration-v5.2026-07-25. Provenance edge CalibrationComparisonRecord.Calib-v3-to-AssemblyCalibration-v5.2026-07-25 --carriedBy--> CalibrationComparisonRegister.Calib-v3-to-AssemblyCalibration-v5.2026-07-25.csv names its carrier. The window runs from 2026-07-25 through 2026-10-23 and closes earlier if either calibration edition, the mapping rule, or the 2 °C tolerance changes.

The path supports neither reverse translation, a mapping outside the named rule or tolerance, nor a claim that the A.6.1 application or membership evaluation occurred. This fixture asserts no evidence-producing or evidence-interpreting Work, current role assignment, or method trace. If the record, carrier, or provenance edge is missing or stale, or the window closes, stop before translation and set RelianceDisposition=reopen; otherwise RelianceDisposition=pass applies only to this bounded use. No assurance claim is made and the use does not meet B.3's material-reliance threshold.

The actual A.6.1 application deriveTranslatedScope(G_adhesive, B-lab-assembly-temp, C-adhesive-scope-translation, AssemblyReferenceScheme) applies the named rule and tolerance and returns the explicitly narrowed receiving scope [122,148]°C. The receiving membership evaluation uses that scope. The Bridge and claim alone do not prove that this calculation occurred or that any target slice is a member.

If the receiving use merely uses another designation for the same sense under an ordinary resolvable reference scheme, introduce no Bridge, use claim, or translation.

Capability: robotic weld Work scope

  • Context: RobotCell‑Weld@2026.
  • Capability: “Weld seam W at bead width 2.5 ± 0.3 mm, cycle ≤ 12 s.”
  • Work scope: {humidity<60 %, current∈[35,45]A, wire=ER70S‑6, controller=FW‑2.1}.
  • Job slice: {humidity=55 %, current=40A, wire=ER70S‑6, controller=FW‑2.1}.
  • Qualification evaluation time: 2026-07-25, outside the Work-scope tuple.
  • Guards (WG‑1..3): coverage true; measures satisfied; qualificationWindowHolds(controller, Recertification90d, 2026-07-25) is true because certification occurred on 2026-05-26.
  • Outcome: capability admitted for this Work.

Controller certificate age does not change Work-scope membership in this case. When the 90-day qualification condition fails, WG-3 stops operational use without removing the Job slice from the scope.

Serial intersection (API + dataset compatibility)

  • Claim A (API Standard): v2.3 request schema with constraint “idempotent under retry”.
  • Claim B (Dataset cohort): “metrics valid for cohort K with schema ds‑14”.
  • Composition: service S depends on both A and B → serial intersection of Claim scopes: {api=v2.3} ∩ {cohort=K, schema=ds‑14}.
  • Target slice: {api=v2.3, cohort=K, schema=ds‑14} → membership true.
  • Any drift (e.g., ds‑15) empties the intersection ⇒ path inapplicable.

Parallel support (SpanUnion) in a safety case

  • Line L1: tests on dry asphalt support braking property; scope S1={surface=dry, speed≤50 km/h}.
  • Line L2: simulations for wet asphalt; scope S2={surface=wet, speed≤40 km/h}.
  • Published scope: SpanUnion({S1,S2}) = {(dry, ≤50), (wet, ≤40)} with independence note (L1 empirical, L2 model‑validated).
  • Guard: allowed; union does not include (wet, 45) because not supported.

ML model deployment with different local feature senses

  • Model claim: “AUC >= 0.92 on cohort K, pipeline P, feature sense Training.F.”
  • Claim scope: {cohort=K, pipeline=P, exactLocalSense=Training.F}. No gammaTime selector is present because this example does not claim that model applicability changes with the slice time.
  • Target slice: product On-Device@v7, pipeline P-prime, feature sense Device.F-prime.
  • Translation trigger: ordinary designation resolution fails because Training.F and Device.F-prime have different declared semantics, not merely different labels. Exact F.9 Bridge B-training-device-feature obtains between those cells under a lossy-subset correspondence profile; the profile carries no device-use rule or tolerance.
  • Bounded translation claim: exact current C.2.1 claim C-device-feature-scope-translation has that Bridge as EntityOfConcern and affirmative polarity. It names use translate the training claim scope for the On-Device@v7 membership check, direction training-to-device, the subset-mapping rule, and tolerance no feature-kind substitution and no target slice outside the tested mapped subset.
  • Evidence and reliance: Before translating, verify that exact A.10 relation EP-device-feature-scope-translation connects claim C-device-feature-scope-translation and this bounded use to both records below.
    • Mapping evidence: MappingTestRecord.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25, with exact carrier edge MappingTestRecord.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25 --carriedBy--> MappingTestReport.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25.json.
    • Training evidence: TrainingEvaluationEvidence.K-P-TrainingF.2026-07-25, with exact carrier edge TrainingEvaluationEvidence.K-P-TrainingF.2026-07-25 --carriedBy--> TrainingEvaluationReport.K-P-TrainingF.2026-07-25.json.
    • Window and stop: the 180-day window runs from 2026-07-25 through 2027-01-21 and closes earlier if pipeline P or P-prime, either feature-sense edition, or the tested mapped subset changes. If a record, carrier, or edge is missing or stale, the window closes, or a named dependency changes, stop before translation and set RelianceDisposition=reopen; otherwise RelianceDisposition=pass applies only to this bounded use.
    • Boundary: the path supports neither feature-kind substitution, a target outside the tested subset, material release or assurance, nor a claim that deployment occurred. This fixture asserts no evidence-producing or evidence-interpreting Work, current role assignment, or method trace. No assurance claim is made and the B.3 material-reliance threshold is not met; a material release or assurance use must instead enter B.3.
  • Guard: bind translatedScope := deriveTranslatedScope(G, B-training-device-feature, C-device-feature-scope-translation, ProductReferenceScheme), then evaluate evaluateMembership(TargetSlice, translatedScope, InterpretationBasis); separately require the chosen formality predicate. The translated scope covers only the tested mapped subset. Neither the claim nor its passing reliance makes the derivation application or deployment occur.
  • Outcome: admit only a target slice in the returned subset; otherwise return false or unknown according to the exact returned scope and available evaluation input.

Bias-Annotation

USM counters three recurring biases. First, scope wording can hide a claim that the object is usable everywhere; require an addressable U.ContextSlice instead of a vague domain phrase. Second, abstract wording can be mistaken for wider scope; keep abstraction tier and detail separate from U.Scope. Third, publication convenience can be mistaken for content permission; U.PublicationScope bounds the publication surface and does not widen U.ClaimScope or U.WorkScope.

Conformance Checklist (USM)

IDRequirement
CC-USM-1 Exact values.Name one exact scope and one exact U.ContextSlice; do not substitute a context label, domain phrase, table, or selected structure.
CC-USM-2 Sole delimitation predicate.member(slice, scope) is the primitive delimitation semantics. ScopeDelimitationRelation, ScopeDelimitationMode, and ScopeDelimitationInterval are absent.
CC-USM-3 Included, excluded, unknown.True admits the scope condition, false stops it, and unknown reports an undecided evaluation rather than exclusion.
CC-USM-4 Evaluation separation.The acting system, method, dated evaluation work, direct relation or A.6.1 binding, optional C.2.1 result episteme, and evidence use remain separate from predicate truth. An unknown result binding does not require that episteme; A.15.PROD applies only to a separately current identity-inception claim.
CC-USM-5 No membership occurrence by default.A membership relation kind is admitted only after A.2.6 declares exact participant meanings, obtaining, recurrence, and a non-optional occurrence-identity rule under A.6.REL for a named receiving use.
CC-USM-6 Structure separation.A bare scope, slice, membership outcome, or displayed boundary never enters A.22 identity. An exact U.ClaimScope remains a participant of its independently governed ModelApplicabilityRelation; selecting that exact occurrence contributes through the relation-occurrence discriminator. Separately, an exact applied constraint claim may refer to that scope and contribute through the applied-constraint discriminator. Neither path makes the scope a constituent, a membership occurrence, or a second delimiter.
CC-USM-7 Applicability interval.One exact U.ClaimScope participates in ModelApplicabilityRelation; a declared interval stays in assertion or occurrence-description content, while the actual occurrence extent is derived from maximal continuous obtaining.
CC-USM-8 Set algebra.Intersection, independently supported spanUnion, widen, narrow, and refit operate on exact scope values; refit preserves membership.
CC-USM-9 Translation boundary.translate uses an exact obtaining F.9 Bridge plus a separate affirmative C.2.1 claim naming the use, direction, rule, and tolerance. A receiving guard requires the passing A.10 or positive B.3 branch for that use; scheme or label difference, a profile, or a card alone supplies none of these.
CC-USM-10 Representation boundary.A set expression, query, table, graph, or diagram is a C.29 representation and neither identifies the scope nor makes membership true.
CC-USM-11 Time only when material.Name gammaTime when time changes membership; never use implicit “latest,” and do not add a fictitious time selector to a time-invariant predicate.
CC-USM-12 Separate reliance.Formality, evidence freshness, assurance, gate, and decision predicates remain outside membership. A.10 or B.3 governs reliance on any cross-scheme translation claim; a passing A.10 disposition or positive B.3 assurance claim supports reliance only for its named use and neither authorizes that use, makes membership true, nor proves a derivation application occurred. A B.3 threshold alone supplies no positive claim. Unknown remains a receiving-guard result, not a rewritten scope.
CC-USM-13 Publication and capability specializations.U.WorkScope and U.PublicationScope reuse the same value and membership boundary; their measures, qualification, publication, and carrier relations remain separately governed.

Common Anti-Patterns and How to Avoid Them

Anti-patternWhy it is wrongRepair
Context label as membershipA project, room, domain, or model-use label does not supply the exact slice selectors.Name the exact U.ContextSlice and evaluate member(slice, scope).
Evaluation-created membershipPerforming work or writing a positive result is treated as making membership true.Keep predicate truth, evaluation work, result episteme, and evidence separate.
Unknown as excludedMissing data is coerced to false.Return an unknown evaluation result and abstain, narrow the use, or obtain the missing input; persist it only when a named receiving use needs a C.2.1 episteme.
ScopeDelimitationRelation reboundIncluded and excluded slices are reified as direct occurrences.Use the primitive membership predicate; admit no occurrence without the full A.6.REL identity settlement.
Unbounded complement objectEvery non-member is gathered into an exclusion entity.State predicate false for the tested slice; do not materialize the complement.
Table-created obtainingA row, edge, query result, or diagram is treated as membership or scope identity.Treat it as a C.29 representation of an independently declared scope or evaluation result.
Scope-as-structureA bare scope, slice, membership outcome, or displayed boundary is treated as an A.22 constituent or identity discriminator.Keep the exact U.ClaimScope as a participant of its independently governed ModelApplicabilityRelation: only a selected exact occurrence contributes through the relation-occurrence discriminator. If an exact applied constraint claim refers to that scope, the claim contributes separately through the applied-constraint discriminator. The bare scope contributes through neither path and is never copied as a second delimiter.
Interval-as-participantA declared applicability interval is copied into the direct relation signature.Keep it in assertion or description content and derive actual extent from continuous obtaining.
Silent translationA different scheme, label, or location automatically invokes a Bridge or lets the Bridge define the receiving use.Translate only after naming exact local senses, an obtaining F.9 Bridge, a separate affirmative C.2.1 claim for the direction, rule, and tolerance, and the current A.10 or B.3 reliance branch.
Implicit “latest”A time-dependent predicate cannot be reproduced.Name the exact temporal selector; omit it when time is irrelevant.
Unsupported unionspanUnion claims areas not supported by independent lines.State the independence basis or use intersection/narrower supported scope.

Consequences

A correct USM use makes scope checks reproducible: every judgment names an exact scope and slice, and true, false, and unknown evaluation results have different actions. Translation appears only for exact local senses after an obtaining F.9 Bridge, a separate affirmative C.2.1 claim about the proposed translation, and its current A.10 or B.3 reliance branch are distinguished. The cost is naming the selectors, mapping rule, tolerated loss, and evidence that actually affect the receiving use while keeping membership truth, operation application, result epistemes, representations, model applicability, and structure separate.

Playbooks (Informative)

Manager’s six-step use

  1. Name the claim and exact scope. Do not start from a context label or table.
  2. Name the target slice. Designate the independently identified slice; bind only the declared selector projection that this membership evaluation needs.
  3. Evaluate membership. True admits the scope condition; false stops it; unknown requires abstention, a missing input, or a narrower attempted use.
  4. Keep other checks separate. Formality, evidence freshness, capability measures, qualification, gate, and decision have their own predicates.
  5. Translate only when needed. Name the exact local senses and obtaining F.9 Bridge; then state the separate affirmative C.2.1 claim for this translation's direction, rule, and tolerance and establish its A.10 or B.3 reliance branch before using the returned scope.
  6. Persist only what the use needs. A C.2.1 result episteme may record the judgment when a named receiving use needs it to persist; a C.29 table may display it. Neither changes membership. Use A.15.PROD only when the current claim is that the work first constituted that episteme.

Architect’s design rubric for scopes

  • Prefer predicates over prose. Name the parameters, ranges, and standard editions that affect membership; name gammaTime only when time affects membership.
  • Factor common conditions. Use Refit to normalize units and factor shared predicates; do not widen by stealth.
  • Partition support lines. If you plan a SpanUnion, document independence up front.
  • Keep scope thin & honest. Publish what you can support; add slices as support appears (ΔG+).
  • Design translations early. Test the direct F.9 Bridge first, then state each proposed translation use separately with its direction, mapping rule, tolerated loss, and evidence plan; do not turn an expected loss score into permission to use the mapping.

Minimal DSL snippet for scope blocks (illustrative)

claimScope:
  effectiveReferenceScheme: MaterialsLabScheme@2026
  Standards:
    - rig: Calib-v3
    - api: v2.3
  env:
    substrate: Al6061
    temp: [120, 150] # °C
    dwell: { max: "2h" }
receivingGuards:
  evidenceProvenanceUse:
    relevance_window_days: 365 # A.10/R guard, not Claim scope

(Illustrative only; the specification does not mandate a particular syntax.)

Profiles as Scope configurations (informative)

Idea. A Scope profile is a named, editioned configuration that expands to a concrete U.Scope predicate block (over U.ContextSlice), used to avoid repetition and to keep declarations consistent across carriers.

Rules.

  • P1 (Expansion). Profiles are macros: guards MUST expand them to explicit predicates before evaluating Scope covers TargetSlice.
  • P2 (Edition). Profiles are editioned. A changed predicate expression is a content change for a carrier that references the profile even when the exact scope extension is preserved; a changed extension additionally identifies another scope value.
  • P3 (No stealth widen). A profile update MUST NOT implicitly widen a carrier’s published scope; ΔG+ must be explicit in that carrier.
  • P4 (Translation awareness). If a profile expands to predicates whose exact local senses require translation, name the obtaining F.9 Bridge and the separate affirmative C.2.1 claim for that translation's direction, rule, and tolerance. The receiving guard must recover the current A.10 or B.3 reliance branch; a different label, scheme, profile, or Bridge Card alone is insufficient.
  • P5 (No hidden owner). A profile expands to predicates; it is not a context object, scope owner, or additional scope kind.

Examples (illustrative). — An engineering team defines Ops-Lab-v3 as a profile pinning standard editions and environment selectors. It leaves LabEvidenceRelevanceWindow365d to the receiving A.10/R guard and contains no gammaTime, because evidence age does not change scope membership. — A field team defines WinterCampaign-v1 with gammaTime in [2026-11-01, 2027-03-31] because the exact scope predicate admits only slices during the declared winter campaign; a slice before or after those boundaries is a non-member. — A publication stack defines TechCard‑Lite@Σ as a profile that narrows U.PublicationScope to slices where required pins are available.

Governance Hooks & Audits

Durable audit evidence, when needed

When a scope-aware decision needs durable audit evidence, its C.2.1 result episteme may name:

  • Using object and exact scope. The claim-bearing episteme, capability, or publication object designates or uses the exact scope; it does not own the scope as a hidden context field.
  • Exact target slice. Designate the independently identified slice with its complete declared selector schema and values. An evaluation may bind only the projection its scope predicate inspects; that projection does not replace slice identity. Include gammaTime in the schema only when that temporal selector is part of the exact slice being evaluated.
  • Evaluation outcome. Record true, false, or unknown, plus the evaluation method or work occurrence when replay needs it.
  • Separate guard outcomes. Record work measures, qualification windows, formality, or freshness only when the receiving use checks them; none is membership.
  • Translation evidence, only when triggered. Name the exact obtaining F.9 Bridge, the separate C.2.1 claim with its polarity, use, direction, rule, and tolerance, and the exact A.10 or B.3 reliance branch. Record any observed loss as evidence rather than a Bridge identity field.
  • Scope change. Say whether the declared set widened, narrowed, or remained identical under refit.

Recording these facts does not make membership true, identify the scope, or create a membership-relation occurrence.

USM compliance levels (informative)

  • USM-Ready. Exact scope and slice values are declared; editors can distinguish membership from evaluation, evidence, representation, and structure.
  • USM-Guarded. Guards evaluate exact Claim scope or Work scope membership and keep measures, qualification, freshness, and gammaTime when material as separate checks.
  • USM-Auditable. Durable result epistemes identify the exact scope, slice, and evaluation result. When translation was triggered, they cite the obtaining F.9 Bridge, separate bounded-use claim, and current A.10 or B.3 reliance without treating those citations as membership truth.
  • USM‑Composed. Serial intersection and SpanUnion are implemented in composition tooling.

Audit checklist (informative)

  • Does each guard name a concrete TargetSlice?
  • Is membership reproducibly evaluable from the exact declared predicate and required inputs?
  • Are freshness and coverage separate predicates?
  • When exact local-sense translation was required, are the obtaining F.9 Bridge, separate C.2.1 use claim, direction, rule, tolerance, polarity, and current A.10 or B.3 reliance branch named?
  • For parallel support: is independence justified?

Risk controls (informative)

  • Silent widening. Require ΔG+ review; flag any scope increase without new direct support. A Bridge may translate supported conditions but does not supply support.
  • Opaque slices. Disallow “domain” placeholders; enforce addressable selectors.
  • Time drift. Require an exact gammaTime boundary only when the scope predicate itself changes membership across time; keep qualification, calibration, recertification, data-age, and evidence-freshness windows under their direct guards.

Extended FAQ (informative)

Q1. Is “Claim scope” the same as “domain”? No. “Domain” is descriptive and often fuzzy. Claim scope is addressable: it supplies an exact predicate over the U.ContextSlice selectors that determine membership, including gammaTime only when the predicate changes membership across time. Guards reference the exact slice, not a generic domain.

Q2. How do we express partial coverage across different cohorts or platforms? Declare each supported serial scope (S₁, S₂, …) and publish SpanUnion({Sᵢ}) with independence justification. Do not include unsupported slices.

Q3. Can raising F (formalizing) widen G? Only if the formalization explicitly changes the scope predicates (ΔG+). Formalization alone does not widen scope.

Q4. What is the difference between Work scope and SLOs? Work scope is where the capability can deliver; measures within the guard are what it promises there (SLO targets). Both are required at use time (WG‑1..3).

Q5. Can we assign numeric coverage to G? Not normatively. G is set‑valued. You MAY attach an informative, explicitly declared CoverageMetric(G) (e.g., a proportion under a pinned policy) to aid R assessment, but guards use set membership and CoverageMetric(G) MUST NOT replace G.

Q6. How do we handle “latest data” scopes? First decide what “latest” is doing. If it means that evidence or data must be no older than 90 days, do not put it in Claim scope: require the A.10 evidence-provenance path to satisfy its exact 90-day relevance or currentness window at the receiving use time. Put gammaTime in the scope only when claim applicability itself changes with the slice time, and state the membership boundary—for example, slices whose observation time falls outside the declared interval are non-members. The word “latest” alone supplies neither boundary.

Q7. How do we use a scope with differently named slice selectors? First resolve whether the designations refer to the same values under the effective reference scheme. If exact local senses differ and membership must be expressed across them, name the obtaining F.9 Bridge. Then state the separate affirmative C.2.1 claim for the proposed translation's direction, mapping rule, and tolerated loss, establish the exact A.10 or B.3 reliance branch, and evaluate the scope returned by deriveTranslatedScope. A different project, place, label, reference scheme, profile, or card alone does not move or translate the scope. Q8. What about abstraction level or detail? Keep AT (AbstractionTier) and D (Detail and Resolution) as orthogonal, optional annotations. They never substitute for Claim scope or Work scope.

Q9. Can a capability’s Work scope be broader than a predecessor claim’s Claim scope on a dependency path? They are on different carriers. In a serial dependency, the effective scope is the intersection; the broader one does not dominate.

Q10. When does an empty scope make sense? No slice satisfies the declared predicate, so the receiving guard stops. This may occur during early drafting or after a refutation; it does not create a special context, time, or complement entity.

Annexes (informative)

Source wording -> USM dictionary

Source wordingUSM term
applicability (of a claim)Claim scope (G)
envelope (of a requirement/spec)Claim scope
generality GClaim scope (G)
capability envelopeWork scope
validity (as a characteristic name)Claim scope or Work scope (depending on carrier)
operational applicabilityWork scope
publication or view applicabilityPublication scope

(Use these source terms only in explanatory notes; not in guards or conformance text.)

Minimal data model hints

ContextSlice tuple (suggested keys): effectiveReferenceScheme, one exact declaredSelectorSchema, the values of every selector in that schema, and optional selector families such as exactLocalSenseRefs, standardOrInterfaceEditions, environmentOrPlatformSelectors, cohortOrJurisdictionSelectors, and gammaTime only when that selector belongs to the declared schema because membership changes across time. A scope predicate declares which projection it inspects; it does not define the tuple's identity.

Claim-scope predicate block: assumptions, cohorts, platformOrStandardEditions, environmentSelectors, exactLocalSenseRefs?, and gammaTime? when time changes membership.

Work-scope predicate block: environmentSelectors, platformOrStandardEditions, resourceRegimeSelectors, exactLocalSenseRefs?, and gammaTime? when time changes membership.

Publication-scope predicate block: the exact audience, interface, availability, and other selectors that restrict publication use, always as a subset of the underlying claim or work scopes.

Separate use-time guard: work-measure targets, qualification windows, evidence freshness, and any decision threshold. These are not fields of the scope value. (These are informative; the spec does not mandate a concrete serialization.)

Pseudocode membership evaluation (illustrative)

def evaluate_membership(scope, target_slice, available_inputs):
    required = scope.required_selectors(target_slice)
    if not required.issubset(available_inputs):
        return UNKNOWN
    return TRUE if scope.predicate(target_slice) else FALSE

required_selectors returns the projection needed by this scope predicate; it neither creates nor reidentifies target_slice. UNKNOWN belongs to the evaluation result because a required input is unavailable. The underlying membership predicate remains bivalent for an exact, fully interpreted scope and slice.

Rationale

A.2.6 needs a scope mechanism because scope is neither evidence freshness nor expression rigor: it is the set-valued condition under which a claim, work capability, or publication surface may be used. USM makes those membership conditions addressable, composable, and reopenable while preserving the F/G/R separation. When exact local senses require translation, F.9 supplies the Bridge, C.2.1 supplies the separate claim about this use, and A.10 or B.3 supplies reliance; A.2.6 alone governs the scope calculation and membership question.

SoTA-Echoing - F-Cluster Unification for A.2.6 (F.17 and F.18)

Intent. This annex applies the F‑cluster method to triangulate USM terms against a diverse set of post‑2015 sources and communities (“Contexts”), and then fixes the Unified Tech and Plain names used in A.2.6. Results are ready for downstream lexicon entries (Part E) and guard templates (ESG / Method–Work).

F.17 Unified Term Survey (UTS) — Method & Scope

Contexts surveyed (SoTA, diverse):

  1. ISO/IEC/IEEE 42010 (architecture description)
  2. OMG Essence (Kernel: Alphas, Work Products, States)
  3. NIST AI RMF 1.0/1.1 (trustworthy AI)
  4. ASME V&V 40–2018 / FDA 2021–2023 (model credibility)
  5. W3C SHACL (2017+) / SHACL‑AF (data constraints)
  6. OWL 2 / ontology engineering (2012+, current practice)
  7. IETF BCP 14 (RFC 2119/8174) (normative keywords & guard style)
  8. DO‑178C + DO‑333 (avionics, formal methods supplement)
  9. ISO 26262:2018/2025 (automotive functional safety)
  10. IEC 61508 (2010+, current revisions) (basic safety)
  11. ACM Artifact Review & Badging v1.1 (reproducibility signals)
  12. MLOps/Cloud SLO practice (SRE / platform) (operational guardrails)

Survey focus (terms we align): U.ContextSlice, generic Scope and set algebra, Claim scope (G), Work scope, Bridge plus a separate bounded-use claim and reliance basis, Γ_time, widen, narrow, refit, translate, SpanUnion, serial intersection, separation from F and R, and avoidance of overloaded validity and operation terms.

UTS Table (F.17) — Cross‑context term mapping
#Context / SourceLocal label(s) (native)Closest USM conceptNotes on fit & deltas
1ISO/IEC/IEEE 42010Architecture context; environment; stakeholder concerns; viewpoints and viewsContextSlice (addressable slice); Scope as view‑specific applicability42010 is about views in context; it has no first‑class set‑valued scope char but aligns with “evaluate in a concrete context” → USM uses explicit slice tuples.
2OMG EssenceAlpha State; Work Product State; Level of Detail (LoD)Work scope (guards), Detail (D) (LoD), ESG/RSGEssence separates status (states) and work evidence; LoD is detail, not scope. USM treats scope as guardable membership over slices; states/LoD map to ESG & D, not to G.
3NIST AI RMFContext of use; validity, reliability, robustness; monitoringClaim scope (G); R freshness/monitoring“Context of use” = where a claim/model holds → maps to G. “Validity” is part of R vocabulary; we avoid naming the characteristic “validity” to prevent LA confusion.
4ASME V&V 40 / FDAContext of use; credibility factors; verification/validationClaim scope (G); R (credibility)Direct fit for G via “context of use”. Credibility/evidence freshness contribute to R, not to G; USM keeps them separate in guards.
5W3C SHACLShapes; targets (sh:targetClass, sh:target); constraintsClaim scope (targets define where constraints apply); F≥4 (predicate form)SHACL “target” ≈ membership predicate on a dataset context; perfect analogue of Claim scope on data slices; constraint language supports F4‑style predicates.
6OWL 2 practiceClass extension; domain/range; imports/version IRIClaim scope as class extension over an ontology contextClass extension is set‑semantics by design; G naturally maps to extension over a versioned ontology (part of ContextSlice).
7IETF BCP 14MUST/SHALL/SHOULD; requirements languageGuard style (observable predicates)BCP 14 doesn’t define scope but dictates how guards are worded; USM aligns by requiring observable, deterministic membership checks.
8DO‑178C / DO‑333Operational conditions; DAL; formal method objectives; TQLWork scope (operating conditions); F (proof‑grade), R (assurance objectives)Operational applicability = Work scope; formal method objectives lift F; Tool qualification impacts TA/R, not G.
9ISO 26262Operational situation & operating modes; ASIL; OSEDWork scope (operating modes/situations)OSED/operating modes define where capability can be exercisedWork scope. Assurance level (ASIL) relates to R, not G.
10IEC 61508SIL; demand mode; proof test intervalWork scope (demand vs continuous mode) + R freshnessMode concepts influence where/how a function can be claimed → Work scope; proof test interval sits in R (freshness/decay).
11ACM ArtifactsAvailable/Evaluated/Reusable; Reproduced/ReplicatedR signals; ContextSlice (reproduction environment)Badges encode evidence availability and warrant level; the declared environment maps to a slice; scope of claim is often implicit → USM makes it explicit.
12SRE / Cloud SLOSLOs; error budgets; regions/tiers; rollout windowsWork scope (regions/tiers) + measures; gammaTime only for a membership-changing rollout intervalSLO measures and error-budget windows stay in their measure or reliance guards. A rollout interval enters Work scope only when crossing its exact start or end changes whether that job slice belongs.

Summary. Across all Contexts, two stable notions recur: (1) evaluate in a concrete context (→ U.ContextSlice), and (2) declare where something holds or is deliverable (→ set‑valued Scope). “Context of use,” “operating modes,” “targets,” “class extension,” and “OSED” are all Context‑flavored presentations of Claim scope or Work scope. Terms like validity and operation are semantically close but collide with LA and FPF’s Work and Run lexicon; we therefore do not adopt them as characteristic names.

F.18 Term Selection — Unified Tech & Plain names
Selected names (normative)
Concept in A.2.6Unified Tech (lexicon)Unified Plain (manager‑friendly)Allowed short formAvoid / unpack
Addressable evaluation contextU.ContextSliceContext sliceSlice (when local)“domain” (as guard input), “latest” time
Abstract mechanism (set‑valued)U.ScopeScope“applicability”, “envelope”, “validity” (as characteristic names)
Episteme applicabilityU.ClaimScope (*nick G)Claim scopeG“generality”, “applicability/envelope (of claim)”
Capability applicabilityU.WorkScopeWork scope“capability envelope”, “operational applicability”, “operation scope”
Time selectorΓ_timeTime selectorimplicit “latest”
Exact local-sense translationObtaining F.9 Bridge + separate affirmative C.2.1 use claim + current A.10 or B.3 relianceBridge, translation rule and tolerance, checked relianceautomatic Bridge use or treating a loss score as permission
Parallel coverageSpanUnionUnion of supported areasunqualified “union” without independence
Serial dependencyIntersectionIntersection of scopesordinal “more/less general” language
Scope editsΔG+ (widen), ΔG− (narrow), Refit, TranslateWiden, narrow, refit, translatestealth widening (“it’s obvious”)
Optional didacticsDetail (D), AbstractionTier (AT)Detail and abstraction tierD / ATavoid as G substitutes

Why these names (decision grounds):

  • “Scope” wins over “envelope/applicability/validity”. It is short, self‑documenting, and already idiomatic in SRE/SW, while “validity” clashes with Validation Assurance (LA) and “envelope” suggests geometry, not membership.
  • “Claim scope” vs “Work scope”. Two‑word compounds meet the FPF clarity rule: the first token reveals the carrier (Claim vs Work/Capability), the second the mechanism (scope).
  • Keep G. The F–G–R triple is canonical; we retain G as nickname for Claim scope.
  • “Context slice” keeps the evaluation target addressable through its exact declared selector schema and values; one membership predicate may inspect only a projection without reidentifying the slice.
  • “Operation”, “operating”, and “validity” avoided. They are overloaded in existing FPF lanes (Work, Run, and LA) and create policy ambiguities in guards.
Phrasebook (for editors, normative)
  • Use “Claim scope (G) covers TargetSlice” and “Work scope covers JobSlice” in guards.
  • When time changes membership, name exact gammaTime; never say “latest.” Omit it when time is irrelevant.
  • To compose, say: “intersection along dependency paths; SpanUnion across independent support lines.”
  • When exact local-sense translation is current, say: “through an obtaining F.9 Bridge and a separate affirmative C.2.1 claim for this direction, rule, and tolerance; rely on it only through the current A.10 or B.3 branch, then evaluate membership on the returned scope.”
  • When widening/narrowing, write “ΔG+ / ΔG−” and log the support change; use “Refit” for unit/param normalization.
Rosetta summary (informative, for rationale box)
local context phraseUse in USM wording
“Context of use” (NIST, ASME/FDA)Claim scope (G) on explicit Context slice
“Operating modes/situations” (ISO 26262)Work scope with measures & qualification windows
“Target (class/shape)” (SHACL/OWL)Claim scope predicates (membership)
“Architecture view context” (42010)Context slice + Scope checks inside the view
“Capability envelope” (safety documents)Work scope
“Domain” (informal)Context slice elements; not acceptable as a guard input

Outcome. The UTS shows clear convergence across SoTA Contexts on addressable context and set‑valued applicability. F.18 therefore fixes: Context slice, Scope, Claim scope (G), Work scope, Publication scope with the algebra and guard clauses mandated in A.2.6. This closes synonym drift while remaining readable for engineering managers and precise for assurance tooling.

Relations - Cross-Pattern Coordination

With F–G–R (C.2.2)

  • G is Claim scope. Use set algebra (∩ / SpanUnion).
  • F remains the expression rigor (C.2.3); R captures evidence currentness and bounded reliance. Observed loss may bear on the translation-use claim; its permitted-loss tolerance remains in that claim rather than in G or the Bridge profile.
  • Weakest‑link. On dependency paths: F_composite = min(F), R_composite = min(R); G follows §7.2–§7.3 (set rules).

With Formality (C.2.3)

  • No conflation. Raising F does not change G unless scope predicates change.
  • Guarding rigor. ESG may use Formality >= F_k alongside scope coverage.

With Work & Run (A.15)

  • Work scope delimits the exact job slices on which a capability's deliverability claim is evaluated; it is not the U.Work occurrence or its execution setting.
  • Method–Work gates use Work scope coverage plus measures and qualification windows.

With exact F.9 Bridge occurrences

  • Translation boundary. Use an exact F.9 Bridge only for exact local-sense translation. State the translation's direction, rule, tolerated loss, and polarity in a separate C.2.1 claim, then recover the exact passing A.10 or positive B.3 reliance branch before the receiving use proceeds; none makes membership true or false by itself.
  • Best practice. Return an explicitly narrower scope when the bounded-use claim's rule and tolerance support only a proper subset; do not turn observed mapping loss into a Bridge identity field or a generic R penalty.

With Capability governance (A.2.2)

  • Capabilities MUST declare Work scope, measures, qualification windows; gates MUST verify all three.
  • Capability refits that preserve the set (unit changes) are Refit, not Δ(WorkScope).

A.2.6:End

RoleRelationStructure@BoundedContext - Context-Local Role Relations and Representation-Lens Boundary

Status: Stable Type: Ontic relation-structure pattern

Kind Settlement

Use this pattern when a project needs context-local role substitution, incompatibility, factor, qualification, bundle relations, or role-decomposition repair without turning labels or role-algebra notation into a second ontology.

What goes wrong if missed. Role labels start carrying type, capability, method, work, evidence, or permission claims, and a representation lens starts replacing the role relation structure in life.

What this buys. Role-relation claims stay small, local, and inspectable while role assignment, capability, method, work, evidence, source, status, publication, and lens claims keep their own governing patterns.

A.2.7 does not admit U.RoleAlgebra as a durable U-kind. The governed object is RoleRelationStructure@BoundedContext: a selected context-local relation structure over role descriptions, U.Role values, role expressions, substitution, incompatibility, and bundle-expression relations. A role algebra, graph, matrix, embedding, distributed model, or neural representation is a mathematical or representation lens over that structure, not the structure itself and not an operation on holder systems.

RoleRelationStructure@BoundedContext is the FPF object for context-local relations among role descriptions, declared role values, local role expressions, role-bundle expressions, and role-assignment-admission uses. It is not a new U.* kind beside U.Role; it is a selected relation structure over role-side values inside one bounded context. When project prose calls this "role architecture", the FPF object is still the selected role-relation structure in life; a role-algebra, graph, matrix, embedding, distributed, or neural description is a lens over that structure, not the structure itself and not an operation on holder systems. Coupled method relations are governed symmetrically as MethodRelationStructure@BoundedContext under A.3.1, A.3.2, A.15, G.5, or a direct method-composition pattern when current; A.2.7 names the role-relation side and the bridge to role-method naming.

Use this pattern when a method, work-admission rule, staffing rule, safety case, governance rule, or role description needs to say that one role value can satisfy a role-admission condition stated with another role value, two roles cannot be held together by the same holder during the same window, a role expression has a factor or domain qualification, a role-decomposition claim needs grounding, or a frequent conjunction of roles is worth naming.

Primary EntityOfConcern. The EntityOfConcern is RoleRelationStructure@BoundedContext: a context-local role-relation and role-expression structure in one U.BoundedContext. Algebraic notation, matrices, partial orders, products, graphs, embeddings, neural representations, or other mathematical or representation expressions are descriptions or lenses of that structure. The role architecture in life is the selected relation structure among role values and role expressions; the lens is not the holder, not the performed work, not the living system, not the method, and not the role assignment.

Primary working reader. A manager, architect, method author, safety assessor, or model author who needs role-admission substitution, separation-of-duties, role-factor or qualification expression, role-bundle expression, or ordinary name guidance without turning the role relation structure into capability, method, holder, work, evidence, status, or kind hierarchy.

First useful move. Name the bounded context, the role descriptions or role values being related, the local role expression or relation being claimed, and the assignment, method, work-admission, naming, or bridge check that will use that relation. If the claim decomposes a role, first decide whether the recovered object is role-admission substitution, factor or qualification, bundle expression, separate role value, role-state refinement, capability-fit condition, responsibility, permission, commitment, or obligation relation, method/work decomposition, or only ordinary prose. Use a role-algebra lens only when mathematical notation helps state or check that relation.

What goes wrong if missed. Role names start acting like type hierarchy, org-chart hierarchy, permission policy, capability model, method family, staffing plan, or cross-context translation. Then FPF grows a second ontology beside U.Role, U.RoleAssignment, U.Capability, and method or work patterns, or treats algebraic notation as if it were the object in life.

What this buys. Context-local role relation structure gives a small, replayable set of role relations for role assignment, method role-admission checks, naming, and bridge work while keeping ability, work, method, evidence, and status claims in their governing patterns. Role-algebra notation remains a lens for describing those relations, not a substitute ontology.

Not this pattern when.

  • If the current claim is who holds a role, use A.2.1.
  • If the current claim is whether an assignment is currently in a work-admitting state, use A.2.5.
  • If the current claim is ability, use A.2.2.
  • If the current claim is a method, method family, or method description, use A.3.1 or A.3.2.
  • If the current claim is performed work or planned work, use A.15, A.15.1, or A.15.2.
  • If the current claim is cross-context naming or translation, use F-family context and naming patterns such as F.9 and F.18.
  • If the current claim is evidence, source, status, assurance, publication, or description use, use C.2.1, A.10, B.3, E.17.*, E.24.PUB, or A.7 as the direct governing pattern for that episteme-use claim.

Problem frame

Use this when a method, work-admission rule, staffing rule, safety case, governance rule, or role description needs a declared context-local relation among role values, role expressions, or role-bundle expressions.

What goes wrong if missed. Role labels act as type hierarchy, org chart, permission, capability, method family, staffing plan, or cross-context equivalence; mathematical notation then starts replacing the role relation structure in life.

What this buys. Role-admission substitution, incompatibility, role factors, and role bundles become inspectable local relations while role assignment, capability, method, work, evidence, source, status, and publication claims stay with their governing patterns.

Work governed by role values and role assignments often needs three small claims:

  1. One role value can satisfy a role-admission condition stated with another role value in the same context when a role-admission substitution relation is declared.
  2. Two roles are incompatible for the same holder during overlapping windows.
  3. A recurring conjunction of roles can be named as a role bundle expression.

Role decomposition is not a fourth primitive and not evidence of role holonhood. It prompts recovery of one of the declared relations above, a role-state refinement under A.2.5, a separate role value under A.2, a capability, responsibility, permission, commitment, or obligation relation under its direct owner, or a coupled method/work decomposition under A.15.

Without a local role relation structure, teams usually encode those claims in the wrong objects:

  • a role assignment says "senior inspector" and silently satisfies "inspector" without declared relation;
  • a separation-of-duties rule is written as a deontic slogan rather than an incompatibility relation over assignments;
  • a role bundle becomes a new holder, capability, work product, or method;
  • a cross-context label match is treated as role equivalence;
  • method role-admission wording smuggles capability or work claims into role names.

A.2.7 keeps the role relation structure small and local. It says how role values, role descriptions, and role expressions relate; it does not say who holds them, whether holders are able, whether work happened, or whether an episteme proves something. Algebraic, graph, factor, embedding, distributed, neural, or other mathematical descriptions are optional lenses over that structure.

Problem

A combined role expression such as engineer-roboticist, inspector-auditor, or musician-teacher can hide several different claims: a local role-admission substitution, a role bundle, a factor or qualification, an incompatibility, a holder assignment, a capability claim, a responsibility, permission, commitment, or obligation relation, a role-state refinement, or a method/work coupling. The problem is to recover the local role relation structure without minting a new universal role kind, treating role decomposition as mereological parthood, or treating an algebraic, graph, factor, embedding, or neural description as the role structure itself.

Forces

ForceTension
Local relation vs universal typeA role-admission substitution is valid inside one bounded context; it must not become kind subsumption or a universal role taxonomy.
Life structure vs representation lensAlgebra, graph, matrix, embedding, or neural representation may describe the selected role relation structure; the lens is not the holder, role assignment, capability, method, or work.
Compact naming vs hidden bundleOrdinary names such as engineer-roboticist can help when the context declares the relation or bundle; they hide work when they silently combine independent roles or methods.
Role-method coupling vs collapseRole and method relation structures often appear together, but method, method family, work plan, and performed work keep their direct governing patterns.

Solution - Core Role-Relation Structure

RoleRelationStructure@BoundedContext is a relation structure declared inside one U.BoundedContext. A role-algebra description may be attached when notation helps inspection, but the structure remains the governed object.

RoleRelationStructure:
  BoundedContextRef:
  RoleDescriptionRefs?:
  RoleValueSet:
  RoleExpressionSet?:
  RoleAdmissionSubstitutionSet:
  IncompatibilityRelationSet:
  FactorOrQualificationExpressionSet?:
  BundleExpressionSet:
  MathematicalOrRepresentationDescriptionRefs?:
  UseRelationRefs:

BoundedContextRef. The role relation structure is local. A relation declared in HospitalOR_2026 does not automatically apply in PlantMaintenance_2026 or another hospital's governance context.

RoleDescriptionRefs. Role descriptions may supply the recognized meaning of role values or role expressions. They are description epistemes, not the holder, not the assignment, and not the algebraic lens.

RoleValueSet. The structure ranges over U.Role values governed by [A.2](/generated/patterns/A.2).

RoleExpressionSet. The structure may include context-local role expressions such as qualified roles, bundle expressions, decomposition candidates, or labels that ordinary prose uses before a durable role value is declared.

RoleAdmissionSubstitutionSet. The context may declare AcceptedAssignmentRole <= AdmissionConditionRole as a role-admission substitution relation. This is a local admissibility relation for method, work-admission, staffing, safety, or governance checks. It is not kind subsumption, org-chart rank, capability evidence, source-label equivalence, or public naming.

IncompatibilityRelationSet. The context may declare RoleA incompatibleWith RoleB. This means the same holder cannot use overlapping role assignments for both roles in the same bounded context and window when that incompatibility is current for the work claim.

FactorOrQualificationExpressionSet. The context may declare that one ordinary label is a qualified role expression, such as engineer qualified by robotics domain, method family, practice, or work field. This does not automatically create a separate RoboticistRole or a combined role value.

BundleExpressionSet. The context may declare RoleBundle := Role1 and Role2 and Role3 as a role-bundle expression. The expression is satisfied only by valid assignments to each component role under the same bounded context and required window. It does not create a composite holder, composite capability, or method.

MathematicalOrRepresentationDescriptionRefs. A mathematical or representation description may use order, product, factorization, graph, matrix, embedding, neural representation, distributed model, or another lens to express the selected role relation structure. This description is governed like any lens use: it names what it represents, what it preserves, what it loses, and what it must not be overread to prove.

UseRelationRefs. A method step, work-admission check, staffing rule, safety case, naming decision, or governance rule may cite the role relation it uses.

Role-Relation Expressions

Role Decomposition Boundary

Start from the object claim, not from the word used for it. If a role is decomposed, the admissible repairs are:

  • role-admission substitution when one role assignment may satisfy a role-admission condition stated with another role value;
  • factor or qualification when one role expression narrows a role by domain, practice, method family, work field, or context;
  • bundle expression when several independent role assignments must be held together;
  • separate role value when the bounded context needs its own role description, state expectations, capability-fit conditions, and method or work relations;
  • role-state refinement under A.2.5 when only enactable-state detail changes;
  • capability-fit condition, responsibility relation, permission, commitment, or obligation under the direct owner when the decomposition actually names those objects;
  • method or work decomposition under A.15 when the source actually divides method into submethods or work into work-part relations.

Do not use role partOf. U.Role is a root work-facing role value under A.2, not an admitted holon kind under A.1. Do not infer role parts from slots. RoleAssignment, role-state relations, evidence-use relations, and role-relation structures may declare SlotSpecs under A.6.5; those SlotSpecs are relation positions. Role descriptions may have episteme constituents. Neither case supplies parts of the U.Role value.

Role-Admission Substitution

Use role-admission substitution when one role value can satisfy a role-admission condition stated with another role value in the same bounded context.

SeniorWeldingInspector <= WeldingInspector

Read this as: an assignment to SeniorWeldingInspector may satisfy a method or work-admission condition stated with WeldingInspector when the bounded context declares that substitution and the assignment window is current.

The relation is not kind subsumption. SeniorWeldingInspector is not a subtype of a system kind; it is a role value related to another role value for local admission satisfaction. It is also not capability evidence, public naming, or method identity. A senior inspector role may still need a separate capability-fit claim under [A.2.2](/generated/patterns/A.2.2), a method relation under [A.3.1](/generated/patterns/A.3.1)/[A.3.2](/generated/patterns/A.3.2), or a naming settlement under [F.5](/generated/patterns/F.5)/[F.18](/generated/patterns/F.18).

Role Incompatibility

Use role incompatibility when the same holder cannot validly use overlapping assignments to two roles in the same context and window.

SurgeryPerformer incompatibleWith SurgeryVerifier

This relation is often used for separation-of-duties or independence constraints. It does not create a commitment object, permission policy, or evidence record by itself. A work-admission check may use it to reject the proposed assignment combination.

Role Bundle Expression

Use a role bundle expression when a frequent conjunction of roles is useful to name inside one context.

IncidentLeadOnCall := IncidentCommander and Communicator and DecisionMaker

The bundle expression is satisfied by current assignments to all component roles under the same bounded context and required window. It is not a product of role values, not a new holder, not a method, and not a capability.

A bundle expression becomes a durable role value only when the bounded context declares it as a role with its own role description, role-state expectations, capability-fit conditions, and method or work relations where current.

How Role Relation Structure Is Used

Role relation structure is normally used by neighboring patterns as one selected structure, sometimes informally called the local role architecture:

MethodRoleAdmissionCheck:
  methodRef: WeldInspectionMethod
  requiredRoleValue: WeldingInspector
  proposedAssignmentRoleValue: SeniorWeldingInspector
  substitutionRef: SeniorWeldingInspector <= WeldingInspector
WorkAdmissionCheck:
  holderRef: SurgeonA
  proposedAssignments: SurgeryPerformer, SurgeryVerifier
  incompatibilityRef: SurgeryPerformer incompatibleWith SurgeryVerifier
  window: AssignmentWindow

The role relation structure supplies one role-substitution relation used by the method role-admission or work-admission check. The method, method family, method relation structure, work plan, performed work, capability envelope, and evidence use remain governed by their direct patterns. When a method relation or method composition structure also needs to be named, the current object is MethodRelationStructure@BoundedContext under [A.3.1](/generated/patterns/A.3.1), [A.3.2](/generated/patterns/A.3.2), [A.15](/generated/patterns/A.15), [G.5](/generated/patterns/G.5), or a direct method-composition pattern when current; method-algebra notation is a lens over that structure, not a hidden product of roles.

Naming role-relation and role-method expressions

Role relation work may leave behind something people need to name in ordinary project prose. The named object is not always an atomic U.Role value. It may be a holder-in-role statement, a context-local role expression, a role-admission substitution relation, an incompatibility relation, a role-bundle expression, a durable combined role value, a coupled role-method expression, a method name, or a work name.

Recover the named object before choosing the label:

Source wordingRecovered objectOrdinary wording consequence
"Vasya is an engineer"holder-in-role claim: Vasya has a current assignment to an engineering role value in the bounded contextordinary prose may say "engineer" without Role; the FPF record still separates holder, role value, assignment, and window
"robotics engineer" or "engineer-roboticist"engineering role value or local engineering-role expression qualified by robotics domain, robotics-engineering method family, practice, or governed work fieldordinary label may stay "robotics engineer" or "engineer-roboticist"; RoboticsEngineerRole is optional Tech-register spelling only when durable reference needs it
"engineer and roboticist"two independent role values and two assignments, if RoboticistRole is current separately from EngineerRoleuse only when the project really needs two independent roles
"engineer-roboticist and musician"one robotics-qualified engineering role expression or role value plus one independent musician role valuepreferred ordinary wording when robotics qualifies engineering, while musician is separate
"engineer-roboticist-musician"one declared combined role value or one named role-bundle expressionuse only when the bounded context declares that combined value or bundle name; otherwise it hides independent assignments
"robot engineering", "music performance", or "teaching robots music"method, method family, work, or work familyname under A.3.1, A.3.2, or A.15; these are not role-relation products merely because their labels share role words
"role algebra", "role graph", "role matrix", or "role embedding"mathematical or representation description of selected role relation structurename the lens or representation only when that description is the governed value; otherwise name the recovered role relation, role expression, assignment, method, or work

Role and Method suffixes are optional Tech-register disambiguators. They are not ordinary-name requirements and they do not create the FPF kind. A user-facing sentence may say "Vasya is an engineer-roboticist and musician" without saying "role" when the FPF record or surrounding context lets a reader recover the role expression, role values, holder assignments, methods, and work separately.

Hyphenation is not algebra by itself. Use a hyphenated ordinary label when it helps a reader see a recovered factor, domain, practice, method-family qualification, or combined role expression. Use "and" when the current point is multiple independent role assignments. Do not mechanically concatenate operands into a Tech label.

The math-lens boundary is narrow. A role-algebra, graph, matrix, embedding, distributed, or neural representation is a lens over role values, role-admission substitution relations, incompatibility relations, role-factor or qualification expressions, and role-bundle expressions. The lens is not itself the role, holder, assignment, method, work, or capability. The name attaches to the recovered object or expression, not to the notation that helped recover it.

Archetypal Grounding - Worked Cases

Role-Admission Substitution Without Capability Smuggling

PlantMaintenance_2026 declares:

SeniorHydraulicsTechnician <= HydraulicsTechnician

A method-description source or work-admission check that states HydraulicsTechnician as a role-admission condition may accept an assignment to SeniorHydraulicsTechnician. This does not prove that the technician has the pressure-test capability. The same source or admission check may separately state PressureTestCapability as a capability-fit condition under [A.2.2](/generated/patterns/A.2.2).

Incompatibility for Independence

SafetyCase_2026 declares:

HazardAnalysisAuthor incompatibleWith HazardAnalysisApprover

The same holder cannot use overlapping assignments for both roles when approving the same hazard analysis. If a source sentence says "the approver role is independent", A.2.7 recovers the role incompatibility relation; evidence of independence, approval work, and approval records stay in their direct patterns.

Bundle Expression Without New Capability

IncidentOps_2026 declares:

IncidentLeadOnCall := IncidentCommander and Communicator and DecisionMaker

This is a reusable role-bundle expression for method role-admission checks. It does not state that one person has incident-management capability; that remains a capability claim. It does not state that incident work happened; that remains a work claim.

Naming Engineer-Roboticist and Musician

A project says: "Vasya is an engineer, does robot engineering, is therefore an engineer-roboticist. These are musical robots, and Vasya is also a musician, performs music, and teaches robots music."

Good ordinary rewrite:

Vasya is our engineer-roboticist and musician: he works on robot engineering, and in the musical-robots project he also performs music and teaches robots music.

This ordinary sentence is admissible because a reader can recover the separate FPF values behind it:

BoundedContextRef: MusicalRobotLab_2026
HolderRef: Vasya
EngineeringRoleExpression: EngineerRole qualified by robotics domain, robotics-engineering method family, practice, or work field
OrdinaryRoleLabel: engineer-roboticist or robotics engineer
IndependentRoleValue: MusicianRole
HolderAssignmentRefs: Vasya assigned to the robotics-qualified engineering role expression or declared RoboticsEngineerRole; Vasya assigned to MusicianRole
MethodOrWorkRefs: robot-engineering method or work; music-performance work; robot-music-teaching method or work
RepresentationLensRefs?: role-algebra, graph, matrix, embedding, or neural representation only if the project explicitly uses such a description of the role relation structure

Do not write "engineer and roboticist and musician" unless EngineerRole, RoboticistRole, and MusicianRole are three independent role values with separate assignments.

Do not write "engineer-roboticist-musician" unless the bounded context declares one durable combined role value or one named role-bundle expression with its own role description and naming settlement. Without that declaration, the label hides that musician is a separate role assignment.

Robot-engineering, music performance, and teaching robots music are method or work names when those values are current. They are not produced by a role-algebra lens merely because their labels share words with role names. The role relation structure and a MethodRelationStructure@BoundedContext can be coupled in the same working sentence, but the FPF record keeps their typed values distinct.

Cross-Context Boundary

Role relation structure is context-local. Matching role labels across contexts are not enough.

ArticleAssessorRole:JournalContext and SafetyAssessorRole:SafetyCaseContext may share a source label, but a role-admission substitution or incompatibility relation in one context does not transfer to the other context by label. Cross-context reuse, bridge, translation, public naming, or semantic alignment uses F-family context and naming patterns.

Bias-Annotation

A.2.7 blocks two biases. The first is role nominalism: a convenient role label starts carrying ability, permission, method, work, evidence, or status claims that belong elsewhere. The second is representation bias: a role algebra, graph, matrix, embedding, or neural representation is mistaken for the role relation structure in life. Recover the relation in the bounded context first; then use a representation lens only for the properties it preserves.

Conformance Checklist

CheckQuestion
CC-A2.7-01Is the bounded context named?
CC-A2.7-02Are the related values U.Role values governed by A.2?
CC-A2.7-03Is each <= claim framed as same-context role-admission substitution rather than kind hierarchy or generic specialization?
CC-A2.7-04Is incompatibility checked over role assignments, holders, and overlapping windows rather than over labels alone?
CC-A2.7-05Is a bundle expression kept separate from holder, capability, method, and performed work?
CC-A2.7-06Has any role decomposition claim been recovered as role-admission substitution, factor or qualification, bundle, separate role value, role-state refinement, capability-fit condition, responsibility, permission, commitment, or obligation relation, method/work decomposition, or ordinary prose rather than role partOf?
CC-A2.7-07Do capability-fit conditions use A.2.2?
CC-A2.7-08Do assignment and state checks use A.2.1 and A.2.5?
CC-A2.7-09Do method claims use A.3 patterns and work claims use A.15 patterns?
CC-A2.7-10Do cross-context equivalence and translation claims use F-family patterns?
CC-A2.7-11Does any evidence, source, approval, status, assurance, publication, description, or strict-distinction claim use C.2.1, A.10, B.3, E.17.*, E.24.PUB, or A.7 rather than expressed as role relation structure or a lens over it?

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Role relation structure as type hierarchyEngineerRole <= HumanSystem.Keep role relation over U.Role values; use kind taxonomy only for kinds.
Role relation structure as org chart"Manager is above Engineer, therefore satisfies Engineer."Declare same-context role-admission substitution only when that admission relation is intended.
Role-admission substitution as capability model"Senior role implies precision capability."Keep the substitution relation separate; add U.Capability claim for measured ability if current.
Bundle as new holderIncidentLeadOnCall is treated as a person or team.Treat it as role-bundle expression unless a role value or holder is separately declared.
Role decomposition as role partAssistantReviewerRole partOf ReviewerRole is asserted.Recover the relation: role-admission substitution, factor or qualification, bundle expression, separate role value, role-state refinement, capability-fit condition, responsibility, permission, commitment, or obligation relation, method/work decomposition, or ordinary prose. Do not use role partOf for U.Role.
Incompatibility as slogan"Approver is independent" without relation.State the incompatible role values, holder relation, bounded context, and overlapping window condition.
Cross-context label equivalenceSame role label in two contexts is treated as the same role relation structure.Use F-family bridge or naming patterns; do not import role relations by label.
Episteme as role relation structureA standard, report, or dashboard is put into role relation structure.Use C.2.1, A.10, B.3, E.17.*, E.24.PUB, or A.7 for the source, evidence, status, assurance, publication, description, or strict-distinction claim being made.

Consequences

Benefits.

  • Method role-admission checks can use declared role substitutions without encoding taxonomy in every method-description source.
  • Separation-of-duties and independence claims become inspectable relations over assignments and windows.
  • Frequent role conjunctions can be named without creating fake holders or capabilities.
  • Role relation structure remains small enough to use in ordinary project work.

Costs.

  • Contexts need to declare their role relations instead of relying on job-title intuition.
  • Some role-like source labels need F-family cross-context repair before role relation structure can be reused.
  • Capability-fit conditions and method role-admission conditions need separate claims when role labels used to hide them.

Rationale

A.2.7 keeps role relation structure as a selected relation structure rather than a new U-kind because the durable object is still U.Role and its contextual use through assignments, states, methods, and work claims. This preserves ordinary role naming while preventing algebraic notation or organizational labels from becoming a second ontology.

SoTA-Echoing

Practice lineWhat FPF takesPractical implication
Role-based access-control and separation-of-duties practice supplies stable relations among roles, users, sessions, and constraints.A.2.7 keeps the role-relation part but does not turn access-control policy into general role ontology.Role substitution and incompatibility are declared relations, not labels or permissions.
Attribute-based and zero-trust authorization practice separates role-like attributes, current context, policy decision, and resource action.Role relation structure is one input to a check; capability, state, policy, and work remain separate."Has role" does not prove ability, currentness, permission, or performed work.
Organizational design and safety practice uses separation of duties and independence constraints beyond IT.Incompatibility is stated over role assignments and windows in any bounded context.Safety, audit, laboratory, governance, and operations examples do not become software-only.
Current FPF slot-relation and ontic discipline keeps relation positions from becoming kinds.Role relation structure relates role values; it does not create a new role-slot ontic or reduce role to SlotKind.A.2.7 can cite A.6.5 and E.24 without duplicating them.

Source-currentness note: RBAC and separation-of-duties are stable lineage, not the full current frontier. Current practice adds attribute and zero-trust authorization, context and currentness checking, policy-as-code practice, and FPF's newer slot-relation discipline. A.2.7 therefore keeps only the role-relation part and leaves currentness, policy decision, capability, method, work, and evidence to their direct patterns.

Relations

PatternRelation
A.1.1Supplies U.BoundedContext, the locality boundary for role relation structure.
A.2Governs U.Role values ranged over by role relation structure.
A.2.1Governs U.RoleAssignment, the relation checked when role-admission substitutions, incompatibilities, or bundles are used for real holders.
A.2.2Governs capability; role relation structure does not grant ability.
A.2.5Governs role state and enactable-state admission; role relation structure does not prove current state.
A.3.1, A.3.2, A.15, A.15.1, A.15.2Govern method, method description, plan, and performed work uses that may cite a role relation.
A.6.5Supplies relation-slot discipline for role-relation declarations and use relations.
A.6.RSIRRecovers role, slot, relation, signature, and interface source wording before role-relation repair when the source sentence is mixed.
F.5, F.9, F.17, F.18Govern naming, cross-context bridge, public naming, and durable local names for role values, role expressions, role-method expressions, or bundle expressions when current.
C.27Governs temporal windows and currentness when overlapping assignments or validity windows are material.
C.2.1, A.10, B.3, E.17.*, E.24.PUB, A.7Govern episteme slot relation, evidence, assurance, publication, description, and strict-distinction uses that may justify a role-relation declaration or a check using it.
C.29Governs mathematical-lens fit if a role-algebra, graph, matrix, embedding, distributed, or neural representation is itself under evaluation.

Excluded Objects

Do not use RoleRelationStructure@BoundedContext or a role-algebra lens as the current object for:

  • holder taxonomy, system kind hierarchy, or org chart hierarchy;
  • capability model, skill model, performance threshold, or operating envelope;
  • method family, algorithm family, or work procedure;
  • work plan, work occurrence, approval act, or audit record;
  • evidence graph, source record, standard, report, dashboard, publication, or model card;
  • cross-context translation, public naming, or bridge claim.

Those values may cite or justify a role relation. They do not become role relation structure by adjacency.

A.2.7:End

U.Commitment (Deontic Commitment Object)

Status: Stable Type: Definitional ontic pattern

Terminology: “binding” is overloaded (normative)

The word family “bind/binding” is used throughout FPF for technical binding (name/slot binding, parameter binding, etc.). This pattern introduces a narrower lexical constraint: do not use “binding” as the Tech-level term for deontic governance relations. Use commitment and model it as U.Commitment. If source wording uses “binding contract/promise” rhetoric, rewrite it into explicit U.Commitment fields (subject, modality, scope/window, referents, and—when auditable—adjudication).

This pattern therefore treats commitment as the canonical Tech-level term and uses U.Commitment as the kernel object.

If source wording uses “binding” rhetoric (e.g., “binding contract”, “legally binding promise”), treat it as Plain-level phrasing that must be recovered into explicit U.Commitment fields (subject, modality, scope/window, referents, and, when auditable, adjudication). Deontic keywords are cues for the modality field after the deontic relation is recovered; they are not the governed object of this pattern.

Use This When

Use this pattern when a project needs to state who is accountable for what, under which modality, scope, and time window, without pretending that the words in a specification, contract, ticket, API description, or standard are themselves the accountable actor.

What goes wrong if missed. A specification, interface, dashboard, contract text, or ticket is treated as the accountable party; evidence, gate admission, performed work, and commitment content collapse into one deontic-looking sentence.

What this buys. The accountable subject, modality, referent, scope, time window, and adjudication hooks become inspectable without turning publications, evidence, gates, or work occurrences into commitment holders.

Typical moments:

  • a promise content, policy clause, requirement, SLA, protocol rule, or standard clause must become an accountable commitment;
  • source wording says "MUST", "SHALL", "guarantees", "is responsible for", or "legally binding", and the project must recover the deontic relation rather than normalize keywords by themselves;
  • evidence or gates are being attached to a duty and the model must keep commitment content, adjudication evidence, and performed work distinct.

Primary EntityOfConcern. The EntityOfConcern is U.Commitment: a deontic relation linking an accountable subject to referents under explicit modality, scope, validity window, and optional adjudication hooks.

First useful move. Name the accountable subject and the referents first. Then state modality, scope, validity window, and adjudication only if the commitment is meant to be checked or enforced.

Not this pattern when. If the current EntityOfConcern is the promised content, use A.2.3; if it is the communicative act that instituted or revoked the commitment, use A.2.9; if it is a gate or admissibility claim, use the gate or boundary pattern; if it is performed work, use A.15.1.

Type: Definitional (D) Normativity: Normative (unless explicitly marked informative) Placement: Part A → A.2 Roles & Agency Kernel Refines: A.2 (Role Taxonomy) Builds on: E.8 (authoring template), A.2.1 (RoleAssignment), A.2.6 (Scope & Γ_time), A.7 (EntityOfConcern / Description episteme / carrier), A.2.3 (U.PromiseContent as promise), A.15.1 (U.Work) Purpose (one line): Provide a minimal, reusable kernel object for deontic commitments (who is accountable, under what modality, in what scope/window, with respect to which referents, with which adjudication hooks), explicitly separating the commitment object from its utterance descriptions (A.7), so deontics stop “living” in naming patterns and become stable across A.6 and governance patterns.

Terminology: “binding” is overloaded (normative)

The word family “bind/binding” is used throughout FPF for technical binding (name/slot binding, parameter binding, etc.). This pattern introduces a narrower lexical constraint: do not use “binding” as the Tech-level term for deontic governance relations. Use commitment and model it as U.Commitment. If source wording uses “binding contract/promise” rhetoric, rewrite it into explicit U.Commitment fields (subject, modality, scope/window, referents, and—when auditable—adjudication).

This pattern therefore treats commitment as the canonical Tech-level term and uses U.Commitment as the kernel object.

If source wording uses “binding” rhetoric (e.g., “binding contract”, “legally binding promise”), treat it as Plain-level phrasing that must be recovered into explicit U.Commitment fields (subject, modality, scope/window, referents, and, when auditable, adjudication). Deontic keywords are cues for the modality field after the deontic relation is recovered; they are not the governed object of this pattern.

Problem frame

FPF needs to express boundary governance and socio-technical obligations in a way that is:

  • grounded in an accountable role, role assignment, or party (someone is accountable),
  • scope-and-window explicit (where/when the commitment holds),
  • reference-based (no paraphrase drift; refer to claim IDs),
  • adjudicable (if intended to be checkable, it has an evidence story).

In practice, texts use “MUST/SHALL/should”, “commits to”, “guarantees”, “SLA”, “contract”, etc. Without a stable kernel object for the deontic commitment relation, authors either:

  • assign agency to descriptions (“the API guarantees…”),
  • smuggle admissibility gates into deontics (or vice versa),
  • treat evidence as semantic truth,
  • or create multiple inconsistent “contracts” across faces.

A.6.B provides L/A/D/E claim-classification discipline, and A.6.C provides contract-language unpacking, but both benefit from a kernel-level object that pins down what a U.Commitment is structurally (so “contract/binding” rhetoric does not leak back in as ontology).

Problem

How can FPF represent a deontic commitment relation so that:

  1. The accountable subject is explicit (role or role-enactor; not “the spec/interface/service”),
  2. Modality is explicit and lintable (obligation, recommendation-as-duty, prohibition, and strength),
  3. Scope and validity window are explicit (bounded context + time + conditions),
  4. The content is referenceable via stable referent claim IDs (promise contents, gates, evidence targets, etc.),
  5. Adjudication hooks exist when the commitment is meant to be testable/auditable (links to evidence claims and carrier expectations),
  6. Conflicts can be represented (without requiring this pattern to solve them).

Forces

ForceTension
MinimalityThe object must be small enough to use routinely, not a full legal-contract model.
GeneralityIt must work for software specs, protocols, hardware boundaries, and socio-technical governance.
Layering disciplineIt must not collapse law, gate, duty, and evidence; it should make the neighboring governing pattern explicit without replacing it.
Local meaningDefaults should be bounded-context local; cross-context commitments must be explicit.
AuditabilitySome commitments are aspirational; others are auditable. The representation must support both, without implying auditability by default.
Multi-issuer governance realityPeople, organizations, and states can issue incompatible commitments; the model must represent issuer, authority relation, and priority without “solving politics” inside Part A.

Solution

U.Commitment is the kernel object representing a deontic commitment relation: it links an accountable subject (role or role-enactor) to one or more referents via an explicit modality within an explicit scope/window, optionally with adjudication hooks.

This pattern defines:

  • a normative minimal structure for U.Commitment,
  • how U.Commitment relates to U.PromiseContent, U.Work, and evidence,
  • how it is used as the canonical payload for D-quadrant obligation, recommendation-as-duty, and prohibition claims (A.6.B), while permission claims route to the exact A.2.8.PER result,
  • and what must be stated for a commitment to be considered auditable.

Normative definition

A U.Commitment is a governance object representing a deontic relation that constrains an accountable subject (role or role-enactor) with respect to one or more referents under an explicit modality and explicit scope/window, optionally with explicit adjudication hooks.

Per A.7, a U.Commitment is not the text that states it: it is an object that is typically instituted by (and recorded via) one or more speech acts and utterance descriptions and may be carried by utterance carriers or publication carriers.

Minimal structure (normative)

A conforming U.Commitment SHALL be representable by the following minimal record (field names are illustrative; the presence/meaning constraints are normative). Required fields are: id, subject, modality, scope, validityWindow, referents. adjudication and source are optional (but may become required by other patterns when auditability or authority must be made explicit).

U.Commitment ::=
  {
    id: CommitmentId,                  // stable identifier; can align with D-* claim ID
    subject: CommitmentSubject,         // accountable role or role-enactor (not an episteme)
    owedTo: optional<set<CounterpartyRef>>, // who the commitment is owed to / intended beneficiary (optional; governance-facing, not required)
    modality: DeonticModalityToken,     // deontic modality (normalized; lintable)
    scope: U.ClaimScope,               // bounded context for applicability + non-temporal delimiters (same primitive as claim scopes; commitments are not epistemes)
    validityWindow: QualificationWindowPolicy, // Γ_time slice + conditions under which it applies / is in force
    referents: set<ReferentRef>,        // what is being bound (by reference, not paraphrase)
    adjudication: optional<AdjudicationHooks>, // evidence hooks if auditable
    source: optional<CommitmentSource>, // what instituted/authorized it (issuer + instituting act + utterance description), when provenance matters
    notes: optional<InformativeText>    // explicitly informative; not part of the commitment relation
  }

CommitmentSubject ::=
  RoleRef | RoleAssignmentRef | PartyRef
  // At minimum: a RoleRef that denotes an accountable role kind in a bounded context.
  // If a concrete party/holder is known, prefer RoleAssignmentRef or PartyRef.
  // If multiple subjects are independently accountable, authors SHOULD model separate commitments (one per subject),
  // unless a joint obligation is explicitly modeled as a single PartyRef.

CounterpartyRef ::=
  PartyRef | RoleRef | RoleAssignmentRef
  // Optional “to whom”/beneficiary/counterparty handle. Keep minimal: do not treat it as a full legal-party model.

DeonticModalityToken ::=
  MUST | MUST_NOT | SHOULD | SHOULD_NOT
  // FPF deontic-modality values for the `modality` slot.
  // RFC words and their synonyms are source expressions; map them only after the commitment relation is recovered.
  //
  // **Normalization mapping (normative; illustrative table):**
  // - SHALL, REQUIRED        -> MUST
  // - SHALL NOT, PROHIBITED  -> MUST_NOT
  // - RECOMMENDED            -> SHOULD
  // - NOT RECOMMENDED        -> SHOULD_NOT
  // MAY and OPTIONAL do not normalize into U.Commitment. Recover their actual claim: strong or weak permission under A.2.8.PER, an A-* entry predicate, or informative prose.

ReferentRef ::=
  ClaimIdRef | PromiseContentRef | MethodDescriptionRef | WorkRef
  // Prefer ClaimIdRef when an L/A/D/E claim ID exists (L-*, A-*, D-*, E-*).
  // Use PromiseContentRef when the commitment is about satisfying a promise-content clause (`U.PromiseContent`).
  // Use MethodDescriptionRef (preferred) when the commitment is about performing/avoiding a work-kind (work-to-be-done).
  // Use WorkRef only when the commitment is about an already executed/ongoing Work occurrence (rare).

PromiseContentRef ::=
  ObjectIdRef
  // MUST resolve to a `U.PromiseContent` object (A.2.3). (Some chapters may call this a “promise content”.)

AdjudicationHooks ::=
  {
    evidenceRefs: set<ClaimIdRef>,      // typically E-* claim IDs
    carrierRefs: optional<set<CarrierClassRef>>,  // if evidence carriers are part of the hook
    evaluationNotes: optional<InformativeText>    // how adjudication is done; informative unless normed elsewhere
  }

DescriptionRef ::=
  ClaimIdRef | EpistemeRef
  // A pointer to an utterance description that states/records the commitment (e.g., spec clause, policy text).

SpeechActRef ::=
  ObjectIdRef
  // MUST resolve to a `U.SpeechAct` Work occurrence (A.2.9).

CommitmentSource ::=
  {
    issuer: optional<PartyRef>,         // who issued/authorized the commitment (can be distinct from subject)
    speechActRef: optional<SpeechActRef>, // instituting communicative act, when available
    descriptionRef: optional<DescriptionRef>, // where it is stated/recorded (utterance description)
    authorityClass: optional<AuthorityTag>, // e.g., policy, contract, statute, standard (informative tag)
    precedence: optional<PriorityTag>   // used for conflict handling elsewhere; not a truth claim
  }

Normative constraints:

  • (C1) Subject must be accountable. subject MUST resolve to an accountable role or party; it MUST NOT be “the interface, spec, service, or system” as an episteme.
  • (C2) Modality must be explicit and normalized. modality MUST be present for normative commitments and MUST be normalized to DeonticModalityToken.
  • (C3) Scope + validity must be explicit. scope and validityWindow MUST be present. Defaults are allowed only when an explicit context policy is cited as the source of those defaults (do not rely on “implied defaults”). validityWindow expresses in-force conditions; per-action admissibility gates belong in referenced A-* predicates.
  • (C4) Referents must be non-empty. referents MUST contain at least one referent (what is being obligated, recommended as a duty, or prohibited).
  • (C5) Referents must be by reference when possible. If the bound content already exists as claim IDs, referents SHOULD cite those IDs rather than restating them.
  • (C6) Auditable commitments must have adjudication hooks. If a commitment is intended to be audited/adjudicated by observation, adjudication.evidenceRefs SHALL include the evidence claim IDs (typically E-*) that carry the adjudication substrate.
  • (C7) Evidence belongs in adjudication by default. If an E-* claim is referenced only to define how to measure/verify a commitment, it SHALL be listed in adjudication.evidenceRefs (not in referents). An E-* claim MAY appear in referents only when the commitment’s content is itself an evidence-producing/retaining duty (e.g., “MUST retain traces”).
  • (C8) Default auditability stance is explicit. If adjudication is absent, the commitment SHALL be treated as non-auditable by default (aspirational / governance-only), unless another pattern or Context policy explicitly supplies adjudication hooks by reference.

Interaction rules (normative)

  1. U.PromiseContent is promise content; U.Commitment is the governance relation. A service promise clause (what is promised) is not, by itself, an accountable commitment. A U.Commitment makes an accountable subject responsible for providing/satisfying the service promise (or for satisfying other governance clauses).

  2. U.Commitment is not U.Work. Work is execution; commitment is governance. A commitment may reference evidence targets, but it does not “contain” evidence.

  3. Commitments may reference admissibility predicates; they must not become predicates. If compliance requires satisfying a gate predicate, the commitment should reference the gate (A-*) as a referent, rather than rewriting the predicate as prose inside the commitment.

  4. A U.Commitment is a governance object, not a law. Commitments are not truth-conditional invariants. If something is intended to be an invariant, it belongs as law/definition (L), and a commitment can reference it.

  5. Commitment changes are explicit (no silent mutation). When a commitment is updated, narrowed, broadened, superseded, or revoked, the change SHOULD be represented as a new U.Commitment (new ID) and an instituting U.SpeechAct (A.2.9) that references the affected commitment IDs (e.g., via U.Commitment.source.speechActRef and a status/supersession claim), rather than editing a published commitment in place without an auditable change record.

When using the A.6 stack, represent each D-quadrant atomic claim that states an accountable obligation, recommendation-as-duty, or prohibition as a U.Commitment payload with the fields below. A D-* strong/weak permission, exercise, non-violation, or conflict claim instead cites the exact A.2.8.PER result and does not acquire a U.Commitment payload:

  • id = D-*,
  • subject = accountable role or party,
  • modality = DeonticModalityToken (normalized from RFC-keyword family usage),
  • referents = {PromiseContentRef, MethodDescriptionRef, L-*, A-* … as needed} (content/targets),
  • adjudication.evidenceRefs = {E-* …} when the commitment is meant to be checkable.

Archetypal Grounding (Tell–Show–Show)

Tell (universal rule)

A deontic statement becomes stable and reviewable when it is represented as a U.Commitment with an accountable subject, an explicit modality, explicit scope/window, referent claim IDs, and—if auditable—explicit evidence hooks.

Show #1 (system archetype: incident response SLO discipline, post‑2015 SRE practice)

A production org states: “Severity‑1 incidents must be responded to within 4 hours.”

A commitment with explicit references:

  • subject: RoleAssignmentRef(OpsTeam as ProviderRole) (or at least RoleRef(ProviderRole)),
  • modality: MUST,
  • scope: bounded context IncidentManagement,
  • validityWindow: calendarYear2026 (or “while contract edition X is active”),
  • referents: {PromiseContentRef(SVC-SLO-RESP-4H), A-SEV1-CLASS-1} where A-SEV1-CLASS-1 is the admissibility predicate for “counts as Sev‑1”.
  • adjudication.evidenceRefs: {E-SLO-RESP-1} where E-SLO-RESP-1 defines the measurement substrate and evidence carriers (tickets + timestamps + clock source).

This makes the statement auditable by construction and keeps “classification gate” separate from “duty”.

Show #2 (episteme archetype: protocol specification with behavioural typing motif)

A protocol spec states: “Participants MUST follow the state machine; violations are rejected; traces are retained for audit.”

Model as:

  • A set of L-* claims defining the state machine and safety/progress properties within the model,

  • A-* claims defining what runtime checks count as “admissible trace”,

  • D-* commitments instantiated as U.Commitment with:

    • subject = RoleRef(ParticipantImplementer)
    • modality = MUST
    • referents = {L-STATE-MACHINE-1, A-TRACE-VALID-1, MethodDescriptionRef(TraceRetentionProcedure_v1)}
    • adjudication.evidenceRefs = {E-TRACE-LOG-1}

This mirrors common post‑2015 “protocols as types” practice: semantics and progress live in the model; compliance is agent governance; evidence is trace-based.

Bias-Annotation

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Kernel universal (any place FPF needs deontic commitment relations).

  • Gov bias: prioritizes accountable subjects and adjudication hooks; may increase authoring overhead.
  • Arch bias: pushes reference-by-ID and explicit scope/window to preserve evolvability and reduce drift.
  • Onto/Epist bias: enforces “descriptions don’t promise”; commitments name accountable subjects.
  • Prag bias: aligns with common spec-language practice (RFC keywords) but makes the structure explicit.
  • Did bias: favors a small record that can be taught and linted.

Conformance Checklist (normative)

  1. CC‑A.2.8‑1 (Accountable subject). A normative U.Commitment MUST name an accountable subject (role assignment, role enactor, or party) and MUST NOT use a specification episteme, interface-description episteme, or document-carried episteme as subject.

  2. CC‑A.2.8‑2 (Explicit modality). A normative U.Commitment MUST specify modality as DeonticModalityToken (with any RFC-keyword synonyms normalized to it).

  3. CC‑A.2.8‑3 (Scope & validity explicit). A normative U.Commitment MUST specify scope (U.ClaimScope) and validityWindow (qualification-window policy), or explicitly cite the context policy that supplies defaults (do not rely on “implied defaults”).

  4. CC‑A.2.8‑4 (Referents present and by ID). referents MUST be non‑empty. If the bound content exists as claim IDs, the commitment SHOULD reference those IDs in referents rather than restating their content.

  5. CC‑A.2.8‑5 (Auditable commitments have hooks). If the commitment is intended to be auditable, it SHALL include adjudication.evidenceRefs referencing the evidence claims (typically E-*) that make adjudication possible.

  6. CC‑A.2.8‑6 (Evidence separation). If an E-* claim is referenced only for measurement/verification, it SHALL appear in adjudication.evidenceRefs (not in referents).

Common Anti-Patterns and How to Avoid Them

Anti-patternWhy it failsRepair
Episteme-as-subject (“the API SHALL…”)assigns agency to descriptionsuse an accountable role or party as subject; keep the spec as source.descriptionRef
Missing scope/windowcommitments become unreviewable (“always/never” ambiguity)declare scope + validityWindow; if global, say so explicitly via a policy/default
Paraphrase driftdrift across faces and docsreference via referents using claim IDs; avoid restating the same constraint
Auditable rhetoric (“guaranteed”) without hooksnot adjudicableadd adjudication.evidenceRefs pointing to E-* claims and carrier expectations
Gate-as-dutyconfuses admissibility with obligationput predicate in A-*; make commitment reference it (D→A)

Consequences

Benefits

  • Makes deontic statements first-class and lintable (subject/modality/scope/referents/hooks).
  • Enables clean integration with boundary claim classification (A.6.B) and contract unpacking (A.6.C) without embedding ontology in naming patterns.
  • Improves auditability by making evidence expectations explicit only when intended.

Trade-offs / mitigations

  • Adds structure to authoring; mitigated by allowing conceptual evidence hooks and default scope policies.
  • Does not resolve conflicts between commitments; mitigated by capturing source/precedence tags and delegating resolution to governance patterns (Part D) and context policy.

Rationale

The triad “promise, utterance, and commitment” is useful for language discipline, but deontic ontology should not be anchored in a naming-focused pattern. A kernel object:

  • stabilizes what a “commitment” structurally is,
  • ensures “MUST/SHALL” talk is representable without category mistakes,
  • and provides the bridge between governance claims and adjudication (via explicit hooks), which is essential for boundary engineering and ethics/governance work.

SoTA-Echoing (informative; post‑2015 alignment)

Informative. Alignment notes; not normative requirements.

  • BCP 14 (RFC 2119 + RFC 8174) / modern spec-language discipline (2017+). Treating modality tokens as a controlled family is standard; U.Commitment.modality makes this family explicit and lintable.
  • Policy-as-code ecosystems (2016+). Modern governance stacks often encode gates as code (e.g., Kubernetes admission controls, OPA/Rego-style policy evaluation) and obligations as process controls; the U.Commitment structure helps keep “gate predicates” separate from “actor duties”, while still linking them by reference.
  • ODRL-style duty, permission, and prohibition modeling (W3C ODRL 2.2, 2018). The minimal subject/assignee, action/target, constraint/window, and policy shape is widely used, and its source separation is useful. FPF adapts that shape without forcing unlike deontic effects into one modality record: U.Commitment keeps accountable duty/recommendation/prohibition, while A.2.8.PER owns strong/weak permission and exercise. Both retain explicit subject or beneficiary, action/referent, constraint/window, policy provenance, FPF boundary-claim classification, and evidence discipline.
  • Trace-based compliance and audit (2018+ supply-chain / reproducibility practice). “Compliance is evidenced by evidence carriers and records” is mainstream; adjudication.evidenceRefs captures this without turning evidence into semantics.
  • Supply-chain attestations (2021+). Attestation-oriented schemes (e.g., SLSA-style provenance, transparency logs) operationalize “claims + evidence carriers”; adjudication.evidenceRefs is the bridge point without collapsing evidence into truth.

Relations

Uses / builds on

  • A.2.1 for identifying accountable roles vs role-enactors (role assignments).
  • A.2.6 for expressing scope and time/window (U.ClaimScope, qualification-window policy).
  • A.7 for keeping source “binding” wording distinct from utterance descriptions and carriers.

Used by

  • A.6.B (Quadrant D) as the canonical payload shape only for obligation, recommendation-as-duty, and prohibition statements; strong or weak permission, exercise, non-violation, and conflict claims cite the exact A.2.8.PER result instead.
  • A.6.C (Contract Unpacking) as the formal governing pattern for the “Commitment” component of the bundle.
  • Part D governance/ethics patterns, when current, for expressing layered, conflicting, multi-authority commitments.

Coordinates with

  • A.2.3 (U.PromiseContent): services are promise clauses; commitments assign accountable subjects to those clauses.
  • A.2.9 (U.SpeechAct): U.Commitment.source.speechActRef points to the instituting communicative work occurrence when provenance matters.
  • A.15.1 (U.Work) and evidence patterns: adjudication hooks refer to evidence in work, not to text.
  • A.2.8.PER: strong grants, permission exercise, weak non-prohibition/non-violation findings, and permission conflicts remain separate from U.Commitment; a visible MAY or OPTIONAL token does not choose between those objects and an A-* entry predicate.

A.2.8:End

Granted Permission, Exercise, and Non-Prohibition

Type: Definitional ontic support pattern Status: Stable Normativity: Normative unless marked informative

Use this when

Use this pattern when a policy, approval, permit, role rule, boundary claim, readiness check, or later work use needs to distinguish five questions: whether a sufficiently complete current frame supports a NonProhibitionFinding@Context; whether a valid grant currently obtains as GrantedPermissionRelation@Context; whether dated matching work exercises it through PermissionExerciseRelation@Context; whether checked actual work supports a NonViolationFinding@Context; and whether an incompatible current grant and norm requires PermissionNormConflictFinding@Context.

The first useful move is to name the beneficiary reference, permitted-action specification or checked work, policy and bounded context, scope, window, and the exact result needed now. Return exactly the warranted NonProhibitionFinding@Context, GrantedPermissionRelation@Context, PermissionExerciseRelation@Context, NonViolationFinding@Context, or PermissionNormConflictFinding@Context; do not infer one from another.

Not this pattern when. Use A.2.8 for an accountable obligation, recommendation-as-duty, or prohibition; A.2.9 for the communicative work that institutes or revokes a grant; A.6.B for L/A/D/E classification; A.15.5 for work-entry readiness; A.21 for gate decisions; and A.15.1 for the identity and result of performed work. This support pattern is not a method, gate, permit carrier, work plan, or generic authorization object.

The primary reader is a policy, boundary, work-planning, assurance, or operations practitioner who must decide exactly what a permission-looking claim can support. The performer of a grant speech act or later work remains an admitted system under a current role assignment; the reader position does not perform those acts.

Problem frame

Permission-looking language often compresses unlike values. “No rule forbids it” may be an incomplete search result. “The permit allows it” may refer to a document, an issuing act, or an enduring relation. “We used the permit” may mean only that a badge was visible, while no matching work occurred. A green gate can also look as if it defeated a current prohibition.

The governed concern is the smallest exact permission result needed for one beneficiary, action specification, context, scope, and window. The act, permit episteme, publication carrier, evidence relation, admissibility predicate, readiness relation, gate decision, actual work, and work result keep their direct owners.

Problem

How can FPF represent positive permission without turning it into an obligation modality, absence-of-evidence claim, permit document, gate result, readiness label, capability, or performed action?

A conforming account must make weak and strong permission different, keep grant occurrence identity inspectable, connect only eligible matching work to a current grant, keep both exercise and non-exercise from establishing a frame-relative non-violation finding, and expose same-scope normative conflicts instead of resolving them by display or wording.

Forces

ForceTension
Latitude vs dutyPermission makes an action allowable; it does not require the action.
Weak evidence vs world relationA complete-frame search can support non-prohibition, while an incomplete search is unresolved.
Enduring grant vs instituting actA speech act can ground a permission without being the continuing relation.
Beneficiary variety vs kind disciplineRoles, assignments, and parties all occur in practice, but a generic beneficiary U-kind would erase their different eligibility tests.
Current grant vs actual exerciseA grant may obtain without work; work may occur without matching or exercising the grant.
Local policy vs visible artifactsA permit or gate display is easy to see, but scope, window, currentness, revocation, and precedence decide use.

Solution

Keep the permission objects separate

Use exactly the object warranted by the current claim:

  • NonProhibitionFinding@Context is a frame-relative episteme returned before action when a sufficiently complete current normative frame contains no applicable prohibition.
  • GrantedPermissionRelation@Context is an enduring strong permission instituted under an exact policy.
  • PermissionExerciseRelation@Context connects actual dated work to one obtaining grant occurrence when action and beneficiary eligibility match.
  • NonViolationFinding@Context is a frame-relative episteme about actual work that instantiates no applicable prohibition in the checked frame.
  • PermissionNormConflictFinding@Context is an episteme exposing an incompatible current grant and prohibition or commitment over matching content, scope, and window.

Absence of any one object does not imply another. In particular, no grant is inferred from a weak finding, no exercise is inferred from a grant, and work outside a grant is not called a violation of that grant.

Use the closed beneficiary reference family

PermissionBeneficiaryRef ::= RoleRef | RoleAssignmentRef | PartyRef

The participant meaning is stable: the exact entity designated by the grant as beneficiary. The reference branch changes only the exercise-eligibility test:

  • RoleAssignmentRef covers that exact current assignment.
  • RoleRef covers current assignments that instantiate the role in the declared context under the grant policy; the role value itself does not perform work.
  • PartyRef covers work only when its exact performer or on-behalf-of relation satisfies the policy. Shared naming or organizational membership is insufficient.

This is a closed ref union over admitted U.Entity values, not U.PermissionBeneficiary, U.Authorization, or another new U-kind. A materially different beneficiary meaning requires a separate direct-owner decision.

Record weak permission and non-violation as findings

NonProhibitionFinding@Context <: U.Episteme
  beneficiaryRef: PermissionBeneficiaryRef
  permittedActionSpecificationRef: U.EpistemeRef
  normativeFrameRef: U.EpistemeRef
  frameCurrentnessResultRef: U.EpistemeRef
  frameCompletenessForUseResultRef: U.EpistemeRef
  boundedContextRef: U.BoundedContextRef
  scope: U.ClaimScope
  evaluationWindow: QualificationWindowPolicy
  checkedProhibitionRefs: set<ClaimIdRef>
  result: nonProhibited | unresolved
  evaluationWorkRef: WorkRef

NonViolationFinding@Context <: U.Episteme
  workRef: WorkRef
  performerAssignmentRefs: set<RoleAssignmentRef>
  onBehalfOfRelationOccurrenceRef?: U.EntityRef
  normativeFrameRef: U.EpistemeRef
  frameCurrentnessResultRef: U.EpistemeRef
  frameCompletenessForUseResultRef: U.EpistemeRef
  boundedContextRef: U.BoundedContextRef
  scope: U.ClaimScope
  evaluationWindow: QualificationWindowPolicy
  checkedProhibitionRefs: set<ClaimIdRef>
  result: nonViolating | unresolved
  evaluationWorkRef: WorkRef

nonProhibited and nonViolating are admissible only when the named frame is current and explicitly sufficiently complete for the intended use. Otherwise the finding is unresolved. Neither finding institutes permission, proves absence outside its frame, or becomes a world-side relation.

For NonViolationFinding@Context, recover the actual performer systems from the named Work and cite their exact covering U.RoleAssignment occurrences. If the checked norm instead turns on work done for a PartyRef, cite the already obtaining subject-owned on-behalf-of relation occurrence. These are direct case facts used by the evaluation, not a new beneficiaryPerformanceBinding episteme. Omit the on-behalf-of reference when no such branch is used.

Declare the strong granted-permission relation

GrantedPermissionRelation@Context <: U.Relation

RelationSignature:
  PermissionBeneficiarySlot:
    SlotKind: PermissionBeneficiarySlot
    ValueKind: U.Entity
    refMode: PermissionBeneficiaryRef
  PermittedActionSpecificationSlot:
    SlotKind: PermittedActionSpecificationSlot
    ValueKind: U.Episteme
    refMode: U.EpistemeRef

semanticDirection: PermissionBeneficiarySlot -> PermittedActionSpecificationSlot

RelationOccurrenceGroundAndQualifiers:
  institutingSpeechActRef: SpeechActRef
  grantorAssignmentRef: RoleAssignmentRef
  grantValidityPolicyRef: U.EpistemeRef
  boundedContextRef: U.BoundedContextRef
  scope: U.ClaimScope
  validityWindow: QualificationWindowPolicy
  revocationOrSupersessionRef?: SpeechActRef

The beneficiary and permitted-action specification are participants. Grantor assignment, instituting act, policy, context, scope/window, and revocation are constructive ground or qualifiers, not collapsed participants.

The relation begins only when an admitted holder U.System performs a U.SpeechAct under the exact grantorAssignmentRef, the act satisfies the current policy's grant-validity predicate, and it institutes permission for the named participants. The assignment's HolderSystemSlot must resolve to that system: the system performs the act, while the assignment supplies its role and authority ground and never acts. The relation obtains while beneficiary applicability, policy continuation, scope, and window hold and no valid revocation or supersession ends it.

One occurrence is identified by the instituting speech-act occurrence, exact beneficiary ref and ref kind, action-specification edition, policy/context, and effective interval. Beneficiary change, renewal, materially changed action specification, non-carried policy edition, or revocation ends or splits the occurrence. A policy edition preserves it only through an explicit satisfied carry-forward rule.

Declare actual exercise

PermissionExerciseRelation@Context <: U.Relation

RelationSignature:
  ExercisingWorkSlot:
    SlotKind: ExercisingWorkSlot
    ValueKind: U.Work
    refMode: WorkRef
  GrantedPermissionOccurrenceSlot:
    SlotKind: GrantedPermissionOccurrenceSlot
    ValueKind: U.Relation
    refMode: U.EntityRef
      // resolves to one GrantedPermissionRelation@Context occurrence

semanticDirection: ExercisingWorkSlot -> GrantedPermissionOccurrenceSlot

RelationOccurrenceQualifiers:
  beneficiaryAssignmentRef?: RoleAssignmentRef
  onBehalfOfRelationOccurrenceRef?: U.EntityRef
  exerciseScope: U.ClaimScope
  exerciseInterval: QualificationWindowPolicy

Decide exercise from two observable questions about the existing objects: did this dated Work instantiate the grant's permitted-action specification, and did its actual performer satisfy the grant's beneficiary branch? For a RoleAssignmentRef beneficiary, the grant's assignment must cover the Work and have that performer as its holder. For a RoleRef, beneficiaryAssignmentRef names the covering assignment that instantiates the role. For a PartyRef, the performer must be that party or onBehalfOfRelationOccurrenceRef must cite the already obtaining subject-owned relation licensed by the policy. If either question fails, this exercise relation does not obtain.

No actionMatchFinding or beneficiaryEligibilityFinding is required. The match and eligibility are direct obtaining predicates over the Work, grant, action specification, performer, and cited assignment or on-behalf-of relation. If a receiving assurance or audit use needs a separately recorded evaluation or evidence item, cite that item through its direct owner; do not mint a placeholder episteme merely to fill this relation.

The exercise relation obtains only when those two predicates hold, the grant obtains throughout the exercise interval, and the work remains in scope. The work is a satisfier of permitted action content. It does not satisfy or discharge an obligation and does not consume the grant unless the named policy explicitly makes it single-use or quota-bound.

Non-exercise leaves an obtaining grant unused and ordinarily still obtaining; it does not establish NonViolationFinding@Context. Exercise establishes only the exercise relation and likewise does not establish that finding without the separate checked-frame evaluation. Work outside the action specification, beneficiary binding, scope, or window does not exercise the grant; a separate prohibition, commitment, admissibility, or work owner decides any further consequence.

Expose conflict without inventing precedence

PermissionConflictResolutionResultRef ::= U.EpistemeRef
  // resolves only to PermissionConflictResolutionResult@Context

PermissionConflictResolutionResult@Context <: U.Episteme
  conflictFindingRef: U.EpistemeRef
  governingPrecedencePolicyRef: U.EpistemeRef
  resolutionWorkRef: WorkRef
  deciderSystemRef: U.EntityRef
  deciderAssignmentRef: RoleAssignmentRef
  decisionAuthorityRelationOccurrenceRef: U.EntityRef
  selectedGrantOccurrenceRef?: U.EntityRef
  selectedNormClaimRef?: ClaimIdRef
  effectiveScope: U.ClaimScope
  effectiveWindow: QualificationWindowPolicy
  reopenConditionRef: ClaimIdRef

PermissionNormConflictFinding@Context <: U.Episteme
  grantedPermissionOccurrenceRef: U.EntityRef
  conflictingNormClaimRef: ClaimIdRef
  overlapScope: U.ClaimScope
  overlapWindow: QualificationWindowPolicy
  governingPrecedencePolicyRef: U.EpistemeRef
  applicablePrecedenceRuleRef?: ClaimIdRef
  decisionAuthorityRelationOccurrenceRef?: U.EntityRef
  resolutionWorkRef?: WorkRef
  resolutionResultRef?: PermissionConflictResolutionResultRef
  blockedWorkOrRelianceRef: U.EntityRef
  disposition: unresolved | settledByApplicableRule | settledByDecisionResult
  reopenConditionRef: ClaimIdRef

Create the finding only when the grant and current prohibition or commitment concern the same beneficiary/action content, overlapping scope/window, and incompatible practical conclusions. Check that match directly from the two claims and their participants; do not require a beneficiaryAndActionMatchFinding wrapper. Permission and an obligation to perform the same action are not automatically in conflict.

Resolve the conflict through exactly one of two branches:

  1. The current policy already decides. applicablePrecedenceRuleRef cites the policy claim whose stated conditions match this beneficiary, action, scope, and window. Set settledByApplicableRule only when that rule itself selects which claim governs the blocked use.
  2. A decision is required. Name the admitted U.System that decides, the covering assignment under which it performs the dated resolutionWorkRef, and the independently obtaining subject-owned authority relation that authorizes this decision. The direct result relation for that decision must connect the Work to a current PermissionConflictResolutionResult@Context selecting either the grant occurrence or the conflicting norm claim for the stated scope/window. The system decides; neither its assignment, authority relation, policy, nor organizational label performs the work.

PermissionConflictResolutionResult@Context is the exact decision result for this conflict, not a generic owner record. Exactly one of selectedGrantOccurrenceRef or selectedNormClaimRef is filled. Its deciderAssignmentRef must cover resolutionWorkRef and have deciderSystemRef as holder; decisionAuthorityRelationOccurrenceRef must independently authorize that decision. If no policy rule decides and no such current result exists, the disposition remains unresolved, even when a responsible office or role is named. Permit text, readiness, or a passing gate does not silently defeat the prohibition.

Keep the handshakes narrow

Neighboring objectExact handshake
Grant/revoke actA.2.9 U.SpeechAct <: U.Work; an admitted holder U.System performs the act under the exact grantor assignment, and institutes.permissions cites the grant occurrence. The assignment is authority ground, not the actor; the act is not the enduring relation.
Permit episteme and carrierC.2.1, E.17, G.11, and A.10 may assert, publish, carry, or evidence the relation; readable form neither institutes nor equals it.
Duty or prohibitionA.2.8 U.Commitment; permission remains outside its modality family.
Boundary claim or entry predicateA.6.B classifies the claim; an A-* predicate may consume a current permission result but does not create one.
Work plan and readinessA.15.2 owns the U.WorkPlan; A.15.5 may cite a permission/conflict result as one readiness input. Neither creates permission.
Gate decisionA.21 publishes a gate outcome. It neither creates permission nor resolves a permission conflict.
Work and resultA.15.1 owns the dated work. Exercise requires the direct relation above; permission supplies no capability, readiness, safety, success, or result quality.

Archetypal Grounding

Strong grant and exercise. Admitted system MaintenanceCoordinator-A performs a policy-valid grant speech act under MaintenanceCoordinator-A@DayShift, the exact grantor assignment whose holder is that system. The act institutes MaintenanceCalibrationGrant-2026-07-19 : GrantedPermissionRelation@Context for MaintenanceTechnicianRole to run CalibrationProcedure-v3 during one service window. Its beneficiary is a RoleRef. Beneficiary assignment Tech-17@Shift-B instantiates that role for admitted technician system Tech-17; Tech-17 performs dated CalibrationWork-17B under that assignment. The Work instantiates CalibrationProcedure-v3 within the grant's zone, window, and scope, so the action-match predicate holds; Tech-17@Shift-B covers the Work and instantiates the beneficiary role, so the beneficiary predicate holds. CalibrationExercise-17B : PermissionExerciseRelation@Context therefore connects CalibrationWork-17B to MaintenanceCalibrationGrant-2026-07-19, cites beneficiaryAssignmentRef=Tech-17@Shift-B, and states the work interval and scope. No auxiliary match or eligibility finding is created. The assignments ground the grant and work attribution but perform neither act. The grant remains current for the rest of the window because the policy is not single-use. No obligation, readiness, capability, gate passage, safe result, or successful calibration is inferred.

Weak finding. A policy reviewer checks a named, current, sufficiently complete plant-access frame and finds no prohibition applicable to the role, action specification, zone, and window. The result is NonProhibitionFinding@Context(result=nonProhibited), not an instituted grant. If the emergency-policy register cannot be checked, the result is unresolved.

Actual-work non-violation. After CalibrationWork-17B is performed, CalibrationComplianceEvaluation-17B : U.Work checks that Work against PlantCalibrationNormativeFrame-2026-07-19-e3, whose currentness and sufficient completeness for the technician, procedure, zone, and service-window use are named and whose applicable prohibitions are checked. The result is NonViolationFinding@Context(workRef=CalibrationWork-17B, performerAssignmentRefs={Tech-17@Shift-B}, normativeFrameRef=PlantCalibrationNormativeFrame-2026-07-19-e3, evaluationWorkRef=CalibrationComplianceEvaluation-17B, result=nonViolating). It needs no beneficiary-binding episteme: the covering assignment already relates the performer system to the beneficiary role. The separate exercise relation shows which grant the work exercised; exercise alone does not establish non-violation, and non-exercise alone does not establish it either. If the frame is stale or insufficiently complete for this use, the non-violation result is unresolved.

Conflict and non-use. The role-level calibration grant remains published while ContaminatedZoneEntryProhibition-7 forbids the same beneficiary and calibration action in Zone 7 during an overlapping interval. In the direct-rule case, EmergencyCalibrationPrecedencePolicy-e5 contains applicable claim CZ7-Prohibition-Overrides-CalGrant; the rule's conditions match, so the finding is settledByApplicableRule, cites that rule, and returns “do not enter Zone 7” for the blocked work. In a discretionary Zone 8 case, admitted system SafetyDirector-3 performs CalibrationConflictDecisionWork-8 under SafetyDirector-3@EmergencyShift; the separately obtaining PlantEmergencyExceptionAuthority-8 relation authorizes that decision, and current CalibrationConflictResolutionResult-8 selects the prohibition claim for the stated scope/window. Only then is the finding settledByDecisionResult. A second Zone 8 request that merely names the Safety Director but has no dated decision work or current result remains unresolved. A visible permit and green readiness tile cannot repair either gap. If no calibration work occurs, the permission is neither exercised nor violated.

Bias-Annotation

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: permission-specific support across boundary and work uses.

The chief bias is document-and-display authority: a readable permit, badge, policy response, or green gate looks stronger than its recoverable relation. The repair is exact ground, participants, policy/currentness, scope/window, and separate evidence. A second bias is obligation-shaped deontics; the exercise and non-exercise rules preserve permission as latitude.

Conformance Checklist

IDCheck
CC-A2.8.PER-1The current result is exactly NonProhibitionFinding@Context, GrantedPermissionRelation@Context, PermissionExerciseRelation@Context, NonViolationFinding@Context, or PermissionNormConflictFinding@Context.
CC-A2.8.PER-2Beneficiary uses only `RoleRef
CC-A2.8.PER-3A strong grant names the admitted holder U.System that performs the instituting act, the exact grantor assignment whose HolderSystemSlot resolves to that system, participants, policy/context, scope/window, currentness, and occurrence identity; the assignment is authority ground and never the actor.
CC-A2.8.PER-4Weak findings require a current frame explicitly complete enough for the intended use; incompleteness returns unresolved.
CC-A2.8.PER-5Exercise names dated work, the admitted U.System that performed it, the one current grant occurrence, scope, and interval; it answers action match and beneficiary eligibility from those objects and the exact covering assignment or on-behalf-of relation. It does not require generic match, eligibility, or beneficiary-binding findings, and the assignment never performs the work.
CC-A2.8.PER-6Neither exercise nor non-exercise establishes NonViolationFinding@Context; non-exercise is not violation, and exercise is not obligation satisfaction and does not consume a grant without an explicit policy.
CC-A2.8.PER-7A same-scope conflict is settled only by an applicable policy rule that selects the outcome or by a current resolution result produced by dated work of an admitted system under a covering assignment and independently obtaining decision-authority relation. Naming a policy, office, role, assignment, or “owner” alone leaves only the affected work or reliance use unresolved.
CC-A2.8.PER-8Permit episteme, carrier, evidence, admissibility, readiness, gate, capability, work, and result retain their direct owners.

Common Anti-Patterns and How to Avoid Them

Anti-patternRepair
MAY stored as a U.Commitment modalityRecover whether the claim is a strong grant, weak finding, entry predicate, or ordinary prose; use the exact owner.
No prohibition found, therefore permissionRequire currentness and frame completeness; otherwise return unresolved.
Permit document as permissionRecover the instituting act, current grant occurrence, policy, scope/window, and evidence relation.
Gate pass as authorizationKeep GateDecision in A.21; cite a separate grant/conflict result when the gate actually consumes one.
Permission as readiness or capabilityKeep readiness in A.15.5 and capability in A.2.2; permission supplies neither.
Work “violates permission”Test exercise coverage and any separately governed prohibition; uncovered work is not a permission violation by default.
Generic findings for action match or beneficiary bindingTest the Work against the action specification and the performer against the beneficiary branch; cite the already obtaining assignment or on-behalf-of relation and add separate evaluation evidence only when a receiving use needs it.
Precedence “owner” as resolutionApply a policy rule that itself selects the outcome, or name the authorized system's dated decision work and current conflict-resolution result; a role, office, assignment, or policy title alone decides nothing.
Hidden generic beneficiary kindKeep the closed reference union and branch-specific eligibility checks.

Consequences

Permission becomes inspectable without being inflated into a universal authorization ontology. Practitioners can distinguish a tentative frame-relative result from an enduring grant and from actual exercise, and can stop on unresolved conflict without letting a gate or permit display choose precedence. The cost is recording enough policy, identity, scope, window, and eligibility detail to support the intended use.

Rationale

Positive permission has different satisfaction and failure behavior from obligation. A grant can obtain while unused; non-use ordinarily violates nothing; matching action can exercise the grant without discharging a duty. Separating weak findings, strong grants, and exercise preserves these practical consequences while using existing episteme, relation, speech-act, policy, work, and evidence owners.

SoTA-Echoing

Practice questionCurrent practice and sourceFPF alignmentDisposition
How do weak and strong permission differ?Moltmann (2024) distinguishes modal objects, strong permission, weak non-violation, and action satisfiers.Separate frame-relative findings, instituted grants, and actual exercise; retain direct FPF owners.Adapt. Do not import modal objects, truthmakers, or possible worlds as U-kinds.
How should permission, duty, and prohibition remain distinct?W3C ODRL 2.2 (2018) models permission, prohibition, duty, assignee, action, constraint, and policy separately.Keep beneficiary, action specification, policy, scope/window, and duty/prohibition owners explicit.Adapt. FPF uses direct relations and epistemic findings rather than importing the ODRL information model wholesale.
What makes a policy decision usable?NIST SP 800-207 (2020) and current policy-as-code practice separate subject, requested action, resource/context, current policy, and decision evidence.Exercise eligibility and conflict use are bounded by exact beneficiary, action, context, scope/window, and current policy.Adapt. A policy response or gate display is not itself an enduring grant.
How should digital permit evidence be relied on?W3C Verifiable Credentials Data Model 2.0 (2025) separates issuer, holder, verifier, status, proof, and relying context.Permit publications enter A.10 evidence/currentness paths and do not replace the grant relation.Adapt. Credential form supplies neither permission nor exercise by itself.

These sources change the practical record and its failure results. They do not license a generic authorization kind, beneficiary kind, permit-as-relation shortcut, or automatic precedence rule.

Relations

  • Coordinates with: A.2.8 for obligations, recommendations-as-duty, and prohibitions; A.2.9 for instituting/revoking speech acts; A.6.B and A.6.C for deontic claim classification and contract unpacking.
  • Supplies inputs to: A.15.5 readiness and direct mechanism/gate checks only when their own predicates explicitly consume a current grant, finding, or conflict result.
  • Relates to work through: A.15.1 for dated U.Work identity and PermissionExerciseRelation@Context for the separate exercise claim.
  • Uses evidence from: A.10 and publication/currentness owners without turning evidence or a permit carrier into the permission relation.
  • Does not replace: role assignment, capability, plan, gate, admissibility, policy precedence, evidence, performed work, result, safety, assurance, or commitment owners.

A.2.8.PER:End

A.2.9 — U.SpeechAct (Communicative Work Kind, Occurrences, and Records)

Status: Stable Type: Definitional work-ontic pattern

Kind Settlement

U.SpeechAct is the admitted communicative-work kind under U.Work. One individual such as SA-Approve-4711 : U.SpeechAct is an actual temporally bounded speech-act occurrence. A SpeechActRecord : U.Episteme may state claims about that occurrence; it is neither the occurrence nor what makes the occurrence actual.

Use This When

Use this pattern when a communicative event must be modeled as performed work: an approval, authorization, revocation, notice, declaration, publication, or similar act whose occurrence changes what a project can claim or do.

What goes wrong if missed. A document, interface, ticket, message, or log is treated as if it performed the act; approval, utterance content, evidence carrier, commitment, and performed work collapse into one governance phrase.

What this buys. Actual communicative Work occurrences become inspectable without collapsing them into a claim-bearing SpeechActRecord, an utterance description, or an evidence carrier.

Typical moments:

  • a release, gate, or work step depends on whether a named approval or authorization was performed;
  • a publication, notice, or revocation changes status in a bounded context;
  • a commitment must cite the act that instituted it, rather than only pointing at a document;
  • a message, ticket, signed record, or API call log is being mistaken for the act itself.

Primary EntityOfConcern. The EntityOfConcern is one actual speech-act occurrence admitted under the kind U.SpeechAct: a communicative Work individual performed by an admitted accountable U.System under an exact obtaining U.RoleAssignment in a bounded context. The system performs the act; the assignment supplies the role and authority ground. A SpeechActRecord, the utterance-description episteme, and the file, message, ticket, or log carrier are separate objects.

First useful move. Name the actual occurrence, performer system, and assignment under which it acts, then name the judgement context, time window, act type, what the utterance is about, and—only when current—the intended institutional target and independently established effect. Create a SpeechActRecord only when a receiving use needs a persistent claim about that occurrence; add utterance or carrier references only when observation, audit, or source return needs them.

Not this pattern when. If the question is only what a document says, use A.7/C.2/E.17. If the question is who is accountable under a deontic relation, use A.2.8. If the question is evidence, use A.10/G.6. If the work has no communicative effect, use A.15.1 directly.

Type: Definitional (D) Normativity: Normative (unless explicitly marked informative) Placement: Part A → A.2 Roles & Agency Kernel Refines: A.2 (Role Taxonomy) Builds on: A.2.1 (RoleAssignment), A.2.6 (Γ_time and windows), A.7 (EntityOfConcern, Description episteme, and carrier), A.10 (SCR/RSCR carrier discipline), A.15.1 (U.Work) Purpose (one line): Admit communicative enactments under the U.SpeechAct kind, identify each actual Work occurrence, and provide a minimal optional SpeechActRecord for claims about it while keeping the act, record, utterance description, and evidence carrier separate.

FPF already treats communicative acts as observable events used in role-state checklists and grounding (“presence of act: AuthorizationSpeechAct exists…”); those checks cite actual occurrences admitted under U.SpeechAct, not the kind itself. The spec’s micro-examples and conformance gates distinguish communicative Work (“performed a SpeechAct”) from operational Work (“executed Work”) while keeping both inside U.Work (cf. CC‑A15‑10 GateSplit). F.18 can name U.SpeechAct in the promise/utterance/commitment triad; A.2.9 keeps the ontology and conformance discipline in Part A where communicative work, utterance description, and evidence carrier can be kept distinct.

A.2.9:1 — Problem frame

FPF repeatedly needs to reference “someone said/did the approving/authorizing/declaring thing”:

  • Role eligibility and enactability checklists often depend on the presence of an approval/authorization act within a freshness window.
  • Governance patterns and boundary writing (A.6 stack) need provenance: “this obligation or commitment, or this separately represented granted permission, was instituted by that act”.
  • Operational patterns need auditable notices (“depletion notice”, “override invoked”) whose existence and timing matter.

Without a first-class kind for such communicative Work and a separate way to describe each occurrence, authors tend to:

  • attribute agency to descriptions (“the spec approves…”, “the interface guarantees…”),
  • collapse “utterance text” and “speech act event”,
  • leave provenance dangling as “if modeled”,
  • encode gates as prose obligations, or treat obligations as gates.

This pattern admits U.SpeechAct as an explicit Work kind, identifies actual speech-act occurrences under it, and keeps their optional records separate from U.Commitment, utterance descriptions, and carriers.

A.2.9:2 — Problem

How can FPF represent communicative enactments so that:

  1. Agency is explicit: an admitted accountable U.System performs the act under a covering role assignment, not a role value, assignment, document, spec, or interface.
  2. The act is locatable in time: the act has an explicit Window (and thus freshness can be evaluated).
  3. The act is locatable in meaning: the act is recognized inside a declared bounded context (the U.Work judgement context), not via U.ClaimScope (which expresses applicability of claims/commitments, not the judgement context for Work occurrences).
  4. The act is auditable: it has at least one declared utterance description, evidence carrier, or both when used for gate checks or governance.
  5. Institutional effects are linkable: the act can institute (or update/revoke) commitments, role assignments, statuses, etc., by reference.
  6. Ambiguity is handled pragmatically: the model supports multi-function and multi-party communication without requiring full linguistic pragmatics.

A.2.9:3 — Forces

ForceTension
MinimalityNeeds to be light enough for routine modeling and linting; not a full pragmatics or legal-contract system.
AuditabilityIf used as a gate, it must be evidence-backed; but not all communicative acts are equally observable or retainable.
Context localityMeaning and “institutional force” are context-local; cross-context reuse must remain explicit (Bridge-only discipline).
Multi-party realityMany real boundaries are multiparty (protocols, organizations); dyadic “speaker-hearer” is too narrow.
Multi-function realityOne utterance can carry multiple recognizable functions; “one act = one force” is often false.
Separation disciplineMust preserve kindactual act occurrenceSpeechActRecordutterance descriptioncarrier or trace.

A.2.9:4 — Solution

U.SpeechAct is the admitted kernel kind for communicative Work. An individual SA : U.SpeechAct is the actual enactment performed by an admitted accountable U.System under an exact obtaining role assignment within a bounded context. A SpeechActRecord may describe that occurrence and point to utterance descriptions or evidence carriers; none of those epistemic or representational objects is the act.

A.2.9:4.1 — Normative definition

U.SpeechAct <: U.Work is a kind declaration. An actual Work individual is admitted as SA : U.SpeechAct when its primary effect is communicative: it places an utterance into a context in a way that is recognized by that context’s institutional semantics (policies, procedures, protocol rules) as potentially:

  • asserting/informing,
  • requesting/directing,
  • promising/committing (as an instituting act),
  • declaring/authorizing/revoking (status-changing acts),
  • notifying (event announcement relevant for downstream work).

Per A.7 and A.15.1, the actual speech-act occurrence is a Work individual; its SpeechActRecord and utterance descriptions are epistemes, while its carriers are utterance carriers, publication carriers, or traces that allow observation and audit. (Note: “Surface” is reserved for MVPK publication/interoperability surfaces; do not use it here.)

Whether a given act type institutes commitments, permissions, or status changes is entirely context-policy dependent. Absent an explicit policy, treat SA : U.SpeechAct only as an actual communicative Work occurrence; neither its kind membership nor a complete-looking record licenses a deontic inference.

A.2.9:4.2 — Minimal occurrence-description record (normative)

Use the following declaration schema only when a receiving use needs a persistent claim about an actual or candidate speech-act occurrence. The record fields state claims about the referenced occurrence; they are not fields stored in the Work individual and do not make it occur.

U.SpeechAct <: U.Work

SpeechActRef ::= U.EntityRef
  // resolves to one actual Work individual admitted as SA : U.SpeechAct

SpeechActRecord <: U.Episteme

SpeechActRecord ::=
    {
      speechActOccurrenceRef: SpeechActRef,
      performedBy: U.EntityRef,                     // resolves to the admitted U.System that acts
      performedUnderAssignment: RoleAssignmentRef,  // exact covering role/authority ground
      enactsMethodRef: optional<U.EntityRef>,        // resolves to the exact U.Method when recovered
      methodDescriptionRef: optional<U.EpistemeRef>, // separate description, only when the use needs it
      unresolvedEnactsMethodClaimRef: optional<ClaimIdRef>,
      methodRelationGapProvenanceRef: optional<U.EpistemeRef>,
      reliancePosture: observationOnly | relianceReady,
      executedWithin: U.EntityRef,                   // claim about the containing U.System
      window: [start, end | open],                   // claim about the occurrence's actual extent
      judgementContextRef: U.BoundedContextRef,
      utteranceSubjectRefs: optional<set<U.EntityRef>>,
      institutionalTargetRefs: optional<set<U.EntityRef>>,
      actTypes: set<SpeechActTypeRef>,               // ≥1 act types (supports multi-function)
      addressedTo: optional<set<AddresseeRef>>,      // optional: who is addressed / audience
      utteranceRefs: optional<set<DescriptionRef>>,  // where the utterance description is stated or recorded (A.7: Description)
      carrierRefs: optional<set<CarrierRef>>,        // evidence carriers/traces (A.7: Carrier; use A.10 when evidentiary)
      institutes: optional<InstitutedEffects>,       // references to objects/claims instituted/updated by this act
      notes: optional<InformativeText>               // explicitly informative
    }

DescriptionRef ::=
  ClaimIdRef | EpistemeRef
  // Pointer to an utterance description (e.g., spec clause claim ID, a policy episteme, a message-content episteme).

SpeechActTypeRef ::=
  ContextLocalTokenRef
  // Must be defined/recognized in the Work’s judgement context (bounded context).

AddresseeRef ::=
  PartyRef | RoleRef | RoleAssignmentRef

GrantedPermissionRelationRef@Context ::= U.EntityRef
  // resolves only to one exact GrantedPermissionRelation@Context occurrence

EpistemePublicationRelationRef ::= U.EntityRef
  // resolves only to one exact E.24.PUB EpistemePublicationRelation occurrence

InstitutedEffects ::=
  {
    commitments: optional<set<CommitmentIdRef>>,
    permissions: optional<set<GrantedPermissionRelationRef@Context>>,
    roleAssignments: optional<set<RoleAssignmentRef>>,
    publicationRelations: optional<set<EpistemePublicationRelationRef>>
  }

Occurrence-side constraints:

  • (SA‑C0) Actual Work conformance. The individual referenced by speechActOccurrenceRef MUST independently satisfy U.Work conformance (A.15.1), including the actual performer system, covering assignment, enacted method, containing system, temporal extent, and judgement-context anchoring. A complete record neither creates those facts nor substitutes for them.
  • (SA‑C1) The accountable system performs; the assignment grounds. The occurrence's actual performer MUST be an admitted U.System. The exact obtaining U.RoleAssignment under which it acts MUST have that system in HolderSystemSlot and cover the act. The assignment supplies role, authority, and attribution ground; it does not perform the act.
  • (SA‑C2) Act types are occurrence classifications and context-local. The occurrence MUST instantiate at least one SpeechActTypeRef recognized in its judgement context. A token written into a record does not establish that classification unless the context's predicate is satisfied.
  • (SA‑C3) Time honesty. The occurrence MUST have an actual temporal extent so freshness can be evaluated; a recorded timestamp is a claim about that extent, not the extent itself.

Keep three questions separate. utteranceSubjectRefs answers what the utterance or claim is about. institutionalTargetRefs answers which object or relation the act is intended to institute or update under the named policy. Actual change or institutional effect is a third world-side fact and is stated only through its exact direct change/effect relation and the matching typed institutes.* reference when the record needs it. An informative notice or assertion may have a subject without any institutional target or changed entity. Shared reference values do not collapse these relation meanings.

Record- and reliance-side constraints:

  • (SA‑C4) A relied-on occurrence must be observable. When a gate, checklist, commitment, or grant relies on a SpeechActRef, the SpeechActRecord SHALL identify that same occurrence and cite at least one applicable utteranceRef, carrierRef, or separately governed evidence relation. Evidence-critical uses SHOULD cite at least one carrier through A.10. Record completeness alone does not prove occurrence or institutional force.
  • (SA‑C5) Institutional-effect claims are typed references to world-side effects. institutes.* may reference only the exact commitment or relation occurrence through its declared RefKind. Each institutes.permissions value MUST be a GrantedPermissionRelationRef@Context whose context matches the speech-act occurrence's judgement context or is connected by the explicit Bridge used by the receiving claim. Each institutes.publicationRelations value MUST resolve to an obtaining EpistemePublicationRelation under E.24.PUB. A status claim is an episteme about an effect, not an instituted effect; keep it and its A.10 evidence relation outside institutes.*. The cited policy and direct world-side obtaining conditions still decide whether any effect exists.
  • (SA‑C6) Cross-context use is Bridge-only. If a SpeechActRef or SpeechActRecord is interpreted for checking, gate evidence, or provenance in a different bounded context than the occurrence's judgement context, the receiving claim MUST cite the Bridge/policy that licenses that interpretation rather than assuming equivalent force from the same label.

A.2.9:4.3 — SpeechActRef discipline (normative)

A SpeechActRef resolves to one actual Work individual admitted as SA : U.SpeechAct. It never denotes the kind itself or a SpeechActRecord.

  • If another object (for example, U.Commitment.source.speechActRef) cites a SpeechActRef, the referenced occurrence MUST satisfy occurrence-side SA‑C0…SA‑C3. A gate, audit, or provenance use additionally needs the record/evidence basis in SA‑C4 and SA‑C6 when cross-context.
  • A SpeechActRef MUST NOT be replaced by an EpistemeRef (“see the document”) when occurrence provenance is needed. A SpeechActRecord or utterance-description episteme may make claims about the occurrence but is not the act.
  • If a source cannot complete a SpeechActRecord, it may create an observation stub with the candidate speechActOccurrenceRef, known claims, provenance for those claims, and explicit unknowns. When the actual enactsMethod relation is not recoverable, leave enactsMethodRef absent, cite the exact unresolved claim and source-gap provenance, and set reliancePosture=observationOnly. The stub does not make the candidate actual, satisfy occurrence-side conformance, or support gate/deontic provenance. It becomes reliance-ready only after the exact enactsMethod -> U.Method relation is recovered, or after the governing Work architecture explicitly establishes that this occurrence needs no such relation. Never mint an AdHocCommunication or other U.MethodDescription solely to fill the gap; a description neither is the method nor enacts itself.

A.2.9:4.4 — Separation rules with U.Commitment, GrantedPermissionRelation@Context, and U.PromiseContent (normative)

  1. Speech act is not the enduring deontic relation. A speech-act occurrence may institute a U.Commitment for an obligation, recommendation-as-duty, or prohibition, or a GrantedPermissionRelation@Context for strong permission. The enduring relation is the separately governed object, not the act. Do not encode obligations or permissions as prose inside its SpeechActRecord: cite commitments in institutes.commitments and grants in institutes.permissions, each under the exact instituting policy (A.2.8, A.2.8.PER).

  2. Speech act is not the service promise clause. U.PromiseContent is the promised-outcome statement; a speech act may be the act of offering or issuing that promise, but the promise content lives in the promise-content object and is referenced from the resulting commitments.

  3. Speech act is not the carrier. A “signed approval PDF”, ticket, message, or API log is a carrier; it may carry an utterance-description episteme or a SpeechActRecord. The speech act is the Work occurrence described or evidenced, not either episteme and not the carrier.

  4. Publishing a spec is not a commitment by default. Default interpretation rule (normative). A conformant model/interpreter MUST NOT infer a U.Commitment, GrantedPermissionRelation@Context, publication occurrence, or subject-specific status relation solely from a Publish/Approve speech-act occurrence or its record. Publication work may establish an EpistemePublicationRelation only when E.24.PUB's selected edition, audience, bounded use, form, carrier, and availability conditions obtain. A constitutive policy may let an act institute a subject-specific Approved, Published, or similar status relation; then cite that exact relation occurrence through the subject pattern and separately cite any C.2.1 status claim and A.10 evidence. The claim represents the status; neither its ID nor its publication makes the status obtain.

A.2.9:4.5 — Multi-function and multi-party support (normative)

  • Multi-function: actTypes is a set. If one utterance performs multiple recognizable acts (e.g., “approve + instruct + warn”), the model may either:

    • identify one speech-act occurrence and let its SpeechActRecord state multiple satisfied actTypes, or
    • identify multiple actual speech-act occurrences and give each its own SpeechActRef; their records may share the same carrierRefs/utteranceRefs. In either case, institutional effects must remain referenceable (SA‑C5).
  • Multi-party: addressedTo is a set and may include roles/parties/assignments. If addressees matter for validity (e.g., “approval by CAB chair to deployment bot”), they should be explicit.

A.2.9:5 — Archetypal Grounding (Tell–Show–Show)

A.2.9:5.1 — Tell (universal rule)

When governance or gating depends on “someone said/did X”, identify that saying/doing as an actual Work occurrence SA : U.SpeechAct. Add a SpeechActRecord only to state relied-on claims about it, and keep the utterance text and carriers separate. If the occurrence creates obligations, recommendations-as-duty, or prohibitions, cite explicit U.Commitment objects; if it creates strong permission, cite an explicit GrantedPermissionRelation@Context. The act institutes neither effect without the exact context policy.

A.2.9:5.2 — Show #1 (system archetype: change-control approval gates a deployment)

Situation (messy prose): “Change is approved, so the pipeline may deploy.”

Conformant modeling sketch. The first line names the actual Work individual. The following episteme reports claims about it; those claims must be true independently.

  • Actual occurrence: SA-Approve-4711 : U.SpeechAct

  • SA-Approve-4711-Record : SpeechActRecord

    • speechActOccurrenceRef = SpeechActRef(SA-Approve-4711)
    • actTypes = {SpeechActTypeRef(Approval@ChangeControl)}
    • performedBy = U.EntityRef(CAB_Chair_A) where CAB_Chair_A : U.System
    • performedUnderAssignment = RoleAssignmentRef(CAB_Chair_A@ApproverRole@ChangeControl)
    • enactsMethodRef = U.EntityRef(ChangeApprovalMethod_v3); the actual enactsMethod relation independently obtains
    • methodDescriptionRef = EpistemeRef(ChangeApprovalProcedure_v3)
    • reliancePosture = relianceReady
    • executedWithin = ChangeControlBoardSystem
    • window = [t,t]
    • judgementContextRef = ChangeControl
    • utteranceSubjectRefs = {ChangeRequestId(4711)}
    • institutionalTargetRefs = {GrantedPermissionRelationRef@ChangeControl(PER-Deploy-4711)}
    • utteranceRefs = {EpistemeRef(ChangeTicket#4711)}
    • carrierRefs = {CarrierRef(TicketSystemRecord#4711)}
    • institutes.permissions = {GrantedPermissionRelationRef@ChangeControl(PER-Deploy-4711)}
  • GrantedPermissionRelation@ChangeControl PER-Deploy-4711

    • beneficiaryRef = RoleAssignmentRef(OpsBot#DeployerRole:CD_Pipeline_v7)
    • permittedActionSpecificationRef = EpistemeRef(DeployChange4711WorkSpecification)
    • institutingSpeechActRef = SA-Approve-4711
    • grantorAssignmentRef = RoleAssignmentRef(CAB_Chair_A@ApproverRole@ChangeControl)
    • grantValidityPolicyRef = EpistemeRef(ChangeControlGrantPolicy_v3)
    • scope, validityWindow, and revocation stance are explicit.

The utterance is about ChangeRequestId(4711); its policy-selected institutional target and demonstrated effect are the separately obtaining grant occurrence. Nothing here claims that the change-request entity itself changed.

  • Gate predicate A-Gate-Deploy-4711 independently states whether deployment entry conditions hold. It may check exists SpeechAct(type=Approval, utteranceSubjectRefs includes ChangeRequestId(4711), performedBy=CAB_Chair_A, performedUnderAssignment role=ApproverRole, within 90d), consume the current grant occurrence, and apply other prerequisites; passing the gate neither institutes nor equals the grant.

This preserves:

  • kind vs actual act vs record vs utterance text vs carrier vs enduring grant,
  • explicit performer and grant beneficiary,
  • time window and policy for currentness,
  • explicit provenance from the grant to the instituting act, and
  • the distinction between strong permission and an admissibility gate.

A.2.9:5.3 — Show #2 (episteme archetype: publishing a spec edition without making the spec an agent)

Situation (anti-pattern): “The interface spec declares MUST/SHALL requirements.”

Conformant modeling sketch. SA-Publish-API-v12 is the actual occurrence; the record is a separate episteme about it.

  • Actual occurrence: SA-Publish-API-v12 : U.SpeechAct

  • SA-Publish-API-v12-Record : SpeechActRecord

    • speechActOccurrenceRef = SpeechActRef(SA-Publish-API-v12)
    • actTypes = {SpeechActTypeRef(Publish@APISpecContext), SpeechActTypeRef(DeclareNorms@APISpecContext)}
    • performedBy = U.EntityRef(StandardsEditor_A) where StandardsEditor_A : U.System
    • performedUnderAssignment = RoleAssignmentRef(StandardsEditor_A@PublisherRole@APISpecContext)
    • enactsMethodRef = U.EntityRef(SpecPublicationMethod_v12); the actual enactsMethod relation independently obtains
    • methodDescriptionRef = EpistemeRef(SpecReleaseProcedure_v12)
    • reliancePosture = relianceReady
    • executedWithin = SpecPublicationSystem
    • window = [t,t]
    • judgementContextRef = APISpecContext
    • utteranceSubjectRefs = {EpistemeRef(APISpec_v12)}
    • institutionalTargetRefs = {EpistemeRef(APISpec_v12)}
    • utteranceRefs = {EpistemeRef(APISpec_v12)}
    • carrierRefs = {CarrierRef(GitTag:v12), CarrierRef(SignedReleaseArtifact:v12)}
    • institutes.publicationRelations = {EpistemePublicationRelationRef(APISpec-v12-Publication)}
  • APISpec-v12-Publication : EpistemePublicationRelation separately names the selected APISpec_v12 edition, audience declaration, bounded-use declaration, publication form, and exact carrier; it obtains only while that edition is available under E.24.PUB.

The same APISpec_v12 episteme is both the subject of the publication utterance and the object made available by the publication relation, but those are different relations. The act does not thereby change the spec's claim content or make the episteme an actor. If D-StdStatus-APISpec_v12-Published is needed, keep it as a separate C.2.1 claim about the publication occurrence and cite its evidence through A.10; do not put the claim in institutes. Norms live in the published utterance descriptions, while the act of publication is performed by StandardsEditor_A under its publisher assignment.

A.2.9:6 — Bias-Annotation

Lenses tested: Gov, Arch, Onto/Epist, Prag, Did. Scope: Kernel universal for speech-act usage that matters for governance, eligibility, gating, provenance, and protocol boundaries.

  • Gov bias: favors explicit accountable performers and auditable records; increases clarity but adds modeling overhead.
  • Arch bias: optimizes evolvability by keeping institutional effects referenceable rather than embedded in prose.
  • Onto/Epist bias: enforces kind≠actual act≠record≠utterance≠carrier and prevents episteme-as-agent metaphors.
  • Prag bias: models only what is needed for decisions/audit (not full intention/sincerity/perlocutionary psychology).
  • Did bias: keeps the record minimal and queryable for state checklists and boundary reviews.

A.2.9:7 — Conformance Checklist (normative)

  1. CC‑A.2.9‑1 (Occurrence, performer, and assignment). One actual Work individual is admitted as SA : U.SpeechAct; its performer is an admitted accountable U.System, and the exact covering U.RoleAssignment has that system as holder. Any SpeechActRecord states those as claims and MUST NOT make the assignment, role value, organizational label, episteme, or carrier the performer.
  2. CC‑A.2.9‑2 (Act-type predicate). The actual occurrence satisfies at least one context-local SpeechActTypeRef; merely writing a token into SpeechActRecord.actTypes is insufficient.
  3. CC‑A.2.9‑3 (Actual extent versus timestamp claim). The occurrence has an actual temporal extent. A record's window must truthfully state that extent at the required precision; it does not create it.
  4. CC‑A.2.9‑4 (Observable relied-on occurrence). If a checklist, guard, commitment, or grant cites the occurrence, one SpeechActRecord identifies it and cites an applicable utterance, carrier, or direct evidence relation. Evidence-critical uses SHOULD cite at least one carrier through A.10.
  5. CC‑A.2.9‑5 (Typed world-side effects, separate claims). A record's institutes.* branch references only an exact commitment or obtaining relation occurrence through its declared RefKind. A grant uses GrantedPermissionRelationRef@Context; publication uses EpistemePublicationRelationRef; a subject-specific status uses its direct relation type. A status claim and its evidence stay separate, and no record field makes any effect obtain.
  6. CC‑A.2.9‑6 (Bridge-only cross-context use). A receiving claim that interprets a SpeechActRef or SpeechActRecord in another bounded context cites the Bridge/policy that licenses that interpretation.
  7. CC‑A.2.9‑7 (No fabricated method anchor). If the occurrence's actual enactsMethod -> U.Method relation cannot be recovered, the record names the unresolved claim and source-gap provenance, remains observationOnly, and is not used for gate or deontic provenance. A placeholder U.MethodDescription never closes the gap.
  8. CC‑A.2.9‑8 (Subject, target, and effect stay distinct). A record uses utteranceSubjectRefs for aboutness and institutionalTargetRefs only for a policy-selected target. It claims actual change or institutional effect only through the exact direct relation; an informative act needs no changed target.

A.2.9:8 — Common Anti-Patterns and How to Avoid Them

Anti-patternWhy it failsRepair
Episteme- or assignment-as-actor (“the spec/assignment approves”)assigns agency to a description or relationrepresent the act with performedBy naming the admitted system and performedUnderAssignment naming its covering role/authority relation
Kind/occurrence/record collapse (U.SpeechAct used for all three)a complete record is mistaken for actual Workreserve U.SpeechAct for the kind, identify SA : U.SpeechAct as the occurrence, and use SpeechActRecord only for claims about it
Carrier-as-act (“the signed PDF is the approval”)conflates carrier with actidentify the actual speech-act occurrence; let its separate SpeechActRecord cite the PDF carrier and any utterance-description episteme
Placeholder method as Work anchora fabricated description hides an unknown world-side relationleave enactsMethodRef unresolved with source-gap provenance and observationOnly; recover the actual method relation before reliance
affected as aboutness, target, and effectone field makes mention look like world-side changestate the utterance subject and intended institutional target separately; cite an exact obtaining change/effect relation only when one exists
Status claim listed as instituted effecta claim ID is mistaken for the status it describescite the exact status or publication relation occurrence; keep the C.2.1 claim and A.10 evidence separate
Free-text type (“type=‘approved-ish’”)not lintable; drifts across facesregister SpeechActTypeRef in the context and use it
Act carries obligations (obligations embedded as prose in speech act)collapses act and deontic bindingmodel obligations as U.Commitment objects instituted by the act
Gating without windowcannot evaluate freshnessadd explicit window and reference it in the guard/checklist
Hidden multi-act (one event silently creates multiple commitments)loses traceability; creates disputesrepresent multi-function via actTypes set or multiple speech acts sharing the same carrier

A.2.9:9 — Consequences

Benefits

  • Makes approvals/authorizations/notices first-class and queryable, enabling clean RSG checklists and guard rules.
  • Provides stable provenance: commitments, granted permissions, and status transitions can cite the instituting act explicitly.
  • Prevents recurring category errors: “documents promise”, “interfaces commit”, “logs prove”.

Trade-offs / mitigations

  • Reliance-bearing uses require a small structured SpeechActRecord plus adequate evidence; ordinary occurrence talk needs no record when no later claim must cite it.
  • Requires context-local SpeechActTypeRef registration; mitigated by starting with a small set (Approve, Revoke, Publish, Notify, Authorize) and extending as needed.

A.2.9:10 — Rationale

FPF already relies on communicative acts (approvals, notices, overrides) as operationally meaningful events. A.2.9 therefore admits U.SpeechAct as the Work kind, treats each actual act as a temporally bounded Work individual under it, and uses SpeechActRecord only for claim-bearing representation. That separation keeps performer, scope, time, utterance descriptions, carriers, and separately governed deontic effects (U.Commitment or GrantedPermissionRelation@Context) inspectable without letting a record stand in for actuality.

This also improves modularity:

  • F.18 can remain a lexical entry point for naming (why “SpeechAct” and “utterance” are useful labels),
  • while A.2.9 carries the ontology and conformance discipline for the kind, its actual occurrences, their optional records, and their connections to commitments, granted permissions, and evidence.

A.2.9:11 — SoTA-Echoing (informative; post-2015 alignment)

Informative. Alignment notes; not normative requirements.

  • Adopt — ISO 24617‑2:2020 / multi-dimensional communicative functions. Modern dialogue‑act standards treat communicative behavior as potentially multi‑functional. A.2.9 mirrors this by allowing actTypes to be a set and by supporting shared carriers across multiple acts.
  • Adapt — commitment-based semantics for communication (multi-agent/protocol practice, 2015+). A pragmatic way to avoid mental-state modeling is to track communication by its social/institutional effects, especially on commitments, permissions, and protocol states. A.2.9 reflects this via separate institutes.commitments and institutes.permissions links to U.Commitment and GrantedPermissionRelation@Context without modeling sincerity or intention.
  • Adopt (warning) — illocutionary pluralism in multiparty discourse (2015+). One utterance commonly performs multiple recognizable functions. A.2.9 avoids the “single force” trap by permitting multi-type acts, multiple acts sharing the same utterance and carriers, or both.

A.2.9:12 — Relations

Uses / builds on

  • Uses A.15.1 (U.Work) for the event/work backbone (actual performer system, covering assignment, window, and stance).
  • Uses A.7 for the strict actual-act≠record/description≠carrier split.
  • Coordinates with A.2.6 for scope/window discipline.

Used by

  • A.2.8 (U.Commitment) as a concrete target for source.speechActRef provenance, and A.2.8.PER for a GrantedPermissionRelation@Context grounded by institutingSpeechActRef.
  • A.2.5 (RSG checklists/guards) when “presence of authorization/approval act” is a criterion.
  • A.6.C (Contract unpacking) as the “utterance/instituting act” hook that prevents episteme-as-agent claims and improves provenance.

A.2.9:End

Transformer Constitution (Quartet)

Intent

Establish a substrate-neutral way to say which system performed one dated world-side Work occurrence, under which exact U.RoleAssignment, by enacting which U.Method, and which separately governed method-description, capability, work-to-change, evidence, or aggregation claims the current use additionally relies on—without self-magic and without blurring run-independent semantics, the occurrence, and an episteme that describes or asserts it. The pattern keeps the Transformer Quartet object families distinct; it does not require every change claim or Work assertion to carry all four. A.3.4 independently identifies an actual bounded change; that identification alone establishes no acting system, agency, role assignment, method, or work. A.3 builds directly on Holon-Role Duality (A.2) and Temporal Duality (A.4) and is guarded by Strict Distinction (A.7) and Evidence Graph Referring (A.10).

Context

  • Holonic substrate. FPF separates what things are (Holon → {System, Episteme, …}) from what they are being right now via roles. Only systems can bear behavioural roles, enact methods, and perform Work occurrences admitted under U.Work; epistemes do not act. This work-facing rule does not imply that every actual change has an acting-system side.
  • Role, method, description, and occurrence stay distinct. A role is a mask, not behaviour; U.Method is a run-independent semantic way of doing, U.MethodDescription is an episteme that may describe that Method, and each individual admitted under U.Work is the dated performed occurrence that enacts it.
  • Run-independent semantics vs dated occurrence. A Method and any episteme that describes it are not the occurrence. When a claim about actual Work is current, its assertion or description designates the exact Work individual and the independently obtaining performer-assignment, enacted-Method, temporal, containing-system, affected-referent, binding, and resource-use relations required by A.15.1 and the receiving use. When actual change is also claimed, identify it independently under A.3.4 and use a separately governed work-to-change relation.
  • Occurrence, assertion, evidence, and carrier. One Work individual is the world-side occurrence. A separate U.Episteme may assert or describe it and designate the exact occurrence and obtaining relations. Logs, observations, evidence items, and publications have their own carriers and direct relations; neither a carrier nor a record becomes Work by referring to it.

Problem

Legacy phrasing (“actor / process / blueprint”) causes recurrent failures:

  1. Self‑magic in an actor-side claim: “the system configures itself” is used as if it already supplied a performer, role assignment, method, work occurrence, causal relation, and evidence.
  2. Plan = event: blueprint/algorithm reported as if execution happened.
  3. Capability = result: possession of a method counted as evidence of work.
  4. Episteme as doer: documents/models treated as actors.
  5. Occurrence-description leak: a method, plan, log, ticket, carrier, or evidence item is treated as the dated Work occurrence, while the assertion fails to designate the actual performer assignment, enacted Method, extent, affected referent, and direct relations. A.2/A.4/A.7/A.10 collectively forbid these, but A.3 must give the canonical quartet that authors can apply consistently.

Forces

ForceTension
Identity vs behaviourKeep holon identity stable while roles/behaviours change.
Simplicity vs precisionManagers want one “process” box; kernel must keep MethodDescription / Method / Work distinct.
Universality vs idiomsPumps, proofs, and data‑pipelines must read the same, yet allow domain names.
Reusable semantics vs dated occurrenceKeep Method, any MethodDescription edition, and Work distinct; make each relied-on connection explicit.
Evidence vs mereologyProvenance edges (EPV‑DAG) must never turn into part‑whole edges.

Solution — The Transformer Quartet

For work-enactment, A.3 keeps four neighboring anchors visible: the performer-side assignment, a MethodDescription edition when the receiving use relies on one, the enacted Method, and the dated Work. For another independently grounded asymmetric actor-side claim, apply only the anchors required by its direct governor. These anchors qualify the actor-side claim; they are not occurrence conditions for every U.Transformation.

The four anchors (terms & types)

  1. Acting side: for actual Work, each obtaining performedBy relation points from the Work occurrence to an exact U.RoleAssignment occurrence whose HolderSystemSlot resolves to the admitted performer System. For another actor-side claim, its direct owner grounds the participants and decides whether a work-facing role assignment is current. Canonical phrase after that grounding: system bearing TransformerRole@Context. Local shorthand: after explicit binding in the same subsection, you MAY write Transformer for that same system; re-bind on context change and do not use the shorthand where the domain already has a conflicting transformer term. The shorthand neither identifies an actual transformation nor upgrades causal participation or broad physical agentivity into Work.

  2. MethodDescription (description episteme, when relied on): an SOP, program, protocol, script, diagram, or other source is a U.MethodDescription only when it describes the exact Method. Its exact edition is cited only when the receiving claim about Work, assurance, gate, audit, or another use depends on that description.

  3. Method (run-independent semantic way of doing): the exact U.Method that Work may enact. It is neither an occurrence nor a MethodDescription, role assignment, or holder capability. Order-sensitive composition belongs to B.1.5 only when that composition claim is current.

  4. Work (world-side dated occurrence holon): U.Work is the admitted kind; one Work individual is an independently identified performed occurrence that stands in actual enactsMethod, performedBy, temporal, executedWithin, affected-referent, binding, and resource-use relations as applicable to its identity and the current use. A U.Episteme may assert or describe those facts and designate the occurrence; a ticket, log row, record, or carrier is not the Work. The occurrence neither requires one universal MethodDescription edition nor establishes an actual change, result, production, delivery, acceptance, or aggregate merely by occurring.

Safe memory line: A MethodDescription may describe a Method; one dated world-side Work occurrence may enact that Method; a Work assertion may designate that occurrence. The description, occurrence, and assertion are different holons, and none of these relations alone establishes actual change or result. Roles are masks (A.2/A.7); a Method is a reusable way of doing; a Work individual is the performed behaviour occurrence.

Contextual Role Assignment (U.RoleAssignment) for actor-side enactment

When a performed-work claim relies on a TransformerRole@Context assignment, use A.2.1's four-participant relation rather than a holder-role-context triple:

RoleAssignmentAssertion:
  participantDesignations:
    HolderSystemSlot: <admitted U.System>
    RoleValueSlot: TransformerRole@Context
    RoleTaxonomyEpistemeSlot: <exact U.Episteme edition>
    EffectiveReferenceSchemeSlot: <effective U.ReferenceScheme>
  assignmentInterval?: <currently known temporal extent>
  • The four participant designations correspond to the actual relation participants. assignmentInterval is assertion or occurrence-description content: it describes the currently known extent, is not a fifth participant, and does not make the relation obtain.
  • A generic U.BoundedContext or selected BoundedModelUseStructure is not another U.RoleAssignment participant. When a receiving assertion or other claim about Work depends on a selected interpretation structure, designate it through that receiving use's exact relation.
  • The same system may bear several role values when their direct compatibility rules admit them; labels or shared context wording do not decide compatibility.
  • When work on an episteme or carrier is claimed, the acting performer remains a System; episteme identity, carrier change, Work, publication, and evidence retain separate governors.
  • An independently grounded [A.3.4](/generated/patterns/A.3.4) occurrence supplies none of the assignment participants or temporal facts by itself.

Boundary & externality

A.3.4 first identifies the actual bounded change from its changed referent and subject-side occurrence facts. Add an asymmetric acting side and target side only when a direct participation, interaction, causality, or work owner independently grounds that factorization. If an explicit U.Interaction obtains, cite its direct governing relation; A.3 does not create one from the word “transformation.”

Natural, spontaneous, and formal transformations can therefore remain actual without an invented performer. Joint dynamics, relational change, or a non-separable or frame-dependent participation case also remains under its direct dynamics, relation, interaction, or causality owner until an asymmetric actor–target split is justified. Ordinary coupling and scale-free or minimal physical agentivity alone establish neither TransformerRole@Context, U.Method, nor a dated Work occurrence admitted under U.Work.

For genuine work on oneself, use the A.12 reflexive split only after two distinct internal positions are grounded for the current claim. The acting and changed positions may be subholons inside one containing holon; selecting those already grounded parts is an A.14/C.13 structure move, not a Meta-Holon Transition. Use B.2 only if the whole itself is reidentified.

Temporal alignment (A.4 bridge)

  • A U.MethodDescription is a separately identified episteme; cite its exact edition only when the receiving use relies on what that edition says.
  • A U.Method is run-independent and may be enacted by many dated Work occurrences.
  • One Work individual admitted under U.Work has its own governed temporal extent and stands in exact performedBy relations to its performer assignments; an assertion or description may designate those facts, but is not the occurrence. No universal live StateAssertion is a Work or Method condition.
  • When a work-to-change claim is current, identify the world-side Work under A.15.1, the actual change under A.3.4, and the exact direct relation between them. A formal ordering boundary or natural change remains under A.3.4 without a work-facing inference.

Evidence Graph Referring

An assertion or description episteme about one Work occurrence makes its exact performer assignments and enacted Method recoverable and cites a MethodDescription edition only when the receiving use depends on it. Logs, observations, provenance, evidence, and their carriers remain separately related under their direct owners; neither the assertion nor a carrier or output produced by the performer is the Work occurrence or self-certifying evidence for it or its effects.

Didactic dictionary (safe recovery)

  • Process, workflow, SOP, algorithm, protocol, script, or recipe is source wording first. Recover whether the current object is a MethodDescription, Method, WorkPlan, dated Work, method-relation structure, or another directly governed object.
  • Operation, job, run, or performance is a Work individual admitted under U.Work only when the A.15.1 occurrence basis is recoverable; a log row, ticket, assertion, description, or label does not make it Work.
  • Function in an equipment specification may describe a Method, a MethodDescription, a capability, an intended effect, or another direct relation; the word alone decides none of them.
  • Creator becomes local shorthand for a Transformer only when an exact actor-side holder has already been bound as a system through the applicable direct relation and, for performed Work, an obtaining U.RoleAssignment; otherwise recover the actual relation or stop.

Illustrative scenarios (substrate‑neutral)

Physical system — Cooling loop

The world-side occurrence run-2025-08-08-T14:03, an individual admitted under U.Work, stands in an obtaining performedBy relation to an exact RoleAssignment occurrence whose holder is PumpUnit#3, and in an actual enactsMethod relation to CirculateCoolingFluid@CoolingLoop. Cite centrifugal_pump_curve.ld as a MethodDescription edition only if the receiving claim about this Work depends on it. A separately obtaining resource-use relation connects the Work individual to the 3.6 kWh use; the measured ΔT=6 K and any actual fluid change remain separately governed measurement, transformation, and work-to-change claims.

Epistemic change — Proof revision

The world-side occurrence lemma-42-check-2025-08-08, an individual of U.Work, stands in an obtaining performedBy relation to an exact RoleAssignment occurrence whose holder is LeanServer, and in an actual enactsMethod relation to CheckAndReviseLeanProof@Lean. proof_tactic.lean, any exact MethodDescription edition, the theorem episteme, carrier or episteme change, and the check log remain separately governed. An exact evidence-use relation may use the log to support a receiving claim; production by the performer does not itself confer evidence status or support.

Reflexive maintenance — “calibrates itself”

When the calibration controller and sensor suite are independently grounded as distinct internal positions, split into Regulator (acting position) and Regulated (changed position), cite the exact interaction and independently obtaining relations involving any claimed Work occurrence, and keep evidence separately governed; no self-evidence.

Joint or non-separable physical participation

A tide-related change of seawater can be one independently grounded A.3.4 transformation. Moon–Earth–ocean gravitational coupling, joint dynamics, and causal participation are recovered through their direct relation, dynamics, interaction, and causality owners. Coupling or a minimal physical-agentivity reading alone does not make the Moon a holder of TransformerRole@Context and does not create U.Work. Use C.26 only if a residual probe-, frame-, order-, incompatible-read-, or no-faithful-export lens issue remains; C.26 is not physical quantum ontology or a second transformation owner.

Reflexive work — scratching oneself

For a genuine work-on-oneself claim, the containing holon is the person, the acting position is the grounded neural-control/right-arm subsystem, and the changed position is the grounded left-hand tissue or state. The exact U.RoleAssignment, applicable method, dated work, work-to-change facts, and A.3.4 occurrence remain separate. Selecting these already grounded subholons uses A.14/C.13; it is not an MHT unless the person as a whole is reidentified under B.2.

Conformance Checklist (normative)

CC‑A3‑0 - U.RoleAssignment presence. A world-side Work occurrence performed by a system bearing TransformerRole@Context MUST stand in an exact obtaining performedBy relation to a U.RoleAssignment occurrence. A conforming assertion or description designates the Work, assignment, and relation; the assignment has A.2.1's four participants: exact holder System, role value, role-taxonomy episteme edition, and effective ReferenceScheme. State the currently known assignment extent separately as assignmentInterval in the assignment assertion or occurrence description when needed. A context label is not a generic fifth participant. For a non-Work actor-side claim, use its direct governor and introduce a work-facing assignment only when that relation is independently current.

CC‑A3‑1 - Acting-side distinction. When an asymmetric actor-side claim is current, its directly governed acting and changed positions MUST be distinct for that claim. When performed Work is current, each obtaining performedBy relation reaches an exact RoleAssignment occurrence. In reflexive Work the acting and changed positions MAY be grounded subholons or positions inside one containing holon; the containing holon need not be reidentified. Do not force this split or a role assignment onto a natural, joint, relational, non-separable, or formal change merely to satisfy A.3. This preserves acting-side externalization without fictive actors.

CC‑A3‑2 - Method-description-Work-assertion separation. U.MethodDescription is a description episteme, U.Method is a run-independent semantic way of doing, and a Work individual admitted under U.Work is a world-side dated performed occurrence. A Work assertion or description is another U.Episteme; a log, ticket, or carrier may express or support it but is not the occurrence. Neither Method nor MethodDescription is a run-time occurrence. A changed description edition and performed Work are separate facts, and a claim that Work occurred remains admissible without a MethodDescription reference when no receiving use relies on an exact description edition.

CC‑A3‑3 - Boundary-crossing evidence. A conforming actor-side or work-to-change assertion MUST designate the exact direct participation, interaction, flow, causality, or work-to-change facts on which it relies; an A.3.4 occurrence alone supplies none of them. Conservation-class effects, when claimed, MUST satisfy the applicable B-invariants.

CC‑A3‑4 - Method and conditional description traceability. Every Work individual admitted under U.Work stands in an exact actual enactsMethod relation to the U.Method it enacts; the assertion or description used by a receiving claim MUST designate both sides and that relation. Cite an exact U.MethodDescription edition only when the receiving claim depends on that edition to identify, constrain, or justify the Method. If actual enactment departs from a cited description, state the description-selection, override, exception, or deviation claim under its direct owner and apply the Work continuity policy to the actual occurrence facts. Absence of a description reliance claim is not silent drift.

CC‑A3‑5 - Episteme as object-under-change. When Work on an episteme or its carrier is claimed, the performer is still a System; episteme identity, carrier continuity, edition succession, publication, and any actual carrier change remain under their direct owners. Do not infer a performer from the episteme change itself, and do not force every episteme history into one PhaseOf relation. See C.2.1, E.24.PUB, A.14's mereology firewalls, and direct epistemic aggregation owners when current.

CC‑A3‑6 - Units and measures for performed resource use. Every performed resource-use fact relied on for a claim about Work MUST state its measure and units. A percentage that enters a resource aggregation must be grounded in the exact PortionOf measure needed by that use. Totals, allocation, overlap handling, deduplication, and optional Gamma_work notation belong to a separately recovered B.1.6 aggregation, not to Work identity.

CC‑A3‑7 - Authority, justification, and provenance boundary. Authority, justification, and provenance are not optional-looking required fields of a RoleAssignment occurrence or Work occurrence. When a receiving use relies on one of them, identify the exact episteme and direct authority, justification, source, evidence, or provenance relation and connect it to the exact assignment occurrence, Work individual, assertion, or description. None of those neighboring claims makes the assignment obtain or the Work occur.

CC‑A3‑8 - Agentic policy, planning, Work, and outcome separation. An agentic case does not license a generic D.Policy → U.PlannedAction → U.Action pipeline. Recover each exact policy, objective, selection or decision, WorkPlan, RoleAssignment, dated Work, actual change, and outcome claim under its direct owner when that claim is current. A policy does not create a plan or Work; a plan does not prove Work; and Work does not prove an outcome. Do not mint U.PlannedAction or U.Action from ordinary action wording.

CC‑A3‑9 - Local interpretation and exact crossings. Interpret each RoleAssignment occurrence through its exact role-taxonomy episteme and effective ReferenceScheme, and test compatibility through the exact rule current for that assignment use. Similar labels across localities establish neither equivalence nor conflict. When a receiving use needs exact local-sense correspondence, use F.9 only for the exact SenseCell correspondence and its admitted use; role-value, policy, criterion, verdict, or other mappings retain their direct owners.

CC‑A3‑10 - Use-driven aggregation boundary. Neither a MethodDescription nor an assertion about Work MUST make every Gamma family runnable. When a receiving use needs order-sensitive Method composition, recover B.1.5 and optional Gamma_method; when it needs a temporal aggregate over exact Work intervals, recover B.1.4 and optional Gamma_time; when it needs a resource ledger, recover B.1.6 and optional Gamma_work. A system-boundary or epistemic aggregation likewise uses its exact direct owner. Each aggregation has its own EntityOfConcern, policy, evidence, and admissible use; none is a universal field or identity condition of MethodDescription, RoleAssignment, or Work.

Consequences

Benefits

  • Explainability by construction. A conforming assertion about performed Work designates the world-side occurrence, exact performedBy RoleAssignment occurrences, enacted Method, and the direct neighboring description, capability, work-to-change, evidence, or aggregation claims on which the current use actually relies; actual-change identity remains separately inspectable under A.3.4.
  • No category errors. Keeping methods/roles out of mereology and enforcing DesignRunTag separation prevents the usual “process‑as‑part” and “version‑as‑component” mistakes. (A.14 + A.15.)
  • Composable analytics without hidden ownership. Exact Work intervals and performed resource-use facts can feed separately recovered B.1.4 or B.1.6 aggregations; the selected policy, evidence, and result remain inspectable at that direct owner.
  • Local plurality without whole-context bridges. Exact role taxonomies, ReferenceSchemes, compatibility rules, and use-specific mappings let local practices differ without treating a shared label or one bridge as wholesale equivalence.

Trade‑offs

  • More explicit separation when reliance needs it. Start with the smallest grounded performer-assignment, Method, and Work claims; add MethodDescription, capability, policy, plan, change, evidence, and aggregation relations only when a named use depends on them.
  • Discipline for genuine reflexive work. Modellers must ground distinct acting and changed positions before using a controller–plant or other reflexive split; this adds one relation when the claim needs it and avoids both self-magic and arbitrary decomposition.

Rationale (post‑2015 cross‑domain support)

Constructor theory (post‑2015). Constructor theory informs the distinction between possible and impossible tasks and the conditions on substrates and constructors. A.3 adopts that modal discipline without equating a constructor-theory constructor with an FPF performer or TransformerRole holder. In the performed-Work branch, an independently grounded System may be the holder of an exact RoleAssignment, and a Work occurrence performed under that assignment may enact an exact Method; natural, spontaneous, joint, formal, or otherwise non-agentive transformation remains possible without that actor-side factorization. A MethodDescription may describe a task or Method, but it is neither the constructor nor the Work. (Royal Society Publishing, arXiv, Constructor Theory)

Active inference & free‑energy mechanics (2017→). When an agentic claim is current, active-inference and free-energy work motivates keeping policy, objective, observation, selection, planning, performed Work, and evidence distinctions visible under their direct owners. It does not supply a universal action pipeline, make agentivity a Work occurrence, or make one policy, plan, or posterior prove another. (MIT Press Direct, PubMed, arXiv)

Provenance and FAIR packaging (2016→). FAIR, RO-Crate, OpenLineage, and ML Metadata motivate exact, machine-actionable provenance and evidence links when a receiving use relies on lineage, editions, runs, or jobs. A.3 therefore preserves those links as separately governed relations rather than making {authority, justification, provenance} constitutive fields of RoleAssignment or Work. (Nature, researchobject.org, SAGE Journals, openlineage.io, GitHub, arXiv)

Together, these lines of work support explicit actor-side participants and, for performed Work, exact role-assignment and performer relations, method-description/Method/Work separation, directly governed participation and deltas, and traceable local interpretation. They do not establish that every actual change has a performer, that broad physical agentivity supplies TransformerRole, or that coupling alone is U.Work.

Relations

A.7 Strict Distinction. A.3 keeps the target EntityOfConcern, MethodDescription, Method, RoleAssignment occurrence, dated Work occurrence, Work assertion or description, actual change, log or observation, and evidence relation distinct. A recipe or log is not part of the target, and a record about Work is not the Work occurrence.

A.12 Acting-Side Externalization & External Transformer. A.3's CC-A3-1 uses A.12 only when an actor-side or reflexive-work claim is current. The split keeps grounded acting and changed positions distinct for that claim; it neither invents an actor for non-separable change nor turns ordinary descent to already grounded parts into an MHT.

A.13 Agential Role. When an agency claim is current, A.13/C.9 governs its characteristic profile while A.3 keeps identity, role assignment, method, plan, work, transformation, and evidence separate. Scale-free or minimal physical agentivity, observerhood, self-evidencing, or causal participation does not by itself establish an obtaining U.RoleAssignment, TransformerRole@Context, method enactment, or dated Work.

A.3.4 Bounded Change Under Conditions. A.3.4 independently identifies one actual bounded transformation from the changed referent and subject-side occurrence facts. A.3 opens only when an actor-side enactment claim is additionally grounded. Natural, spontaneous, formal, relational, and joint-dynamics changes therefore need no fictive performer.

A.3.3, direct relation, interaction, and causality owners. These owners establish participation and causal structure. Use an asymmetric actor-target factorization only when that result is independently grounded; retain a joint or non-separable account otherwise. C.26 may test a residual probe, frame, order, incompatible-read, or no-faithful-export lens issue, but it is neither physical quantum ontology nor a second transformation owner.

A.15 Role-Method-Work Alignment. A.3 relies on A.15's separation of role value, exact world-side RoleAssignment occurrence, run-independent Method, conditional MethodDescription reliance, intended WorkPlan episteme, world-side dated Work occurrence, and any assertion, description, log, or evidence about that occurrence. The Work stands in an actual enactsMethod relation; a MethodDescription may describe the Method; neither the description, plan, nor record proves that Work or actual change occurred.

A.14 Advanced Mereology. A.3 consumes A.14/C.13 only for independently grounded part or structure relations and forbids role or recipe leakage into part-whole trees. Selecting grounded internal positions for a reflexive claim is not an MHT; B.2 opens only when the containing whole is actually reidentified.

B-cluster (Gamma sections). A.3 supplies grounded actor-side facts and exact Work occurrences; receiving assertions may designate them, but A.3 does not require a universal bundle of Gamma calculations. B.1.5 governs order-sensitive Method composition and optional Gamma_method; B.1.4 governs a selected temporal aggregation and optional Gamma_time; B.1.6 governs a selected Work-resource aggregation and optional Gamma_work. System-boundary and epistemic aggregations use their exact direct patterns when current. Every such result has its own EntityOfConcern, policy, evidence, and admissible use rather than becoming a field or identity condition of MethodDescription, RoleAssignment, or Work.

Indexing to the glossary. Terms used here (TransformerRole, Work, Method, MethodDescription, PortionOf, PhaseOf, BoundedContext) remain exactly as defined in Annex A; see A.1/A.2/A.14/A.15 entries for lexical registers.

A.3:End

U.Method: Reusable Way of Doing with Explicit Applicability

Type: Definitional pattern Status: Stable Normativity: Normative

Problem frame

Use this pattern when a project needs to say how something is done in principle without prematurely treating that method or practice claim as a document, program, workflow diagram, plan, run log, role assignment, capability statement, mechanism claim, cultural tradition, discipline position, or mathematical-model claim before those positions are recovered.

Typical moments:

  • a team says "the method is the code", "the process is the BPMN", "the workflow is the evidence", or "the solver model is the operation";
  • a practice, procedure, protocol, proof script, optimization model, control strategy, or recipe is intended for reuse across many runs;
  • two descriptions look different but may describe the same way of doing;
  • a graph, query, table, dashboard, checklist predicate, or mathematical representation is being interpreted as if it were an instruction sequence;
  • work planning, dated work, method description, formal substrate, mechanism, role assignment, cultural-evolution, discipline, and evidence are starting to collapse into one vague "method" or "practice" word.

Primary EntityOfConcern. The EntityOfConcern is the U.Method: one reusable semantic way of doing under stated participant meanings, applicability, preconditions, intended effects or preserved conditions, and bounds. Cite an exact effective reference scheme and local senses only when their variation changes that method meaning. U.Method is a non-agentive holon kind: methods can have submethods, compose into whole methods, and participate as submethods of larger methods. This does not make a method an actor, a method description, a work plan, or a dated work occurrence. A step label or step description is not a method part unless the recovered object is itself a U.Method.

First useful move. Name the reusable way of doing, its generic participant meanings, applicability, preconditions, intended effect or preserved condition, and the concern it addresses—for example changing, observing, comparing, classifying, evaluating, communicating, selecting, proving, or preserving. If local terminology changes that answer, cite the exact effective reference scheme and local senses. The method remains this pattern's primary EntityOfConcern; this semantic statement establishes no planned assignment, actual participant, actual transformation, or result.

What goes wrong if missed. A diagram starts authorizing work, a query plan starts looking like performed work, a program starts looking like proof of operational success, or a graph path starts looking like a route that something followed.

What this buys. The project can reuse, compare, describe, plan, enact, and audit a way of doing without confusing the method with its descriptions, runs, mechanisms, mathematical substrates, evidence relations, gates, or authority claims.

Not this pattern when. If the sentence is about a document or representation that describes a method, schedules work, reports dated Work, declares a mechanism, presents a mathematical lens, cites evidence, decides a gate, asserts authority, or publishes a view, use that claim's owner. For a claim-bearing episteme about one exact Method, apply A.3.2's same-individual membership test; a carrier or representation is not thereby linked directly to the Method. State any planning, enactment, realization, evidence, gate, authority, publication, or representation relation only under its direct owner when it actually obtains.

Problem

Without a current U.Method distinction, FPF cannot repair method-like wording cleanly. Texts then slide among several different claims:

  1. Description as method. A SOP, code repository, proof script, BPMN diagram, SQL query, solver model, or protocol is treated as the method itself.
  2. Plan or run as method. A calendar plan, access plan, run log, telemetry trace, or work-result record is called the method.
  3. Mechanism or formal substrate as method. A mathematical object, formal substrate, mechanism declaration, causal model, or control structure is used as if it already selected the way of doing work.
  4. Role or capability leakage. Named people, organizations, teams, permissions, or capability thresholds are baked into the method instead of being kept in role assignment, authorization, capability, or gate patterns.
  5. Programming-paradigm overread. Imperative, functional, logical, constraint, object-centric event, or effect-handler wording is taken as a direct ontology of work rather than one possible description or representation of a way of doing.

The practical harm is fragile reliance. Changing a publication looks like changing the method; a run error looks like method invalidation; a mechanism declaration starts authorizing work; and a dashboard cue starts acting like evidence or permission.

Forces

  • A method has enough identity stability to support comparison, reuse, teaching, improvement, and audit across many runs.
  • Work still happens in dated situations with exact performer assignments, actual participants, resource uses, conditions, and separately governed effects; a method statement establishes none of those occurrence-side facts.
  • Method descriptions can be executable, formal, graphical, procedural, declarative, or hybrid; publication form alone does not decide the method ontology.
  • Mechanisms and mathematical substrates often make a method explainable or constrained enough to rely on, but the mechanism claim and the method claim still answer different project questions.
  • A useful method statement remains applicable to welding, clinical triage, proof construction, optimization, agent orchestration, lab protocols, software execution, and organizational work without making software notation the default model of method.

Solution

U.Method is the reusable semantic way of doing under stated applicability.

Local method mantra. Name the reusable way; say who or what it is for and when; state the intended result or preserved condition and the nearest stop; add an effective reference scheme or a selected structure only if changing it would change the method identification or the next decision; keep descriptions, plans, Work occurrences, and mechanisms separate. This is an attention aid, not a work order, U.WorkPlan, dated enactment, or DemonstrativeUnfoldingSlice@Context.

It is a non-agentive holon kind. Part methods can be selected, bounded, ordered, joined, adapted, and hidden or exposed through method interfaces to form a whole method with whole-level preconditions, effects, invariants, constraints, and assurance hooks. The whole method may then be used as a part method in a larger method.

It is not the text, code, diagram, model, plan, run, role, capability, or evidence relation that may be associated with that way of doing. A U.Method is:

  • semantically local: its identity uses the declared participant meanings, applicability, conditions, intended effects or preserved conditions, and bounds; add an effective reference scheme and local senses only when a meaning difference would change the method identification or a stated comparison;
  • semantic: it is the way of doing that descriptions denote and work may enact;
  • concern-explicit: it states what a future enactment is intended to do or decide—change, observe, compare, classify, evaluate, communicate, select, derive, prove, control, produce, or preserve—and its intended effect or preserved condition; it identifies no actual changed referent, participant, occurrence, or result;
  • description-independent: one method may be described by several U.MethodDescription epistemes;
  • run-independent: one method may be enacted by many Work occurrences admitted under U.Work;
  • assignment-independent: method admission conditions may name role kinds or capability-fit conditions, but named holders and dated assignments belong elsewhere;
  • participant-semantic: it may state generic participant meanings and method-side applicability without declaring RelationSignature SlotSpecs, OperationAlgebra argument or result positions, planned fillers, or actual participants.

Do not begin by replacing method or practice with a preferred technical word. First finish the ordinary sentence, "Here the text is trying to name or assert ___." Then use this one routing map:

If the text is really about...Govern it as...
semantic way of doingA.3.1 U.Method
relation or composition among methods, method families, method-description epistemes, or local method expressionsC.2.1 or the exact comparison/direct-relation owner for an actual relation among description epistemes; A.22 only for a selected structure whose constituent relations already obtain; G.5 and A.19 for family selection; A.15.1 for enactsMethod; B.1.5 for order-sensitive method composition; C.29 for graph or algebraic representation
description of that way of doing: SOP, program, proof script, solver model, protocol, diagram, process model, recipe textA.3.2 U.MethodDescription
source phrase such as practice, technique, school, tradition, or a local method label whose claim is unclearleave it unresolved until the sentence identifies a reusable way, description, discipline or tradition, or model-use boundary; use A.1.1 for the bounded-context or model-use claim and C.36.P for the cultural-evolution, tradition, style, canon, recognition, selection, or mediation claim
selected formal declaration or mathematical lensA.6.0 for the declaration; C.29 when a stated use applies the mathematical lens
mechanism declaration or realization relationA.6.1 and E.20
role assignment, role relation, responsibility allocation, or holder eligibility hidden under a practice or method phraseA.2, A.2.1, A.2.7, and A.15 as applicable
planned dated work or authorization to prepare workA.15.2 U.WorkPlan plus the relevant gate, authority, or commitment pattern
dated work occurrence or run; trace, log, or result recordUse A.15.1 for the dated Work. Route a separate record or result by what it asserts—measurement, evaluation, production, delivery, acceptance, or evidence—and link it to Work only through a relation that its owner admits.
field, bounded-context or model-use, discipline or tradition, recognition or selection, mediation, variant, or cultural-evolution claimUse A.1.1 for a bounded-context or model-use claim; C.20, C.36, or C.36.P for a discipline, tradition, canon, or cultural-evolution claim; and F.17, F.18, F.9, C.18, C.19, G.5, or G.11 only after the sentence names its sense, recognition, mediation, variant, selection, or currentness claim.
evidence or provenance relation for a claimA.10
graph path, query, table, dashboard, publication face, or pattern relation made to prescribe action by its layoutapply C.2.P.DR, then state the actual method, Work, gate, or authority claim—or stop when none is present

Strategy wording by claim position

Treat strategy as ordinary source wording until the sentence's claim position is clear. Do not mint U.Strategy.

When the wording names a reusable way of deciding or acting under stated applicability, it identifies a U.Method. A clinical treatment strategy, manufacturing setup strategy, search strategy, or negotiation strategy qualifies only when it states the reusable action, participant meanings, preconditions, intended result, and bounds.

When a protocol, playbook, program, diagram, or prose passage describes that way, that episteme may be a U.MethodDescription. Reusable strategizing can itself be a U.Method; a dated strategy workshop, search episode, or planning session is a Work individual only when its A.15.1 occurrence basis is grounded.

When the sentence is about choosing among candidates, use A.19.SelectorMechanism and G.5 for the actual criteria, policy, and selector outcome. The label strategy does not replace those objects or prove that a reusable method has been stated.

Leave quoted or explanatory strategy wording alone when it carries no FPF claim. The repair is complete when a reader can say what the sentence asserts and which pattern owns that assertion, not when every occurrence has been replaced.

Thin first-use method identification

Start with the least apparatus that lets another reader recognize the same method:

  1. Ordinary use. State the reusable way of doing, the kinds of participants it is for, when it applies, what it is meant to achieve or preserve, and the nearest case in which it must not be used. If that sentence is enough for the decision at hand, stop.
  2. Later comparison or reliance. Fill the Plain aid below when another person must later distinguish same-named methods, compare descriptions or variants, cite one edition in a plan, or audit why this method was selected.
  3. Organization of several methods or uses. Open A.22, B.1.5, or another direct composition pattern only when the question is about the organization itself—for example, which methods were composed, selected, used as fallbacks, or enacted in the reviewed work. A list or diagram does not create those relations.

Moving to a heavier level must solve one of those concrete problems. More fields do not make the method real, authorize its use, or prove that work occurred.

The following is a Plain identification aid, not a record kind, ontic, serialization, or mandatory form. Omit every optional line that the stated decision does not use.

Method identification aid:
  MethodRef:
  SemanticBasisIfMeaningVaries:
  Applicability:
  GenericParticipantMeanings:
  MethodConcern:
  Preconditions:
  IntendedResultOrPreservedCondition:
  MethodDescriptionIfReliedOn:
  WorkRelationIfReliedOn:
  SelectedStructureOrModelUseIfReliedOn:
  RelationsThatMustObtain:
  RelianceWindow:
  ReviewIf:
  NotEstablished (ClaimBoundary):

NotEstablished states the nearest tempting stronger claim that this identification does not make—for example, permission to start work, a dated run, successful change, metrology acceptance, or evidence that the method works. Use the FPF term ClaimBoundary when another pattern consumes that boundary.

Add SemanticBasisIfMeaningVaries only when the same words have different meanings under another effective reference scheme or set of local senses. Add a claim scope, context slice, selected structure, or model-use relation only when its own predicate obtains and changing it would change the method identification or the later decision. None is a general container for method identity.

For every relied-on relation, name its participants, the relation that must obtain, and the pattern that governs it. A generic source, support, evidence, or current use entry is not a replay basis. RelianceWindow says which variant, time, or description edition the comparison relies on. ReviewIf names the concrete change that would make that comparison unsafe.

Closure and bounded non-use

Close positively when a reader can write the reusable action, generic participant meanings, applicability, preconditions, intended result or preserved condition, and nearest stronger claim that remains unestablished. Resolve an effective reference scheme and local senses only when a meaning difference changes that answer. Cite a method description, selected structure, model-use relation, or Work relation only when the next decision actually reads that relation.

If the project also claims an actual change, finish the method identification first. Then open A.3.4 for the actual changed referent, temporal boundary, subject facts, and transformation identity; the reusable method supplies none of them.

Close by non-use when the source is only a description, plan, dated Work occurrence, mechanism declaration, selector result, role relation, evidence relation, publication use, or quoted wording. If the material does not distinguish those positions, retain the source phrase as an unresolved cue and stop rather than inferring U.Method.

Method and mechanism settlement

Do not decide from words such as method, algorithm, process, or mechanism. First ask what the sentence lets the project assert:

Plain questionAnswer and owner
What reusable way of observing, deciding, deriving, changing, or preserving is meant?State the U.Method under A.3.1: participants, applicability, conditions, intended result or preserved condition, and boundary.
What reusable family of operations and laws is declared?State the separate U.Mechanism declaration under A.6.1: its concern, subject and range meanings, operation algebra, laws, admissibility conditions, and Applicability.
What happened on this dated occasion?Identify the Work occurrence under A.15.1. Its performer system, covering assignment, enacted method, extent, containing system, bindings, and resources are occurrence-side facts, not method or mechanism fields.
What correspondence, realization, or support claim is being made around those objects?Name the relation, its participants, and the pattern that admits it. If no such owner is available, keep the objects separate and stop rather than implying the relation.

A method statement may cite a mechanism episteme whose content declares operations used by that method. A shared concern or operation name does not make the two values identical. A selector may choose a method, and an A.6.1 application may bind a method as an actual value. State that use only when the selector outcome, application binding, or another admitted direct relation is present; otherwise keep the method and neighboring object separate. None authorizes Work merely by being named.

Keep the nearby relation families distinct once, here. An F.9 Bridge between two exact F.17 SchemeSenseCell values states a cross-context sense correspondence; it does not change an effective reference scheme or establish identity. A claim that this Bridge suits one named use remains a separate C.2.1 bounded-use claim, and A.10 or B.3 governs reliance on that claim. An A.6.1 realization relation connects a mechanism declaration to a realizer; it is not the mechanism content. C.29 governs a mathematical preservation or representation claim. E.20 governs where mechanism meaning is maintained. Evaluation, measurement, and evidence-use patterns support their own claims; they do not add content to the method or mechanism.

When neither the reusable way nor the reusable operation declaration can be stated, keep the source wording unresolved. Replacing it with a more technical noun is not a repair.

Method, MethodDescription, WorkPlan, Work

Keep the four positions separate.

PositionWhat it meansCommon mistaken substitutes
U.Methodhow in principle, for stated participants, applicability, conditions, effects, and boundscode, SOP, graph, solver model, proof script, workflow diagram
U.MethodDescriptionan episteme that describes a method in a representationmethod semantics, actual run, authority to work
U.WorkPlanplanned dated work or work preparationtimeless method, generic recipe, proof that work happened
U.Workadmitted kind for dated Work occurrences; one Work individual is one world-side occurrencemethod, plan, result interpretation, evidence relation, or record about the occurrence

The same solver model, repository, protocol, diagram, or run packet may figure in several claims, so say what each sentence is about. The solver-model episteme may describe a method; its mathematical representation may expose a C.29 formal substrate; a dated solver run may be Work; and a measurement or evaluation result may support another claim through its evidence relation. None substitutes for another.

Method statement fields

A useful U.Method statement can usually answer these questions in ordinary project language:

FieldWhat to name
Method namethe reusable semantic way of doing
Semantic basis when neededthe effective reference scheme and local senses whose variation would change the method meaning
Applicabilitythe candidate family, conditions, limits, and qualification window under which the way of doing applies
Method concernwhat future enactments are intended to change, observe, compare, classify, evaluate, communicate, select, derive, prove, control, produce, or preserve; this is reusable semantic content, not an actual occurrence
Preconditionsstates already in effect for the method to be applicable
Effects or postconditionswhat successful enactment is meant to produce or preserve
Generic participant and boundary meaningsthe kinds of entities, resources, conditions, interfaces, and method-side role-kind or capability-fit conditions that a future enactment may involve, without declaring RelationSignature SlotSpecs, OperationAlgebra positions, planned fillers, or actual participants
Capability acceptance conditionsthresholds or envelopes evaluated against a holder's capability, not baked into the method identity
Failure and stop conditionswhen the method cannot be used, when a description no longer states it accurately, and when planned Work must not enter its gate
Method-description membershipwhich epistemes, if any, meet A.3.2 membership for this exact Method; any comparison or plan must separately name the edition and claims it uses
Work relationwhat Work occurrences admitted under U.Work may enact the method and how their separate records cite the description used

This table is a recognition checklist, not a data schema. Start with the ordinary method sentence. Use A.6.1 for a reusable operation declaration, A.6.5 for a reusable direct-relation declaration, A.15.2 for planned use, and the exact direct relation or A.6.1 application binding for actual participation.

Representation and programming-paradigm discipline

A U.Method need not be written as an imperative sequence. Code, rules, constraints, process diagrams, SQL queries, proof scripts, optimization models, and functional or effect-handler programs can all describe or represent a way of doing without becoming that way.

Choose by the claim being made:

  • If the sentence states the reusable action, participants, applicability, intended result, and boundary, use A.3.1.
  • If it points to code, prose, a protocol, diagram, solver model, or other episteme that describes the method, use A.3.2. Use A.6.0 or C.29 when the claim is instead about a formal declaration or mathematical representation.
  • If it declares a law-governed operation family or asks where that declaration is maintained, use A.6.1 or E.20.
  • If it schedules future work or reports a dated occurrence, use A.15.2 or A.15.1.
  • If it claims evidence, provenance, or support, use A.10 and the direct evaluation or measurement owner. If a graph, path, query, table, dashboard, or publication face is being made to route or authorize action by metaphor, apply C.2.P.DR before choosing that owner.

Keep cross-context and application claims separate from those five choices. F.9 governs a Bridge between two exact F.17 SchemeSenseCell values. A claim that this Bridge suits one named use remains separate under C.2.1, and A.10 or B.3 governs reliance on that claim. C.2.1, A.6.3, A.6.3.RT, A.6.4, or A.1.1 governs an actual change of episteme edition, reference scheme, representation scheme, retargeting, or model-use relation. A.6.1 governs a mechanism realization or application binding. State one of these only when its participants and predicate are present; otherwise stop at the source objects without asserting the relation.

Thus algorithm and practice remain source cues. “The SQL query is the method” fails unless the project can state the reusable way of querying, its admissible inputs, intended result, and stop independently of that query text. “Our review practice is the method” fails when the sentence is actually about a team assignment, dated review, discipline, tradition, evidence record, or publication.

Constructor and process-theory settlement

When a method concerns change, its statement says what change a future enactment is meant to achieve; it does not assert that any referent changed. Observation, comparison, classification, evaluation, communication, selection, proof, and preservation methods use the same rule: the reusable way can be identified without fabricating an actual change occurrence.

The constructor-theory and process-theory source line supports this separation but does not supply a universal method ontology. FPF uses it as follows:

  • An admitted U.System performs dated Work under an obtaining U.RoleAssignment. F.6 performedUnderAssignment(W, RA) attributes that Work to the assignment, while the holder system performs it; the assignment neither acts nor enacts the method. A.15.1 separately requires the actual enactsMethod, extent, and executedWithin relations.
  • The U.Method is the reusable way under stated participant meanings, applicability, conditions, intended result or preserved condition, and bounds. A U.MethodDescription is an episteme that describes it.
  • A formal substrate or mathematical lens can make the method analyzable, and a U.Mechanism can declare the relevant operation family and laws. Neither becomes the method by providing a formula or implementation.
  • A cross-context Bridge, changed reference or model-use relation, mechanism realization, evaluation, or evidence-use claim remains a separately stated relation with its own participants.
  • A U.WorkPlan prepares or schedules dated Work; a Work individual is the occurrence that actually happened.

For example, “the etch method changed Wafer-22” contains at least two claims. A.3.1 identifies the reusable etch method. Only if an actual bounded change of Wafer-22 is independently grounded does A.3.4 identify that transformation; any claim connecting the Work and transformation additionally needs its own predicate or an honest missing-governor result.

This settlement works for welding, milling, reagent mixing, clinical triage, proof construction, optimization, scheduling, training, inference, and software execution without treating code as the privileged form of a method.

Semantic identity and variants

Two U.MethodDescription epistemes may describe the same U.Method when the later comparison or reuse decision relies on the same method bases:

  • effective reference scheme and local senses, when a meaning difference matters;
  • generic participant meanings and declared applicability;
  • compatible preconditions;
  • compatible intended effects or preserved conditions;
  • compatible safety and other non-functional bounds;
  • accepted nondeterminism or search behavior; and
  • the same work-facing acceptance relation, when that relation is part of the comparison.

Different control flow, proof notation, programming paradigm, diagram notation, or prose does not by itself make a different method. The converse also holds: the same name, repository, supplier label, or diagram family does not prove identity.

Keep one method across parameter ranges, equipment envelopes, or representation variants only when its declared applicability and the bases used by the comparison admit that variation. A changed intended result, participant meaning, safety bound, semantic basis, or acceptance criterion requires a stated refinement, substitution, or distinct-method decision.

Same-name locality replay. An emergency-department Triage method applies to patient presentations awaiting clinical assessment; a clinician enacting it uses clinical signs to assign urgency, escalates unsafe cases, and stops when the evidence cannot support that assignment. A software-defect Triage method applies to defect reports awaiting product handling; a product team enacting it uses reproduction evidence, severity, and ownership to choose routing and release impact, and stops when the report cannot support that choice. The shared label identifies neither method. Their participants, applicability, local senses, intended results, and stops distinguish them without a generic context object.

No-extra-locality replay. EuclideanGCD over positive integers closes as one method when the integer meanings, division-with-remainder rule, positivity precondition, decreasing-remainder invariant, and greatest-common-divisor result are stated. If those facts answer the comparison, add no claim scope, context slice, model-use structure, or other locality object.

Method relation structure, composition, and work enactment

First decide whether the question is about one reusable way, a composite way, or relations among already identified objects:

  • one reusable way is a U.Method;
  • submethods assembled into a whole remain a U.Method, with B.1.5 used when order-sensitive composition is claimed;
  • relations among methods, descriptions, selectors, or Work occurrences remain those exact relations; select a U.Structure under A.22 only when their organization changes the next question or action.

MethodRelationStructure is only a local designator for such an already selected A.22 U.Structure. It is not a durable U-kind, method holon, or relation type, and the label contributes nothing to identity. Candidate relation families—composition such as serial, parallel, choice, or iteration; method change such as refinement, substitution, decomposition, or parameterization; and selection or use such as family membership, fallback, or enactment—are recognition cues. Method-description membership is not one of those relations: A.3.2 judges the episteme itself. Every selected relation occurrence must already obtain under its direct pattern.

Filled A.22 basis — enacted-method review. For this one-off review, a practitioner selects only two A.15.1 enactsMethod occurrences. No durable selection judgment is asserted, and no composition, fallback, selector, or work-to-pump relation is created.

  • Independently identified constituents. InspectPumpSeal@PumpMaintenance-2026 and ClassifyPumpSealCondition@PumpMaintenance-2026 are independently identified U.Method values. Pump37SealInspectionWork-2026-07-25T0900-0908 and Pump37SealClassificationWork-2026-07-25T0910-0916 are independently admitted A.15.1 Work occurrences: PumpDiagnosticService-A : U.System performs each under obtaining Pump37DiagnosticAssignment-2026-07-25 : U.RoleAssignment; the corresponding F.6 performedUnderAssignment occurrences, exact extents, and executedWithin(..., Pump37MaintenanceCell-A) occurrences obtain. The fixture states no direct Work-to-Pump_37 predicate, so neither Work is said to affect or concern the pump merely because its designator contains Pump37.
  • Selected obtaining relations. enactsMethod(Pump37SealInspectionWork-2026-07-25T0900-0908, InspectPumpSeal@PumpMaintenance-2026) and enactsMethod(Pump37SealClassificationWork-2026-07-25T0910-0916, ClassifyPumpSealCondition@PumpMaintenance-2026) obtain under A.15.1. Their labels, times, or adjacency would not make them obtain.
  • Applied constraint claims. DiagnosticReviewWindowConstraint states that an eligible enactsMethod occurrence must have one of the two independently admitted Work individuals as its Work participant and an extent within 09:00-09:20 on 2026-07-25. NoCompositionFromEnactmentOrderConstraint states that their timestamps and order establish no serial, fallback, or whole-method relation.
  • Selection-use frame. DiagnosticMethodEnactmentFrame states the question: which methods did these two Work occurrences enact during the review window? The admissible action is to list the two enactsMethod occurrences in that review. The prohibited overread is a composite method, work plan, method quality, causal success, authority, or any relation to Pump_37.

Those four discriminators identify DiagnosticMethodEnactmentStructure-2026-07-25-0900-0920, locally designated MethodRelationStructure for this use. Reidentify it only from its four constituents, two obtaining relations, two applied constraint claims, and use frame. Its label, selecting system, selection Work, result episteme, graph, or table is not an identity field. If the project relies on a persisted selection, separately identify the system that made it, the selection method and dated Work, the participation relation or A.6.1 binding used by that Work, and the C.2.1 result episteme. Add a decision claim only if the project also asserts an accountable choice; A.22 puts none of these neighboring objects into structure identity.

Missing-governor stop. Suppose a note additionally calls ClassifyPumpSealCondition@PumpMaintenance-2026 a fallback for InspectPumpSeal@PumpMaintenance-2026, but supplies no direct fallback predicate, compatible participant meanings, or occurrence-identity rule. Keep the two methods and the note, omit the fallback relation, and return missing-governor: fallback relation for <ClassifyPumpSealCondition@PumpMaintenance-2026, InspectPumpSeal@PumpMaintenance-2026>. If the question is specifically about fallback organization, do not select a positive structure until that relation and all four A.22 discriminators are available.

Method-holon composition is not A.14 component mereology. Source labels such as SerialStepOf or ParallelFactorOf remain cues until B.1.5 or another direct owner supplies an admitted relation with participants and an obtaining rule. A method-description node is not a submethod unless the described object is independently identified as a U.Method.

Work composition is occurrence-side. Work may interleave, split, retry, or fail differently from the method description. A temporal Work part can enact the same whole method, and an episode can change Work continuity without changing method identity. Call a candidate a submethod only when it has its own reusable action, preconditions, intended result or preserved condition, boundary, and whole-method relation.

Quick distinction. A step label, graph node, detector component, event-log segment, telemetry interval, work-plan item, or document section is not a submethod by position. If it states a reusable way with method-level conditions and a relation to the whole method, test it under A.3.1 and B.1.5. If it states what happened, when it happened, what a component did, or what a record shows, use the direct Work, mechanism, evidence, or description pattern instead.

Mathematical or graphical notation may describe the selected structure under C.29 or occur in a U.MethodDescription. It does not become the method, structure, plan, Work, mechanism, or selector registry by form. Likewise, a registry row merely lists or describes candidates; it establishes no relation among them.

Archetypal Grounding

Across the slices below, a U.Method is not recognized by source wording, notation, or publication form. It is recognized by a stable project answer to this question:

For these kinds of participants and conditions, what reusable way should a future enactment follow; what should it observe, compare, classify, decide, derive, change, produce, control, or preserve; what result or preserved condition is intended; and when should it stop?

Non-transformative method replay. DuplicateDefectReportComparison applies to two defect reports for the same product and release when both contain the required symptom and version data. An evaluator enacting it compares those fields and records same incident, different incidents, or insufficient information; missing version data is a stop. This closes a method statement without claiming that either report, product, or incident changed and without opening A.3.4.

Actual-transformation branch. The filled Etch_Al2O3 replay in 5.1 closes the reusable method without actual-change facts. If a later assertion says that Wafer-22 changed during Work W-143, identify the Work under A.15.1 and the actual transformation of Wafer-22 under A.3.4 separately; connect them only through a declared predicate or return missing-governor[work-to-change].

Manufacturing, optimization, proof, graph or query overread, and clinical triage differ in material, representation, and assurance needs, but they share the same method-identification question. The archetypal failure is also shared: a nearby description, plan, run, mechanism, formalism, or evidence relation takes the method name and silently changes what the project can rely on.

Manufacturing recipe

Situation. A fab process engineer must decide whether two current SOP editions describe the same alumina-etch method before either description is cited in a work plan. The engineer needs a reusable method identification, not permission to run the tool and not proof that any wafer changed.

Reusable way and applicability. Etch_Al2O3 applies to alumina-coated silicon wafers whose substrate class and coating range satisfy RecipeWindow-Al2O3-3, using a qualified PE-4 plasma-etcher family and the gas-mixture range declared by that window. Its generic participants are the wafer surface, qualified etcher, admitted gas mixture, target-depth parameter, and safety bounds; none is an actual run participant merely because it is named here. A future enactment holds the admitted pressure and temperature envelopes, adjusts exposure until the declared target-depth stop, and preserves the substrate and maximum-temperature conditions.

Preconditions and stop. The method is applicable only when the wafer material and coating range are known, the selected PE-4 calibration is current for the planned use, the admitted gas mixture is available, and the safety interlocks required by RecipeWindow-Al2O3-3 are part of the intended setup. If the wafer is outside that range, the calibration basis is missing, or the target-depth and preservation limits are absent, keep alumina etch as a method cue and stop; do not widen this method by name.

Visible identification result. Under effective FabProcessScheme-2026, where Al2O3, target depth, and substrate preservation have the local senses used above, the engineer can write:

MethodRef: Etch_Al2O3
SemanticBasisIfMeaningVaries: FabProcessScheme-2026 (`Al2O3`, `target depth`, and `substrate preservation`)
Applicability: alumina-coated silicon wafer; RecipeWindow-Al2O3-3; qualified PE-4 family
GenericParticipantMeanings: wafer surface; qualified etcher; admitted gas mixture; target-depth parameter
MethodConcern: remove the admitted alumina layer to the declared target-depth stop
Preconditions: material and coating range known; calibration current; gas and safety setup available
IntendedResultOrPreservedCondition: target depth reached; substrate and maximum-temperature bounds preserved
NotEstablished (ClaimBoundary): no work authorization, dated run, actual participant, actual wafer transformation, metrology acceptance, or evidence claim

This result lets the engineer compare the two SOP claim sets against one method identity and lets a later work plan cite that method and the selected description edition. The SOP, PLC program, calibration recipe, and supplier note remain U.MethodDescription candidates when A.3.2 identifies what each episteme describes (EntityOfConcern) and the substantive claims it carries. The identification does not authorize Work W-143, establish that the run occurred, or establish that Wafer-22 changed or passed metrology. Those stronger claims open their own A.15.2, A.15.1, A.3.4, measurement, evidence, assurance, or gate routes.

Optimization model

Situation and reusable way. JS_Schedule_v4 applies when the jobs, eligible machines, durations, precedence constraints, feasibility rules, and optimization objective are all stated for the scheduling problem. A planner or solver system enacting it constructs candidate assignments, rejects infeasible candidates, compares the remainder by the declared objective, and records the selected schedule or no feasible schedule. Missing precedence data, an unstated objective, or incompatible machine eligibility is a stop rather than permission to guess a method variant.

This identification lets a planner compare two solver packages as descriptions of the same scheduling method. The MILP formulation and solver configuration are U.MethodDescription or formal-substrate candidates according to the claim. The selected production schedule is a U.WorkPlan; the dated solver run is Work; and its decision record is a separate result episteme. None becomes the method merely by containing the same job and machine names.

Proof or derivation

Gauss_Elimination applies to a matrix and right-hand side over a declared algebraic domain in which the required row operations and pivots are valid. A mathematician or proof system enacting it applies equivalence-preserving row operations until solved or echelon form is reached. A missing admissible pivot, unsupported division, or unspecified domain is a stop. The visible result here is a method identification that a later derivation may enact; it is not the derived solution or proof that one run succeeded.

A textbook explanation, proof-assistant script, and formal rule set are method descriptions. A concrete proof-assistant run is Work, and the algebraic structure may be a formal substrate. Using the resulting proof for a project decision additionally needs an evidence or assurance relation.

Graph or query overread

A graph path, SQL query, checklist predicate, or dashboard table normally represents a relation, state, evidence structure, provenance structure, or publication face. It supports a method identification only when the project can separately state the reusable action, admissible inputs, branch criterion, intended result, and stop. A query text that returns rows is still a description or executable representation until that semantic way is stated.

If wording says that the graph “routes” a project, the query “calls” a work sequence, or the table “authorizes” action, apply C.2.P.DR. A visible arrow or row order is the tempting wrong action: it establishes neither method order, dated Work, gate passage, nor authority.

Clinical triage protocol

SepsisTriage_v3 applies to adult emergency-department presentations inside its declared population and assessment window. A clinician enacting it evaluates the stated signs and measurements, assigns an urgency class, and selects the next clinical response. Insufficient evidence, a patient outside the admitted population, or a presentation requiring another protocol is a stop. The visible result here is the reusable triage method and its boundary, not an admission decision or proof of benefit.

The protocol PDF, order-set screen, and decision-support rule are method descriptions or publication faces. A clinician's dated assessment is Work. The physiological model or score formula may be a formal substrate or mathematical lens. Admission policy, treatment release, and evidence that triage reduced harm remain neighboring claims under their own patterns.

Bias-Annotation

This pattern mainly blocks seven recurring biases:

  • description-as-method bias: a publication, program, diagram, or protocol is treated as the method instead of a method description;
  • practice-as-method bias: a source says "practice" and the repair silently chooses U.Method without checking whether the current claim is work, role assignment, discipline, cultural-evolution, evidence, source label, or method relation structure;
  • run-as-method bias: a trace, log, run, or result record is treated as the reusable way of doing;
  • software-notation bias: code, algorithm, workflow, or programming-paradigm language becomes the default ontology for every method;
  • mechanism-overread bias: law-governed mechanism or formal-substrate material is treated as if it already selected the project method;
  • holder-as-method bias: a team, system, supplier, or capability holder becomes the method name;
  • semio-bias: the discussion shifts to wording, a document, publication, or evidence face before the reusable action and its boundary have been stated.

Use one concrete test in every case: can the reader state the reusable action, its participants, applicability, intended result, and stop? If yes, identify the U.Method; apply A.3.2 separately to each candidate U.MethodDescription episteme; route any plan to A.15.2; and state only those enactment, evidence, or other relations that actually obtain. If not, keep the source phrase unresolved or route the claim to the owner shown in §4.

Conformance Checklist

CC-A3.1-1 (Method identity). U.Method is one reusable way of doing under a stated concern, participant meanings, applicability, preconditions, intended result or preserved condition, and bounds. It establishes no actual participant or A.3.4 transformation. A description, plan, dated Work occurrence, evidence relation, role assignment, capability, mechanism declaration, formal declaration, publication face, or pattern relation does not close this test. If the sentence also makes one of those claims, write that claim under its owner and state only the relation to the method that actually obtains.

CC-A3.1-2 (Semantic locality). State the applicability, participant meanings, conditions, intended result, and bounds that distinguish the method. Add an effective reference scheme and local senses only when different meanings would change the identification. Add a claim scope, context slice, selected structure, or model-use relation only when its predicate obtains and changing that object would change the identification or the stated later decision. Same spelling, team, discipline, repository, or location proves none of those bases.

CC-A3.1-3 (Method-description membership and use). When work, assurance, gate, or audit reliance depends on a method description, name the exact episteme and verify that it meets A.3.2 membership for this Method. If several epistemes are treated as descriptions of the same Method, their EntityOfConcern references must resolve to the same A.3.1 identity; compare their claim sets separately for the proposed use.

CC-A3.1-4 (Assignment-free method). A method may state role-kind admission conditions or capability-fit conditions. These are method-side admissibility conditions, not deontic obligations by default. The method does not bind named people, teams, organizations, or calendar allocations.

CC-A3.1-5 (Runtime-free method). A dated run is a Work individual under U.Work, not a method field. A.15.1 separately grounds its performer system, covering assignment and attribution, enacted method, extent, containing system, and every participation or resource relation used by the claim. Telemetry, logs, measurements, evaluations, production, delivery, acceptance, and result records remain separate claims.

CC-A3.1-6 (Plan-free method). Work preparation, schedule, go or no-go date, work authorization, and planned work relation belong to U.WorkPlan, gate, authority, or commitment patterns.

CC-A3.1-7 (Mechanism and formal-substrate separation). A formal substrate, mathematical lens, mechanism declaration, realizer, or control model can constrain or help explain a method only through a relation with stated participants. Use E.10.ARCH:3.1 to classify that neighboring claim. It does not identify the method until the reusable action, applicability, intended result, and boundary are stated.

CC-A3.1-8 (Programming-paradigm neutrality). Imperative, functional, logical, constraint, object-centric event, effect-handler, and hybrid forms remain descriptions or representations until the reusable way and its boundary are stated.

CC-A3.1-9 (Graph and representation guard). A graph path, path slice, query, predicate, table, dashboard, publication face, or pattern relation is not a method or work sequence by layout. Use C.2.P.DR when representation wording is overread as imperative action.

CC-A3.1-10 (Method parts, structures, and Work parts). Call a candidate a submethod only when its reusable action, preconditions, intended result or preserved condition, boundary, and relation to the whole method are stated. Otherwise keep the step, graph node, description fragment, Work part, episode, component behavior, or telemetry slice under its own pattern. A selected method-side U.Structure must have all four A.22 discriminators; layout and list membership establish none of them. Mathematical or graphical notation remains a description or C.29 representation.

CC-A3.1-11 (Practice wording recovery). For a source word such as practice, ask what the sentence lets the reader do: reuse a way, inspect a description, schedule or report Work, allocate a holder, classify a discipline or tradition, cite evidence, or merely quote a label. Choose the corresponding owner only when that action is stated; otherwise retain an unresolved source cue.

CC-A3.1-12 (Parameter and variant discipline). Parameters may be method semantics or content of a U.MethodDescription. A U.WorkPlan may name planned values only against the declaration that gives those values their meaning. An actual value or participant requires an obtaining direct subject relation or A.6.1 application binding; neither method nor description makes it actual. Effects, bounds, participant meanings, applicability, and any semantic basis used by the comparison determine variant identity.

CC-A3.1-13 (Evidence and assurance boundary). A method or method description does not by itself prove that work happened, that a result is warranted for the claimed use, that a gate is passed, or that action is authorized. Those claims use the relevant evidence, assurance, gate, temporal, authority, work-plan, or work patterns.

Common Anti-Patterns and How to Avoid Them

Anti-patternRepair
"The code is the method."If the claim is about the repository or executable text, use U.MethodDescription; if it is about the semantic way of doing, name the U.Method, participant meanings, applicability, effects, and bounds.
"The workflow diagram is the work."Use U.MethodDescription for the diagram, U.WorkPlan for planned work, and one Work occurrence admitted under U.Work for the dated occurrence.
"The graph path routes the decision."Use E.18 when the sentence is about graph structure and C.2.P.DR when layout is being made to prescribe action. If the source actually asserts gate passage or authority, state that separate gate or authority claim.
"The optimization model is the process."Ask whether the sentence states a formal object, a method description, a reusable way, a work plan, dated Work, or evidence; then keep only that claim in the method position.
"The protocol approval proves safe execution."Separate publication-state claim, gate or authorization claim, evidence claim or assurance claim, work plan, and dated work.
"The team is the method."Keep holders and assignments in role assignment and capability in capability; keep participant meanings, applicability, conditions, effects, and bounds with the method.

Consequences

  • Method-like language becomes reusable across physical, informational, organizational, and mathematical work without privileging software code or ordered instructions.
  • Teams can compare descriptions, variants, and implementations without confusing them with dated work.
  • Work planning and evidence become more reliable because a method no longer smuggles in authority, proof, schedule, or performed-work claims.
  • The cost is one explicit choice: before relying on words such as method, practice, algorithm, workflow, process, procedure, program, recipe, proof, or solver, say whether the source means a reusable way, its description, planned or performed Work, a mechanism, a representation, or another concrete claim.

Lowering and local repair conditions

Withdraw a U.Method identification when the text cannot answer the ordinary method question: what reusable action is meant, for which participant kinds and conditions, with what intended result or preserved condition, and where it stops. Also withdraw it when the supposed method is only a document, repository, diagram, model, run log, team, supplier label, or authorization; when one value is called both method and mechanism without a governing dual-typing rule; or when a graph or table is being read as an execution order without C.2.P.DR recovery.

Keep a source word such as practice unresolved when the sentence does not reveal whether it means a reusable way, a description, planned or performed Work, an assignment, a discipline or tradition, evidence, or a quoted label. Do not force one of those meanings merely to complete the form.

Repair locally:

  • If the reusable way is recoverable, rewrite its identification with the missing applicability, participant meaning, condition, result, or stop.
  • If a description, plan, Work occurrence, mechanism, representation, evidence claim, or result has occupied the method position, move that claim to its owner. State a relation back to the method only if that owner admits it; otherwise keep the two objects separate.
  • If a relied-on episteme no longer meets A.3.2 membership, or its cited edition, claim set, acceptance relation, semantic basis, or variant condition changed, review that changed basis and the comparisons that used it; do not invalidate every use of the method.

A new method-description edition changes the method only when it changes a method basis that the comparison relied on. A changed Work fact, measurement, evaluation, production, delivery, acceptance, or evidence result repairs that neighboring claim, not the reusable method by default. Return to G.5 or the direct method-family owner only when the available family or selector no longer separates the needed methods and variants. Poor explanation is a didactic defect to repair; it is not evidence that the method itself changed.

Rationale

FPF needs U.Method because practical work often depends on a way of doing before there is one dated work occurrence, one accepted description, one final implementation, or one verified result. Treating the method as the document, code, mechanism, plan, or run makes reuse brittle: changing the publication looks like changing the method, a run error looks like method invalidation, and a mechanism claim starts authorizing work.

A method claim states the reusable way of doing, participant meanings, applicability, conditions, effects, and bounds. The mechanism episteme declares a law-governed operation family, its subject and range fields, operation algebra, laws, admissibility predicates, and Applicability. A Bridge, realization, evaluation, or evidence-use claim may relate to that episteme without entering its semantic content. The method and mechanism may be linked, but they are not two names for one untyped value.

SoTA-Echoing

Source lineSource refsAdopt, adapt, or rejectEffect in this pattern
Constructor-theory and process-theory bridge, with a current time treatmentGogioso, Wang-Mascianica, Waseem, Scandolo, and Coecke, "Constructor Theory as Process Theory", EPTCS 397, 2023; Deutsch and Marletto, "Constructor theory of time", arXiv v3, revised 2026-06-05.Adopt the separation between a transformation specified as possible or impossible and a concrete process that realizes it. Adapt it beyond physical tasks: an FPF method states a reusable way of addressing a declared concern, with generic participant meanings, applicability, conditions, intended effects, and bounds, without asserting an actual A.3.4 transformation. A concrete realizer is connected to a mechanism declaration by a separate realization relation; any actual changed referent and change occurrence belong to A.3.4, and dated enactment belongs to work. The 2023 paper is a formal bridge and the 2026 paper is a current extension, not evidence that constructor theory alone supplies a universal method ontology.The pattern starts from the method concern and separates method, actual transformation, mechanism, mechanism realization, description, plan, and work. The manufacturing case no longer lets equipment equations or one tool run define the reusable method or prove an actual change.
Scoped effects, handlers, and current semantic non-uniquenessBosman, van den Berg, Tang, and Schrijvers, "A Calculus for Scoped Effects & Handlers", LMCS 20(4), 2024; Matache, Lindley, Moss, Staton, Wu, and Yang, "Scoped Effects as Parameterized Algebraic Theories", ESOP 2024 extended version; Kura, "On Complete Categorical Semantics for Effect Handlers", current 2026 preprint.Adopt the separation among operation syntax, handling semantics, scope, resources, equations, and type-and-effect information. Kura's result strengthens the guard: even a sound formal account need not be the only semantic model of the same handling constructs. Adapt only as a software-derived stress test; these calculi do not define methods in manufacturing, medicine, or organizational work.The pattern refuses to repair algorithm, program, function, handler syntax, or one semantic model to U.Method merely by programming-paradigm label. The proof and optimization cases ask for the bounded way of doing before admitting a method identity.
Current graph, binding, and persistent-equivalence representationsTiurin, Barrett, Ghica, and Hu, "Equivalence Hypergraphs: DPO Rewriting for Monoidal E-Graphs", revised 2025-05-20; Tiurin, Ghica, and Hu, "Categorical E-Graphs for Lambda Calculi", revised 2026-06-25; Merckx et al., "E-Graphs as a Persistent Compiler Abstraction", current 2026 preprint.Adapt the demonstrated distinction between represented equivalence or rewriting structure and an ordered instruction sequence. Binding-aware hierarchical hypergraphs and equivalence state preserved across several intermediate-representation levels show why neither graph layout nor one representation level establishes the semantic method or dated work order. These sources are compiler and formal-representation results, not a general ontology of project methods.Graph paths, queries, tables, rewrite graphs, and persistent compiler structures remain descriptions or formal lenses until a direct method, method-relation, work, evidence, or gate claim is recovered. The graph-overread case and C.2.P.DR exit carry this safeguard.
Historical declarative versus imperative programming contrastsCodd 1970; Kowalski 1979; Selinger et al. 1979; van der Aalst, Pesic, and Schonenberg 2009; Van Roy and Haridi 2004; Deutsch 2013; Deutsch and Marletto 2015.Reject as current SoTA; retain only as lineage and regression contrast.Treat slogans such as declarative versus imperative as recognition cues. Ask what the source phrase actually names—a reusable way, description, formal object, or dated Work—before assigning an FPF value.

Review a project's U.Method identification when a change in participant meaning, applicability, precondition, intended result, preserved condition, safety bound, effective scheme, selected structure, model-use relation, or work-facing acceptance criterion could make a reader identify a different method or allow a different case. If only a description edition, Work occurrence, transformation, representation, measurement, or evidence relation changed, review that neighboring claim unless the change also alters one of those method bases.

Use G.11 when a later decision depends on the freshness or edition of a cited method description or source. A newer paper, implementation, or run is a reason to inspect the relation that cites it, not automatic evidence of a new method. Reopen A.3.1 itself only when stronger work overturns one of the distinctions that the project actually relies on.

Relations

  • Identity and meaning: builds on A.1, A.2, A.2.1, A.2.2, and C.2.1; use F.17 when a local sense matters and G.11 when a comparison relies on source or edition currentness.
  • Description, composition, and variation: coordinates with A.3.2 for method descriptions, A.3.3 for dynamics, B.1.5 for order-sensitive method composition, B.2 for whole reidentification, and G.5 for method families and selector outcomes.
  • Work and change: coordinates with A.15.2 for plans, A.15.1 for dated Work, and A.3.4 only after an actual changed referent and transformation are independently claimed. Role values, assignments, and role relations remain under A.2, A.2.1, and A.2.7.
  • Mechanism and representation: coordinates with A.6.0 for formal declarations, A.6.1 and E.20 for mechanisms, C.29 for mathematical-lens use, F.9 for sense Bridges, and A.1.1 only for an obtaining model-use relation or selected BoundedModelUseStructure that changes the method decision.
  • Source-wording exits: coordinates with C.20, C.36, and C.36.P for discipline and cultural-evolution uses of practice; A.10 for evidence and provenance; and C.2.P.DR for representations overread as routes or Work sequences.
  • Informs: E.18 and E.18.1 when flow-structure or P2W wording must keep descriptions, mathematical paths, method claims, and Work claims separate.

A.3.1:End

U.MethodDescription: Description Episteme for a Way of Doing

Type: Definitional pattern Status: Stable Normativity: Normative

Problem frame

Use this pattern when engineers need reusable claims about how one method is carried out and must keep those claims distinct from the representation, publication, approval, plan, or actual work through which the method is discussed or enacted. In FPF terms, decide whether an already identified U.Episteme is a U.MethodDescription: whether its exact EntityOfConcern is one admitted U.Method and its claims say something substantive about that method as a way of doing.

Plain reading. A method description is the knowledge object whose claims say how one identified method is done. Code, text, or a diagram may represent those claims; a publication occurrence may make an edition available; neither fact decides membership.

Recognizable working moments include:

  • a maintenance team comparing a revised procedure with the method used to plan the next service window;
  • a clinical team selecting a triage guideline while keeping guideline claims, approval, and patient-specific work separate;
  • a production-planning team comparing scheduling-method claims while the MILP representation and solver runs change.

Use it when the working question is:

  • which admitted U.Method is the exact EntityOfConcern;
  • which claim states the method's transformation or enactment concern, applicability, precondition, effect, bound, or internal composition;
  • whether anyone is proposing a use beyond membership; if so, what that use is, where it belongs, and which method claims it needs;
  • which C.29 representation corresponds to the claims, which publication occurrence makes the selected edition available, which publication form expresses it, and which U.PresentationCarrier bears that form—but only when the proposed use needs those distinctions;
  • whether two epistemes describe the same A.3.1-reidentified Method and, separately, whether their claims are equivalent for the proposed use. If their effective reference schemes differ, first establish the F.9 Bridge between the two SchemeSenseCell values. That Bridge establishes correspondence only. Positive reliance on the proposed reuse also needs a separate C.2.1 claim for that bounded use. For ordinary below-threshold evidence reliance with no assurance claim, require RelianceDisposition=pass from A.10. If an assurance claim is current or the B.3 material-reliance threshold is met, enter B.3; positive assurance requires a current positive claim with its sufficient record, while no claim or an insufficient record blocks or narrows the assurance use. A negative or absent use claim, a non-passing A.10 disposition, or a non-positive B.3 outcome blocks or narrows reuse while the Bridge remains true.

Primary governed object. A.3.2 examines one already identified claim-bearing U.Episteme candidate and judges whether that same individual belongs to the dependent kind U.MethodDescription. For positive membership, the candidate episteme's exact C.2.1 EntityOfConcern must resolve to one admitted U.Method, and at least one of its claims must concern that Method as a way of doing. The Method is the internal subject of the episteme's claims, not a second candidate and not the primary object of this membership judgment. A.3.2 adds neither another episteme identity nor a binary description relation.

Primary working reader. An engineer, researcher, publisher, teacher, planner, or auditor who must identify or rely on reusable claims about a method before planning, enactment, comparison, audit, revision, publication, or teaching.

Primary working concern. Identify the claim-bearing episteme and its Method first. When someone proposes a further use, name that use and its owner, then ask which claims the use needs and whether this edition contains them. With no proposed use, stop at membership.

Primary viewpoint. The practitioner selecting, comparing, or revising method descriptions while method identity and the surrounding representation and publication relations remain explicit.

First useful move. Name the candidate U.Episteme. Check two things: its C.2.1 EntityOfConcern is one admitted U.Method, and at least one claim says how that Method is done. If both hold, the same episteme is a U.MethodDescription; if either fails, it is not. Only then, if someone proposes a concrete further use, write that use's criterion and result under the pattern that owns it. Otherwise stop at membership; do not invent Work, a decision, or an adequacy result.

What goes wrong if missed. A visible file or diagram is classified by its form, a mere mention is mistaken for a description, or an episteme about a relation structure among several methods is treated as if it described one composite method. Planning, enactment, audit, and review then rely on the wrong governed object.

What this buys. The project can identify, compare, revise, and reuse method descriptions while keeping the described U.Method, RelationSignature, OperationAlgebra, C.29 representations, publication occurrences and forms, presentation carriers, work plans, work occurrences, and evidence under their own governing patterns.

Not this pattern when. Do not infer membership from words such as algorithm, program, proof, workflow, process, procedure, recipe, or model. Ask what the sentence actually asserts. If its EntityOfConcern is not an admitted U.Method, or it says nothing substantive about that Method as a way of doing, A.3.2 does not apply. Use the owner of the actual method, selected structure, formal declaration, work plan, dated Work, evidence use, or publication use instead.

Problem

Without a precise U.MethodDescription distinction, projects collapse several different claims:

  1. Description as run. A flowchart, repository, executable, lab protocol, or solver file is treated as if it were the dated work occurrence.
  2. Description as method semantics. A notation or file is treated as the method itself, so equivalent descriptions look like competing methods and different methods can hide behind one document name.
  3. Description as plan or authority. A protocol, dashboard cue, gate-looking entry, or approved procedure note is treated as a work plan, permission, gate passage, or evidence result.
  4. Description as declaration, mechanism, or formal substrate. A proof script, algorithm, model, or rule set is treated as if it already were a RelationSignature, an A.6.1 operation declaration, a mechanism law set, or a mathematical substrate.
  5. Imperative overread. A declarative representation, graph path, query plan, constraint model, or state predicate is interpreted as an ordered work-control claim.
  6. Subject identity and description equivalence collapse. Two epistemes that concern the same method are treated as equivalent despite incompatible claims, or a notational difference is used to fork method identity without the A.3.1 reidentification rule.

Forces

ForceTension this pattern resolves
Representation versus method semanticsMany representations can describe one method; one representation can also carry other claims.
Reuse versus enactmentA method description should be reusable before any particular work occurrence happens.
Precision versus notation pluralitySOPs, code, proof scripts, solver models, process models, and lab protocols can all be useful without forcing one algorithmic paradigm.
Reviewability versus overclaimA description may be reviewable and executable, but that does not make it evidence, authorization, work, or mechanism law.
Identity versus variationVariants, refinements, parameter values, and contextual bridges must be visible enough to prevent silent method drift.

Solution

Definition

U.MethodDescription is a same-individual dependent kind of U.Episteme. Membership holds when the already identified episteme has one admitted U.Method as its exact EntityOfConcern and its claims, interpreted under the effective U.ReferenceScheme, make at least one substantive claim about that method as a way of doing. Such a claim may state the method's transformation or enactment concern, generic participant meanings, applicability, precondition, intended effect or preserved condition, bound, or internal method composition. These are claims about method semantics, not planned assignments or actual participation. Naming the method, giving bibliographic metadata, or stating approval alone does not establish membership.

The C.2.1 claim content, exact EntityOfConcern, and effective U.ReferenceScheme remain the identity discriminators of the episteme; A.3.2 adds no second identity. Whether the claims are detailed, current, or reliable enough for a particular planning, enactment, comparison, audit, revision, publication, or teaching use is a separate evaluation. A new receiving use alone neither creates a new method description nor removes membership.

If someone claims empirical grounding, state the C.2.1 EpistemeEmpiricalGroundingRelation. If a proposed use depends on a test, write the tested claim, criterion, evidence path, and result under the evaluation, evidence, or assurance pattern that defines them. Do not add these as method-description fields or let a test change membership.

An assertion or description episteme about one dated Work occurrence may cite methodDescriptionRef when its claim depends on that description edition. The holder U.System performs the Work under an obtaining U.RoleAssignment; F.6 performedUnderAssignment(W, RA) attributes the Work to that assignment, and A.15.1 enactsMethod(W, M) relates it to the Method. The description itself neither performs Work nor is enacted.

Representation-agnostic stance

Begin with the claim-bearing episteme, then distinguish how its claims are made available:

  • a C.29 representation stands in a declared correspondence to the represented claims;
  • an E.24.PUB publication form expresses the selected episteme edition for one publication use;
  • a U.PresentationCarrier bears that publication form.

These are different objects and relations. None becomes U.MethodDescription by appearance. Only the claim-bearing episteme, not its representation, form, carrier, or publication occurrence, can meet the membership rule in 4.1.

The representation may use procedural text, code, a diagram, functional composition, a typed pipeline, a state machine, event rules, constraints, a solver formulation, a proof script, a statistical model, or a combination of notations. Notation choice does not decide membership. Read each assertion separately: use A.6.0 or C.29 when it asserts a formal object, A.6.1 or E.20 when it declares an operation family and laws, A.15.2 when it states intended Work, and A.10 or B.3 when another claim relies on it as evidence or assurance.

Method-description claim content

The membership threshold is positive but small: at least one claim must answer a method-side question about the way of doing. A name, author, citation, catalogue entry, or approval status does not answer such a question. This threshold distinguishes description from mention; it is not a completeness test for a receiving use.

Name the receiving use before asking whether this method-description edition is adequate for it. A receiving use is not required for U.MethodDescription membership. If no use is current, stop at the membership result and make no adequacy claim.

Proposed useWhere that use belongsWhat to check in this edition
membership onlyA.3.2 judges the already identified C.2.1 epistemeno adequacy judgment; do not fabricate a receiver
preparing planned workA.15.2 owns the U.WorkPlan; a gate, authority, or evaluation claim stays with its own patterndoes this edition state the applicability, preconditions, parameters, bounds, and stops that the plan cites?
enacting or recording dated workA.15.1 owns the Work occurrence; its assertion may cite methodDescriptionRef when the edition mattersdoes this edition state the method claims used by that enactment or record? Actual participants and results still need their own relations.
comparing, revising, or auditing claim contentC.2.1 identifies each episteme and any persisted comparison or audit result; the concrete evaluation, evidence, or assurance claim stays with its ownerwhich method claims are preserved, absent, stale, or incompatible for this comparison or audit?
publishing or teachingC.2.1 owns the claim-bearing or teaching episteme; E.24.PUB owns publication occurrence and form; use A.15.1 only for teaching Work that actually happeneddoes this edition preserve the method distinctions needed by this audience or teaching use? Availability or a lesson label does not answer that question.

A.3.2 creates no universal method-description-use relation. Name the concrete receiving object and its owner. Comparing claim sets, revising a publication, or checking teaching content does not require a fabricated Work occurrence or decision object.

Then inspect the claim concerns that matter for that named use:

Claim concernQuestion for the named receiving use
Method describedWhich admitted U.Method is the exact EntityOfConcern, and under which effective reference scheme is it identified?
Transformation or enactment concernWhat way of changing, producing, deciding, learning, or checking does the method organize?
Generic participant and boundary meaningsWhich kinds of entities, resources, conditions, or interfaces may participate in a future enactment, and what method-side meaning does each have? These are semantic claims, not RelationSignature SlotSpecs, OperationAlgebra positions, planned fillers, or actual participants.
PreconditionsUnder which states, guards, invariants, participant conditions, or environmental conditions can the method be used?
Intended effectsWhich postconditions, intended effects, preserved conditions, and failure semantics are claimed for the method, without asserting an actual result?
BoundsWhich latency, precision, cost, safety, reliability, uncertainty, or other local bounds constrain the method?
Roles and capabilitiesWhich role kinds and capability thresholds matter for enactment?
ParametersWhich values may vary between work occurrences, over which ranges, and when are they bound?
Evaluation conditionsWhich criterion compares which concrete Work occurrence, referent, measurement, or result, and which pattern owns that comparison?
Internal compositionWhich admitted methods are parts of one composite method, and what organization constructs that whole?
Variation, edition, and refinementWhich claim content is preserved or changed, and is the current claim about another episteme edition, equivalence of claim content, or refinement of the method itself?
Edition and publication useWhich episteme edition is relied on, and does its publication use affect currentness or availability?

Calendars, assignees, work authorization, gate passage, and dated execution witnesses are governed by planning, assignment, gate, or work-occurrence patterns. They may cite a method description but do not become its claim content merely because they appear beside it.

A U.MethodDescription describes one admitted Method. It is not the RelationSignature that declares participants for one relation kind, the A.6.1 OperationAlgebra content that declares arguments and results for an operation family, the U.WorkPlan that states intended work, a dated Work occurrence, or any actual-participation relation of that occurrence.

Method-description acceptance and use boundaries

A project may accept, regulate, prefer, deprecate, or forbid a method description for one stated use, organization, or policy scope. Record that separate publication, gate, authority, or policy claim under its own pattern. It neither establishes U.MethodDescription membership nor turns the description into Work, evidence, a gate decision, or a mechanism.

When a method description is used to prepare or enact work, keep the chain explicit:

  1. C.2.1 identifies one episteme through its claim content, exact EntityOfConcern, and effective U.ReferenceScheme; A.3.2 judges that same episteme to be U.MethodDescription. Plainly saying that the method description describes the method is shorthand for this constitution and membership judgment, not another binary relation occurrence.
  2. U.WorkPlan may cite that episteme when preparing dated work.
  3. The holder U.System performs dated Work under an obtaining U.RoleAssignment; F.6 performedUnderAssignment(W, RA) attributes it to the assignment, and A.15.1 enactsMethod(W, M) relates it to the Method. A separate assertion cites methodDescriptionRef only when its claim depends on that edition.
  4. The word result is only a cue. Ask which claim is being made: an A.6.1 application returned a value, a referent changed under A.3.4, Work produced something under A.15.PROD, or a measurement, evaluation, delivery, or acceptance occurred. If the use needs a Work-to-result relation and no owner admits one, keep Work and result separate and return missing-governor[work-to-result]. A log, trace, measurement, or result episteme supports another claim only through its evidence relation.

Method, mechanism, and formal-substrate boundary

Do not classify by the source word alone. First say in plain words what someone is trying to change, produce, select, derive, control, or maintain and what the sentence asserts about it. Then use E.10.ARCH:3.1 to separate method, mechanism, formal-object, plan, Work, and result claims; write each claim under its own pattern.

For A.3.2 ask only: is this episteme about one admitted Method, and does at least one claim say how that Method is done? If the same source also asserts a mechanism, formal declaration, work plan, dated Work, evidence use, gate, result, publication, or temporal claim, state that claim separately. Sharing one source does not connect those objects.

Use these claim checks instead of forcing distinct claims into one generic relation:

  • A method-description membership judgment identifies one admitted U.Method as the episteme's exact EntityOfConcern and finds at least one substantive claim about that method as a way of doing.
  • A method claim states the reusable way of doing, its participant meanings, applicability, conditions, intended result or preserved condition, and bounds.
  • A formal-substrate claim concerns the selected formal object, structure, invariant, or mathematical declaration used for reasoning.
  • A mechanism-declaration claim concerns the law-governed operation family, direct subject and range fields, operation algebra, law set, admissibility predicates, and applicability. Transport, audit, realization, evaluation, and evidence-use relations remain separately governed neighboring claims.
  • A work claim concerns one dated occurrence: the holder system that performs it, the covering assignment and F.6 attribution, enacted method, temporal extent, and containing system. Add participant, resource, or work-to-referent claims only through relations that actually obtain; otherwise return the corresponding missing-governor result.

Connect these claims only through an admitted relation whose predicate and participants are present. If no owner admits the needed relation, keep the objects separate rather than inferring dual typing or turning a method description into Work. Example: a scheduling-method episteme can meet the membership rule while a MILP file represents some of its claims. Another episteme may describe the mathematical formulation; a selector mechanism may declare operations over candidate methods; a dated solver run is Work; and an issued production-schedule episteme is a separate result. Use that result as evidence only through a current A.10 path and its bounded disposition. Without that path, keep the result available but do not rely on it as evidence for another claim.

Constructor and process-theory note

In the constructor-theory and process-theory interpretation used here, both informational and physical procedures are understood through possible or impossible transformations. That motivates a broad method-description kind without making software code privileged:

  • an episteme about an information-transformation method may be represented through a program, proof script, or solver model;
  • an episteme about a material, energetic, organizational, or mixed-transformation method may be represented through a procedure, lab protocol, or control recipe;
  • an assertion or description about dated Work may cite a method description; the holder system still performs the Work under an obtaining assignment, F.6 performedUnderAssignment carries attribution, and A.15.1 enactsMethod relates Work to Method. No actor or TransformerRole follows from the description;
  • a mechanism may declare law-governed operation structure for transformations, but that mechanism claim is separate from the method-description claim.

This interpretation does not justify classifying every algorithm-looking expression as U.MethodDescription. It only explains why FPF can treat many representation forms uniformly after the current claim and described method are recovered.

Declarative representation boundary

Some method descriptions use declarative representations: constraint sets, graph patterns, state predicates, SQL-like queries, policy rules, e-graphs, monoidal diagrams, or process constraints. Do not translate such representations into an imperative route unless the method claim actually states an ordered action structure.

If wording turns a graph path, evidence path, query plan, predicate, checklist, publication face, or pattern relation into a route, first say what it represents and whether the source actually asserts an order. Use C.2.P.DR to stop layout from creating a dispatch, call, or work-control sequence; state a genuine ordered method or WorkPlan only under its own pattern.

Composite methods and independent method structures

When claims concern relations among methods, first determine whether the related methods construct one admitted composite U.Method.

If admitted methods are actual method parts whose organization constitutes one composite method under A.3.1 and, when order-sensitive composition is current, B.1.5, the composite U.Method remains the exact EntityOfConcern. A U.MethodDescription can make substantive claims about that composite method's internal organization without changing its object of concern to an independently selected structure.

Description nodes, workflow boxes, code blocks, proof-script blocks, diagram paths, and table rows are representation constituents. They do not become method parts by position in the description. A constituent can participate in method-holon composition only after the recovered object is itself an admitted U.Method.

If a selected relation structure instead connects several methods as alternatives, substitutes, fallbacks, comparison candidates, or members of a family without constituting one composite method, the selected U.Structure is the exact EntityOfConcern under A.22 and C.2.1. The resulting episteme can describe that structure, but the present rule does not classify it as U.MethodDescription.

An algebraic, graph, categorical, process-calculus, effect-calculus, matrix, embedding, distributed, or neural representation can be used to express or analyze either case. Its correspondence to claims is governed separately through C.29. A work plan, work occurrence, method-family registry, or selector result also keeps its own governed object and governing pattern.

Archetypal Grounding

Across the slices below, recognize the claim-bearing episteme before examining how it is represented or published. Ask in this order:

  1. Which admitted U.Method is its exact EntityOfConcern?
  2. Which claim says something substantive about that method as a way of doing?
  3. Is anyone proposing a use beyond membership? If so, name the use, its owner, and the claims it needs; if not, stop at membership.
  4. When expression or availability matters, which C.29 representation corresponds to the claims, which publication occurrence makes the selected edition available, which publication form expresses it, and which U.PresentationCarrier bears that form?

Industrial procedure

A procedure episteme about EtchAl2O3@FabA qualifies when its claims state how the etching method is done: gas-feed participant meanings, temperature bounds, chamber preconditions, intended etch profile, failure conditions, operator role kind, calibration capability threshold, or admitted parameter ranges.

A PDF publication form may express one edition of those claims, and a PLC ladder representation may correspond to some of them. Their visible forms do not establish membership. The scheduled maintenance-window preparation is a U.WorkPlan; tool run W-143 is Work. A metrology result supports another claim only through the evidence relation for that claim.

Named-use replay — preparing WP-Etch-MW-47. The maintenance planner needs four claims before drafting this A.15.2 U.WorkPlan: the chamber is empty, inert, and leak-check complete before gas feed; the method's temperature range is 58–62 °C; calibration is no more than 24 hours old; and pressure above the stated bound stops the run. EtchAl2O3-Description-e7 passes A.3.2 membership because it concerns EtchAl2O3@FabA and says how that Method is done. It also states all four needed claims. To verify that this is the current edition, the planner checks its ClaimGraph against publication occurrence Pub-Etch-e7, publication form EtchAl2O3-SOP-e7, and carrier FabA-MethodRepository-2026, plus the source trace from EtchDescriptionReleaseWork-e7, performed under EtchDescriptionMaintainerAssignment-4 with method trace ClaimGraphReleaseCheck-v2. A.10 path EP-Etch-e7-Plan47 links those sources to claim C-Etch-e7-has-Plan47-claims. Its bounded use is citing e7 while drafting WP-Etch-MW-47; unsupported uses are gate passage, authorization, safe execution, and a claim that Work occurred. Its window reopens when e7, RecipeWindow-Al2O3-3, the calibration rule, or a source named in the path changes. RelianceDisposition=pass therefore supports citing e7 only for this drafting use.

EtchAl2O3-Description-brief-e7 still passes membership because it concerns the same Method and states the gas-feed and temperature procedure. It omits the 24-hour calibration condition and pressure stop. A.10 path EP-Etch-brief-e7-Plan47 points to that brief edition and cannot evidence the two missing claims, so RelianceDisposition=blocked-current-use applies to drafting WP-Etch-MW-47. Reopen after selecting an edition that states both claims; until then the planner stops or selects another edition. Membership is unchanged. If the result must persist, C.2.1 owns its result episteme and ClaimGraph, A.10 owns the evidence path and disposition, and A.15.2 owns the plan. A.3.2 creates no generic adequacy relation.

Optimization model

A scheduling-method episteme qualifies when its exact EntityOfConcern is JSScheduleV4@Plant2026 and its claims state how a production schedule is produced or evaluated. A MILP representation and an explicitly recovered solver-configuration representation can stand in declared correspondence to those claims.

A separate formal-substrate episteme can make claims about variables, constraints, objective, admissible solution set, or invariants. A publication form expressing that episteme may be borne by the same presentation carrier, but the carrier does not make the claims or establish their truth. A timestamped solver run is work. A selector mechanism, if declared, is governed by A.6.1 and E.20. Solver search order does not by itself state the project work sequence.

Proof script

An episteme about a reusable derivation or checking method qualifies when it identifies that U.Method exactly and makes a substantive claim about how the derivation or check is done. A proof-assistant script may represent those claims. The script's notation does not establish membership.

A concrete proof-checking session is work. Claims about a formal substrate, a theorem, or evidence for the theorem remain separately governed even when publication forms expressing those epistemes are borne by the same carrier. A publication occurrence, not the form or carrier, makes a selected edition available to an audience for a bounded use.

Clinical guideline

A guideline episteme qualifies when its exact EntityOfConcern is AcuteAppendicitisTriage@HospitalContext and its claims state the triage method through patient-information and resource participant meanings, exclusions, decision criteria, relevant role kinds and capabilities, intended effects, or failure response. A publication form expresses one selected edition, and a publication occurrence can make that edition available; approval status remains a separate claim.

Patient-specific dated enactment is a Work individual admitted under U.Work. If a causal claim relies on a triage disposition, diagnostic finding, or measurement result, name that premise and apply C.28. Merely using the guideline during Work establishes neither a causal effect nor a causal-use result.

Workflow diagram

An episteme whose claims state one reusable method may qualify as U.MethodDescription; a BPMN or object-centric process model may represent those claims. A diagram can also represent a work plan, event-log model, or independently selected structure, so its notation does not settle the exact EntityOfConcern.

If readers treat the diagram as a route that tokens or workers must follow, compare that reading with the source claim. Keep an ordered sequence only when the method claim actually states one. When order comes only from layout, use C.2.P.DR and stop at the represented graph, constraints, objects, or events.

Bias-Annotation

This pattern mainly blocks six recurring biases:

  • carrier-as-description bias: a PDF file, repository, screen, or presentation carrier is treated as the method description. Identify the episteme whose ClaimGraph is being read, then record its C.29 representation and publication relations separately;
  • description-as-method bias: the representation is treated as the way of doing itself;
  • description-as-work bias: executable or operational-looking representation is treated as dated work;
  • approval-as-proof bias: accepted, approved, or regulated descriptions are treated as evidence, gate passage, or safe execution;
  • notation-prestige bias: code, formal notation, or solver files are treated as more authoritative than procedures, diagrams, or guidelines. Compare the actual method claims; representation form supplies no priority;
  • imperative-metaphor bias: graph, query, predicate, or process-model representation is treated as an ordered work-control claim.

First identify the claim-bearing episteme, the claim it makes, and the Method it concerns. Then keep its C.29 representation, publication occurrence, publication form, and presentation carrier separate, and send each plan, Work, evidence, gate, authority, mechanism, formal, or mathematical claim to its own pattern.

Conformance Checklist

CC-A3.2-1 (Episteme membership). A.3.2 judges one already identified U.Episteme candidate. That same individual is a U.MethodDescription only when its C.2.1 EntityOfConcern is one admitted U.Method and at least one claim says how that Method is done. Representation form, publication form, carrier, approval, and use adequacy do not decide membership; no binary description relation is minted.

CC-A3.2-2 (Positive description threshold). The episteme must make at least one substantive claim about the method as a way of doing, such as its transformation or enactment concern, generic participant meanings, applicability, precondition, intended effect or preserved condition, bound, or internal composition. A name, citation, author, catalogue entry, or approval status alone is mention, not method-description membership.

CC-A3.2-3 (No automatic trigger repair). Wording such as algorithm, program, proof, solver, workflow, process, procedure, recipe, or model is only a cue. Classify the episteme as U.MethodDescription only after its claim and admitted Method pass CC-A3.2-1 and CC-A3.2-2.

CC-A3.2-4 (Description not work). Executable-looking material is not a Work occurrence. A program run, proof-checking session, solver run, lab run, or clinical application is Work only after A.15.1 identifies the world-side occurrence, holder system, covering assignment and F.6 attribution, enacted Method, temporal extent, and containing system. Any participant, resource-use, or work-to-referent claim needs its own admitted relation; if none exists, return the corresponding missing-governor result.

CC-A3.2-5 (Description not plan or authority). A method description is not a work plan, gate decision, permission, approval, external-rule authorization, or evidence relation. Those claims may cite the description but require their own governing patterns.

CC-A3.2-6 (Description not mechanism or declaration). A method description is neither a RelationSignature nor A.6.1 OperationAlgebra content and does not close a mechanism claim. If reusable direct-relation participant declaration is current, use A.6.0 and A.6.5. If operation algebra, law set, admissibility predicates, or applicability is current, use A.6.1; transport, audit, realization, evaluation, and evidence-use relations remain with their direct patterns.

CC-A3.2-7 (Description not formal substrate). A method description does not close a formal-substrate or mathematical-lens claim. If variables, equations, invariants, structure, substrate, or mathematical payoff are current, use A.6.0, C.29, or the direct mathematical pattern.

CC-A3.2-8 (No people or calendars inside the description claim). A method description may state role kinds and capability thresholds that bound admissible enactment. Named people, dates, schedules, launch values, and work witnesses belong to work planning, role assignment, or work occurrence claims.

CC-A3.2-9 (Parameters and use time). A method description may state parameter meanings and ranges. A U.WorkPlan names planned values against the declaration that gives them meaning. An actual participant or operation value requires an obtaining subject relation or A.6.1 application binding; otherwise keep it planned and return missing-governor[actual-use].

CC-A3.2-10 (Same subject versus equivalent descriptions). Two descriptions concern the same U.Method only when their EntityOfConcern references resolve to the same A.3.1 method identity. A scheme difference may require an F.9 Bridge to interpret a comparison, but the Bridge does not establish Method identity. Shared subject also does not make the epistemes equivalent: state which claims are preserved, absent, incompatible, or inaccurate for the proposed use. Notation or control structure alone establishes neither a different Method nor equivalent claim content.

CC-A3.2-11 (Edition and refinement). A later file or episteme edition does not by itself refine the Method. Use C.2.1 for the edition relation; state which description claims a comparison preserves or strengthens; and use A.3.1, B.1.5, or another admitted method relation only for an actual refinement claim. If no owner admits refinement, keep the two Methods and stop at the edition or comparison result.

CC-A3.2-12 (Nondeterminism). When a description permits search, optimization, sampling, nondeterministic choice, or learned behavior, state the admissible result range and the criterion that will evaluate actual Work or results. Name that criterion's owner; the description itself establishes neither actual performance nor an evaluation result.

CC-A3.2-13 (Cross-context and semantic-locality boundary). F.9 answers only whether a Bridge obtains between two SchemeSenseCell values. For proposed reuse, state a separate C.2.1 claim with the use, direction, correspondence rule, loss tolerance, and affirmative or negative polarity. Positive polarity alone is not reliance. An ordinary below-threshold use with no assurance claim needs RelianceDisposition=pass on its A.10 path. When an assurance claim is made or the B.3 threshold is met, enter B.3: positive assurance requires a current positive claim and sufficient record, while no claim or an insufficient record stops or narrows the assurance use. A negative or absent use claim, non-passing A.10 disposition, or non-positive B.3 outcome stops or narrows reuse even while the Bridge obtains. None of those premises says that comparison, publication, planning, or Work occurred. Changes of reference scheme, unit, role taxonomy, claim scope, or model use stay under their own patterns.

CC-A3.2-14 (Declarative representation). A declarative graph, query, predicate, or model does not state an ordered work route by layout. Use C.2.P.DR to recover what it represents; assert a route, dispatch, call, or work-control sequence only when its own pattern admits that claim, otherwise stop at the representation.

CC-A3.2-15 (Causal-use boundary). A method description may describe intervention assignment, target-trial emulation, realized-counterfactual sampling, simulation, or causal-evidence collection. It does not by itself establish causal use. If causal effect, intervention success, counterfactual comparison, causal fairness, or policy effect is claimed, use C.28.

Common Anti-Patterns and How to Avoid Them

Anti-patternRepair
"The code is the method."Identify the claim-bearing episteme and the Method it concerns. Membership needs one substantive method claim; C.29 owns representation correspondence, E.24.PUB owns publication, and A.15.1 owns a run that actually happened.
"Yesterday's log is our procedure."The log is an episteme about dated Work, not the Work or a method description by being recorded. Identify the occurrence under A.15.1; cite or write a separate method description only when its claims pass the membership rule.
"The approved protocol proves safe use."Separate method description, approval or gate claim, safety evidence, work plan, and work occurrence.
"The optimization model is the process."Ask whether the episteme says how a scheduling Method works or instead states variables, constraints, and an objective for a formal model. Keep the solver run as Work and any selector mechanism under A.6.1/E.20.
"The query plan calls the next step."A database plan or graph may represent ordering without commanding project Work. Use C.2.P.DR when layout is being read as dispatch; write a WorkPlan or ordered Method only when its own claim states that sequence.
"The diagram's route is the workflow."Check whether the method claim states the sequence. If the route is only a graph path, event trace, or drawing convention, keep it in the representation; do not turn it into a WorkPlan or performed Work.
"The new version refines the old one."Separate the C.2.1 edition relation, a comparison of description claims, and any refinement relation between Methods. A file version establishes none of them.
"SOPs are notes, code is the real spec."Neither notation establishes membership. Compare what each episteme claims about the Method. Ask adequacy only for a concrete proposed use; comparison, publication revision, and teaching-content review require no fabricated Work or decision.

Consequences

BenefitCost or caution
Method descriptions become reusable across notations.Users must separate method identity from description form.
Audits can distinguish description, plan, work, evidence, and authority.The first repair is to identify the claim-bearing episteme, its Method, and one substantive method claim; replacing vocabulary is not enough.
Software, lab, industrial, organizational, and proof-centered descriptions can be compared under one FPF kind.Some files contain several current claims and must be split into several governing-pattern statements.
Equivalent descriptions can be declared without forcing identical notation.Equivalence and refinement need local criteria.
Declarative representations can be used without being turned into ordered work-control claims.Route-like language needs C.2.P.DR or a direct governing-pattern assignment.

Quick use cards

  • Claims first. The claim-bearing episteme can be U.MethodDescription; its exact U.Method, C.29 representation, publication occurrence, publication form, and U.PresentationCarrier remain distinct.
  • Executable is still not a run. Runs are Work individuals admitted under U.Work only when A.15.1 grounds their occurrences.
  • Representation is not enough. Read what the code, proof, solver file, procedure, diagram, or workflow actually asserts and name its subject. Only the claim-bearing episteme can pass A.3.2 membership; C.29 keeps the representation correspondence.
  • Mechanism needs its declaration. Use A.6.1 when operation algebra, laws, admissibility, or applicability is current; keep transport, audit, realization, evaluation, and evidence-use relations under their direct patterns.
  • Math needs its own claim. Use A.6.0 and C.29 when formal substrate or mathematical-lens use is current.
  • No ordered-action overread. Use C.2.P.DR when declarative representations are overread as ordered action structures.

Rationale

Projects need reusable claims about ways of doing before any dated work occurs. Treating a file as the method description by appearance hides two decisions that later work needs: which episteme is being relied on, and which admitted method its claims concern. The positive claim threshold makes this distinction usable without demanding a complete procedure card.

The pattern is representation-agnostic because a method can be described through procedural text, code, diagrams, mathematical notation, protocols, or combinations of them. The episteme can be revised and evaluated while its C.29 representations, publication occurrences, publication forms, and presentation carriers change independently. This separation lets a project compare descriptions and judge fitness for a receiving use without turning notation, approval, publication, or enactment into kind membership.

SoTA-Echoing

Source lineSource refsAdopt, adapt, or rejectEffect in this pattern
Current constructor-theory and process-theory workGogioso, Wang-Mascianica, Waseem, Scandolo, and Coecke, "Constructor Theory as Process Theory", EPTCS 397, 2023, arXiv:2401.05364; Deutsch and Marletto, "Constructor theory of time", arXiv:2505.08692v3, revised 2026-06-05.Adopt and adapt: descriptions are kept close to transformation claims without becoming the transformation or work occurrence.The pattern separates method description, method, mechanism, work plan, work, and evidence across physical, informational, organizational, and mathematical examples.
Current scoped-effects and handlers workBosman, van den Berg, Tang, and Schrijvers, "A Calculus for Scoped Effects & Handlers", LMCS 20(4), 2024, arXiv:2304.09697; Matache, Lindley, Moss, Staton, Wu, and Yang, "Scoped Effects as Parameterized Algebraic Theories", ESOP 2024 extended version, arXiv:2402.03103.Adopt: operation syntax, semantic handling, scope, resources, equations, and type information plus effect information are separate concerns.Executable-looking descriptions are not automatically method semantics, mechanism law, work, or proof of success.
Current graph and equivalence representation workTiurin, Barrett, Ghica, and Hu, "Equivalence Hypergraphs: DPO Rewriting for Monoidal E-Graphs", arXiv:2406.15882, v2 revised 2025-05-20.Adapt: graph, query, equivalence, and rewrite structures can be representations without being ordered instructions.Declarative method-description representations are repaired with C.2.P.DR when wording turns them into ordered work-control claims.
Historical declarative versus imperative programming contrastsCodd 1970; Kowalski 1979; Selinger et al. 1979; van der Aalst, Pesic, and Schonenberg 2009; Van Roy and Haridi 2004.Reject as current SoTA; retain only as lineage and regression contrast.Older slogans remain useful recognition cues, but the reader still asks what the artifact asserts and which FPF object that claim concerns.

Refresh this pattern when current work on process theory, effect systems, executable specifications, process modeling, graph and equivalence representations, or FPF's own method, method-description, work, mechanism, and mathematical-lens patterns changes the governing distinction.

Relations

  • Builds on: C.2.1 for the identity, grounding, and edition relations of the same claim-bearing episteme; A.3.1 for the exact U.Method; and E.24.UK for admission of the dependent U-kind.
  • Coordinates with: A.3.1 and B.1.5 for actual method parts, method identity, and composite-method organization; A.22 for an independently selected structure among several methods; A.1.1 only when an independently selected BoundedModelUseStructure changes the proposed use; F.9 only for cross-context SchemeSenseCell correspondence; C.2.1 for the separate claim that one obtaining Bridge suits one bounded use; A.10 for ordinary evidence reliance on that claim and B.3 only for the assurance or material-threshold branch; C.29 for representation correspondence; E.24.PUB for publication occurrence and form; A.15.2 U.WorkPlan; A.15.1 U.Work; A.2 and A.2.1 for role and role-assignment claims; A.2.2 for capability thresholds; C.28 for causal-use claims.
  • Separates from: A.6.0 formal-substrate declarations; C.29 mathematical-lens use; A.6.1 U.Mechanism; E.20 mechanism-meaning introduction and revision.
  • Uses for precision restoration: E.10, E.10.ARCH, F.18, and C.2.P.DR when source wording leaves unclear what claim is made, what object it concerns, or whether a visible route is merely representational.

A.3.2:End

U.Dynamics: State-Space and Transition-Law Episteme

Type: Definitional pattern Status: Stable Normativity: Normative

Problem frame

Use this pattern when a project needs one reusable model of how state changes in a bounded context: a state space, a transition law, an observation relation, and the conditions under which prediction, simulation, calibration, conformance, drift, or gating claims are warranted.

Use it when the working question is:

  • which holon, episteme, system-in-role, claim, service, resource bundle, architecture, or other EntityOfConcern has changing state;
  • which characteristics define the state space;
  • which transition law states how those coordinates evolve;
  • which observations or work-derived traces can be compared with the law;
  • whether a prediction can be used for comparison, gating, assurance, planning, or control.

Primary EntityOfConcern. The EntityOfConcern is U.Dynamics: an U.Episteme that specifies a state space and a state-transition law for one or more EntitiesOfConcern in a bounded context.

E.24.UK settlement. U.Dynamics is retained as a dependent durable U-kind under the U.Episteme settlement. Its durable value is the reusable state-space and transition-law episteme for changing state in a bounded context. It is not a root change kind, not the changed EntityOfConcern, not a work occurrence, and not a flow structure; components such as stateSpace, transitionLaw, observationRelation, and calibrationOrParameterSource remain slots or claim graphs inside the dynamics episteme unless another governing pattern makes one of them separately addressable.

First useful move. Name the changing EntityOfConcern, the bounded context, the state-space characteristics, the transition law, the observation relation, and the applicability window. If these cannot be named, the current claim is not yet ready for prediction, conformance, or gate use.

What goes wrong if missed. Procedure text becomes "the dynamics", telemetry becomes a law, one observed run becomes a prediction, a dashboard becomes a state space, or a simulation becomes permission to act.

What this buys in practice. Practitioners can compare predictions with traces, decide whether stale predictions may still be used, separate methods from laws of change, and decide where mathematical-lens, temporal, evidence, assurance, or gate patterns must take over.

Not this pattern when. If the source only states a semantic way of doing, use A.3.1. If it states an episteme describing that way, use A.3.2. If it states bounded transformation under conditions, use A.3.4. If it states planned work or dated work, use A.15.2 or A.15.1. If it states a mechanism algebra, use A.6.1 and E.20. If it states only freshness, rhythm, inertia, delay, window, or currentness as a positive temporal aspect, use C.27.TA; if it states adequacy or supported use of an authored temporal claim, use C.27. If it states only evidence or assurance, use A.10 or B.3.

Problem

Without a first-class U.Dynamics, state-change claims collapse into nearby but different claims:

  1. Recipe becomes law. Teams put procedure text, a control diagram, a workflow diagram, or a method description where a state-transition law should be.
  2. Trace becomes law. Dated work logs, telemetry, and incident sequences are treated as if past events defined what must happen.
  3. Dashboard becomes state space. Metric lists appear without characteristics, units, scales, topology, geometry, invariants, or operating region.
  4. Prediction becomes authority. A model output is used for a gate, release, safety, or work decision without freshness, non-expansiveness, commutation, observation, or assurance conditions.
  5. Domain vocabulary blocks transfer. Physics, control, finance, reliability, operations, knowledge dynamics, and architecture all talk about change differently; FPF needs one kernel pattern that preserves their differences without inventing separate ontologies.

Forces

ForceTension
Universality and domain richnessOne kernel pattern must cover ODEs, PDEs, Markov kernels, queues, discrete events, Bayesian updates, enterprise characteristic evolution, and architecture-quality change without flattening the domain-specific model.
Model and worldU.Dynamics is an episteme, while evidence comes from dated work, telemetry, observation, and source relations.
Continuous, discrete, stochastic, and hybrid formsTime references, update rules, likelihood models, and disturbances differ; the state-space and transition-law declaration must keep them explicit.
Prediction and interventionA law can inform planning, diagnosis, simulation, model-predictive control, or assurance, but it does not itself assign work authority or responsibility.
Mathematical power and transfer riskMathematical form can make prediction precise, but transfer across domains, scales, or representations needs C.29 and sometimes A.6.0.
Freshness and gate pressurePredictions are attractive when observation is slow or expensive; gate use still needs stated currentness and applicability conditions.

Solution

Definition

Within a U.BoundedContext, U.Dynamics is an U.Episteme that specifies a state space and a state-transition law for one or more EntitiesOfConcern, possibly under exogenous inputs, constraints, and observation relations.

U.Dynamics can be deterministic or stochastic, continuous, discrete, or hybrid. It can describe physical systems, software services, organizations, episteme states, claim states, resource states, architecture characteristics, or other holons whose state change is being modeled.

It does not prescribe what an agent should do. A semantic way of doing belongs to U.Method; an episteme describing that way belongs to U.MethodDescription; a dated occurrence belongs to U.Work; a planned occurrence belongs to U.WorkPlan; a mechanism law belongs to U.Mechanism; evidence and assurance claims belong to their own governing patterns.

Dynamics statement

Use this compact statement when applying the pattern:

Dynamics statement:
  EntityOfConcern:
  BoundedContext:
  StateSpace:
  TransitionLaw:
  TimeReference:
  Stochasticity:
  InputsOrDisturbances:
  ObservationRelation:
  ConstraintsOrInvariants:
  ApplicabilityWindow:
  CalibrationOrParameterSource:
  PredictionUse:
  EvidenceRelation:
  StopCondition:

This statement is not an instruction sequence. It is the smallest episteme-facing record needed to keep the law of change separate from methods, work, evidence, and authority.

Working distinction table

Current claimGoverning pattern
state space and transition law for changing stateA.3.3 U.Dynamics
semantic way of doingA.3.1 U.Method
text, code, diagram, model, proof script, or protocol describing a methodA.3.2 U.MethodDescription
planned dated workA.15.2 U.WorkPlan
dated work occurrence and actualsA.15.1 U.Work
mechanism algebra, admissible operation, or law-governed application over a subject kindA.6.1 U.Mechanism and E.20
formal object, invariant, postulate set, or mathematical substrateA.6.0, C.29, or the direct mathematical pattern
observation, trace, conformance result, source, or provenance used as evidenceA.10 and direct evidence-related patterns
assurance case, trust calculus, or safety argumentB.3 or the direct assurance pattern
gate passage, release, authority, or permission to actA.20, A.21, or the direct gate or authority pattern
bounded transformation under conditionsA.3.4 U.Transformation
freshness, delay, rhythm, currentness, inertia, cadence, or validity window as a positive temporal aspectC.27.TA
adequacy or supported use of an authored temporal claimC.27

State-space and transition-law fields

U.Dynamics {
  context: U.BoundedContext
  entityOfConcern: EntityOfConcern
  stateSpace: state-space declaration over FPF characteristics
  transitionLaw: claim graph inside U.Dynamics
  timeReference: continuous | discrete | hybrid
  stochasticity: deterministic | stochastic
  inputsOrDisturbances?: CharacteristicSet
  observationRelation?: claim graph or relation reference inside U.Dynamics
  constraintsOrInvariants?: claim graph inside U.Dynamics
  applicabilityWindow?: ConditionSet
  calibrationOrParameterSource?: source or calibration episteme reference
}

stateSpace is the state-space declaration of this U.Dynamics episteme. It uses FPF characteristics with units, scales, and comparability rules, and may cite [A.19](/generated/patterns/A.19) or [C.16](/generated/patterns/C.16) when characteristic or measurement construction is being made. It is not the same object as a receiving-evaluation CharacteristicSpace used to score an object for improvement. The dynamics state space may include topology, geometry, aggregation policy, or coordinate transformations when trajectories or comparisons need them.

transitionLaw is paradigm-agnostic. It can be an equation, relation, kernel, finite-state transition, queueing model, Bayesian update, Petri-net firing relation, simulation rule, learned predictor, or hybrid model, provided the state space and applicability window are declared.

transitionLaw, observationRelation, constraintsOrInvariants, and calibrationOrParameterSource are components or claim graphs inside the U.Dynamics episteme unless another governing pattern makes one of them a separately addressable episteme, source, or relation value. Naming one component does not split U.Dynamics into several unrelated epistemes.

observationRelation separates state from what can be measured, sampled, logged, estimated, or inferred. Identity observation is allowed only when the context says the state coordinate is directly observed.

Evidence, prediction, conformance, drift, and calibration

Let D be a U.Dynamics in context C, and let W be dated U.Work records or observation records produced under C.

Derived valueMeaning
trace(W, D)ordered observed values produced by applying D.observationRelation to work records, telemetry, source records, or measurements
initialState(W, D)stated, measured, or estimated state at trace start
predict(D, initialState, inputs, horizon)trajectory or distribution generated by the transition law over the declared horizon
insideOperatingRegion(D, state)check against constraints, invariants, and applicability window
residuals(D, trace)discrepancies between predicted and observed values under a stated alignment
fits(D, trace, tolerancePolicy)conformance verdict under a declared tolerance, likelihood, interval, or distributional policy
drift(D1, D2, domain)divergence between two dynamics versions over a declared operating domain

Calibration outcomes produce a new or updated dynamics episteme. They do not turn the old law into a dated work record and do not make the new law authoritative for gates without the gate pattern.

Prediction use in comparison or gating

When predicted coordinates from U.Dynamics are used for comparison, release, gate, assurance, or work-preparation use, one of these conditions must hold:

  1. a fresh observation is available for the gate or comparison window; or
  2. the applied transition map Phi_dt is declared non-expansive under the declared distance structure, and the transition commutes with the invariantization or quotient step on the domain of use.

If neither condition is satisfied, prediction does not carry the gate or comparison claim. Use observation, state currentness through C.27.TA, use C.27 when authored temporal-claim adequacy is the concern, or move the gate claim to A.20, A.21, or the direct authority pattern.

Every use of Phi_dt states its applicability window: operating region, horizon, scale band, time step, parameter regime, and source-currentness condition.

A.3.4, C.27.TA, C.27, and C.29 boundaries

A.3.4 governs bounded transformation under conditions. A dynamics episteme can model, predict, simulate, or constrain a transformation, but it is not the transformation itself.

C.27.TA names positive temporal aspects: freshness, delay, rhythm, currentness, inertia, cadence, trajectory, recovery timing, stabilization timing, and validity window. C.27 judges adequacy or supported use of authored temporal claims that use those aspects. A Dyn2TemporalClaimAdequacyCard or temporal classification is not itself a law of change.

Stay in A.3.3 when transitionLaw or observationRelation uses accepted local dynamics, Markov kernels, ODEs, simulations, queueing theory, control theory, or domain theory inside one context.

Use C.29 when the law depends on contested transfer, cross-domain analogy, learned or speculative mathematical lens, scale change, abstraction, quotienting, or reusable explanation across contexts. The C.29 output states preserved structure, lost structure, operating-region or scale window, rival lens when current, lens-use boundary value, and stop condition. A.3.3 remains the governing pattern for state space, transition law, observation, constraints, and calibration semantics.

Method, mechanism, and governing-pattern constellation boundary

A source label such as process, algorithm, dynamics, workflow, model, controller, or simulator may point to linked slot positions under E.10.ARCH, not to one typed value. Recover the relevant slots first, then split the linked values:

  • U.Method for the semantic way of doing;
  • U.MethodDescription for the representation describing that way;
  • U.Dynamics for the state-space and transition-law episteme;
  • U.Mechanism for an admissible operation or law-governed application over a subject kind;
  • U.WorkPlan and U.Work for planned and dated occurrences;
  • TransformationFlowStructure for selected flow structure when the source is describing a flow-shaped arrangement of transformations;
  • evidence, gate, authority, and assurance values when those claims are current.

The linkage among relation positions does not become a process, method, mechanism, dynamics model, plan, work occurrence, or evidence object. Assign one typed value as both U.Method and U.Dynamics only when a governing pattern explicitly admits that dual typing for the current claim.

Archetypal Grounding

Reactor control

A reactor team models temperature and concentration under a nonlinear ODE with disturbances. The ODE, state space, observation relation, and operating region are U.Dynamics. The control policy is U.Method; the controller code is U.MethodDescription when it describes the method, and dated controller runs or mechanism claims stay with their governing patterns. Thermocouple readings become evidence only through A.10 or the direct evidence pattern.

Side-by-side split:

Filled questionU.Dynamics valueU.Transformation value
EntityOfConcernreactor temperature and concentration state in bounded operating contextcatalyst-bed condition changed from fouled to regenerated during one maintenance intervention
Core relationstate-space coordinates plus nonlinear transition-law claim graph, observation relation, disturbances, operating region, and applicability windowtransformed entity, bounded maintenance context, pre-state, post-state or delta, transformation relation, and boundary condition
Useprediction, simulation, conformance, drift, and gate input only when freshness or mathematical conditions are satisfiedbounded change statement about what changed under conditions; it may cite a dynamics model but is not the model
Kept outsidemethod, controller code, dated runs, evidence, and gate authorityreusable law of state change, method description, work occurrence, evidence relation, and permission to act

Reliability and operations

A service platform models backlog, arrival rate, and incident recovery with a queueing or birth-death model. The model can predict whether an SLO is feasible, but the service promise remains U.PromiseContent, and release or gate use needs the gate pattern.

Evolutionary architecture

An architecture group tracks latency, coupling, operational cost, and change lead time across releases. A discrete-time transition map over those characteristics can be U.Dynamics. Architecture moves, selected structures, and views stay with architecture patterns; work occurrences and measurements stay with work and evidence patterns.

Knowledge dynamics

A claim portfolio uses belief, evidence weight, source currentness, and contestability as state coordinates. A Bayesian or likelihood update is a dynamics episteme over claim state. The studies, reviews, and source records are evidence values; the dynamics model does not make a claim true by itself.

Natural physical evolution

The Moon orbiting Earth can be modeled as U.Dynamics without pretending that the Moon enacts a method or performs governed work. A role assignment such as satellite classification may be well-formed, but it does not create method-work alignment.

Bias-Annotation

Typical biases:

  • recipe-as-law bias: procedure text or controller code is treated as the law of change;
  • trace-as-law bias: logs or one observed run are treated as reusable dynamics;
  • dashboard-as-state-space bias: visible metrics substitute for declared characteristics, units, scales, and comparability relations;
  • prediction-as-authority bias: model output is treated as permission, gate passage, or safety proof;
  • mathematical-prestige bias: equations, learned predictors, and simulations are accepted without applicability window, observation relation, and transfer boundary;
  • semio-bias: the pattern drifts into arguments about descriptions of dynamics while losing the state-space and transition-law EntityOfConcern.

Conformance Checklist

CC-A3.3-1 (Type). U.Dynamics is an U.Episteme for a state-space and transition-law claim. It is not U.Method, U.MethodDescription, U.WorkPlan, U.Work, U.Mechanism, evidence, assurance, or gate authority.

CC-A3.3-2 (Bounded context). Every U.Dynamics is declared inside a U.BoundedContext. Units, characteristic names, operating region, time base, approximation regime, and source-currentness condition are local to that context.

CC-A3.3-3 (EntityOfConcern). The changing EntityOfConcern is named. It may be a physical holon, service, organization, episteme, claim portfolio, architecture, resource bundle, or other holon with modeled state.

CC-A3.3-4 (State space). The state space enumerates characteristics with units, scales, comparability rules, and any needed topology, geometry, aggregation policy, or invariantization rule.

CC-A3.3-5 (Transition law). The transition law states a relation, map, kernel, equation, rule, learned predictor, or simulation rule suitable for the declared time base and stochasticity.

CC-A3.3-6 (Observation relation). Evidence use states how work records, telemetry, measurements, or source records become observed coordinates. Direct observation is declared rather than assumed.

CC-A3.3-7 (Constraints and applicability). Constraints, invariants, operating region, approximation regime, parameter range, horizon, and scale window are stated before prediction or gate use.

CC-A3.3-8 (No imperative overread). U.Dynamics does not prescribe agent steps, responsibilities, or ordered work occurrences. Planning or control methods that use dynamics belong to U.Method and U.MethodDescription.

CC-A3.3-9 (No actuals on dynamics). Resource actuals, timestamps, work logs, and telemetry attach to work, evidence, or source values. Calibration creates a new or revised dynamics episteme.

CC-A3.3-10 (Prediction use). Predicted coordinates used for comparison or gating require fresh observation or a declared non-expansive, invariant-commuting transition map over the domain of use.

CC-A3.3-11 (Temporal boundary). Positive temporal aspects stay with C.27.TA; temporal-claim adequacy, freshness-use, delay-use, rhythm-use, inertia-use, and currentness-use claims stay with C.27; reusable transition laws stay with A.3.3.

CC-A3.3-12 (C.29 boundary). Contested, cross-domain, learned, speculative, scale-changing, or transferable mathematical-lens use is assigned to C.29; A.3.3 keeps the dynamics semantics.

CC-A3.3-13 (Source-label repair). Process, workflow, algorithm, model, controller, simulator, and dynamics wording must not be repaired to U.Dynamics until the current slot is recovered: method, method description, work plan, dated work, selected transformation-flow structure, transition-law claim graph, evidence relation, or another governed value.

Common Anti-Patterns and How to Avoid Them

Anti-patternRepair
"The procedure is the dynamics."Put the semantic way of doing in U.Method, the procedure text in U.MethodDescription, and the law of state change in U.Dynamics.
"Telemetry is the dynamics."Treat telemetry as evidence or source material; derive trace(W, D) and compare it with the declared law.
"The dashboard is our state space."Recover characteristics, units, scales, comparability relations, operating region, and invariants.
"The simulation approved the release."Keep simulation as prediction; use A.20, A.21, A.10, or B.3 for gate, evidence, and assurance claims.
"The model works everywhere."State the applicability window and lowering condition; use C.27.TA for currentness and C.29 for transfer.
"A workflow diagram proves the dynamics."Recover whether the diagram describes a method, method description, work plan, dated work occurrence, selected transformation-flow structure, evidence relation, mechanism, or transition-law claim graph.
"A learned predictor is the law."State training domain, observation relation, uncertainty, error policy, and applicability window before using prediction.

Consequences

BenefitCost or caution
Prediction, simulation, conformance, drift, and calibration claims become reviewable.The project must name state-space characteristics and observation relations rather than relying on dashboard labels.
Methods, method descriptions, mechanisms, work, flow structures, and dynamics stop substituting for each other.Source labels like process, workflow, and model often need E.10.ARCH recovery before typed assignment.
Gate and release use becomes safer because prediction needs freshness or a stated mathematical condition.Some attractive predictions become inadmissible until observation or proof is supplied.
Dynamics can cover physical, organizational, epistemic, software, architectural, and resource examples under one FPF kind.Domain-specific laws still need their own notation, assumptions, and evidence disciplines.
Mathematical-lens transfer is visible rather than hidden inside equations.C.29 may be needed when the dynamics model crosses contexts, scales, or representation regimes.

Quick use cards

  • Dynamics predicts. It is a state-space and transition-law episteme.
  • Work reveals. Measurements, logs, and actuals belong to work, evidence, or source values.
  • Method guides. A method may use dynamics, but dynamics is not the method.
  • State space first. No state-space characteristics, no reviewable dynamics claim.
  • Observation matters. A law without observation relation cannot be compared with traces.
  • Prediction is not authority. Gate and release claims need their governing patterns.

Rationale

FPF needs U.Dynamics because many practical questions are not about what an agent should do, but about how a state changes when the world evolves, a model is simulated, evidence arrives, a resource pool fluctuates, or an architecture changes. Those questions need a law of change, not a procedure, not a work log, and not a promise.

The pattern is deliberately broad because state-change reasoning appears in physics, control, software operations, reliability, strategy, architecture, and knowledge work. The shared kernel is not a universal notation. It is the distinction between state-space, transition law, observation relation, applicability window, and related governed claim families such as method, work, transformation, evidence, assurance, and gate use.

SoTA-Echoing

Source lineSource refsAdopt, adapt, or rejectEffect in this pattern
Current constructor-theory and process-theory workGogioso, Wang-Mascianica, Waseem, Scandolo, and Coecke, "Constructor Theory as Process Theory", EPTCS 397, 2023, arXiv:2401.05364; Deutsch and Marletto, "Constructor theory of time", arXiv:2505.08692v3, revised 2026-06-05.Adapt: dynamics, transformations, tasks, and processes are kept close without collapsing law, method, mechanism, and work.U.Dynamics is a law-of-change episteme; transformation claims stay with A.3.4, and method/work claims stay in their governing patterns.
Current data-driven predictive-control workde Jong, Breschi, Schoukens, and Lazar, "Koopman Data-Driven Predictive Control with Robust Stability and Recursive Feasibility Guarantees", arXiv:2405.01292; Shang, Cortes, and Zheng, "On the Exponential Stability of Koopman Model Predictive Control", arXiv:2511.02008.Adopt: prediction, lifted state, stability, recursive feasibility, and prediction error need explicit state-space, model, horizon, and constraint declarations.stateSpace, transitionLaw, applicabilityWindow, constraintsOrInvariants, and prediction-use conditions are mandatory before comparison or gate use.
Current stochastic predictive-control workKnaup and Tsiotras, "Recursively Feasible Stochastic Model Predictive Control for Time-Varying Linear Systems Subject to Unbounded Disturbances", arXiv:2410.11107.Adopt: stochasticity, unbounded disturbances, time variation, feasibility, and chance constraints must not be hidden behind one model label.stochasticity, inputsOrDisturbances, tolerance policy, and applicability window are explicit fields.
Current digital-twin validation pressureRussell Bernal, Petterson, Alarcon Granadeno, Murphy, Mason, and Cleland-Huang, "Validating Terrain Models in Digital Twins for Trustworthy sUAS Operations", arXiv:2508.16104.Adapt: model validation depends on operational context, observation limits, granularity, uncertainty, and real-world use conditions.Observation relation, evidence relation, operating region, and source-currentness condition remain separate from the dynamics law.
Historical state-space, declarative, and imperative contrastsClassical state-space control, early declarative programming, workflow slogans, and process-model slogans.Reject as current SoTA by themselves; retain only as lineage and recognition cues.The pattern repairs by FPF kind, state-space declaration, and slot relation rather than by programming-paradigm or process-slogan labels.

Lower current use of this pattern when current work on process theory, predictive control, hybrid systems, stochastic dynamics, digital twins, causal dynamics, learned world models, graph representations, equivalence representations, or FPF's own characteristic-space, temporal, mathematical-lens, transformation, work, evidence, and gate patterns changes the governing distinction.

Relations

  • Builds on: A.1.1 U.BoundedContext; A.19 CharacteristicSpace; episteme machinery for description, source, and publication when those claims are current.
  • Coordinates with: A.3.1 U.Method; A.3.2 U.MethodDescription; A.3.4 U.Transformation; A.15.2 U.WorkPlan; A.15.1 U.Work; A.6.1 U.Mechanism; E.20; C.27.TA; C.27; C.29; A.10; B.3; A.20; A.21; architecture patterns when dynamics describes architecture-characteristic change.
  • Separates from: services and promise content; PBS and SBS structural breakdowns; causal-use claims; gate authority; assurance arguments; publication-use claims.
  • Uses for precision restoration: E.10, E.10.ARCH, F.18, and C.2.P.DR when source labels hide whether the claim is law, method, method description, mechanism, work, evidence, authority, or dynamics.

A.3.3:End

U.Transformation: Bounded Change Under Conditions

Type: Definitional pattern Status: Stable Normativity: Normative except where a section is explicitly informative

Use This When

Use this pattern when a project must decide whether an actual change occurred and identify that one change. Ask: what continuing subject changed, where the change begins and ends, which facts differ before, during, and after it, and what rule makes this one occurrence rather than unrelated observations.

Use it when the working question is:

  • what continuing subject changed: an entity, selected structure, presentation carrier, constituent organization, characteristic-bearing referent, or formal object;
  • when a specification's claim content changes, which two C.2.1 epistemes exist, whether their EpistemeEditionRelation obtains, whether a continuing carrier or constituent organization changed, and whether revision U.Work first constituted the later episteme under A.15.PROD;
  • which actual characteristic-state and direct-relation facts differ across the boundary;
  • what temporal extent, formal ordering, or continuity rule identifies this occurrence;
  • which additional claim, if any, is actually being made about method, planned work, performed work, mechanism, flow structure, representation, evidence, publication, or a later use, and which pattern answers that claim.

Primary EntityOfConcern. One actual U.Transformation: the bounded occurrence, not the sentence, plan, trace, formula, or record about it. A task, method, plan, desired state, work occurrence, operation family, morphism, predicate, delta formula, assertion, before-and-after picture, or result record neither proves that the change occurred nor identifies it. Use those objects only in their separate claims about planning, enactment, representation, evidence, or later use.

Primary working reader. A practitioner or modeler who must identify one actual change for a current engineering, scientific, formal, documentary, or architectural use before relating it to method, work, flow, evidence, or production. The informative parked-composition branch additionally addresses an FPF author or reviewer only when that use asks whether several changes compose one change or whether that whole could satisfy A.1.

First useful move. Name the continuing subject and where the change begins and ends. Write the subject facts that hold before, during, and after that boundary, then state the boundary conditions and the continuity or reidentification rule that make this one occurrence. If the material supplies only a desired state, method, plan, model, trace, or assertion, stop: it has not yet grounded an actual U.Transformation.

Open-world guard. Not finding a method, work occurrence, evidence item, publication, delivery, acceptance, or later-use relation does not prove that it is absent. It prevents only the particular claim that needs it. Finding one of those objects likewise does not prove that an actual transformation occurred.

What goes wrong if missed. Method names become change proof, work traces become laws, process diagrams become execution, dynamics models become permission, temporal trends become intervention claims, mathematical constructions become project-world work, and publications or result records are treated as the change itself.

What this buys. The practitioner gets one usable actual-change result without first deciding whether finer changes are its parts. If no composition or holon claim is needed, continue with the ordinary neighboring-object guidance at 4.3. If such a claim is needed, keep the identified changes and return the parked composition blocker; this pattern does not guess the future architecture. Apply A.1 only after an accepted architecture supplies the proposed whole and its construction facts. Method, work, flow, representation, evidence, publication, production, and later-use claims stay separate.

Not this pattern when.

  • If the issue is only a semantic way of doing, use A.3.1.
  • If the issue is a description of that way, use A.3.2.
  • If the issue is a state-space and transition-law episteme, use A.3.3.
  • If the issue is a law-governed operation algebra with admissibility predicates, use A.6.1 and E.20.
  • If the issue is planned or dated work, use A.15.2 or A.15.1.
  • If the issue is the selected compound transformation-flow structure, its locus, path, path slice, crossing, or flow valuation, use E.18.
  • If the issue is a graph, algebra, category, tuple, morphism, quotient, fold, refinement, factorization, or wiring expression used to describe that structure mathematically, use E.18.2 and C.29.
  • If the issue is a positive temporal aspect of an object or claim, use C.27.TA.
  • If the issue is adequacy or admissible use of a temporal claim, use C.27.
  • If the issue is holon recognition without a current actual-change identity or constructive transformation-parthood claim, use A.1.

Problem Frame

FPF often needs to talk about change in physical systems, engineered artifacts, organizations, presentation carriers, constituent organizations, architectures, programs, regulatory situations, and research objects. A revised specification needs an early split: changed claim content identifies two C.2.1 epistemes, not one continuing changed episteme. Test the EpistemeEditionRelation between them. Open A.3.4 only for a continuing carrier, constituent organization, or other subject with its own identity rule; if revision U.Work first creates the later episteme, use A.15.PROD for that first existence. Source phrases such as algorithm, process, workflow, editing, migration, or construction do not settle which of these objects changed.

Those phrases do not tell the reader what actually changed. A CRISPR editing protocol, a nuclear-plant operating change, a platform refactoring, a model update, a document repair, an architecture move, a proof construction, and a method-result carry-through may each concern a different FPF object.

FPF already has strong neighboring patterns:

  • A.3 for transformer constitution: acting system bearing TransformerRole, method description, method, and actual work;

  • A.3.1 for U.Method;

  • A.3.2 for U.MethodDescription;

  • A.3.3 for U.Dynamics;

  • A.6.0 and A.6.5 for signatures and slot discipline;

  • A.6.1 and E.20 for mechanisms;

  • A.15.2 and A.15.1 for work plans and dated work;

  • E.18 for transformation-flow structures;

  • E.18.2 for mathematical descriptions of transformation-flow structures;

  • E.18.1 for problem-to-work carry-through;

  • C.27.TA for positive temporal aspects;

  • C.27 for temporal-claim adequacy;

  • C.29 for mathematical-lens use;

  • evidence, gate, assurance, source, result, decision, and publication patterns for their own claims.

What is missing is a positive first route: identify the actual change, then open only the separate method, work, flow, representation, evidence, publication, or later-use claim the practitioner is making. A checklist or description must not become the transformation ontology.

Problem

Without U.Transformation, projects repeatedly make category errors:

  1. Method as transformation. A way of doing is treated as if the change already happened or must happen.
  2. Mechanism as transformation. A law-governed operation algebra is mistaken for the actual or intended change, although it only states how a transformation may proceed.
  3. Work as transformation law. A dated work occurrence or trace is treated as if it defined the reusable transformation.
  4. Dynamics as permission. A state-space or transition-law episteme is used as if it authorized action, gate passage, or result acceptance.
  5. Temporal claim as transformation. A claim about rate, rhythm, recovery, delay, effort, inertia, freshness, or validity window is used as if it specified the whole change and its conditions.
  6. Formal construction as project-world work. A morphism, proof construction, or formal transformation inside a mathematical substrate is treated as a physical or organizational change without a realization or work relation.
  7. Publication as transformation. A report, dashboard, diagram, source span, or published specification is treated as if it were the changed object or the change event.

These errors are expensive because the wrong neighboring pattern then receives the claim. The project may seek evidence for a method when it needs a work trace, compare dynamics models when it needs a transformation boundary, or invoke temporal-claim adequacy when the real problem is the missing transformation relation.

Forces

ForceTension
Generality and specificityThe same five identification questions must work for physical, biological, software, organizational, documentary, architectural, formal, and epistemic changes. Each domain still keeps its own subject and relation patterns.
Possible, planned, actual, modeled, and claimed transformationA source may call a change possible, planned, enacted, observed, modeled, claimed, or published. Only the changed subject, boundary, before/during/after facts, and continuity rule establish an actual U.Transformation; the plan, work, observation, model, assertion, and publication remain separate claims.
Neighboring value competitionA method, mechanism, dynamics model, work occurrence, time claim, evidence item, or result can look like the thing that changed. Test the actual change first; use the separate pattern for each additional claim.
Time and orderMany transformations need a time window, cadence, duration, ordering relation, or refresh condition, but time wording alone does not define the transformation.
Mathematical strength and practical useA formal task, morphism, state space, constructor-theory account, or dynamics model can describe a transformation precisely. Permission, evidence, performed work, and responsibility remain separate questions answered by their own patterns.

Solution

Identify the actual bounded change

U.Transformation is the FPF ontic for one actual bounded change. Use the five checks below and keep only the facts needed to distinguish this occurrence:

  1. Changed subject. Name the continuing entity, selected structure, presentation carrier, constituent organization, characteristic-bearing referent, or formal object and apply its identity rule. If an episteme's claim content differs across the boundary, identify two C.2.1 epistemes and test their EpistemeEditionRelation; do not call either one the continuing changed subject. Use A.3.4 only for another continuing subject, or use A.15.PROD when revision U.Work first constitutes the later episteme.
  2. Extent and boundary. State the temporal extent of the change, including only gaps admitted by its continuity rule, or state the ordering boundary in a declared formal substrate.
  3. Boundary conditions. State the conditions that delimit this change from adjacent persistence, work, or change occurrences.
  4. Actual change facts. Write the characteristic-state facts and relations that actually hold before, during, and after the boundary. Those facts, not a verbal change label, show what changed.
  5. Continuity or reidentification. If the subject varies internally, the change pauses, or several intervals are proposed, state the rule that says the subject and this occurrence continue across that variation.

Here, one means one occurrence at the resolution, subject, extent, and boundary needed for this use. It does not mean elementary, atomic, indivisible, or partless. Later refinement may identify finer changes, and future accepted work may establish constructive parts; sampling or subdividing time establishes neither result.

Do not call a possible, desired, planned, predicted, modeled, asserted, or published change actual. Those are claims in an episteme, method, work plan, dynamics model, or publication until the occurrence facts above hold. A formal transformation can be actual within an admitted formal substrate, but its formula or proof term remains a C.29 representation of that independently identified formal change.

Mint vs reuse. A.3.4 reuses the already admitted root U-kind and public name U.Transformation from E.24.UK. It introduces no additional U-kind, relation kind, public composition name, RelationSignature, or local well-formedness identifier. The component-change and whole-configuration-change wording below names only question roles for independently identified occurrences; it asserts no composition.

First-use transformation basis

Use these questions as a recognition aid, not as fields of a transformation record:

QuestionWhat to writeStop condition
What changed?one continuing subject under its identity rulestop if only a label, file, diagram, or desired object is available
Across which boundary?temporal extent or formal ordering boundarystop if before and after are merely two unrelated observations
What actual facts differ?the relations and characteristic-state facts that hold before, during, and after the boundarystop if the only basis is a method, plan, trace, formula, or assertion
What delimits one occurrence?boundary conditions and continuity or reidentification rulesplit or leave identity unresolved when the rule does not cover the gap
Which later claim or use, if any, relies on this change?name that claim and apply its pattern: for example dated U.Work, a safety evaluation, a publication assertion, or no neighboring usewrite only the relation needed by that branch; if no later use is being claimed, add nothing

Worked first use. For a reactor cooling loop, identify the loop state as the changed subject, the thermal-power step and stabilization interval as the boundary, the measured temperature-profile facts before and after it, and the operating conditions that delimit the episode. These facts ground CoolingLoopTransformation-7 : U.Transformation. The revised operating method, control-law episteme, measurements, safety evaluation, and release decision remain separate objects; none alone is the transformation. This short fixture identifies no dated adjustment U.Work occurrence.

Choose only the next claim that the use actually needs:

  • Work. First identify a dated U.Work occurrence under A.15.1. If both work and transformation participants are identified, apply the three outcomes in 4.2.4. The short reactor fixture has not identified that work occurrence, so it makes no work-to-change claim and does not yet report a missing governor.
  • Safety evaluation. Use case-local evaluatesTransformation@PlantSafety-v4(SafetyEvaluation-7, CoolingLoopTransformation-7, CoolingLoopSafetyCriterion-v4) only when all three participants are identified and the predicate's obtaining conditions hold. The evaluation is not thereby a decision.
  • Publication. Use a C.2.1 assertion whose EntityOfConcern is CoolingLoopTransformation-7 and identify its E.24.PUB publication occurrence. Publication neither creates nor performs the change.

If none of these uses is being claimed, keep the identified transformation and add no neighboring relation.

Choose the next branch now. If the current result is one identified transformation and the use needs no positive claim that several changes compose one change or that the change is a holon, continue directly at 4.3. Sections 4.2.1-4.2.3 are not prerequisites for that ordinary route. Open them only when the use needs one of those two positive claims; the current advanced branch returns the parked blocker and selects no future architecture.

Keep proposed component and whole-configuration changes separate

Use component change and whole-configuration change only as ordinary question roles for actual U.Transformation occurrences already identified through A.3.4:4.1. They are not additional U-kinds, record fields, or evidence that one change is part of another.

Identify every proposed component change and the proposed whole-configuration change independently. A sampled point, arbitrary subinterval, method step, work part, flow node, graph edge, trace segment, formula term, before-and-after image, shared changed subject, or temporal inclusion establishes neither composition nor absence of finer parts.

The neighboring general patterns do not silently answer the composition question. A.22 can identify a selected structure whose relation organization changes; C.27.TA can identify temporal aspects; A.14 and C.13 define structural mereology and a Γ_m construction trace. None of those results by itself says that several actual changes compose one actual change. A materialized Γ_m.sum trace is a C.2.1 episteme about identified entity-part relations, assembly, and direct identity or reidentification conditions. It establishes neither those world-side facts nor transformation composition.

One independently identified change of a selected configuration can therefore remain a valid configuration transformation. If the use needs no positive composition or transformation-holon claim, continue with that transformation and the ordinary neighboring-object guidance in 4.3-4.8. If it does need such a claim, retain the identified changes and stop with missing transformation-composition governor; a proposed local compound claim also stops with missing derivation substrate. Neither stop says that composition is false or that any change is partless.

Keep the composition architecture open (informative)

Transformation composition remains an open research question, not a relation architecture declared by this Stable pattern. Future work must decide what identifies and reidentifies a proposed whole change and its constituents; whether and when method parts, work parts, changed-substrate changes, temporal segments, and causal contributions correspond; which contribution, compatibility, boundary, interface, and whole-level-characteristic laws matter; and what substrate, if any, makes a derived claim valid.

That work must also compare rather than preselect the representation of the answer: one generic relation, several subject-specific relations, bounded local compound claims, or continued non-admission. A.3.4 chooses none of them. It mints no composition relation kind, designator, signature, occurrence-identity law, or local well-formedness identifier.

Apply A.1 only after composition is independently established

Membership in U.Transformation supplies no holonhood. A.1 remains the authority for the constructive criterion. This edition of A.3.4 supplies neither a positive transformation-composition result nor the candidate, constituents, constructive part relations, and assembly needed by A.1. Therefore an independently identified configuration transformation remains a valid U.Transformation, while positive U.Holon classification on the basis of transformation composition stops. The stop is not evidence that no such whole or parts exist.

If future accepted work supplies one whole transformation and its construction facts, apply A.1 without changing its test or assuming which relation form that work chose. A.1 still requires the candidate, constituents, constructive part relations and assembly, reidentification rule, composition-grounded whole-level characteristic, and possible participation in a larger constructive assembly. Recover those facts from the patterns that define them at that time; a name, shared interval or referent, nearby change, trace, diagram, or missing-governor note supplies none of them.

A.1 also keeps world-side satisfaction or failure separate from an A.6.1 true | false | unknown recognition evaluation, an optional C.2.1 assertion, evidence and assurance, G.11 currentness, receiving-work disposition, and B.2 whole reidentification. Follow A.1 for that separation rather than repeating its full table here.

Stress the current boundary before classifying:

  • a pressure increase may be identified as one U.Transformation at the resolution needed by the use; sampling or subdivision establishes neither constructive parts nor absence of such parts;
  • a switch transition may be treated as effectively instantaneous at the selected temporal resolution and identified as one U.Transformation; that resolution claim establishes neither indivisibility nor parts;
  • subintervals of continuous biological growth may each be independently identified as transformations, but this pattern does not decide whether they compose one change;
  • a formal transformation can be actual under a selected formal substrate, while its formula, morphism, or proof term remains a C.29 representation and supplies no holonhood;
  • mounting, wiring, connection, and whole-configuration changes may each be identified independently; the current edition does not make them constituents of one transformation, so positive A.1 classification on that basis does not begin.
Keep work and production claims outside transformation identity

Do not infer a work-to-change connection from shared timing, a common affected subject, or the word successful. Once the U.Work and U.Transformation participants are both identified, choose exactly one outcome: (1) apply an existing subject predicate whose declared participants and obtaining condition match the case; (2) state an A.6.RCD disposition-2 local compound claim over named base facts and an admitted substrate; or (3) return missing-governor for that exact pair.

Production is a separate question. A post-state, work reference, verbal predicate, continuing changed entity, or U.Holon classification proves neither production-work participation, first existence of an entity, nor production completion. Apply A.15.PROD to the exact work, work part, subject-identity facts, completion criterion, and direct effect facts. A.3.4 contributes only the independently identified transformations; it adds no universal work-to-change or production relation.

Filled positive branch — result: C.2.1 assertion BuildWorkPopulatedStore-12 states the local connection between ReleaseBinary12_BuildWork_2026-07-21T0900_0912 : U.Work and ArtifactStorePopulationTransformation_12 : U.Transformation. The BuildOps predicate BuildWorkPopulatedStore@BuildOps-v12(work, transformation) holds only when that work performs the storeWrite application that changes the same ArtifactStorePartition_12 across the same boundary. BuildApplication_12 supplies the performed application and its builtBinary -> ReleaseBinary_12 binding; the partition's before/after artifact-presence facts ground the transformation. This is an A.6.RCD disposition-2 local compound claim, not a universal FPF work-to-change kind or occurrence.

Pump 14 — current result and earlier no-governor stage: A.3.4 identifies T-P14-PRESSURE-RISE : U.Transformation as the bounded change of continuing HydraulicLoop_P14; the loop's discharge-pressure characteristic is belowBand at the opening boundary and inBand at the closing boundary. The current case record contains relation-declaration episteme P14-REL-2026, owned by Pump14OperationsRelations, which declares AdjustmentWorkCausesPressureRise for exact participants W-P14-ADJUST-1010-1020 : U.Work and T-P14-PRESSURE-RISE; a separately stated case fact satisfies its actual-causation predicate. Therefore write: W-P14-ADJUST-1010-1020 caused T-P14-PRESSURE-RISE; neither shared timing nor transformation identity supplies that fact. In the explicitly earlier case record, P14-REL-2026 is absent; at that epistemic stage, keep the same Work and transformation, return missing-governor: work-to-change claim for <W-P14-ADJUST-1010-1020, T-P14-PRESSURE-RISE>, and route the missing declaration to Pump14OperationsRelations instead of asserting causation.

Keep six layers separate

For one identified transformation, keep these objects distinct:

LayerObject to keep distinctWhere to check it
actual bounded changeone U.TransformationA.3.4 identifies the continuing subject, extent, boundary conditions, before/during/after facts, and continuity rule
facts about the changed subjectrelation occurrences and characteristic-state facts that actually holdeach subject pattern defines the participants, obtaining rule, and identity
reusable change semanticsone predicate-definition episteme when repeated use needs the same ruleA.3.4 or the subject pattern states how the listed base facts satisfy that predicate
transformation assertionone C.2.1 episteme asserting that the transformation or base facts obtainC.2.1 identifies claim content, exact EntityOfConcern, and effective reference scheme; scope and viewpoint remain neighboring relations
representationformula, morphism, path, graph, diagram, trace, tuple, or state-plane expressionC.29 governs correspondence to independently recovered objects
evidence or evaluation resultan episteme used to support or evaluate the assertionthe measurement, evaluation, evidence, provenance, or assurance pattern governs that use

A verbal predicate does not turn every obtaining relation occurrence into a transformation. Assignment, availability, installation, and temporal order can obtain without change. Conversely, one actual transformation may require several relation facts without being identical to any one of them.

Do not restore the old transformationRelation field. If an existing relation already states the needed fact, use it. Otherwise apply A.6.RCD: a local compound claim is available only when its exact base facts and admitted substrate are present; if either is missing, return missing-governor or missing-substrate. Introduce a reusable predicate-definition episteme only when repeated uses need the same rule. A new durable relation kind still needs its own obtaining and occurrence-identity law; a task, morphism, operation family, or verbal predicate cannot be inserted into one union-valued field.

Add neighboring objects only for the claim being made

A neighboring object is not a slot of U.Transformation. Add it only for the claim the reader is making, and state its relation to the transformation, changed subject, work, or later use.

Claim being madePattern and boundary
reusable semantic way of doingA.3.1 governs U.Method; method existence establishes no actual change
claim-bearing account of that wayA.3.2 and C.2.1 govern U.MethodDescription; description establishes neither work nor change
typed operation arguments or resultsA.6.1 governs the exact operation declaration and application binding; these are not generic transformation inputs or outputs
intended workA.15.2 governs U.WorkPlan; intention establishes no dated work or actual transformation
performed workA.15.1 governs dated U.Work occurrences; 4.2.4 then requires an existing subject predicate, an A.6.RCD disposition-2 local compound claim, or missing-governor for the named work/transformation pair
transformation-flow location or compositionE.18 governs selected TransformationFlowStructure; a flow locus neither performs work nor makes a change actual
mathematical expressionE.18.2 and C.29 govern representation; a graph edge, morphism, or delta expression is not the world-side occurrence
dynamics modelA.3.3 governs the episteme; prediction is not actuality or permission
evidence, measurement, evaluation, or assuranceapply the measurement, evaluation, evidence, provenance, or assurance pattern that states the support or judgment relation; none of those results makes the change actual
description, view, publication, form, or carrierC.2.1, E.17, and E.24.PUB keep the episteme, view membership, publication occurrence, publication form, and carrier distinct
input, output, result, outcome, deliverable, or handoffname the participant and the relation actually claimed: method declaration, planned work, actual work, transformation, evaluation, commitment, delivery, acceptance, transfer, or receiving work. The source word is not a kind or universal slot.

A declared post-state is part of a transformation description. An actual post-boundary state or changed entity is a fact about the subject. To call that entity or relation a result, name the later use, its participants, and the relation being asserted; acceptance, delivery, publication, and downstream effect remain separate. U.Transformation therefore has no generic ResultRef or OutputConditionOrPortRefs slot.

When the use needs an episteme about the transformation, identify it through C.2.1: exact claim content, the transformation or another subject as EntityOfConcern, and the effective reference scheme. Add scope, viewpoint, empirical grounding, edition, publication, or representation only when the use separately requires that relation.

Neighboring Distinction Table

Claim being madePattern to use
actual bounded transformationA.3.4 U.Transformation
selected transformation-flow structure, locus, path, crossing, or flow valuationE.18; A.3.4 still identifies each transformation occurrence
graph, algebra, morphism, path, tuple, or wiring expressionE.18.2 and C.29 as representation, not actuality
semantic way of doingA.3.1 U.Method
description of a way of doingA.3.2 U.MethodDescription
state-space and transition-law epistemeA.3.3 U.Dynamics
reusable operation declaration or application bindingA.6.1
planned or dated workA.15.2 U.WorkPlan or an A.15.1 U.Work occurrence
positive temporal aspect or temporal-claim adequacyC.27.TA or C.27
problem-to-work carry-throughE.18.1; it carries the identified objects and does not retype them
evidence, evaluation, assurance, gate, decision, source use, publication, delivery, acceptance, or transferuse the pattern that defines that claim

Description And Publication Boundary

A method description, dynamics model, transformation diagram, transformation-flow structure description, dashboard, result record, source span, publication, or proof may describe a transformation or provide evidence for a use. It is not the transformation.

If the task is about the description, use C.2.1, A.3.2, A.3.3, E.17, E.18, or the applicable publication or source pattern. If the task is about the transformation, keep the description as a neighboring episteme or publication value.

Formal Transformation And Project-World Realization

A morphism, constructive proof, or formal state transition can correspond to an actual transformation of a formal object within the selected formal substrate. The formula, morphism, or proof term is still its C.29 representation.

For a physical, clinical, organizational, architectural, documentary, or epistemic change, a formal expression may specify, predict, constrain, or compare the change but cannot make it actual. First identify the changed subject, boundary, and before/during/after facts. If a later claim says that dated U.Work caused, realized, or participated in that transformation, apply the three outcomes in 4.2.4; return missing-governor when the named pair has neither an existing predicate nor a valid local compound basis. Do not infer realization, evidence, permission, acceptance, or a result relation from the formal construction.

Multi-reading source phrase

Use this slice when one phrase seems to name method, mechanism, formal construction, work, evidence, and transformation at once:

"The workflow algorithm transforms the emergency-stop specification, and the proof shows the new plant boundary is safe."

Keep these objects separate:

  • the workflow or algorithm may designate a U.Method or U.MethodDescription;
  • the proof is a claim-bearing episteme using a declared formal substrate;
  • when claim content changes, the earlier specification episteme and the later specification episteme are distinct C.2.1 identities; EpistemeEditionRelation relates them only when its historical-continuation predicate obtains;
  • dated editing or review is a U.Work occurrence admitted under A.15.1;
  • edition succession alone establishes no transformation of one continuing episteme. Open A.3.4 only for a separately continuing subject—such as a selected U.PresentationCarrier under E.24.PUB or a claim-bearing constituent organization—after naming its boundary, before/during/after facts, and continuity rule; otherwise stop without a transformation claim;
  • if revision U.Work first constitutes the later episteme, open a separate A.15.PROD first-existence question: name the exact productIdentitySpecification episteme, the named applicability predicate or filled local claim that applies it to the candidate basis, subject context, and boundary, the identityClosingWork, and the work-to-change and change-to-identity predicates or local compound claims. If that specification continues an earlier specification, state the separate C.2.1 EpistemeEditionRelation only when its historical-continuation predicate obtains; without that relation, treat it as a non-continuing replacement and evaluate its applicability independently. Return missing-governor for either named work/change pair whose basis is absent; the word governed cannot supply the link;
  • a plant change, safety evaluation, assurance claim, gate decision, and publication are separate objects and relations.

If only the proposed wording and proof are available, do not assert a project-world plant transformation. Different claim content gives two epistemes; test their EpistemeEditionRelation. Assert an A.3.4 specification-side transformation only for a separately continuing carrier or constituent organization with its boundary, before/during/after facts, and continuity rule. If the question instead concerns the later episteme's first existence, use A.15.PROD and stop when either direct connection lacks a basis. The proof can support an assertion only through its evidence or derivation use; it does not prove its own project use.

Archetypal Grounding

Physical system change

A nuclear-plant team says that a revised operating method stabilized a temperature profile after a thermal-power change. Result: CoolingLoopTransformation-7 is identified from the loop state, stabilization interval, operating conditions, and before/during/after temperature facts. The method is U.Method; the control-law model is an episteme; measurements and the safety decision use their own patterns. This short case names no dated adjustment U.Work occurrence or work-to-change predicate, so it makes no such connection. If that claim is later needed, name both participants and apply 4.2.4.

Biological editing

A CRISPR project says that an editing protocol changed a DNA target while keeping off-target risk under a bound. Result: identify the biological transformation from the continuing DNA referent, edit interval, boundary conditions, and sequence facts. Keep the protocol description, biochemical mechanism, lab U.Work, sequence measurement, risk evaluation, acceptance verdict, and publication separate. This sketch names neither a lab-work/transformation pair nor a matching predicate, so it asserts no connection between them; apply 4.2.4 only if that later claim is needed. The phrases edited sequence, lab output, and accepted result still name different possible relations.

Spontaneous non-agentive case — result: SeedlingFirstLeafUnfolding-B17 : U.Transformation is an actual first-leaf unfolding without an actor, method, or work claim. The continuing subject is the already existing Seedling-B17. Its boundary runs from unfolding onset t0 to the first stable full-expansion state t1; leaf-configuration and exposed-surface facts before, during, and after distinguish the episode under the stated growth conditions. The same-seedling rule permits ordinary cellular turnover and growth but excludes division, grafting, death, or replacement.

At this resolution the case asserts neither finer transformation parts nor partlessness. Do not add U.System, U.RoleAssignment, enacted method, U.Work, transformer, or production-through-work merely because observations exist. If a later use asks for an actor, apply A.3; if it asks for work, apply A.15.1 and then 4.2.4. Otherwise keep the case non-agentive and do not open A.15.PROD.

Specification repair

A safety specification is revised so that an emergency-stop boundary no longer permits two incompatible readings. First result: EmergencyStopSpec-E1 and EmergencyStopSpec-E2 are different C.2.1 epistemes because their claim content differs. EpistemeEditionRelation(EmergencyStopSpec-E1, EmergencyStopSpec-E2) may relate them when its historical-continuation predicate holds; neither is one continuing changed episteme.

A.3.4 may instead identify a change of EmergencyStopSpec-Carrier-17 : U.PresentationCarrier if E.24.PUB identifies the same carrier across the editing interval and the before/during/after borne-expression facts plus carrier-continuity rule are present. If the carrier identity, facts, or rule are missing, no carrier transformation follows. If editing U.Work first constituted EmergencyStopSpec-E2, name that work and the transformation by which the later identity closed. Apply 4.2.4 to the work-to-change pair, then apply A.15.PROD to the change-to-identity pair. Each connection needs a matching predicate or valid local compound basis; return missing-governor for either pair that lacks one. The repair method, ambiguity-removal assertion, review result, and publication of the later episteme remain separate.

Formal construction

A proof constructs a formal object and shows that a morphism preserves an invariant. Result: within the declared formal substrate, the formal object and ordered boundary can ground one formal transformation. The proof term and morphism expression are representations; publishing the proof is another relation. No physical or organizational U.Work follows from those facts. If a later claim says that dated work realized the transformation, apply 4.2.4 and return missing-governor when the named pair has neither an existing predicate nor a valid local compound basis.

Architecture change

An architecture team performs dated architecture U.Work. During the same interval, a selected structure undergoes a separately identified transformation: an interlevel conflict decreases while a key architecture characteristic stays within bounds. Result: the work and transformation are both present, but this sketch does not connect them. If that connection is needed, name both participants and apply 4.2.4; use a matching predicate or valid local compound claim, otherwise return missing-governor for the pair. Characteristic evaluation, decision, and publication remain separate.

Functional transformer in a flow

When a sentence says that a system transforms input to output or implements an algorithm, split at least four questions: which system and role assignment are claimed; which subject actually changed; which participant, port, or operation bindings hold at the boundary; and where the transformation sits in the selected E.18 flow. Add a method or method description only if the sentence also makes that claim.

Examples:

  • A pump can be the acting system while the actual transformation is the bounded pressure change of an identified fluid volume. Inlet and outlet pressure facts are characteristic-state and port facts; the pump curve is a model episteme.
  • A warehouse can perform receiving U.Work while pallet-location and inventory-state changes occur. Co-occurrence connects none of them. If a later use needs a work-to-change claim, name the pair and apply 4.2.4. Orders and pallets keep their work, transfer, resource, or affected-subject relations; they are not one input-output kind.
  • A neural-network block can participate in an activation transformation. Tensor-shape declarations, the attention method, dated inference work, benchmark evaluation, and architecture allocation stay separate and use their own patterns.

A flow position, algorithm label, module name, or output record establishes neither actual transformation nor work.

Assembly changes before PumpSkid identity

Before asking whether PumpSkid 7 exists as one entity, identify the already existing base frame BF-7, pump unit PU-7, motor MU-7, junction enclosure JE-7, pipe spool PS-7, cable set CS-7, and their still-open mechanical, electrical, and fluid interfaces. AssemblyConfiguration-7 is the A.22 selected structure made from those referents and their actual attachment, terminal, and flange-connection organization during assembly. It is not another name for a future PumpSkid 7 entity.

The mounting transformation changes the frame-to-pump and frame-to-motor attachment facts. The wiring transformation changes cable-to-terminal connections. The fluid-connection transformation changes spool-to-flange and seal facts. Identify each independently through its subject, extent, boundary conditions, before/during/after facts, and continuity rule. The change of AssemblyConfiguration-7 can also be identified if those attachment, terminal, flange, and seal relations have declared participants and obtaining rules and the selected structure has its own boundary and continuity rule. Call that occurrence the configuration transformation. The other three changes do not become its components merely because they occur in the same assembly episode.

No current FPF relation in this case says that the mounting, wiring, fluid-connection, and configuration changes compose one transformation. Keep all four changes and stop before a part or whole-transformation claim. The result from 4.2.1 is missing transformation-composition governor; a proposed local compound claim also lacks an admitted derivation substrate.

Positive A.1 classification on that basis stops as well, because no accepted composition result supplies an exact whole candidate and its six constructive components. The point at which a separate PumpSkid 7 identity rule first becomes true remains an entity-identity inception question; production completion, commissioning work, evidence, acceptance, and any B.2 whole-reidentification claim also remain separate.

Bias-Annotation

Lenses tested: Onto, Arch, Prag, Epist, Gov.

This pattern keeps the actual change separate from a composition question, holon classification, facts about the changed subject, method, work, flow structure, representation, assertion, evidence, evaluation, publication, production, and later use. It resists software narrowing, method-as-effect, model-as-authority, trace-as-law, formal-as-project-work, relation-verb-as-change, sampled-slice composition, blanket transformation holonhood, work-caused-change-as-production, and result-word-as-kind errors.

Conformance Checklist

CheckConformance statement
CC-A34-1One continuing changed subject, temporal extent or formal ordering boundary, boundary conditions, before/during/after facts, and continuity or reidentification rule identify the transformation. Changed claim content instead yields two C.2.1 epistemes and a separate edition-relation question.
CC-A34-2A task, desired state, method, plan, work trace, operation family, model, delta expression, morphism, predicate, relation occurrence, assertion, picture, or publication does not establish actuality or transformation identity.
CC-A34-3Every subject fact uses the pattern that defines its relation or characteristic; no union-valued transformationRelation field is used.
CC-A34-4Method, method description, operation declaration or binding, plan, work, flow structure, representation, evidence, evaluation, and publication retain separate identities and relations.
CC-A34-5A transformation assertion is a C.2.1 episteme about the actual transformation or exact base facts; it is not the occurrence.
CC-A34-6Time, rate, rhythm, duration, and ordering claims use C.27.TA and C.27 without replacing transformation identity.
CC-A34-7E.18 flow structure and C.29 representation neither perform work nor make the transformation actual.
CC-A34-8Evidence, assurance, gate, acceptance, and decision authority are not inferred from the transformation or its description.
CC-A34-9input, output, result, outcome, deliverable, and handoff remain wording cues until the reader names the participant and relation being asserted.
CC-A34-10When performed U.Work is claimed to cause, realize, or participate in a transformation, the case applies an existing subject predicate, states one A.6.RCD disposition-2 local compound claim over named base facts, or returns missing-governor for the pair. Co-occurrence and a shared subject are insufficient.
CC-A34-11Every proposed component change and whole-configuration change is identified independently. Shared timing, referent, work, flow position, or representation establishes neither composition nor partlessness.
CC-A34-12A use that needs positive transformation composition returns the parked result in 4.2.1. This pattern names no composition relation kind, signature, occurrence, or definition law, and keeps generic-relation, subject-specific, local-compound, and non-admission alternatives open.
CC-A34-13A transformation is tested under A.1 only after a future accepted architecture independently supplies the exact candidate and all six A.1 constructive components; the current blocker, evaluation, assertion, evidence, currentness, receiving disposition, and B.2 remain separate.
CC-A34-14No post-state, work reference, work-caused change, changed continuing entity, or transformation holon classification proves production-work participation, entity-identity inception, or production completion.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Method name as change"This method transforms X" is treated as an actual occurrence.Name the continuing changed subject, boundary, and before/during/after facts; keep the method under A.3.1.
Process diagram as workA workflow diagram is treated as enacted work.Use E.18 or A.3.2 for the diagram; use A.15.1 for dated work.
Dynamics model as permissionA transition law is used to approve action.Keep A.3.3 for the model; use evidence, gate, decision, and assurance patterns for use authority.
Temporal trend as interventionA rate or rhythm trend is treated as proof of changed behavior under an intervention.Use C.27.TA and C.27, then identify the continuing changed subject and its before/during/after facts separately.
Formal construction as workA morphism or proof construction is treated as work performed in a project-world object.Use C.29 or the direct formal pattern for the mathematical relation; name realization and work separately.
Publication as transformationA dashboard or report is treated as the changed state.Use publication or source patterns for that artifact; identify the changed subject separately.
Sliced trajectory as compositionSamples, subintervals, method steps, work parts, concurrent changes, or flow nodes are declared components of one transformation by containment or proximity.Independently identify each actual transformation. If the use needs a positive composition claim, return the parked blocker in 4.2.1; this edition does not choose its future architecture. Sampling or subdivision likewise supplies no evidence of indivisibility.
Resolution-level identification as partlessnessA change identified as one occurrence at the resolution chosen for the task is treated as necessarily atomic, indivisible, or partless, or as automatically composite and holonic.Keep the independently identified U.Transformation; infer neither presence nor absence of finer parts. Do not make a positive composition or A.1 claim until a future accepted architecture supplies its basis.
Work-caused change as productionA change that follows U.Work is called a produced entity or completed production.First close the named work/transformation connection through 4.2.4 or keep its blocker; then separately test production-work participation, first existence of the subject, and the applicable production-completion criterion under A.15.PROD.

Consequences

  • FPF gains one place to identify actual bounded transformations without turning method, work, relation expressions, descriptions, evidence, or publications into the change.
  • Current-resolution identification remains cheap: one bounded change can be identified without settling its finer composition. This says neither that finer parts exist nor that they do not.
  • An independently grounded change of a selected configuration remains usable without asserting whether nearby changes compose it or are its parts.
  • A use that needs positive transformation composition receives the one parked result from 4.2.1: missing governor, and also missing substrate when it proposes a local derived or compound claim. No relation kind, signature, occurrence law, or definition identifier is minted here.
  • If a future accepted architecture supplies an exact whole transformation and its construction facts, A.1 then applies its own six-component test; this edition supplies no positive transformation-holon classification.
  • Each subject pattern keeps its own change, U.Work, and production facts. A work/transformation connection uses the existing-predicate or local-compound branch in 4.2.4; otherwise the named pair remains missing-governor.
  • E.18 can arrange or locate transformation occurrences in a selected flow structure without becoming their occurrence ontology.
  • Ordinary result wording remains usable after the reader names the later use, its participants, and the relation being asserted; no universal transformation-result or production relation is introduced.
  • Readers whose use stops with one actual transformation skip 4.2.1-4.2.3. Only a composition- or transformation-holon-dependent use opens that advanced branch, whose current result is the parked blocker.

Rationale

U.Transformation gives FPF one object for an actual bounded change. Identify it from the continuing subject, boundary, before/during/after facts, boundary conditions, and continuity or reidentification rule. Keep task, method, plan, work, operation family, predicate, representation, assertion, evidence, evaluation, publication, and later-use claims visible as separate objects rather than fields of the transformation.

An independently identified configuration transformation is not made into a whole with transformation parts merely because separately identified changes occur in the same episode or concern referents selected into that configuration. A.3.4 deliberately stops before choosing the missing architecture. It does not prescribe constituent identity, contribution, compatibility, substrate, reidentification, or whether the eventual answer is a generic relation, subject-specific relations, bounded local compound claims, or continued non-admission. The truthful current result is the independently identified changes plus the parked blocker, not a provisional kind or future definition law.

A.1 remains an independent second test. If future accepted work supplies one exact whole transformation and all six A.1 construction facts, A.1 can judge that same entity. Until then, a whole or composite label, a trace, and the parked blocker supply no holonhood.

This separation also keeps production and result claims honest. U.Work can cause or participate in change only through one of the three 4.2.4 outcomes, and even a positive work-to-change claim does not make every such change production. A post-boundary entity may be the same continuing entity rather than a newly constituted one. Production-work participation, first existence, production completion, delivery, acceptance, and downstream effect each need their own participants, relation, and criterion.

SoTA-Echoing

A.3.4 uses four current source branches for four different questions. None of them makes a task, event description, graph, proof, work trace, or construction label an actual U.Transformation, and none admits transformation composition for FPF.

Source and practice answerUse in A.3.4Adoption status and blocked overread
Marletto, Deutsch, and Vedral, "Tests of constructor theory", 2026, arXiv edition 2606.07352v1, reviews the current experimental-test branch of constructor theory in terms of possible and impossible tasks and constructors rather than ordinary program execution.A.3.4:4.1 and 4.7 require an independently grounded actual bounded change even when a constructor-theory task or formal transformation is current; case 5.4 keeps the proof term or morphism expression as representation.Adapt. Use the task/constructor distinction to discipline possibility and governing conditions. Reject the overread that a task, its description, a constructor label, or a formal expression establishes the actual occurrence, project-world realization, evidence, or permission; this source branch is not treated as consensus ontology for every change.
Deutsch and Marletto, "Constructor theory of time", 2025, current arXiv edition 2505.08692v3 revised in 2026, shows within that current branch why duration and dynamics need an account distinct from task possibility.A.3.4:4.1 identifies the occurrence through its extent or formal ordering boundary and actual subject facts; 4.4-4.5 send temporal aspect and dynamics claims to C.27.TA, C.27, and A.3.3; case 5.1 keeps the control-law episteme separate from the cooling-loop change.Adapt. Preserve the separation among task, duration, dynamics, and actual occurrence without importing constructor theory as FPF temporal ontology. Reject duration, a dynamics model, or a task specification as sufficient transformation identity.
Guizzardi, Benevides, Fonseca, Porello, Almeida, and Sales, "UFO: Unified Foundational Ontology", 2022, gives the current-state UFO account through distinct micro-theories that include events, situations, participation, causation, and change.A.3.4:4.1 and 4.3-4.5 keep actual-change identity, subject facts, participation or work-to-change facts, causation, assertion, and representation as separate questions; case 5.6 applies that split to a system in a flow.Adopt the separation pressure; reject wholesale import. FPF does not import UFO categories or infer event mereology from a model. Identify one U.Transformation at the resolution needed by the use; open participation, causation, work, or representation only through the pattern for that claim.
Borgo and Righetti, "Towards Applied Constructional Ontology", 2025, argues that applied constructional ontology still requires explicit choices about mereology, dependence, identity, and application concerns.A.3.4:4.2 and the PumpSkid case 5.7 independently identify the local changes, reject composition by timing or representation, and keep the positive architecture open.Adopt the demand for explicit choices; do not preselect their answer. Temporal inclusion, graph adjacency, a shared referent, a construction label, or a selected structure supplies neither transformation composition nor part identity. This source does not decide whether FPF should later use a generic relation, subject-specific relations, bounded local claims, or continued non-admission.

For cases 5.1-5.7 the action is stable: identify the changed subject, boundary, actual facts, and continuity rule first; keep task, dynamics, work, participation, representation, assertion, and publication separate; return the 4.2.1 blocker for a composition claim and the 4.2.4 blocker for a work-to-change claim with no basis. Reopen these source-use decisions only if the constructor-theory branch changes the task-versus-occurrence boundary, a stronger foundational event account changes the separation among identity, participation, causation, and representation, or applied constructional ontology supplies evidence for reopening the deliberately unselected composition architecture. A new notation, process diagram, or modeling tool alone is not enough.

Relations

  • Builds on: A.1 for the independent holon criterion, A.6.RCD for missing-governor or missing-substrate, C.2.1 for blocker and assertion epistemes, and A.7 for category separation.
  • Coordinates with: A.3 when the use makes an acting-system claim; A.6.RCD if future work selects a bounded compound-claim route; A.6.REL if a future accepted relation architecture needs occurrence identity; E.24 and E.24.UK if that work proposes a public relation kind; F.18 if durable naming then becomes necessary; A.11 for parsimony; A.14 and C.13 for structural mereology without transformation-composition overread; A.22 for a selected changed structure; A.3.1, A.3.2, A.3.3, A.6.1, A.15.1, A.15.2, and A.15.PROD for method, dynamics, operation, work, and production questions; E.18, E.18.1, C.32.P2S, C.27.TA, C.27, C.29, A.10, B.3, G.11, and B.2; and the work-to-change, evidence, evaluation, gate, decision, source-use, production, delivery, acceptance, transfer, assurance, and publication patterns for those claims.

A.3.4:End

Transformation Ontic Precision Restoration

Type: A.3.4 precision-restoration child pattern Status: Stable Normativity: Normative unless a section is explicitly informative

Plain-name. Transformation wording repair.

Intent. Restore precision when wording about a situation of change hides whether the current FPF object is one bounded U.Transformation, its exact changed referent, a system claimed to act through an exact performed-work attribution or another direct actor-side relation, a distinct influence source kept under its exact kind and current relation, a method, method description, mechanism, work plan, dated work, functioning relation, transformation-flow structure, mathematical description, dynamics episteme, temporal aspect, evidence relation, publication relation, gate, decision, result, or source label.

Use this when. Use A.3.4.P when source or FPF-governed wording such as "pipeline", "dataflow", "flow", "network", "circuit", "path", "slice", "workflow", "process", "operation", "transformation", or "change" seems to name the thing under concern, but the text has not yet recovered what kind of FPF value is actually current.

First useful restoration output. Fill a compact TransformationWordingRepair note: encountered wording, working concern, exact recovered EntityOfConcern, actual-transformation basis or non-transformation disposition, any acting-system claim with its exact governor or unresolved disposition, every influence source's exact kind and current relation, exact neighboring claims, retained use, blocked overread, and remaining reader use. Then rewrite only the wording that depends on the recovered objects.

What goes wrong if missed. The text silently creates a local ontology from a convenient source label: "process" becomes method in one paragraph, dated work in another, and transformation-flow structure in a third; "path" becomes evidence sufficiency, assurance, gate passage, deontic permission, work authorization, or release authorization; "function" becomes behavior, bearer, mathematical function, and software routine at once.

What this buys. The reader gets one small restoration use that keeps bounded transformations, compound transformation-flow structures, formal descriptions, methods, mechanisms, work, evidence, publications, and functional structures in their governing places before any wording is changed.

Not this pattern when.

  • If one bounded transformation is already identified and only its ordinary use continues, apply A.3.4 directly.
  • If the current claim is already a selected transformation-flow structure, use E.18.
  • If the current claim is a graph, morphism, category, algebra, path, circuit expression, network expression, or other mathematical description, use E.18.2 and C.29.
  • If the current claim is only a semantic way of doing, method description, mechanism, work plan, dated work, evidence relation, publication relation, gate, decision, assurance, result, or temporal claim, use the direct governing pattern.
  • If the word is quoted source wording with no FPF-governed use, keep it quote-only.

Problem frame

People talk about change with convenient source labels. A manufacturing line has a process, an ML paper has an architecture pipeline, a refrigerator has a cycle, a plant model has a flow graph, a team has a workflow, and a proof has a construction path. Those labels often help recognition, but they do not say which FPF object is current.

The recurring defect is a second ontology by convenience. The same text may treat "process" as method, work occurrence, transformation-flow structure, mechanism, result evidence, and publication diagram. A graph path may become an action route. A network label may become a durable head beside TransformationFlowStructure. A function word may collapse functioning, mathematical function, software routine, module allocation, a system merely named as actor, and a differently typed influence source whose direct relation has not been recovered.

This pattern restores the current U.Transformation ontic first, then assigns linked values to their governing patterns. It is not a word ban and not a synonym table.

Problem

Without this repair:

  1. Source label becomes kind. "Pipeline", "workflow", "network", "circuit", or "process" is treated as the recovered FPF kind.
  2. Selected structure becomes one actual transformation. A flow, path, network, or circuit expression is treated as one actual U.Transformation or as proof of transformation composition without the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis. Identifying one occurrence at the resolution needed by the current use establishes neither finer transformation parts nor partlessness.
  3. Method, mechanism, and work collapse. A method description, law-governed mechanism, work plan, dated work, or source diagram is selected by vocabulary rather than by current claim.
  4. Functional wording overreaches. A system, module, port, interface, signature, or function label is treated as the transformation or as proof of functioning.
  5. Mathematical expression becomes world-side ontology. A graph, morphism, algebra, category, path, network, or circuit expression is treated as the project-world change.
  6. Description or evidence becomes transformation. A publication, dashboard, source span, proof, or evidence path is treated as the changed object or the change itself.

Forces

ForceTension
Recognition and precisionSource labels help readers recognize a change situation, but FPF use needs a recovered kind, subject-side occurrence basis, exact relation, and governing pattern.
One actual transformation and selected flow structureU.Transformation identifies one independently grounded actual bounded change and establishes neither transformation parthood nor partlessness at the current resolution. TransformationFlowStructure positions, relates, or locates transformation loci and adjacent governed values; common structure membership establishes no transformation composition.
Acting system and influence sourceA role assignment alone does not prove performance, and generic transformation participation does not prove action. Performed-work attribution needs one exact dated Work occurrence admitted under U.Work, its direct performedBy relation to the covering U.RoleAssignment, and any separately governed work-to-change relation needed by the claim; a non-work actor needs another exact direct actor-side governor. Every influence source keeps its own kind and exact relation.
Formal and project-world changeA formal construction may be a transformation over a formal object, or it may be a mathematical description of project-world structure; the current object decides.
Repair and readabilityThe repair must recover enough ontology for safe use without turning every ordinary sentence into a table.

Solution

Restore the change situation in this order.

  1. Name the working concern. State what the text is trying to do: identify a change, describe a flow, choose a method, claim evidence, compare architectures, describe functioning, or use a publication.
  2. Test for one actual U.Transformation. Recover the exact changed referent; exact temporal extent or exact ordering boundary in a declared formal substrate; boundary conditions; actual characteristic-state and obtaining direct-relation facts before, during, and after that boundary; and the continuity or reidentification rule that makes this one occurrence at the resolution required by the current use. Possible, intended, planned, modelled, predicted, or merely asserted change remains claim content and identifies no actual transformation until this subject-side basis obtains.
  3. Separate an acting-system claim from influence. For performed work, recover one exact dated Work occurrence admitted under U.Work, the exact covering U.RoleAssignment, and direct performedBy(WorkOccurrenceSlot, RoleAssignmentSlot); then recover separately the realization, causal, production, or other exact work-to-change relation required by the current use. Role assignment alone and generic transformation participation prove no action. For a non-work functional or physical actor-side claim, recover the exact system and the participant, operation-application, functioning, causal, or other direct actor-side relation supplied by its governor; otherwise leave the actor claim unresolved. Each manufacturing organization, certification organization, design organization, toolchain, communication system, selected structure, method, method family, or other possible influence source first keeps its exact kind—a method or method family is not a holon by label—and receives only the exact architecture, work, communication, constraint, or candidate-synthesis relation current for the claim.
  4. Test neighboring claims. Decide whether the wording points to a method, method description, mechanism, work plan, dated work, functioning relation, transformation-flow structure, mathematical description, dynamics episteme, temporal aspect, evidence, source, publication, gate, decision, assurance, result, refresh, reopen relation, or another direct subject claim.
  5. Use the exact governing relation for each neighboring value. A neighboring object keeps its own kind and governor; state its current relation to the transformation, changed referent, work, architecture candidate, or receiving use instead of placing it inside a transformation record.
  6. Rewrite only after kind and relation recovery. Keep ordinary wording when it is not FPF-governed, write quote-only source wording when no current use is admitted, or rewrite into the recovered FPF kind and exact relation named by value.
  7. Leave one reader use. The repaired text must say what the reader may do now: use A.3.4, use E.18, use C.29, use a method, work, mechanism, architecture, or evidence pattern, keep a quote-only cue, or block the stronger claim.

TransformationWordingRepair note

Use this note only when wording is doing FPF-governed work.

TransformationWordingRepair:
  EncounteredWording:
  WorkingConcern:
  RecoveredEntityOfConcern:
  ActualTransformationDisposition:
  TransformationOccurrenceBasis:
  ActingSystemDisposition:
  ArchitectureInfluenceDisposition:
  NeighboringClaimAndExactRelation:
  GoverningPattern:
  RetainedUse:
  BlockedOverread:
  RemainingReaderUse:

ActualTransformationDisposition is one of: actual bounded transformation recovered, not a transformation, not recovered, not current for this claim, quote-only source wording, or blocking missing value.

TransformationWordingRepair is a temporary wording-use restoration aid. Its retained output is the wording to keep or rewrite, the blocked overread, and the next governing-pattern application. ActingSystemDisposition and ArchitectureInfluenceDisposition are temporary note fields, not FPF kinds or universal relations. An actual transformation occurrence is grounded only through its subject-side occurrence basis.

For performed work, an acting-system claim needs one exact dated Work occurrence admitted under U.Work, the exact covering U.RoleAssignment, direct performedBy(WorkOccurrenceSlot, RoleAssignmentSlot), and the separately governed realization, causal, production, or other work-to-change relation required by the use. For a non-work actor-side claim, use an exact participant, operation-application, functioning, causal, or other direct relation supplied by its governor. If no such relation is recoverable, keep the actor claim unresolved. Every influence source retains its exact kind and only its current architecture, work, communication, constraint, or candidate-synthesis relation; influence establishes no acting fact by itself.

If an episteme asserts possible, intended, planned, modelled, predicted, or actual change, identify that episteme separately through C.2.1 when the assertion is current. Empirical grounding remains optional and, when current, uses its own exact relation; neither the assertion nor its grounding relation substitutes for the actual transformation basis. Project records, gate decisions, work plans, and work occurrences are created only by their direct governing patterns.

Direct governing-pattern selection

If recovery shows...Use this governing patternKeep this boundary
one actual bounded change under conditionsA.3.4A source label identifies no transformation until the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis are recoverable.
selected structure over transformation loci and adjacent governed valuesE.18TransformationFlowStructure positions, relates, or locates those loci and values. Selection or common structure membership establishes neither an actual transformation occurrence nor transformation composition, parthood, or partlessness.
mathematical expression over a selected structure or formal objectE.18.2, C.29, A.6.0, or the direct formal patternA graph, morphism, category, algebra, path, network expression, or circuit expression is not project-world work by notation.
semantic way of doingA.3.1Method is not dated work, mechanism, evidence, or transformation occurrence by label.
episteme describing a way of doingA.3.2Code, protocol, solver model, proof script, process model, or diagram may describe a method without being the method or the work.
law-governed operation algebra, laws, admissibility predicates, transport, audit, or mechanism-governing-definition assignmentA.6.1 and E.20Mechanism is not selected by a prestigious "algorithm", "process", or "mechanism" word.
planned or dated workA.15.2 or A.15.1Plan and work occurrence are not method, method description, transformation-flow structure, or evidence by appearance.
pattern-use recommendation, work-entry readiness, language-state move, architecture candidate use, or call-planning next actionE.10.MOVE first, then E.11.PUR, A.15.5, A.16, C.30, C.24, or the direct governing patternMove-like wording is not transformation wording unless a bounded U.Transformation or selected TransformationFlowStructure is actually current.
function-like wording inside a change situationA.3.4.P only to distinguish the actual transformation, selected TransformationFlowStructure, a system claimed to act under an exact actor-side governor, a differently typed influence source under its exact relation, boundary binding, or FunctioningRef?; use A.6.F for detailed function-kind discriminationA function word, role assignment, generic participant fact, module allocation, architecture locus, toolchain, or organization establishes neither the actual transformation nor action by label.
state-space and transition-law epistemeA.3.3Dynamics can model possible or claimed change; it is not the transformation itself.
time window, cadence, duration, latency, freshness, currentness, trajectory, inertia, or effortC.27.TA; use C.27 for temporal-claim adequacyTemporal aspect is not the whole transformation and temporal-claim adequacy is not positive temporal subject matter.
evidence, provenance, source, publication, dashboard, view, gate, decision, assurance, result, or release claimthe direct governing evidence, source, publication, gate, decision, assurance, result, or release patternA visible record or path does not establish evidence sufficiency, assurance, gate passage, deontic permission, work authorization, release authorization, performed work, or acceptance by itself.

Common source-label settlements

Source labelFirst recovery questionTypical admissible outcomes
pipeline or dataflowIs the current object one transformation, a compound transformation-flow structure, a method description, a work plan, or a publication diagram?A.3.4, E.18, A.3.2, A.15.2, C.2.P.DR, or quote-only source wording.
flowIs flow the selected structure, a mathematical expression, an actual material, energy, signal, or information flow, or an ordinary source label?E.18, E.18.2, C.29, direct subject pattern, or quote-only source wording.
network or circuitIs it a structure form, topology label, mathematical-expression family, functional structure, architecture-selected structure, or subject-domain system?E.18, E.18.2, C.29, C.30.ASV, A.6.F, or direct subject pattern.
path or sliceIs it graph path, PathSlice, evidence path, carrier path, mathematical path, source quote, or action-route metaphor?E.18, A.10, C.29, C.2.P.DR, carrier wording, source wording, or blocked overread.
workflow or processIs it method, method description, work plan, dated work, transformation-flow structure, mechanism, or source label?A.3.1, A.3.2, A.15.2, A.15.1, E.18, A.6.1 with E.20, or quote-only source wording.
algorithm, program, solver, or proofIs it method, method description, formal substrate, mathematical lens, mechanism, work occurrence, evidence, or proof publication?A.3.1, A.3.2, A.6.0, C.29, A.6.1 with E.20, A.15.1, A.10, C.2.1, or the governing publication pattern.
function, functional, or functioningIs the current claim about an actual U.Transformation, selected TransformationFlowStructure, a performed-work or non-work actor under an exact direct governor, a separately typed influence source, boundary binding, or FunctioningRef?; or is the word asking for function-kind discrimination?Use A.3.4 or E.18 for transformation-side recovery; use one exact Work occurrence admitted under U.Work plus performedBy and a separate work-to-change relation for performed work, or another exact participant, operation-application, functioning, causal, or direct actor-side relation; keep every influence source under its own kind and exact relation; use A.6.F for function-kind discrimination.

Functional change-situation settlement

When change-situation wording includes function, functional, functioning, transforms, or implements, use this pattern only to recover the exact current claims:

  • Is one actual bounded U.Transformation established by changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification?
  • Is a selected TransformationFlowStructure current without being treated as the acting system or the change occurrence?
  • Is performed work being attributed to a system? Recover the exact dated Work occurrence admitted under U.Work, exact covering U.RoleAssignment, and direct performedBy(WorkOccurrenceSlot, RoleAssignmentSlot). Then state separately the realization, causal, production, or other exact work-to-change relation required by the claim. A role assignment, work record, common timestamp, or generic transformation-participant fact does not prove performance.
  • Is a non-work functional or physical actor-side claim current? Recover the exact system and the participant, operation-application, functioning, causal, or other direct actor-side relation supplied by its governor. A changed referent, resource, port-bound object, module, or other participant is not an actor merely because it participates. If no actor-side governor is recoverable, leave the actor claim unresolved.
  • Is a distinct influence source current? First recover its exact kind. A manufacturing, certification, or design organization may be a system under its direct governor; a toolchain or communication system needs its own admitted kind; a selected structure remains a structure; and a method or method family is not a holon by label. State only the exact architecture, work, communication, constraint, or candidate-synthesis relation current for that value. Influence alone establishes no role, work, actor status, or transformation participation.
  • Are exact participant, port, operation-application, relation-signature, or functioning relations current at the boundary? Use their direct governors; do not turn them into generic transformation inputs or outputs.

Do not introduce a TransformerHolon kind, a generic transformer role, or a universal architecture-influence relation to bridge these claims. After recovery, apply A.6.F when the question is which function-like kind or relation is being claimed. A.3.4.P selects the direct governor; it does not infer mathematical function, software routine, capability, quality, work, method, architecture allocation, evidence, assurance, gate, or decision from functional wording.

Description, publication, and evidence boundary

A diagram, model, dashboard, report, source span, proof, graph, or publication may describe, assert, evidence, or help compare a transformation. It is not the transformation and does not supply its subject-side occurrence basis. If the description, assertion, or publication is current, use the episteme, publication, source, or declarative-representation pattern; C.2.1 empirical grounding remains an optional separate relation when the use requires it. If the actual transformation is current, keep every description, assertion, publication, and evidence use as an exact neighboring claim.

Archetypal Grounding

Refrigerator functional diagram

Source wording says: "The refrigeration circuit moves heat through the cycle."

Repair: recover whether the current claim is a refrigerator subsystem transformation, a TransformationFlowStructure over compressor, condenser, expansion, and evaporator transformations, a thermodynamic mechanism, a functional architecture view, or a schematic publication. The circuit label may stay as ordinary domain wording, but FPF use names the selected structure, mechanism, or publication relation.

Neural-network block

Source wording says: "The attention block transforms activations in the model pipeline."

Repair: the block may be an architecture locus or module allocation, but that fact alone establishes no actor. If dated inference work is claimed, recover its exact Work occurrence admitted under U.Work, covering U.RoleAssignment, direct performedBy, and the separately governed work-to-activation relation required by the use. If a non-work block action is claimed, recover the exact operation-application, functioning, causal, or other direct actor-side relation; otherwise leave action unresolved. A design organization, method or method family, toolchain, or communication system that shaped the block first keeps its exact kind and then only its exact architecture, work, communication, constraint, or candidate-synthesis relation. Activation and tensor-shape claims use exact participant, port, operation-application, or signature relations; attention may be a method description or mathematical lens; the pipeline may be a transformation-flow structure. Benchmarks or ablations are evidence or evaluation relations only when their governing patterns are current.

CRISPR editing workflow

Source wording says: "The guide-selection workflow changes the target gene."

Repair: the target-gene edit is only a candidate U.Transformation until the exact biological referent, edit boundary, boundary conditions, actual sequence and direct-relation facts, and reidentification rule establish one occurrence. Guide selection may be method, method description, work plan, evidence-facing table, or performed lab work according to the current claim. A table rank or workflow diagram establishes neither actual edit, gate passage, deontic permission, work authorization, release authorization, nor performed lab work.

Evidence path near a plant change

Source wording says: "The evidence path lets the valve-change flow proceed."

Repair: an evidence path may be a legitimate A.10 provenance relation for a named claim. The valve change still needs its exact changed referent, boundary, boundary conditions, actual subject facts, and continuity or reidentification basis; work plan, dated work, gate, assurance, result, and receiving use remain exact neighboring relations when current. The path establishes no work authorization, release authorization, gate passage, performed work, or actual transformation by shape or name.

Filled minimal repair note

TransformationWordingRepair:
  EncounteredWording: "the refrigeration circuit moves heat through the cycle"
  WorkingConcern: recover whether the sentence is about one bounded heat-transfer change, a selected compound transformation-flow structure, a thermodynamic mechanism, a functional architecture view, or a schematic publication.
  RecoveredEntityOfConcern: `RefrigeratorHeatTransferFlowStructure-1`, the exact selected `TransformationFlowStructure` over the compressor, condenser, expansion, and evaporator transformation loci.
  ActualTransformationDisposition: no actual bounded transformation is recovered; `RefrigeratorHeatTransferFlowStructure-1` is the exact current object, and its selection establishes neither transformation composition nor partlessness.
  TransformationOccurrenceBasis: no component transformation occurrence is asserted; each remains unresolved until its exact changed referent, boundary, boundary conditions, actual subject facts, and continuity or reidentification basis are recovered.
  ActingSystemDisposition: unresolved and not asserted; the circuit wording supplies no exact dated Work occurrence admitted under `U.Work`, `performedBy` relation, work-to-change relation, or non-work direct actor-side relation.
  ArchitectureInfluenceDisposition: no influence claim is current and no influence source is selected; any later source must first keep its exact kind and then receive only its exact architecture, work, communication, constraint, or candidate-synthesis relation.
  NeighboringClaimAndExactRelation: the four named transformation loci are positions in `RefrigeratorHeatTransferFlowStructure-1`; their exact transformation occurrences and structure-membership relations remain to be recovered under `E.18` and `A.3.4`. Thermodynamic-law material, functional view, and schematic publication remain unselected neighboring candidates.
  GoverningPattern: `E.18` governs `RefrigeratorHeatTransferFlowStructure-1`; `A.3.4` governs each component transformation only after its occurrence basis is recovered; mechanism, architecture-view, and publication patterns open only if one of those candidate objects becomes current.
  RetainedUse: "circuit" may remain ordinary domain wording for `RefrigeratorHeatTransferFlowStructure-1` after that exact selected structure is named.
  BlockedOverread: `RefrigeratorHeatTransferFlowStructure-1` is not proof of functioning, an actor, dated work, a gate decision, one actual transformation, or transformation composition; its component loci do not establish component occurrences, parthood, or partlessness.
  RemainingReaderUse: use `E.18` for `RefrigeratorHeatTransferFlowStructure-1`; open `A.3.4` only for a component whose exact occurrence basis is recovered, or the direct mechanism, architecture-view, or publication pattern only when that separate object becomes current.

Bias-Annotation

Lenses tested: Onto, Arch, Prag, Epist, Gov.

This pattern intentionally biases toward kind recovery before wording repair. It resists:

  • source-label ontology: familiar labels such as pipeline, process, network, circuit, or workflow become FPF kinds;
  • graph or path overread: graph path, evidence path, and carrier path become action route, evidence sufficiency, assurance, deontic permission, work authorization, release authorization, or work sequence;
  • function collapse: functioning, functional element, module allocation, mathematical function, software routine, and everyday purpose collapse into one "function";
  • semio displacement: descriptions and publications of transformations replace the transformation under concern;
  • neighboring-object fusion: a method, mechanism, work occurrence, system, influence source, or evidence record is inferred from wording and then treated as the transformation, its actor, or a transformation participant; generic participation is also treated as action without exact performedBy, work-to-change, or other direct actor-side relation.

Conformance Checklist

CheckConformance statement
CC-A34P-1The repair names the encountered wording and the working concern before selecting a replacement.
CC-A34P-2If one actual bounded transformation is current, the repair names or blocks its exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis.
CC-A34P-3Each neighboring object keeps its own kind and is connected only by an exact current relation to the transformation, changed referent, work, architecture candidate, or receiving use.
CC-A34P-4TransformationFlowStructure, graph mathematical description, path mathematical description, and subject-domain network or circuit wording are kept distinct. The selected structure positions, relates, or locates transformation loci and adjacent governed values; selection or common membership establishes neither transformation composition, parthood, nor partlessness.
CC-A34P-5Method, method description, mechanism, work plan, dated work, evidence, gate, decision, assurance, result, source, and publication claims remain with their governing patterns.
CC-A34P-6Function-like wording closes here only after the actual transformation, performed-work attribution or other exact actor-side relation, every influence source's exact kind and relation, and exact boundary relations are distinguished; detailed function-kind discrimination remains governed by A.6.F.
CC-A34P-7The repair leaves retained use, blocked overread, and remaining reader use by value.
CC-A34P-8The repair order is explicit: E.10 recognizes the wording, A.3.4.P restores the transformation ontic neighborhood, and neighboring patterns govern recovered objects and exact relations.
CC-A34P-9A performed-work actor claim names one exact dated Work occurrence admitted under U.Work, the covering U.RoleAssignment, direct performedBy, and the separately governed work-to-change relation required by the use; a non-work actor claim names another exact direct actor-side relation. Role assignment or generic participation alone proves neither.
CC-A34P-10Possible, intended, planned, modelled, predicted, and merely asserted change stays claim content; any C.2.1 empirical grounding is optional, separate, and not the actual occurrence basis.

Common Anti-Patterns and How to Avoid Them

Anti-patternSymptomRepair
Cue word as ontology"Pipeline", "process", "network", or "circuit" is treated as the FPF kind.Recover the current object: U.Transformation, TransformationFlowStructure, mathematical description, method, work, publication, or direct subject pattern.
Replacement by smoother umbrella"Process" is replaced with "flow" or "operation" without recovered kind.Run the replacement through the same recovery. If the kind is still hidden, keep the row open.
Network head inflationFrequent network or circuit wording becomes a peer durable head.Use network or circuit as structure form, topology label, mathematical-expression family, domain label, or subject-domain system only when recovered by value.
Selected structure as transformation compositionCommon membership in one flow, path, network, circuit, or pipeline is treated as a composite transformation, transformation-part relation, or proof of indivisibility.Use E.18 only to position, relate, or locate transformation loci and adjacent governed values. Ground every actual U.Transformation independently under A.3.4; common structure membership establishes neither composition, parthood, nor partlessness.
Workflow as performed workA workflow diagram or process model is treated as dated work.Use A.3.2, E.18, or C.2.P.DR for the description or structure; use A.15.1 only for dated work.
Function as proof of behaviorA module, port, participant, role assignment, or "transformer" label is treated as proof of actual change or action.Recover the actual transformation basis; for performed work, one exact Work occurrence admitted under U.Work, its covering U.RoleAssignment, direct performedBy, and the required separate work-to-change relation; otherwise the exact participant, operation-application, functioning, causal, or other direct actor-side relation.
Architecture influence as actionA manufacturing or certification organization, design organization, method or method family, toolchain, communication system, selected structure, or other value is called the actor because it constrained or enabled a candidate.Recover the value's exact kind first, then only its exact architecture, work, communication, constraint, or candidate-synthesis relation. A method or method family is not a holon by label, the temporary influence-disposition field is no new relation, and influence alone proves no role, work, actor status, or transformation participation.
Publication as changeA diagram, proof, dashboard, or source span is treated as the changed object or change occurrence.Use description, publication, evidence, or source-use pattern for the carrier and keep the transformation under A.3.4.

Consequences

  • FPF gains one reusable restoration pattern for language about change situations without making every subject pattern carry its own cue list.
  • A.3.4 becomes easier to use because source labels are tested against the exact subject-side transformation basis and then routed to exact neighboring relations.
  • E.18, E.18.2, and C.29 stay distinct: selected compound structure, mathematical expression, and mathematical-lens use do not collapse.
  • Architecture, method, work, mechanism, function, evidence, publication, and temporal patterns can point to the transformation ontic without becoming transformation patterns.
  • The cost is one small restoration note when wording is FPF-governed and hides several candidate kinds.
  • Reopen this pattern at the smallest affected row when A.3.4, E.18, E.18.2, C.29, method, mechanism, work, function, temporal, evidence, publication, or architecture patterns change the governing kind boundary, or when FPF wording repair repeatedly finds a change-situation label that the current settlements cannot recover by value.

Rationale

The current transformation ontology gives FPF one compact way to speak about bounded actual change. That compactness only helps if wording repair returns common source labels to the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis. Otherwise source labels reappear as local mini-ontologies: a process ontology here, a graph ontology there, a function ontology elsewhere.

A.3.4.P is placed under A.3.4 because the recurring repair is not about words in general. The repair starts from the U.Transformation ontic and asks whether the current use is an actual occurrence established on that basis, a performed-work actor claim grounded by one exact Work occurrence admitted under U.Work, performedBy, and its required work-to-change relation, a non-work actor claim under another exact direct actor-side governor, a differently typed influence source under its exact relation, a compound structure, a mathematical description, or another neighboring object connected by an exact current relation. E.10 recognizes the wording-use problem; E.10.ARCH:2.2 distributes direct governing, ontic-level restoration, and facet-level restoration; this pattern performs the ontic-level transformation restoration.

SoTA-Echoing

Source familyUse of sourceWhat changes here
Current FPF A.3.4 transformation onticGoverning ontology source for bounded actual change under conditions.This pattern tests wording against the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis.
Current FPF E.18, E.18.2, and C.29Governing source line for compound transformation-flow structure and mathematical description.Flow, path, network, circuit, graph, morphism, algebra, and category wording is separated into selected structure, mathematical expression, or lens use.
Current FPF E.10 and E.10.ARCH precision-restoration architectureGoverning source line for recognition and distribution.E.10 recognizes change-situation wording; E.10.ARCH:2.2 chooses direct governing, ontic-level restoration, or facet-level restoration; A.3.4.P restores only the transformation ontic neighborhood.
Current FPF C.2.P.DR and method, work, and mechanism patternsGoverning source line for declarative representation, method, mechanism, plan, work, and evidence separation.Algorithm, workflow, process, proof, and path wording is recovered by exact object, direct relation, use relation, or claim kind rather than by programming-paradigm slogans.
Current FPF A.6.F, A.6.M, A.15.1/F.6, and architecture structural-view patternsGoverning source line for function-like, performer-attribution, module, interface, and structural-view claims.A.3.4.P separates the actual transformation basis, exact performed-work attribution or other direct actor-side relation, every influence source's exact kind and relation, and boundary relations; the direct governing pattern decides each recovered claim.

SoTA use is conservative: this pattern relies on the current FPF settlements already carried by A.3.4, C.2.P.DR, and the governing neighboring patterns; it contributes the reusable restoration use for transformation-situation wording.

Relations

  • Builds on: A.3.4, E.10, E.10.ARCH, E.24, A.6.5, and E.8.
  • Coordinates with: E.18 for a selected structure that positions, relates, or locates transformation loci and adjacent governed values without establishing transformation composition, parthood, or partlessness; and with E.18.2, C.29, A.3.1, A.3.2, A.3.3, A.6.0, A.6.1, E.20, A.15.2, A.15.1, A.6.F, A.6.M, C.30.ASV, C.27.TA, C.27, A.10, C.2.P.DR, C.2.1, E.17, and direct gate, decision, assurance, result, source, publication, and release patterns when those claims are current.
  • Coordinates with: E.10.MOVE when source wording about a move, next action, pattern-use recommendation, work-entry readiness, language-state transition, architecture candidate use, or call-planning next action is not actually transformation wording.
  • Selected by: E.10 recognition row for change-situation wording when FPF wording repair needs transformation-ontic precision restoration.
  • Specializes: A.3.4 for wording-use precision restoration around situations of change.

A.3.4.P:End

Temporal Duality & Open‑Ended Evolution Principle

“A holon is born in design‑time, lives in run‑time, and is reborn when the world talks back.”

Problem frame

A holon’s blueprint and its lived reality are never identical for long. Pumps wear out, theories meet anomalous data, workflows face unanticipated load. FPF therefore requires a temporal framework that:

  1. Physically grounds every modification (via the Transformer Principle, A 3).
  2. Supports unbounded improvement cycles (P‑10 Open‑Ended Evolution).
  3. Works identically for physical, epistemic, operational (method, work) and future holon flavours.

Problem

Failure modeConsequence
Blueprint ≡ Reality“As‑built” discrepancies remain invisible; safety and validity claims become fiction.
Implicit magic updatesVersions overwrite each other; provenance chains snap.
Observer special‑caseMeasurement treated as metaphysical rather than a normal, physically grounded transformation.

Forces

ForceTension
Stability vs ChangeIdentify a holon across time ↔ allow radical redesigns.
Prediction vs EvidencePlan with intended specs ↔ respond to real telemetry.
Parsimony vs ExpressivenessKeep the model lean ↔ respect the full state and evolution complexity.

Solution - Temporal Duality Model

FPF assigns every holon state to one—and only one—of two temporal scopes:

ScopeSymbolDefinitionTypical contents
Design‑TimeTᴰInterval(s) during which the holon may be structurally altered by an external Transformer executing a U.TransformationalMethod.Specs, CAD, theorem scripts, IaC SCRs.
Run‑TimeTᴿInterval(s) during which the holon executes its own OperationalMethods and is assumed structurally stable (self‑maintenance allowed).Telemetry, transaction logs, field data, physical wear.

Temporal invariants

Tᴰ ∩ Tᴿ = ∅                     (never overlap)
Tᴰ ∪ Tᴿ = worldline(holon)      (cover full existence)
version(n+1) created only in Tᴰₙ (monotonic lineage)

Open‑Ended Evolution Principle

A holon may repeat the cycle ad infinitum:

(H₀ in Tᴿ₀) → observe → Δspec in Tᴰ₁ → build → H₁ in Tᴿ₁ → …

Observation itself is a transformation: the observing side is a U.RoleAssignment whose holderRef names the acting U.System and whose roleRef=TransformerRole@ObservationContext. That holder executes a measurement method whose output is an epistemic holon containing observations. Thus the traditional “External Observer Pattern” collapses into the universal external Transformer pattern.

Archetypal Grounding

PhasePump‑v2 (U.System)Proof‑v2 (U.Episteme)
Design‑Time3‑D CAD + G‑code; stress‑sim config.Lean/Coq script of theorem; dependency graph.
Run‑TimePump circulates coolant under OperatePump method.Theorem cited & reused; runtime is “being relied on”.
Run → Design loopSensor data shows cavitation; anomaly report produced by the monitoring server under roleRef=TransformerRole@MonitoringContext.New experiment contradicts corollary; lab apparatus and scientists hold TransformerRole@ExperimentContext assignments.
Design → Run loopEngineers author Pump‑v3 spec; the printer holds TransformerRole@FabricationContext while fabricating it.Community revises proof; the proof assistant holds TransformerRole@VerificationContext while verifying Proof‑v3.

(Diagrammatic lineage table omitted for brevity but included in annex.)

Conformance Checklist

IDRequirementPurpose
CC‑A.4.1Every U.Holon MUST be tagged with its current temporal scope (Tᴰ or Tᴿ).Eliminates blueprint/reality ambiguity.
CC‑A.4.2A transition from TᴰTᴿ SHALL be modeled as executes(Transformer, U.TransformationalMethod).Guarantees physical grounding of instantiation.
CC‑A.4.3A transition from TᴿTᴰ SHALL be modeled as executes(transformerRole, U.TransformationalMethod) producing an observational U.Episteme.Ensures observation is treated as transformation.
CC‑A.4.4Tᴰ ∩ Tᴿ = ∅ and the concatenated intervals MUST equal the holon’s worldline.Guards against illicit overlap.
CC‑A.4.5Each new design version MUST reference (refinesVersion) exactly one predecessor or declare firstVersion = true.Enforces monotonic lineage for auditability.

Consequences

BenefitsTrade‑offs / Mitigations
Audit‑Ready engineering workflow – Every state and change is explicitly typed, timed, and causally linked to a physical system/Tramsformer.Additional metadata tagging; mitigated by templates in Authoring Guide (E 8).
Unified View of Build & Measure – Observation, test, simulation, maintenance, and fabrication all share one mechanism.Requires modelers to think in terms of Transformers even for “passive” sensing; mitigated by role libraries (transformerRole, CalibratorRole, etc.).
Foundation for Learning Loops – Enables higher patterns (e.g., B 4 Canonical Evolution Loop, D 3 Trust Calculus) to reason over evidence accrual and version fitness, including self-modification.None significant—temporal scoping is already needed for safety‑critical provenance.

Rationale (extended)

  1. Why separate scopes? Real-world systems expose the as-intended versus as-is gap. By formalising that gap, FPF prevents silent assumption of perfect fidelity and allows quantified error (U.Error) to drive evolution.

  2. Why treat observation as transformation? Physics tells us measurement changes state (energy, information, even quantum collapse). Making the observer just another Transformer means: no special metaphysics, full energy/provenance accounting, seamless tie‑in with Constructor Theory (see A 3 Rationale §2).

  3. Why insist on open‑endedness? Perfect finality is unattainable outside mathematics mandates that holons must be improvable in principle; this pattern encodes that mandate structurally: version n+1 is always possible.

  4. Why no overlap (TᴰTᴿ)? The instant a holon is mutable (design) it ceases to be the “same” operational asset relied upon for guarantees. Overlap would break trust calculations and violate A.7 Strict Distinction.

This pattern therefore realises three core principles in concert:

  • Temporal Duality – explicit tagging of states.
  • Open‑Ended Evolution – guaranteed pathway for refinement.
  • Ontological Parsimony – one mechanism (Transformer) for all state changes, avoiding specialised “observer” or “installer” types.

“Blueprints dream; instances speak. Evolution is the conversation between them.”

A.4:End

Open‑Ended Kernel & Extension Layering

Status. Transitional stub (informative). This section defines no dedicated “module” subsystem. Enforceable boundary discipline lives in A.6.0 U.Signature and A.6.1 U.Mechanism, with guard‑rails in E.5.3 (Unidirectional Dependency) and E.10 (LEX‑BUNDLE stratification).

Problem frame

FPF’s ambition is to act as an “operating system for thought.” That ambition can only be realised if the framework:

  • (i) remains stable and self‑consistent over multi‑decade timespans;
  • (ii) invites, rather than resists, the continual influx of new disciplinary knowledge; and
  • (iii) allows multiple, even competing, explanatory lenses to coexist without forcing a “winner‑takes‑all” unification.

Historically, grand “total” ontologies—Aristotle’s Categories, Carnap’s Logical Construction of the World, Bunge’s TOE—failed precisely because each tried to embed every domain’s primitives directly into a single monolith. Once the monolith cracked under domain pressure, the whole edifice became unmaintainable.

Problem

If FPF were to let domain‑specific primitives creep into its Kernel, two pathologies would follow:

PathologyManifestationBreach of Constitution
Kernel BloatEvery new field (e.g. synthetic biology) adds convenience root U-kinds or local type vocabularies -> Core size explodes, review workload becomes unscalable.Violates C-5 Ontological Parsimony; erodes P-1 Cognitive Elegance.
Conceptual GridlockConflicting axioms (deterministic thermodynamics vs. indeterministic econ‑metrics) must fight for space in the same namespace.Breaks C‑3 Cross‑Scale Consistency; triggers chronic DRR deadlock.

A minimal, extensible design is therefore mandatory.

Forces

ForceTension
Stability vs. EvolvabilityImmutable core needed for trust ↔ constant domain innovation needed for relevance.
Universality vs. SpecificitySingle kernel language ↔ rich idioms for fields as diverse as robotics, jurisprudence, metabolomics.
Parsimony vs. CoverageFew primitives keep reasoning elegant ↔ framework must still model energy budgets, epistemic uncertainty, agentic goals.

Solution

FPF’s modularity is declarative, not “callable”: pattern texts publish law‑governed declarations (vocabulary + laws + applicability) that can be reused and specialised. They are not subroutines, services, or protocol endpoints in the software‑architecture sense; treat “module” as a metaphor at most.

To keep the Kernel open‑ended without a bespoke plug‑in patterns standard, FPF relies on the boundary stack that already exists elsewhere in Part A/E/F:

  1. Kernel minimality (C‑5). Domain knowledge (physics, biology, economics, …) stays outside the Kernel by default; it enters as extension vocabularies and laws.
  2. Boundary packaging via U.Signature (A.6.0). Reusable bundles are published as signatures with an explicit SignatureManifest (imports, provides).
  3. Dependency vs specialisation are separate relations. imports forms a dependency DAG constrained by E.5.3; refinement/extension (, ⊑⁺) is expressed separately (e.g., A.6.1 U.MechMorph) and should not be conflated with imports.
  4. Registry references stay references. Bridges, policy‑ids, and edition‑ids (Part F) are registry identifiers: they are cited/pinned where needed, not treated as exported symbols in provides.

This section is intentionally lightweight: it provides architectural intent and neighboring-pattern pointers only. Any new enforceable modularity constraints belong in the A.6.* boundary patterns (or in E.* guard‑rails), not here.

A.5:End


Last Updated: 2026-07-28 — upstream FPF commit 17edd955 (github.com/ailev/FPF)