Part A - Kernel Architecture Cluster
Preface node
heading:part-a-kernel-architecture-cluster:1238
What this page is
This is generated FPF reference text from the specification preface or supporting sections. It helps interpret FPF; it is not FPF Reference product documentation.
Methodology
Use it to understand how the specification wants to be read, then return to a route, pattern, or work packet for active work. Cite generated IDs only when the wording changes the task decision.
Content
Onboarding Glossary (NQD & E/E‑LOG)
One‑screen purpose (manager‑first). This pattern gives newcomers a plain‑language starter kit for FPF’s generative engine so they can run an admissible problem-solving or search loop on day one. It explains the few terms you must publish when you generate, select, and ship declared set results or typed portfolio publications (not single “winners”), and points to the formal anchors you’ll use later. (OEE is a Pillar; NQD/E/E‑LOG are the engine parts.)
Builds on. E.2 (P‑10 Open‑Ended Evolution; P‑2 Didactic Primacy), A.5, C.17–C.19 - Coordinates with. E.7, E.8, E.10; F.17 (UTS); G.5, G.9–G.12 - Constrains. Any pattern/UTS row that describes a generator, selector, typed portfolio publication, or set-return publication surface.
Keywords & queries. novelty, quality‑diversity (NQD), explore/exploit (E/E‑LOG), declared set result, typed portfolio publication, illumination map (report‑only telemetry), parity run, comparability, ReferencePlane, CL^plane, ParetoOnly default
Problem Frame
Engineer‑managers meeting FPF for the first time need a plain, on‑ramp vocabulary for the framework’s generative engine so they can run an informed problem‑solving/search loop on day one—before formal specifications. Without that, Part G and Part F read as assurance/alignment only, and teams default to single “best” options. This undercuts P‑10 Open‑Ended Evolution and harms adoption.
Problem
In current practice:
- Single‑winner bias. Teams look for “the best” option and publish a leaderboard, suppressing coverage & diversity signals essential to search.
- Metric confusion. “Novelty” and “quality” are used informally; units and scales are omitted; ordinal values are averaged, breaking comparability.
- Hidden policies. Explore/exploit budgets and governor rules are implicit; results are irreproducible and refresh‑unsafe (no edition/policy pins).
- Tool lock‑in. Implementation terms (pipelines, file formats) leak into the Core, violating Guard‑Rails.
FPF needs a short, normative glossary that names the generative primitives in Plain register and ties each to its formal anchor—so declared set results and typed portfolio publications, not single scores, become the default publication.
Forces
Solution - Normative onboarding glossary and publication hooks
4.1 Plain one‑liners (normative on‑ramp; formal anchors in C.17–C.19)
(Registers & forbidden forms per LEX‑BUNDLE; avoid “axis/dimension/validity/process” for measurement and scope.)
4.2 Publication & telemetry duties (where these terms show up)
- UTS surface (Part F). When a UTS row describes a generator, selector, typed portfolio publication, or set-return publication surface, it MUST surface N, U, C, Diversity_P, E/E‑LOG
policy‑id,ReferencePlane, with units, scale, and polarity typed under MM‑CHR and CG‑Spec, and admissible references toDescriptorMapRefandDistanceDefRef. (Row schema: F.17; shipping via G.10.) - Parity & edition pins (Part G). When QD/OEE is in scope, pin
DescriptorMapRef.editionandDistanceDefRef.edition(and, where applicable,CharacteristicSpaceRef.edition,TransferRulesRef.edition) and recordpolicy‑id+PathSliceId. Treat illumination/coverage as report‑only telemetry; publish an Illumination Map where G‑kit mandates parity records. Declare S (Scale Variables) and run at least one scale‑probe (two points along S) when claiming scale‑amenability. Dominance policy defaults toParetoOnly; including illumination in dominance MUST cite a CAL policy‑id. - Tell‑Show‑Show (E.7/E.8). Any architectural pattern that claims generative behaviour MUST embed both a U.System and a U.Episteme illustration using this glossary (manager‑first didactics).
4.3 Minimal first-day construction
- Declare CG‑Frame (what “quality” means; admissible units and scales) and ReferencePlane.
- Pick 2–4 Q components + a simple DescriptorMap (≥2 dims) for N/D; publish editions.
- Choose an E/E‑LOG policy (explore↔exploit budget); record policy‑id.
- Apply G.5 selection/dispatch with parity pins; return a declared set result (
Front,Archive,Shortlist, orRankedShortlistas appropriate), not a single score or an unnamed "portfolio". - Publish to UTS + PathIds/PathSliceId; Illumination Map is report‑only telemetry by default.
Archetypal Grounding
Informative; manager‑first (E.7/E.8 Tell‑Show‑Show).
Show‑A - SRE capacity plan (selector returns a set).
Frame. We must raise service commitment headroom for Q4 without breaking latency SLOs.
Declared retained set. {cache‑expansion, read‑replicas, query‑shaping, circuit‑breaker tuning, schema‑denorm}.
Glossary in action. U = latency@p95 & error‑rate, C = budget ≤ $X, risk ≤ R, N = dissimilarity to current playbook, Diversity_P = adds a previously empty niche in our archive (e.g., “shifts load to edge”). E/E‑LOG starts Explore‑heavy, flips Exploit‑heavy once ≥ K distinct niches are lit. (Publish UTS row + parity pins; illumination stays report‑only telemetry.)
Show‑B - Policy search with QD archive (MAP‑Elites‑class).
Frame. Robotics team explores gaits that trade stability vs energy use.
Glossary in action. CharacteristicSpace = {step‑frequency, lateral‑stability}, ArchiveConfig = CVT grid, N from descriptor distance, U = task reward, Diversity_P = coverage gain; PortfolioMode=Archive. Families include MAP‑Elites (2015), CMA‑ME/MAE (2020–), Differentiable QD/MEGA (2022–), QDax (2024); publish editions and policy‑ids; treat illumination as report‑only telemetry.
(Optional) Show‑C - OEE parity (POET/Enhanced‑POET).
Co‑evolve declared {environment, method} sets; publish coverage/regret as telemetry metrics; pin TransferRulesRef.edition; return sets, not a single winner.
Show‑Epi - Evidence synthesis (U.Episteme).
Frame. A living review compares rival causal identification methods (e.g., IV vs. DiD vs. RCT‑adjacent surrogates) across policy domains.
Glossary in action. U = external‑validity gain @ F/G‑declared lanes, C = ethics & data‑licence constraints, N = dissimilarity in **ClaimGraph** transformations, D_P = coverage of identification niches in the archive. ReferencePlane = episteme. Illumination/coverage stays report‑only telemetry; selection returns a declared retained-set result or portfolio-publication view of methods per niche. (Publish UTS rows; cite Bridges + CL for cross‑domain reuse; edition‑pin Descriptor/Distance defs where QD applies.)
Bias-Annotation
Scope. Trans‑disciplinary; glossary applies to both System and Episteme work. Known risks & mitigations. Over‑aggregation: forbid mixed‑scale sums; use CG‑frame and MM‑CHR. Terminology drift: enforce LEX‑BUNDLE registers; ban tool jargon in Core. Optimization monoculture: require declared set-result or typed portfolio publication where G‑kit mandates parity; illumination stays report‑only telemetry unless a CAL policy promotes it (policy‑id cited).
Conformance Checklist (SCR/RSCR stubs)
Consequences
Benefits.
- Immediate usability for engineer‑managers (plain one‑liners) with formal anchors for auditors.
- Declared-set-first / typed portfolio-publication culture (typed set results & illumination) instead of brittle leaderboards.
- Edition‑aware comparability; parity/refresh is routine, not ad‑hoc.
Trade‑offs & mitigations.
- Slightly longer UTS rows → mitigated by consistent schema and copy‑paste snippets.
- Requires discipline on units and scales → mitigated by CG‑frame templates.
Rationale
This pattern instantiates P‑10 Open‑Ended Evolution by making generation‑selection‑publication operational at the on‑ramp: readers get just enough shared vocabulary to run search as standard practice. It aligns with Didactic Primacy (P‑2) and LEX‑BUNDLE (E.10) by keeping definitions plain‑first and scale‑lawful, and with Patterns Layering (P‑5) by pointing to C.17–C.19 for formal anchors without tool lock‑in. The post‑2015 line (MAP‑Elites → CMA‑ME/MAE → Differentiable QD/MEGA → QDax; POET/Enhanced‑POET/Darwinian Goedel Machine) normalised quality‑diversity and open‑endedness as first‑class search objectives; this glossary surfaces those ideas as publication standards, not tool recipes.
Relations
Builds on. E.2 Pillars (P-10, P-2, P-6), A.5 (Open-Ended Kernel), B.5/B.5.2.1 (Abductive loops + NQD integration), C.17–C.19 (Creativity-CHR, NQD-CAL, E/E-LOG).
Coordinates with. E.7/E.8 (Archetypal Grounding; Authoring template), E.10 (LEX‑BUNDLE), F.17 (UTS), G.5/G.9–G.12 (set‑returning selectors, iso‑scale parity, shipping & refresh). Constrains. Any generator/selector/typed portfolio publication on the Core surface: N‑U‑C‑Diversity_P + policy‑ids; S/Scale‑probe where applicable; parity pins; lawful scales; declared-set publication where mandated. (Ties into UTS rows and parity records.) Editor’s cross‑reference. For agentic orchestration of scalable tool‑calls under BLP/SLL, see C.24 (Agent‑Tools‑CAL).
Scope of this glossary
This pattern is an on‑ramp: it does not replace C.17–C.19. It binds Plain definitions to publication/telemetry expectations so newcomers can use NQD/E/E‑LOG immediately while experts follow the formal trails.
Early set-result and metric-kind vocabulary
- Use
Palettefor a plurality-preserving set with no dominance semantics yet. - Use
TraditionPaletteonly when the members are traditions gathered before later comparison or choice semantics are declared. - For methods, hypotheses, environment-method pairs, candidate explanations, or other member kinds, use
Paletteplus explicitSubjectKindinstead of borrowing theTraditionPalettehead. - Use
Frontonly for a non-dominated set under one declaredDominanceSet. - Use
Q-Frontwhen the declaredDominanceSetis the declaredQcomponents. - Use
Archivefor a retained set whose purpose is coverage, stepping-stone retention, or frontier expansion rather than current non-domination. - Use
ExplorationArchivefor the broad retained exploration surface; it is the exploration-specific specialization ofArchive. - Use
SteppingStoneSetonly for one narrower retained subset whose stated purpose is future frontier reach rather than the whole archive. It is not part of the ordinary first-pass public-head family for retained exploration. - Use
Shortlistfor the set chosen from one declared source set by one named lens. - Use
RankedShortlistonly when that shortlist is explicitly rank-ordered. - Use
ShortlistIdfor the stable public token of one emitted shortlist; it is not the shortlist itself. - Use
ChoiceSetonly when the mathematical set object underlying one shortlist must be named explicitly; do not let it replace the public shortlist head. - Use
Q-setfor the declared current objective tuple that may ground the currentDominanceSet. - Use
LearningProgressSignalfor an optional policy-side signal that says further exploration is expected to improve capability or competence; it is not part ofQor dominance by default. - Use
CompetenceModelReffor the cited model or evidence surface that makes a capability or competence estimate reviewable. - Use
GoalSpaceExpansionCuefor a declared reason to widen the goal or task palette; it is a pool-policy/probe cue, not proof that one candidate is already on the current front. - Use
GoalSpaceExpansionPolicyReffor the declared pool policy that says when learning-progress or competence evidence justifies widening goals, tasks, or curricula; it governs archive/curriculum growth, not default dominance. - When future reach depends on transition or transfer potential, cite that reachability or transfer rule together with
LearningProgressSignal,CompetenceModelRef, orGoalSpaceExpansionCue; keep that bridge on the archive/pool-policy side unless one explicit policy promotes it. - If one front is meant to be current-
Qby default, say so asQ-Frontor asFront over the declared Q componentsrather than leaving the relation betweenQ-setandDominanceSetimplicit. Use-Valuemay be one member of theQ-setonly when the current Context declares it there; it is not the wholeQ-setor the defaultQ-setby itself.- Metric-kind doctrine: the
Q-setis the candidate/front-facing objective tuple;Novelty@contextis one context-relative candidate signal;DeltaDiversity_Pis one set-relative marginal diversity contribution;IlluminationSummaryis one report-only archive telemetry summary unless one explicit policy promotes it. - Minimal mathematical lens: the current front lives in one declared comparison or outcome space, while the exploration archive may depend on one declared search, niche, or reachability space. Keep both spaces explicit when they differ.
- Keep
Novelty@context,DeltaDiversity_P,Surprise, andIlluminationSummaryoutside the defaultQ-setunless one declaredPromotionPolicysays otherwise. - A reader should be able to tell whether one sentence is talking about a
Palette, aFront, anArchive, aSteppingStoneSet, aShortlist, or one explicitRankedShortlist, and whether one selected set came from one declared source set, before later policy or geometry detail arrives. - Use
portfolioonly when the portfolio or set-result field is a declared retained set plus a selection/retention rule or a portfolio-publication posture. Do not use bareportfoliowhenPalette,Front,Archive,SteppingStoneSet,Shortlist, orRankedShortlistis already recoverable.
Helper declarations for set-result language
- Ordinary public set-result family heads are
Palette,TraditionPalette,Front,Q-Front,Archive,ExplorationArchive,Shortlist, andRankedShortlist. ExplorationArchiveis the exploration-specific specialization ofArchive; useArchiveas the wider family head only when that exploration-specific subtype does not matter.SteppingStoneSetis one narrow retained-subset head only when that subset itself is the visible published surface; do not treat it as the ordinary public head for retained exploration.ShortlistIdis the stable public token or id companion for one emitted shortlist; it is not a set-result family head.ChoiceSetis only the mathematical set gloss for a shortlist when that object itself must be named.SetResultFamilyis a declaration field naming which public set-result family is being emitted; it is not another public head, not a publication face, not a publication form, not an interop publication form, and not a carrier kind.SourceSetFamilyis a declaration field naming the immediate source-set family acted on by a lens, such asQ-Front,ExplorationArchive,Front,Archive, orTraditionPalette; it does not carry derivation, composition, or object-id load, it does not rename the emittedShortlistorRankedShortlist, and it is not a publication face kind, publication form kind, interop publication form kind, or carrier kind.SourceSetCompositionis an optional declaration field naming a multi-source composition such asFront+Archivewhen one lens genuinely acts over more than one declared source-set family; it is not itself a kind.SubjectKindis a declaration field naming what the members are, such as traditions, methods, hypotheses, environment-method pairs, candidate explanations, or other subject-kinded alternatives.EligibilitySet,DominanceSet,TieBreakerSet, andTelemetrySetare the comparison-bundle sets behind the published set result, not rival publication heads:EligibilitySetsays what may enter,DominanceSetsays what counts for current non-domination,TieBreakerSetsays what may order or choose among survivors, andTelemetrySetsays what may be reported without changing dominance.PromotionPolicyis the policy pin that authorizes one tie-breaker or telemetry signal to move into dominance. Without that pin, novelty, diversity, surprise, illumination, or similar signals remain outside the currentDominanceSet.DerivedViewKindis an optional declaration field for a derived view, such as one tradition view used for interpretation or publication. It must leave the baseSourceSetFamily,SetResultFamily, and emitted shortlist family recoverable.BasePaletteRefis an optional cited id/ref for the base palette when one derived tradition view or shortlist depends on that palette; it is a ref, not a kind.- Stable values for
SetResultFamily,SourceSetFamily,SourceSetComposition,SubjectKind, andDerivedViewKindshould come from controlled tokens, cited ids, or already-declared head labels; do not let one ad hoc local prose label become a de facto field value. - When the upstream object is
SoTAPaletteDescriptionand its members are traditions,TraditionPalettemay be used as the reader-facing tradition-only palette head for that same palette declaration. It is an aliasing head over the same palette declaration, not a separate palette declaration with its own authority-reference relation. When the members are not traditions, keepSoTAPaletteDescriptionorPalette + SubjectKindexplicit instead of wideningTraditionPalette. RetentionIntent=steppingStoneis a field value on retained archive membership when the purpose is future frontier reach; it is not the same publication move as publishing aSteppingStoneSet, which names a narrower retained subset only when that subset itself is the published set result being discussed and not the default archive head.
First public wording for shortlisted results
- When one reader needs the visible selected set, say
Shortlist from <SourceSetFamily> under <LensId>rather than one genericchoice setorportfolio. - When the selected set must be cited as one stable emitted object, say
ShortlistIdand keep one nearby line that names the shortlist and its source set. - When the shortlist is ordered, say
RankedShortlistand keep the underlying shortlisted set result recoverable rather than jumping straight fromFrontto ranking. - Use
choice set underlying that shortlistonly when the mathematical set object itself is the point of the sentence. - A reader should be able to recover on first pass what source set was acted on, what shortlist came out, and whether the text is naming the published set result, the token, or the mathematical set object.
Set/space reading reading glosses
The current set/space reading terms should read plainly as follows:
SearchSpaceRef- one declared reference to the
CharacteristicSpacecurrently used to search, compare, or navigate candidate possibilities - it is one role-named ref field over the existing
CharacteristicSpaceRef/SpaceRefidiom, not one brand-new space kind
- one declared reference to the
OutcomeSpaceRef- one declared reference to the
CharacteristicSpacecurrently used to judge outcomes, effects, or realized value - it is one role-named ref field over that same idiom, not one synonym for
SearchSpaceRef
- one declared reference to the
DeclaredSubstrateInterpretiveView- the ordinary/common head of one optional interpretive-view family laid over one already-declared substrate-bearing line or one source set or one set result whose substrate remains recoverable
- it helps the reader see the current inspection question; it does not replace the base source set or silently invent one new substrate
DeclaredSubstrateAtlasView- one richer optional interpretive view that keeps several declared views, spaces, mappings, or qualifiers visible together
- use it only when the current reading truly needs that composite interpretation, and say why thinner interpretation is not enough; it is not the default meaning of palette, front, archive, shortlist, or candidate set
TypedSetViews- one explicit list of which declared set-view heads the current atlas/support reading is holding together
- use it when several declared views must stay visible together; it does not create one new set result and should not hide the active source set or active set result
OutcomeMapRef- one explicit
OutcomeMapRefor named map ref that shows how one declared source or set result bears on into one outcome-side or effect-side declared space/ref when that map materially matters - it qualifies the reading; it does not rename the source set into the outcome-side declared space/ref
- one explicit
SpaceMetricRef- one explicit metric-ref qualifier for the metric, neighborhood, distance, density, or reachability discipline being used inside one declared space
- it qualifies how the reader is comparing positions in that space; it is not the space itself and not one substitute for
SearchSpaceReforOutcomeSpaceRef
TransitionRelationRef- one explicit transition-ref qualifier for the transition, cross-scale state-change, dynamic-coupling, or phase-change basis that the reading depends on
- it explains why motion or cross-scale state change is being read a certain way; it does not by itself decide policy, planning, or publication
BridgeDistortionNote- one explicit note that a bridge, projection, aggregation, or derived reading is useful but not perfectly faithful
- it tells the reader where comparability bends or information is lost, so a reading that claims bridge, substitution, or reliance beyond the declared note does not over-claim
Practitioner-facing reading cue
- If the question is “Which space are we searching or navigating?”, look for
SearchSpaceRef. - If the question is “Which space are we judging outcomes in?”, look for
OutcomeSpaceRef. - If the question is “What optional overlay helps me read several declared views or set results together?”, look for
DeclaredSubstrateInterpretiveView. - If that overlay also keeps several declared views, spaces, mappings, or qualifiers together, it is the richer
DeclaredSubstrateAtlasView. - If the atlas/support reading must keep several declared set views visible at once, look for
TypedSetViews. - If the overlay depends on one explicit source-to-outcome mapping, look for
OutcomeMapRef. - If the overlay depends on one metric, neighborhood, or reachability discipline inside one declared space, look for
SpaceMetricRef. - If the overlay depends on one transition, cross-scale state-change, or dynamic-coupling basis, look for
TransitionRelationRef. - If the overlay depends on one bridge or projection that may lose fidelity, look for
BridgeDistortionNote.
First-use classification check
- Start with
DeclaredSubstrateInterpretiveViewwhen the NQD/OEE task is simply to keep one declared palette, front, shortlist, or archive readable while comparing candidate material. - Start with it only when any cited
SearchSpaceRef,OutcomeSpaceRef, mappings, or qualifiers are already declared elsewhere and remain recoverable through the base substrate, source set, or set result. - Escalate to
DeclaredSubstrateAtlasViewonly when the reading must hold several declared views, spaces, mappings, or qualifiers together to explain why one specialization, evaluation, or boundary judgement stays admissible, and state why thinner interpretation is insufficient. - If the reading keeps several declared set views together, name
TypedSetViewsexplicitly instead of letting atlas wording hide that view-set choice. - If the reading depends on one source-to-outcome map, name
OutcomeMapRefexplicitly instead of letting the overlay silently stand in for that map. - If the reading depends on one metric or neighborhood discipline, name
SpaceMetricRefexplicitly instead of letting the space name stand in for that metric. - If the reading depends on one transition, cross-scale state-change, or dynamic-coupling basis, name
TransitionRelationRefexplicitly instead of letting the overlay silently absorb that transition-support requirement. - Not this glossary-side interpretive-view stack when the real move is to invent one new search doctrine, one new outcome metric family, or one new publication surface. Those decisions stay with the governing patterns for the object itself.
A.0:End
Holon Ontic Foundation (U.Holon and Admitted Holon Kinds)
Type: Part A architectural ontology pattern Status: Stable Normativity: Normative unless a section is explicitly informative
Use This When
Use this pattern when a project must say what kind of thing is under concern before it can rely on parts, wholes, boundaries, acting systems, roles, methods, work, architecture, or descriptions.
Typical moments:
- a team calls everything a "system" and then asks physical or operational questions about theories, documents, models, dashboards, or descriptions;
- an episteme is treated as an acting agent that decides, performs work, authorizes, promises, or revises itself;
- a product, organization, machine, document family, research program, discipline, work occurrence, or model family must be treated as a whole with parts;
- a list, batch, fleet, pool, clientele, community, or supplier base is expected to act, but no acting system has been constructively recognized;
- architecture or selected-structure claims need the holon whose structure is being selected.
Primary EntityOfConcern. One exact U.Entity candidate whose actual construction may or may not satisfy the constructive recognition criterion for one already admitted holon kind.
Primary working reader. A practitioner or modeler who must decide whether part-whole, acting-system, or claim-bearing-holon reasoning is admissible for the exact entity under concern before relying on neighboring work, architecture, evidence, or publication claims.
First useful move. Name the exact U.Entity under concern. Then test whether its actual construction satisfies the A.1 holon-recognition criterion under an already admitted public holon kind. The kind is already admitted in the current FPF; E.24.UK governs the separate one-time decision to admit public U-kinds. The A.1 candidate test does not repeat that ontology decision.
When the next decision depends on which exact System acts, is intended to change, carries a capability, persists, or is being considered or designated as the project system-of-interest, use A.1.SCR to find that proposed subject. A.1.SCR first checks whether a non-system subject already answers the decision; apply the complete A.1 criterion only while the decision still depends on systemhood.
Once the exact proposed or observed focus is current, use A.1.CSD when the next question is which other Systems may undergo relevant changes and omitting one could change a named decision or investigation. That branch discovers candidate bearers and qualified consequence claims; it does not repeat recognition of the focus or settle causality, evaluation, or choice.
After recognition, use A.1.STM only when the remaining problem is loss of the long dependency from project use through architecture, Work, change, and recursive builders. Otherwise apply the rule that defines or tests the next claim.
What goes wrong if missed. A document edits itself, a theory gets ports, a list becomes an organization, a lathe that changes a workpiece is treated as its containing whole without an obtaining part-whole relation, and architecture is discussed without naming the holon whose structure is selected.
What this buys. FPF gets one compact part-whole foundation without turning every whole into a physical system: identity starts at U.Entity; part-whole treatment starts at U.Holon; acting work attaches to U.System; claim-bearing knowledge is carried by U.Episteme; method holonhood is governed by U.Method; other admitted holon kinds keep their own subject patterns.
Not this pattern when.
- If the current question is a selected bounded model-use relation organization, use
A.1.1. - If the current question is episteme identity, constitution, or neighboring-relation discipline, use
C.2.1. - If the current question is relation vocabulary or component, portion, aspect, and phase discipline, use
A.14. - If the current question is constructive part-whole grounding, use
C.13; useB.3.5for Working-Model assurance grounding. - If the current question is selected structure over a holon, use
A.22. - If the current question is architecture of a holon, use
C.30. - If the current question is transformation, method, system-role kind or assignment, work, capability, or functioning, use the subject pattern before relying on A.1.
Problem Frame
FPF cannot use system as its universal root. A pump, theory, software product, legal code, dashboard, research program, work occurrence, discipline, and team can all be objects under concern, but they do not all act, exchange matter, execute methods, or carry physical ports.
A.1 separates four questions that are often collapsed:
- reference: what can be individuated as
U.Entity; - part-whole treatment: which exact candidates satisfy the constructive recognition criterion for
U.Holonor another already admitted public holon kind; - acting eligibility: which recognized holons also satisfy the kind-specific criterion for the already admitted
U.Systemkind; - claim-bearing knowledge: which recognized holons also satisfy the kind-specific criterion for the already admitted
U.Epistemekind.
Entity identity and world-side holon recognition have a context-independent base. Claim scope, effective reference scheme, and selected model-use structure can qualify a particular assertion or use, but none identifies the candidate, makes the constructive criterion true, or admits a public U-kind.
Other admitted holon kinds are not created by title, by filling one locally named slot, or by ordinary-language label. They remain governed by their direct patterns. Current accepted examples include U.Method under A.3.1, U.Work under A.15.1, and U.Discipline under C.20. BoundedModelUseStructure under A.1.1 is U.Structure, not a holon kind.
Problem
Without A.1:
- System-bias spreads. Physical and operational assumptions are projected onto epistemes, descriptions, theories, documents, dashboards, and source records.
- Epistemes become agents. A document, model, theory, pattern, or report is said to decide, promise, authorize, perform work, or revise itself.
- Collections become collectives by wording. A set of people, services, files, claims, assets, or suppliers is treated as an acting whole without boundary, coordination, system-role assignments, capability, method, or work evidence.
- Transformation becomes containment. A system that changes another holon is treated as the larger whole containing it, or as standing in a part-whole relation to it, merely from that interaction.
- Architecture loses its grounding holon. A structure, view, graph, diagram, or architecture claim floats free of the holon whose selected structure is under concern.
- Slot filling creates false kinds. A system, episteme, holon, relation occurrence, or other value is given a new intrinsic kind merely because it fills one slot of a system-role assignment, evidence, publication, description, or another direct relation.
Forces
Solution
Use A.1 to distinguish an exact referenceable entity from a candidate that satisfies the constructive holon criterion under an already admitted public holon kind.
This is not a classical taxonomic ladder and not a publication hierarchy. [E.24.UK](/generated/patterns/E.24.UK) is the pattern for public U-kind admission; A.1 is the pattern for recognition of exact candidates under the admitted holon kinds and the kind-specific patterns shown above. A selected U.Structure, including BoundedModelUseStructure, remains dependent relation organization rather than a holon kind.
U.Entity
U.Entity is anything that can be individuated and referenced. It carries no part-whole, acting, claim-bearing, model-use, or architecture assumption by itself.
Use U.Entity when the current move only needs to point to something—for example, a number, claim, named product, material batch, data value, legal clause, local system-role kind, reference, document, or another object under concern.
Do not apply holon aggregation, part-whole grounding, acting-system roles, or architecture claims to a bare U.Entity unless its actual construction satisfies the A.1 criterion for U.Holon or a kind-specific criterion for another already admitted public holon kind.
U.Holon And Context-Independent Recognition
U.Holon is the broad part-whole EntityOfConcern: an exact U.Entity whose actual construction supports treatment as a whole with parts and as a possible part of a larger whole.
Keep ontology admission and candidate recognition separate. Use E.24.UK for the one-time FPF decision that admits U.Holon and every other public holon kind. A.1 is the pattern for the constructive criterion by which an exact candidate is recognized under an already admitted kind. C.3.2 supplies three-valued discipline only for project-local kind membership; it does not own recognition under an admitted public holon kind. Candidate classification is a judgment about that exact entity; it is not a direct relation to a pattern edition, criterion episteme, evaluator, evidence set, or status value.
For one exact candidate, recover six distinct constructive components. Do not let one component stand in for another:
- Exact candidate. Identify one exact
U.Entityunder its direct identity rule. - Exact constituents. Identify the entities claimed to constitute this candidate. Nearby entities, members of a set, sampled points, and arbitrary slices are not constituents by inclusion or wording.
- Constructive part relations and assembly. Recover the exact obtaining part-relation occurrences under their direct patterns and the assembly by which those constituents compose this candidate. A list, diagram, or shared boundary does not establish those relations.
- Reidentification rule. State the rule that distinguishes this whole and says which constituent, relation, boundary, or phase changes preserve or end its identity.
- Composition-grounded whole-level characteristic. Recover at least one exact characteristic whose value or state is produced or sustained by the composition and is not attributable to one constituent alone.
- Possible participation in a larger constructive assembly. Recover the candidate's actual boundary, interfaces, relevant characteristics, and identity-preservation conditions. Those facts must satisfy the applicability and compatibility conditions of at least one governed larger-assembly construction method or rule under which an admissible construction would include this candidate as a constituent while preserving its identity. One exact episteme may describe that method or state that rule and its conditions.
Name the already admitted holon kind and its direct kind-specific pattern separately from those six components. The candidate satisfies the A.1 criterion when all six world-side components hold and any kind-specific condition is satisfied; it fails when a required component or condition does not hold. Satisfaction or failure does not vary with current evidence availability or evaluator access. Replacing a constituent or part-relation occurrence preserves the same holon only when the reidentification rule admits that change. An unassembled collection fails even when a project card calls it a holon.
Exact dated classification work belongs to A.15.1. When a reusable typed recognition-evaluation operation is current, A.6.1 governs its declared arguments and result plus the actual application bindings. The evaluation returns true when its governed inputs determine satisfaction, false when they determine failure, and unknown when missing evidence or an unavailable dependency prevents either determination. unknown is an evaluation result, not a third candidate state: the same candidate can satisfy or fail the criterion while the current evaluation remains unable to determine which.
When another use must inspect or cite the judgment, identify an optional C.2.1 classification-assertion or evaluation-result episteme whose exact EntityOfConcern is the candidate. Its claim content names the admitted kind, the A.1 criterion, the constituent and part-relation facts, reidentification rule, whole-level characteristic, candidate-side compatibility facts, exact construction-method-or-rule episteme, evaluation frame, and true | false | unknown judgment needed by that use.
A person or system performing the receiving work separately decides whether to rely, decline to rely, defer, or reopen. Exact evidence and assurance relations support or warrant assertion claim content. Use G.11 to test whether the selected assertion edition is current. B.2 addresses the different question whether the existing whole is no longer the right EntityOfConcern for a receiving use. A.1 satisfaction, failure, or evaluation uncertainty supplies neither warrant for a B.2 claim nor grounds for selecting B.2.
In ordinary use, stop after naming the exact entity being evaluated, six constructive components, admitted kind, kind-specific condition, and resulting judgment needed by the task. Materialize a classification assertion only when a specific downstream task must inspect or cite that judgment. If a system-thinking long map consumes the result, pass only this recognition result and apply A.1.STM; do not add external value, project designation, architecture, Work, or network selection to the A.1 criterion.
Historical read path. Older FPF writing may use super-holon. Under F.13, read it either as the larger system of which S is an admitted part under one exact part-whole relation, or as the rejected inference that interaction, change, control, teaching, measurement, or repair alone makes such containment obtain. Current FPF does not use that historical expression as a head. Environment means the exact external referents and crossing relations made relevant by a stated system delimitation and use; a medium is named as such only when that exact medium is the subject. Neither denotes a generic Context or identifies a containing whole. An actual containing-system claim names the larger system and the exact obtaining part-whole relation.
Admitted Holon Kinds
Current accepted holon-kind examples are:
U.System, used here for an acting physical or operational holon;U.Episteme, used here only for a non-agentive claim-bearing holon, identified under C.2.1 by exact claim content, EntityOfConcern, and effective ReferenceScheme, with constitution, empirical grounding, and edition kept as distinct direct relations;U.Work, admitted underA.15.1for a dated 4D occurrence holon;U.Discipline, defined inC.20as a field-level practice-and-knowledge holon;U.Method, defined inA.3.1, with method-composition patterns such asB.1.5defining how submethods compose into a whole method across levels.
A project-local holon classification names its concrete C.3 U.Kind, the A.1 criterion, any kind-specific criterion, and the direct patterns for the construction facts it uses. A proposed public U.* holon kind first passes E.24.UK and gains one subject pattern. Neither route may rely on part-whole, architecture, system-role-kind classification or assignment, work, evidence, or source-use claims before the candidate-side criterion is recoverable.
Candidate recognition is decided by the six candidate-side constructive components in A.1:4.2, not by agentivity, wording, evidence availability, or a B.2 whole-reidentification result. Grounding work selects the participating objects from the surrounding practice or world, fixes their boundaries, identifies constituents and exact part relations, recovers the assembly and reidentification rule, and tests the resulting whole-level characteristic and larger-assembly compatibility. Relations may arrange, constrain, assign, qualify, or describe constituents; those relations do not become constituents by that fact.
U.Method and a local system-role kind are not decided by whether they act. U.Episteme already shows that a non-agentive object can be a holon. U.Method is a non-agentive holon kind: submethods can compose into whole methods with whole-level preconditions, effects, invariants, interfaces, constraints, and assurance hooks, and a whole method can participate in a larger method. A step label or step description is not a method part by label: first recover a U.Method submethod rather than a method-description node, order relation, work-plan item, or work occurrence. A local system-role kind is instead an exact local U.Kind whose candidates are U.System values; it is neither a public root U-kind nor a holon kind by kind identity. C.3 recovers it through the candidate domain, operative condition for a stable, assignable, work-facing contribution, intended member/non-member boundary, and continuity rule. A practice or source reference only locates or prompts comparison of the definition; the current KindSignature states the candidate-side condition against direct features of the system. Assignment may be one criterion only when that signature says so; assignment alone does not confer family-wide membership. The assignment occurrence, assignment state, capability, responsibility, permission, commitment, obligation, method participation, and SystemRoleKindRelationStructure remain neighboring objects or relations rather than parts of the kind.
U.System
U.System is an acting physical or operational holon kind. It can participate in system-role assignments, capability relations, method enactment, mechanism realization, work occurrences, transformations, functioning relations, and responsibility-bearing claims when their direct patterns make those claims current.
Its kind-specific condition is acting eligibility: the recognized whole has an actual physical or operational organization through which it can causally participate in work or transformation while preserving its identity. Capability evidence or actual participation can support a classification assertion; a U.SystemRoleAssignment, work occurrence, or capability relation does not create the system by participation alone.
Keep those relations separate:
- Use
A.2.1to state theU.SystemRoleAssignmentoccurrence whoseHolderSystemSlotis filled by the system. A.2.2governs capability claims about that system.A.3.1,A.3.2, and the mechanism family govern method, method description, and mechanism realization.A.15.1governs performed work and the exact relation through which the system is attributed as performer.A.3.4governs the bounded transformation; the exact direct subject-relation pattern defines or constrains the system's participation in it.- Functioning, evidence, assurance, temporal, and dynamics claims remain with their direct patterns.
A.1 introduces no omnibus participation relation over references to all those occurrences. Listing them together in a worked case creates no additional world-side relation. If the selected organization among several direct relations changes an engineering decision, select that organization as U.Structure under A.22 and keep every constituent occurrence under its direct identity. Claim scope, effective reference scheme, and optional model-use structure qualify each dependent assertion only where its direct pattern makes them current.
U.Episteme
U.Episteme is a claim-bearing, non-agentive holon kind. Acting systems can use, cite, publish, represent, structure, compare, interpret, or rely on it through separately governed relations. Work may yield another edition, but changed claim content identifies another episteme under C.2.1 rather than an in-place transformation of the same one.
Use C.2.1 for episteme identity, EpistemeConstitutionRelation, and the direct empirical-grounding and edition relations declared there. Use the neighboring direct patterns for viewpoint, view, claim scope, bounded model use, evidence, publication, source use, carrier, and representation. A.1 only says that an episteme can be treated as a holon when part-whole treatment of the claim-bearing object is current.
A system may decide, approve, perform work, promise, revise, authorize, or bear responsibility through separately governed relations and Work. Classification by a local system-role kind or an assignment to it supplies none of those acts, permissions, commitments, or responsibilities by itself.
Recover Holon Delimitation And Boundary Crossing
When a claim concerns where a holon is delimited, recover the delimitation relation, criterion, or selected structure supplied by the direct holon, mereology, architecture, or domain pattern. Do not force an identity rule, collection-belonging relation, environment relation, selected structure, and boundary condition into one universal relation signature. Those objects have different kinds and predicates.
When one direct relation crosses that delimitation, keep the direct relation occurrence under its own pattern. State the delimited holon, the direct crossing relation, direction, fit, loss, scope, and qualification window that are current for that use. When the claim also needs a semantic correspondence or difference between two exact F.17 local senses from different semantic contexts, use F.9 for that Bridge question. A crossing classification does not replace the signal, control, measurement, transformation, source-use, publication-use, evidence-use, coupling, or other direct relation occurrence.
Do not call every boundary an interface. Use interface language only when a governing signature, module, architecture, port, or interface pattern makes interface meaning current.
External holon vocabularies do not admit FPF kinds or establish candidate holonhood by label. Recover the current FPF claim first. Acting-agent and organization claims test the U.System criterion; data, document, and projected-content claims usually use U.Episteme, publication, source-use, evidence, or description rules; process-holon wording uses work, method, work-plan, or transformation rules; portal or traversal wording uses an access, crossing, policy, or evidence relation. An exact candidate-side holon or system claim passes only when the A.1 criterion is satisfied.
A Markov blanket is not a holon boundary by name. First recover whether the source names accepted local Markov dynamics, a mathematical or probabilistic lens, an exact holon-delimitation claim, a physical interface module or component, a functional element, a boundary description, or an agency-threshold claim. Apply the rule that defines or tests that recovered claim. The exact candidate is a holon under A.1 only when its constructive criterion is satisfied; the neighboring delimitation claim does not establish holonhood.
Collections, Collection-As-Whole, And Acting Collectives
A list, set, batch, fleet, pool, clientele, community, supplier base, or coverage zone does not become a U.System by wording.
First recover the current claim: who or what belongs to which collection under the collection's own rule and A.14; a possible holon under the complete six-part A.1 test; a C.13 set account of already established belonging; optional B.3.5 assurance; a whole-level characteristic under C.16; an acting collective under the U.System criterion plus A.15.1 Work; or whole reidentification under B.2.
An acting collective U.System has a boundary, coordination, system-role assignments, capability or method evidence, and work-facing participation. If those are not current, keep the object as a collection or collection-as-whole claim under subject patterns.
Constructional Grounding
A.1 governs constructive holon recognition. Exact part-relation patterns govern part relations; C.13 governs constructional grounding; E.24.UK governs public-kind admission.
Use A.14 and the direct relation patterns to identify collection belonging and any independently obtaining component, portion, aspect, phase, constituent, or other constructive part relation. Use C.13 to report how already grounded facts form a collection, assemble the candidate, or distinguish an aspect. If a C.13 trace is materialized, it is a C.2.1 episteme about that construction. Use B.3.5 only when a named assurance use elects its profile.
Systems, epistemes, methods, dated work occurrences, and disciplines are admitted holon kinds under their direct patterns. C.13 may describe their construction only after those patterns supply exact parts and whole-forming relations for the candidate. A selected U.Structure, including BoundedModelUseStructure, organizes already identified relations for a use; selection or a diagram gives it no constituents, parthood, agency, holonhood, or B.2 transition.
FPF avoids unrestricted composition. A set of nearby objects, graph, diagram, system-role-kind or assignment bundle, method algebra, work breakdown, or source table does not become a holon merely because it can be listed or represented as a whole. Several independently identified transformations likewise do not become parts of one composite transformation from shared timing, a changed referent, a method or work decomposition, or a C.13 trace. When the work requires positive transformation composition or transformation holonhood and no direct composition pattern supplies the candidate whole, constituents, contribution, compatibility, and reidentification rule, retain the exact blocker and stop before A.1 classification.
Slot Filling Does Not Create A Kind
A system that fills HolderSystemSlot of a U.SystemRoleAssignment occurrence remains a system. An episteme that participates as the EntityOfConcern in an EpistemeConstitutionRelation remains an episteme. A system can participate in a transformation through an exact governed direct relation without thereby becoming a part of the changed holon or the larger whole containing it. A holon that participates as the EntityOfConcern of a structure-description episteme remains that holon rather than becoming the description.
The SlotSpec belongs to the direct relation declaration. Its SlotKind names the local participant slot; its ValueKind constrains admissible fillers. Filling that slot establishes neither a new intrinsic kind for the filler nor a new relation occurrence unless the direct obtaining predicate and identity rule are also satisfied. Use the subject pattern before introducing any durable kind name.
Archetypal Grounding (Worked Cases)
Pump As Acting System
Pump #37 is first an exact U.Entity. Its actual construction satisfies the A.1 criterion for the already admitted U.System kind:
- the casing, impeller, seal, motor, and flanges are exact constituent entities;
- exact fastening, enclosure, shaft-coupling, sealing, and connection occurrences constructively assemble those constituents as Pump #37 under their direct part-relation patterns;
- the installed-assembly reidentification rule distinguishes Pump #37 and permits specified maintenance replacements;
- pump-level flow, pressure, and operating characteristics arise from the composition rather than from one constituent;
- its actual boundary, inlet and outlet interfaces, load envelope, and identity-preservation conditions satisfy the applicability and compatibility conditions of the governed plant-installation method by which the pump can remain one constituent of a larger cooling-water system;
U.Systemis already an admitted public U-kind in FPF;E.24.UKgoverns admission of public U-kinds, while the A.1 common holon criterion and itsU.Systemclause supply acting eligibility.
Those world-side facts make the criterion true whether or not the current project has enough evidence to determine it. Classification work with adequate inputs can return true and support a separate C.2.1 assertion. If evidence or one dependency is unavailable, evaluation returns unknown; Pump #37 and its criterion satisfaction do not change. Replacing the seal preserves Pump #37 only when the reidentification rule admits that maintenance phase.
If instead an exact coupling, load-envelope, or boundary-interface fact violates a condition of the governed plant-installation method, the candidate fails the criterion even when the drawing and rule-description episteme are current. Governed evaluation returns false when that incompatibility is available to it and unknown when the needed input is unavailable; neither result changes the world-side failure. Renaming or republishing the cited criterion pattern changes its episteme designation, edition, or currentness, not Pump #37 or the candidate-side facts.
Separate direct relations then state that Pump #37 fills the holder-system slot of its cooling-water circulation U.SystemRoleAssignment, has a flow-rate capability envelope, and participates in the water-moving transformation. A separate inspection account may identify WO-1842 : U.Work, but the cooling-water assignment does not make Pump #37 its performer: the exact inspector System must have its own A.13 core, the Work must be independently admitted under A.15.1, and F.6 is added only if that account needs precise assignment-bound attribution through the inspector's same obtaining assignment. Pump #37 remains the inspected or participating subject unless another direct performer basis establishes otherwise. No omnibus participation or candidate-classification relation is added. The pump can have selected structures; its maintenance model may participate in a separately selected BoundedModelUseStructure, but that structure neither identifies the pump nor makes it a holon.
Scientific Theory As Episteme Holon
Newtonian gravitation in one exact selected edition is first a C.2.1 U.Episteme candidate. Its actual claim-bearing constitution can satisfy the A.1 criterion for the already admitted U.Episteme kind:
- exact law, definition, derivation, diagram, exercise, and evidence-relation epistemes are the candidate constituents;
- exact claim-composition and episteme part relations organize those constituents as one governed claim-bearing whole;
- the selected-edition identity rule distinguishes this theory episteme; different claim content identifies another episteme, and any historical continuity is stated through the applicable C.2.1 edition relation;
- inferential and explanatory characteristics arise from the organized claim-bearing whole rather than from one constituent;
- its actual inferential interfaces, effective reference scheme, applicability conditions, and identity-preservation conditions satisfy the applicability and compatibility conditions of at least one governed method for composing it as a constituent of a larger explanatory or educational episteme;
U.Epistemeis already an admitted public U-kind in FPF;E.24.UKgoverns admission of public U-kinds, while C.2.1 supplies the kind-specific constitution condition.
A textbook publication can make this edition available, but the publication form and the episteme that describes the composition method do not create the theory's compatibility or holonhood. Classification work may evaluate the criterion and a separate C.2.1 assertion may state the result; evidence, warrant, edition currentness, receiving reliance, and any B.2 whole-reidentification question remain separately governed.
A system under an exact U.SystemRoleAssignment may explain, publish, compare, or use this episteme through separately governed Work and relation occurrences; the assignment alone establishes none of those acts. Revision Work yields another episteme, with any edition relation tested separately.
Fleet As Collection Or Acting Collective
A fleet register supports the claim that a vehicle belongs to the fleet only under its registration rule. In the register-only case the fleet is not a holon: no vehicle-to-whole assembly or composition-grounded characteristic is claimed. Fleet availability is a separate collection characteristic. A fleet-coordination organization that coordinates vehicles, drivers, rules, and Work can be an acting collective U.System only after all six A.1 matters, including its constructive relations and assembly, have been recovered.
If a source says "the fleet responded", recover the actual claim: individual vehicle work, fleet-coordination system work, collection-as-whole characteristic, or B.2 whole reidentification.
Lathe Changing A Workpiece
A lathe can change a workpiece during manufacturing without thereby becoming a part of the workpiece or the larger whole containing it.
Use A.3.4 to identify the bounded transformation from the exact changed referent, extent, boundary conditions, actual change facts, and continuity rule. Use the direct subject patterns for the lathe's participation, method, dated work, work-to-change facts, and evidence. Use A.14 or C.13 for part-whole only when an exact grounded part relation independently obtains.
Stop Before A Whole Is Constructed
A pallet holding an unconnected pump, motor, baseframe, and manifold is a collection of exact entities. The list and physical proximity do not supply the fastening, coupling, enclosure, connection, assembly, or reidentification facts needed to recognize a skid holon. A construction drawing is an episteme about a possible assembly.
A selected BoundedModelUseStructure may organize model-applicability, delimitation, maintenance, and crossing relations for an engineering use. It remains dependent U.Structure; selecting it, naming it, or drawing it supplies no part relations, whole-level characteristic, acting eligibility, or B.2 whole reidentification.
Mounting, wiring, and fluid-connection changes may each be exact U.Transformation occurrences. Their participation in one work episode or one flow description does not identify a composite transformation. Without a direct transformation-composition governor, retain the separate changes and stop before transformation parthood, composite identity, or A.1 holon recognition. This stop does not say that the changes are atomic or have no finer parts.
Bias-Annotation
Lenses tested: Onto, Arch, Epist, Prag, Gov, Did.
This pattern intentionally resists:
- system-bias: treating all objects as acting physical systems;
- episteme-agent bias: assigning work, authority, or decision to claim-bearing epistemes;
- collection-bias: treating any collection as an acting collective;
- boundary-bias: treating boundary words, diagrams, folders, or sections as holon delimitation by appearance;
- interaction-bias: using one word for transformation, signal, source use, publication use, evidence relation, probe relation, and control relation;
- math-lens drift: treating graph, algebra, matrix, tuple, or embedding expressions as the ontology-side structure by spelling;
- publication-form bias: treating a document, dashboard, model, register, or digital twin as the holon it describes.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Positive consequences:
- FPF can talk about physical systems, organizations, documents, theories, models, work occurrences, disciplines, research programs, and selected structures without making them all systems or holons.
- Acting work stays attached to systems in roles.
- Epistemes can be described, compared, published, and relied on; revision Work yields another episteme when claim content changes.
- Architecture and selected-structure claims gain a grounding holon.
- Collection-as-whole and acting collective claims become inspectable instead of lexical.
Costs:
- Practitioners pay the cost of replacing umbrella uses of "system", "boundary", "interaction", "level", "emergence", and "collection" with exact governed claims.
- A reviewable holon-recognition claim states the exact constituents, construction, reidentification, larger-assembly compatibility, whole-level characteristic, admitted kind, and subject pattern on which it relies.
- Some familiar sentences need repair: "the document decided" becomes a claim about a
U.System, the direct decision relation or Work, and an episteme or publication. Add a local system-role kind or assignment only when that separate fact matters.
Rationale
A.1 prevents category errors by separating individuation, constructive part-whole recognition, acting eligibility, and claim-bearing. U.Entity gives the minimal referenceable object. U.Holon adds six separately recoverable constructive components: exact candidate, exact constituents, exact part relations and assembly, reidentification, a composition-grounded whole-level characteristic, and compatible possible participation in a governed larger assembly. U.System adds acting eligibility. U.Episteme adds claim-bearing structure without agentivity. U.Work and U.Discipline are holon-kind examples only through their subject patterns; BoundedModelUseStructure is selected U.Structure, not another holon kind.
The recognition base cannot depend on a prior context object without recursion. It begins with the exact candidate and world-side construction facts. Public-kind admission is the separate one-time E.24.UK decision. Classification work may evaluate the criterion, but its true | false | unknown result, a C.2.1 assertion, evidence, currentness, and receiving disposition neither participate in a candidate-side relation nor alter the candidate's identity.
This also prevents ontology duplication. A theory under concern, a theory description, a publication of that description, and the system that edits the publication can all be named without turning the filling of one participant slot into a new kind. Architecture likewise starts from the exact holon recognized under an admitted kind whose selected structures matter; diagrams and structure descriptions remain epistemes.
The constructional stance is conservative: FPF avoids unrestricted composition and uses A.14, C.13, and B.3.5 before a part-whole claim is relied on for another claim or work occurrence. This keeps holonic thinking useful without letting every collection, expression, graph, selected structure, or source label become a holon.
SoTA-Echoing
A.1 draws on current constructional-ontology, applied-foundational-ontology, and physics-side construction traditions for different questions. None of these sources admits an FPF kind, establishes a candidate's construction, or replaces the direct patterns that define or constrain part relations, work, evidence, or publication.
For the Pump #37 and scientific-theory cases in A.1:5, the practical consequence is the same: recover the candidate and its subject-side construction first; use a governed method or rule only to test larger-assembly compatibility; keep evaluation, evidence, assertion, description, and publication as separately governed neighboring objects.
Treat a stronger source as current only when it changes the root split among U.Entity, U.Holon, U.System, admitted holon kinds, delimitation, boundary crossing, or publication-form separation. A new tool, notation, or diagram style is not enough unless it changes that ontology-side claim.
Relations
- Builds on:
E.24.UKfor one-time public U-kind admission,A.14andC.13for exact part relations and constructive assembly, andB.3.5when Working-Model assurance grounding is current. - Coordinates with:
A.1.STMonly after recognition when the current problem is use of the system-thinking long attention map;A.15.1for dated classification work;A.6.1for a current typed evaluation operation and actual bindings;C.2.1for classification-assertion or evaluation-result episteme identity;A.10andB.3for evidence and warrant;G.11for assertion-edition currentness;B.2for the separate whole-reidentification question;A.1.1for bounded model-use structure;A.22for selected structure;C.30for architecture;A.3.4for transformation;C.20for discipline; andE.10.ARCHfor wording-use restoration. - Applied by: Use
A.1.SCRwhen a practitioner must find the exact acting or changed System for a decision that depends on systemhood. After an exact proposed or observed focus is current, useA.1.CSDwhen the next question is which other Systems may undergo relevant changes. UseA.1.STMonly when the practitioner still cannot connect a recognized project System to the long dependency map. For a direct Work, Method, capability, structure, episteme, or relation question, apply the pattern that defines or tests that claim instead of invoking this complete criterion. - Used by: patterns that need an exact recognized holon, an already admitted holon kind, an acting system, a non-agentive episteme, a grounded part-whole claim, a collection-versus-collective distinction, a delimitation relation, or a boundary-crossing relation.
A.1:End
Bounded Model-Use Structure and DDD Bounded-Context Recovery
Type: Part A architectural ontology pattern Status: Stable Normativity: Normative unless marked informative
Practitioner entry
Working reader and current decision. This pattern is for a domain architect, systems engineer, or service owner deciding whether several facts about one model must be treated together for the next engineering move. The reader starts from that decision—change scope, release scope, ownership boundary, integration boundary, or whether two uses belong together—not from a team name, repository, diagram, or the word context.
Governed object in plain language. A.1.1 governs the selected organization of where one exact model applies, how it is actually used in assigned Work, and whether concrete expressions still agree with it. The Tech name is BoundedModelUseStructure; the familiar Plain retrieval name is bounded context. It is a U.Structure, not a container for systems, teams, Work, documents, or publications.
First useful move — take the smallest branch.
- Name one exact model edition and one exact place or thing about which it is used.
- Ask what the present decision needs. If applicability alone answers it, recover
ModelApplicabilityRelationand stop. If actual use is current, recover the exact actual performer through A.13 and let A.15.1 independently admit the performed Work; becauseModelUseRelationexpressly represents assignment-bound use, then establish F.6 through the same obtaining A.13 assignment and recoverModelUseRelation, then stop. If maintained expression content is current, recover the fixed model content, fixed expression content, declared coherence predicate, and comparison scheme, then decideModelExpressionCoherenceRelationand stop. - Recover the remaining direct relations only when their joint organization changes the decision. Select
BoundedModelUseStructureonly then. - Keep every boundary crossing separate. A proposed source, target, direction, required fit, permitted loss, and claim scope is useful planning content, but it is not an occurrence and cannot identify either endpoint structure.
First-minute success case. A press-control team must decide whether a controller-code change may be handled as a local code edit or must enter the independently governed release review together with model applicability and operating use.
PressControlModel-5is the exact claim-bearing model edition,Press-3is the use locus, and the model applies withinSafetyControlClaimScope; this is oneModelApplicabilityRelationoccurrence.- A.13 first recovers
Operator-12 : U.Systemas the exact actual performer through obtainingOperatorAssignment-8, and A.15.1 independently admitsPressOperationWork-91 : U.Work. Because this actual-use claim expressly represents assignment-bound use, exact F.6performedUnderAssignment(PressOperationWork-91, OperatorAssignment-8)then obtains. The already recovered performer actually usesPressControlModel-5during that Work concerningPress-3; this is oneModelUseRelationoccurrence. ControllerImplementsControlModelPredicatechecks the fixed contents ofPressControlModel-5andPressControllerCode-17underPlantControlReferenceScheme. It returns true, so oneModelExpressionCoherenceRelationoccurrence obtains. The predicate is the test value, not the occurrence or an evaluation procedure.- Because independently governed
PlantReleaseRule-3needs model applicability, operating use, and fixed-content coherence together when each is material, select their organization and present those three facts jointly to the release review. This selection supplies the review's subject matter;PlantReleaseRule-3supplies the review obligation; release authority, if needed, is established separately.
This row names the selection-use frame reconstructed in the full assurance replay in section 5.1; the first-minute action does not require unpacking its A.22 identity proof. If the decision asked only whether the model applies to Press-3, stop after step 1. If PlantReleaseRule-3 were absent or did not require the three facts together, stop at the direct relations. No crossing is asserted.
Three quick recognition situations.
Short glosses. A model episteme is one exact claim-bearing model edition. A model-use holon is one already admitted system or other concrete whole about which the model applies or is used; it is not a context container. Work (U.Work) is one exact dated doing, not its method, plan, or result. A claim scope (U.ClaimScope) is the set-valued boundary of context slices for one claim. A relation occurrence is a world-side relation actually obtaining under its predicate. A reference scheme is the interpretation basis for claim content. A structure here is a selected organization of already governed constituents, obtaining relations, applied constraints, and one exact selection-use frame; it is not another whole.
Adoption test. After applying A.1.1, name the exact organization that changes the present decision and the condition for stopping or returning to its direct relations. If either is missing, stop at the direct relation or the pattern that defines or tests it. Use F.19:4's plausible-reader test for any optional explanatory guard.
Names for retrieval. The Plain label is bounded context and the Tech label is BoundedModelUseStructure. Use F.18 for designation settlement and lineage, and F.17 for the public terminology row and its refresh evidence; A.1.1 keeps only the names needed to apply this pattern. Authors MUST NOT publish U.BoundedContext as a U-kind.
Problem frame
Use this when. Use this pattern when a current decision depends on the organization of three distinguishable facts about one exact model edition: where it applies, how it is actually used in assigned Work, and whether maintained expression content remains coherent with it. Physical location, team ownership, a document title, or the word context is not enough.
First useful move. State the decision, model, and use locus; recover only the direct relation that answers the question and stop when it suffices. Select the wider structure only when several already governed relations, applied constraints, and one exact selection-use frame together change the decision.
What goes wrong if missed. Systems, Work, epistemes, and publications are merged into a context-shaped proxy. One subsystem under two models is treated as one context by location, while one model used coherently across several loci is split by an implementation boundary. Local vocabulary, rules, units, status, or evidence use is also forced into a context object even when a direct semantic-locality pattern answers the question.
What this buys. Actual participants retain their identities. Applicability, use, and fixed-content coherence remain inspectable direct relations; their decision-relevant organization can be selected as U.Structure; and ordinary semantic locality is stated through its exact value and relation assertion, with the subject pattern kept only as a locator.
Not this pattern when. If only a term sense, local system-role-kind value, system-role-assignment occurrence, relation among system-role kinds, rule or invariant, admissible inference, unit or measurement basis, status, evidence use, claim scope, description, publication, or direct relation is current, use the A.1.1:4.4 triage and stop at that direct result. Do not select BoundedModelUseStructure unless the relation organization itself changes the decision.
Problem
DDD bounded-context practice couples several real concerns: a model is defined and applicable within a boundary; actual systems in assigned roles use it; code and descriptions contain expressions of it; integration and maintenance work aims to keep those expressions consistent; and maps describe relationships among model uses. These are practical prompts to recover exact FPF claims, not evidence that maintenance caused coherence or that a described crossing obtains. Their objects are related, but they are not parts of one additional whole by that fact.
FPF needs this joint model-use relation organization selectable as U.Structure so it can serve as EntityOfConcern for comparison and maintenance work without becoming a heterogeneous holon, a description, or one universal semantic-locality reference.
Forces
Solution
Recover the Plain bounded context as one BoundedModelUseStructure, governed as a U.Structure. Identify it from one exact model episteme, exact already-admitted model-use holons, the selected organization of obtaining model-applicability, actual model-use, and fixed-content model-expression-coherence occurrences, exact applied constraint claims used by the selection judgment, and one exact selection-use frame. Each U.ClaimScope remains only a participant of its selected ModelApplicabilityRelation; a separate applied constraint claim may refer to that scope or its A.2.6 membership predicate. A bare scope, slice, membership outcome, boundary display, or carrier enters no A.22 discriminator. No boundary crossing participates in this identity. A later model edition has another C.2.1 episteme identity; continuity across it additionally requires exact EpistemeEditionRelation(earlierModelEpisteme, laterModelEpisteme) and the A.1.1 continuity rule.
Select structure, not another holon
Use the four A.22 identity discriminators. The following sketch is a description of the selected organization, not the structure itself and not a relation signature:
A selection-use frame is the exact plain value formed by the question, admissible action, and stop or return condition; it is not a new kind, card, or record. A phrase such as current use, appropriate structure, or bounded-model-use frame does not fill it. Changing one of those three values changes that identity discriminator. An optional nearest non-admissible overread may explain the use when it passes F.19:4's plausible-reader test; that explanation is outside the frame's identity.
The structure depends on its constituents and selected relation organization. It is not a holon whose parts are the substrate systems, Work, methods, or epistemes. Their identities, direct part relations, and any construction or whole-reidentification questions remain separately governed.
Recover the direct relations
A.1.1 states each direct predicate and its occurrence-identity rule. An obtaining occurrence is an instance of a relation kind already admitted under U.Relation; its existence does not depend on a project deciding to expose it. A named receiving use may justify explicit individuation and reference under A.6.REL. A reusable RelationSignature episteme declares the participant SlotSpecs. An assertion or occurrence description may designate the actual participants by value or reference. Each table below is a readable presentation of one signature declaration.
The two named temporal-extent ValueKinds below are local to A.1.1, not U-kinds. They can type a temporal extent stated in an assertion or occurrence description; they are not participant ValueKinds in either RelationSignature. For ModelApplicabilityRelation and ModelUseRelation, the direct obtaining history determines the maximal continuous extent used by the occurrence-identity rule. A filled assertion may state an open or closed extent.
For these two temporally varying relation kinds, continued obtaining extends the same open occurrence; a demonstrated gap ends it, and later resumption begins another occurrence. ModelExpressionCoherenceRelation instead has the participant-determined identity declared below: it has no temporal-extent discriminator. Revising an assertion changes the episteme, not any world-side occurrence.
ModelApplicabilityRelation. Its participants are one model episteme, one exact holon, and one declared claim scope. Its predicate asks whether that model applies to that holon over the exact U.ContextSlice values delimited by that scope. The model episteme's C.2.1 effective reference scheme supplies the interpretation basis; it is not a fourth participant.
Well-formedness constraint WF-A1.1-APP. ModelApplicabilityRelation(M,H,S) obtains exactly when S is the model-declared applicability scope or scopeSubset(S, modelDeclaredScope(M)), both scope expressions are interpreted under effectiveReferenceScheme(M), and the model's declared applicability conditions hold for H over every slice x for which member(x,S) is true. coversSet(S,T) applies only when T is an exact finite ContextSliceSet.
When S imports a local sense from another semantic setting, the interpretation branch exists exactly when the source and receiving F.17 SchemeSenseCell values are resolved and an F.9 Bridge obtains in the source-to-model orientation. Different schemes, shared spelling, or a Bridge Card does not establish that branch.
Well-formedness constraint WF-A1.1-APP-USE. A positive applicability assertion or structure selection that relies on the imported branch is admissible only when a separate current C.2.1 claim affirmatively states that the Bridge is suitable for this named scope-comparison use, direction, rule, and loss tolerance. The same use must have an exact A.10 evidence-provenance relation. Ordinary reliance requires RelianceDisposition=pass. If an actual named assurance claim about that use is current, require its B.3 AssuranceResult for the same bounded use: only supported-for-use supports the attempted assurance use, while narrowed supports only its stated narrower use. A direct domain rule may require such a claim.
Use guidance. If the Bridge, bounded-use claim, or selected reliance branch is missing, return respectively missing claim-scope interpretation bridge, missing claim-scope interpretation use claim, or missing claim-scope interpretation reliance. These stops block the receiving assertion or selection; they do not make an otherwise obtaining Bridge false. Any membership judgment, operation application, assertion, or Work remains under A.2.6, A.6.1, C.2.1, or A.15.1.
The occurrence is reidentified from the actual identities of the model episteme, holon, and claim scope together with the derived maximal continuous ModelApplicabilityInterval. Repeating the model's effective scheme adds no independent discriminator.
ModelUseRelation. Its participants are one exact system-role-assignment occurrence, one model episteme, one performed Work occurrence, and one exact use-locus holon. Its predicate is actual use of that model content by the assignment holder while that system performs the same Work concerning that holon.
Well-formedness constraint WF-A1.1-USE. ModelUseRelation(A,M,W,H) obtains exactly when F.6 performedUnderAssignment(W,A) obtains and HolderSystem(A) actually uses the content of M while performing W concerning H. The holder system is derived, not copied as a fifth participant. A method, if current, remains related to W under A.3.1.
The occurrence is reidentified from the four participant identities and the derived maximal continuous ModelUseInterval. A useful probe holds those participants fixed and asks whether a relevant model-content change can change how the Work is performed; availability or mention alone is not actual use.
Scope delimitation is not another direct relation kind here. The U.ClaimScope participating in ModelApplicabilityRelation is a set-valued scope over U.ContextSlice; A.2.6 governs its primitive membership predicate. A membership assertion or an evaluation result is an episteme about that predicate.
Local predicate-value declaration. ModelExpressionCoherencePredicate is an A.1.1-local ValueKind, not a U-kind and not an evaluation procedure. A by-value candidate belongs to this kind only when it declares (1) the ordered model-content and expression-content input meanings, (2) the exact comparison domain and local senses, (3) a Boolean truth condition, (4) the treatment of required congruence and permitted loss, and (5) every dependency whose absence makes application stop rather than return false. Two predicate values are identical exactly when those five by-value components are identical. A changed input meaning, domain, truth condition, congruence or loss rule, or dependency identifies another predicate value; a changed label, evaluator, evidence set, result episteme, representation, or publication does not. A label or procedure lacking the complete five-part declaration is not a member.
ModelExpressionCoherenceRelation. Its participants are one exact model episteme, one exact expression episteme, one by-value criterion admitted as ModelExpressionCoherencePredicate, and one exact U.ReferenceScheme used as the comparison basis.
Well-formedness constraint WF-A1.1-COH. ModelExpressionCoherenceRelation(M,E,P,R) obtains exactly when either (a) R equals the C.2.1 effective schemes of both epistemes, or (b) P resolves every differing source and receiving F.17 SchemeSenseCell pair and names an obtaining F.9 Bridge for each required correspondence; and, after that semantic branch is established, the fixed predicate value P returns true for the fixed claim contents of M and E under R. An unresolved cell, missing Bridge, shared spelling, common label, Bridge Card, or mere interpretability establishes no bridged branch.
The Bridge profile carries relation semantics only. Comparison direction, use-specific rule, permitted loss, and reliance belong to the separate bounded-use claim and reliance path.
Well-formedness constraint WF-A1.1-COH-USE. A receiving assertion or structure selection that relies on a bridged coherence occurrence is admissible only when a separate current C.2.1 claim affirmatively states that the Bridge is suitable for this fixed-content comparison use, direction, rule, and loss tolerance compatible with P. The same use must have an exact A.10 evidence-provenance relation. Ordinary reliance requires RelianceDisposition=pass. If an actual named assurance claim about that use is current, require its B.3 AssuranceResult for the same bounded use: only supported-for-use supports the attempted assurance use, while narrowed supports only its stated narrower use. Establish any required authorization separately.
Use guidance. Return missing model-expression interpretation bridge, missing model-expression interpretation use claim, or missing model-expression interpretation reliance for the corresponding missing condition. A use stop does not make the Bridge or predicate false and does not erase or reidentify an otherwise obtaining coherence occurrence. Comparison Work, an assertion episteme, and an A.22 selection use remain separate.
One occurrence is participant-determined by <M,E,P,R>; it has no temporal-extent discriminator and no later recurrence for the same tuple. Changed claim content identifies another episteme and tuple. Changed predicate value or comparison scheme likewise changes the tuple. Changed evidence, bounded-use claim, reliance result, card, publication, evaluator, or timestamp does not.
Maintenance remains one separate dated Work individual: recover each exact actual performer through A.13 and let A.15.1 independently admit the occurrence. Add F.6 through the same obtaining A.13 assignment only when the maintenance account or its receiving use expressly consumes precise assignment-bound attribution; F.6 identifies neither assignment nor performer, and missing or failed attribution leaves the Work intact. Its affected-referent, resource, parameter, premise, method-enactment, and operation-application facts use their direct relations or A.6.1 bindings. C.2.1 identifies any report or repaired episteme separately; only an exact A.15.PROD entity-inception claim may relate that episteme's first existence to the performed maintenance. An exact evaluator may separately be recovered through A.13 and perform independently admitted evaluation Work, with F.6 added only for a consumed precise attribution. C.2.1 identifies any result episteme asserting whether the coherence predicate holds, and only its exact A.15.PROD inception basis may relate its first existence to that performed Work. Neither that result episteme nor its provenance is the coherence occurrence. Failed maintenance work remains actual work even when the changed episteme tuple has no obtaining coherence occurrence.
BoundedModelUseStructure selects obtaining participant-determined ModelExpressionCoherenceRelation occurrences. Maintenance methods and Work remain separate objects even when they change the receiving decision; if their organization must itself be selected, that is a distinct A.22 structure and does not enter this bounded-model-use identity.
Coherence-work stress cases. Coherence can obtain before any selected maintenance episode. Successful maintenance that leaves both episteme identities fixed leaves the same participant tuple; maintenance that changes expression claim content gives another C.2.1 episteme and a different tuple to evaluate. Failed maintenance may leave a changed expression episteme and a separately identified evaluation result while the new tuple has no obtaining coherence occurrence. Automated integration work and non-software maintenance use the same separation among fixed-content correspondence, work, result, evaluation, evidence, and provenance.
Occurrence-identity stress case. Exact F.6 performedUnderAssignment(InspectionWork-42, InspectorAssignment-17) obtains, and its holder Robot-7 uses DefectModel-3 concerning Pump-6 during that work. An observation at 10:00 supports continued obtaining of the same occurrence whose ModelUseInterval began at 09:00 and remains open; it does not create another occurrence. If model use demonstrably stops at 10:15 and resumes at 10:30 during the same work occurrence and assignment attribution, the resumption begins a second model-use occurrence. Correcting an assertion's timestamp without evidence of a world-side gap changes only that assertion.
Use guidance — unsupported crossing. First identify both endpoint BoundedModelUseStructure values without the crossing and state source, target, direction, required fit, permitted loss, and claim scope. Well-formedness constraint WF-A1.1-CROSS. A positive cross-structure member exists only when a current direct pattern supplies compatible endpoint SlotKinds, an obtaining crossing predicate, an occurrence-identity rule, and all four A.22 discriminators; the proposal, F.9 sense Bridge, label, diagram, or card supplies none of them. Otherwise preserve the six-part proposal, omit it from both endpoint identities and every positive cross-structure member, and return missing CROSS-LOCALITY-BRIDGE governor.
A.1.1 is the subject pattern for these three relation kinds. A.6.0 governs their RelationSignature epistemes, A.6.5 governs the SlotSpecs inside those declarations, and A.6.REL governs progressive explicit individuation. A.2.6 separately governs claim-scope membership. BoundedModelUseStructure is the selected organization of the resulting occurrences under those scope values; no context record copies their participants.
Use the settled public relation names
The direct definitions, SlotSpecs, obtaining constraints, and occurrence-identity rules above govern the three relation kinds. A.1.1 uses only the settled Tech labels and their shortest Plain relation sentences:
F.18 and F.17 carry candidate-name history, public-row state, lineage, and refresh evidence. ModelExpressionCoherencePredicate remains an A.1.1-local five-part criterion ValueKind; it has no public F.17 row unless a later durable naming use independently reopens F.18.
Identify continuity through model use
At one observation time, the structure has the four A.22 discriminators:
- exact independently identified constituents—the selected model episteme and admitted model-use holons;
- exact selected obtaining applicability, use, and coherence occurrences;
- exact applied constraint claims used by this selection, each with a recoverable proposition and C.2.1 identity; a claim may refer to one
U.ClaimScopeor its membership predicate, but the bare scope, membership outcome, boundary display, or carrier is not this discriminator; and - one exact named selection-use frame containing its question, admissible action, and stop or return condition. An optional explanatory guard follows F.19:4 and remains outside those four discriminators.
No crossing or proposed six-part crossing record enters those discriminators.
At a later observation time, reidentify the same structure only when every continuing constituent is reidentified under its direct rule; any replacement model is connected by exact C.2.1 EpistemeEditionRelation and admitted by the declared continuity rule; every continuing relation occurrence retains its direct identity; every replacement occurrence is explicitly admitted; and all four A.22 discriminators remain the same under that rule.
The continuity rule therefore compares the exact constituents, selected occurrence organization, exact applied constraint claims, and the complete question/action/stop-or-return selection-use frame. A changed constraint proposition reopens the third discriminator; changing only a membership assertion, boundary rendering, carrier, or evidence about an unchanged constraint claim does not. A changed question, action, or return condition reopens structure identity even when every substrate and relation occurrence remains unchanged. A changed explanatory guard alone reopens the affected use claim, not structure identity. If its changed content alters an applied constraint, question, action, or stop or return condition, compare that existing discriminator. A changed page, wording, rendering, carrier, description edition, or publication does not. File history, edition labels, publication order, a shared name, or membership in an edition collection establishes neither EpistemeEditionRelation nor bounded-model-use continuity; A.14 governs any separately selected collection of editions.
Missing evidence creates uncertainty about a continuity claim; it does not by itself end a world-side relation or structure. Any selected substrate holon may separately participate in a larger whole under A.14 and C.13; that is not parthood of BoundedModelUseStructure.
Resolve semantic locality through direct values and relations
When the question is local meaning rather than joint model-use organization, recover the smallest direct result and stop:
For movement between local meanings, resolve the exact source and receiving F.17 sense cells and then apply F.9. An obtaining Bridge states correspondence between those readings; the separate bounded-use claim states direction, rule, and tolerance. A.10 handles ordinary reliance; B.3 adds a bounded result only when an actual named assurance claim is current. The Bridge is not the rule, unit, status use, inference, or receiving action.
If a subject pattern still asks for a generic U.BoundedContext or BoundedContextRef instead of the exact values above, do not fabricate that participant. Preserve the exact value or relation already recovered and stop at the unresolved interface in the subject pattern. The transfer is not complete merely because A.1.1 names a destination.
Heterogeneous semantic-locality replays
Hospital operating-room replay. Recover direct values and relations.
This replay selects no BoundedModelUseStructure unless one exact model's applicability, assigned-Work use, fixed-content coherence, applied constraints, and selection-use frame also become current.
Two further retained uses.
Keep descriptions and publications separate
A bounded-context description is a U.Episteme. Under its C.2.1 declaration, the description's entityOfConcernRef designates the exact EntityOfConcern named by the description's claims. EntityOfConcernSlot is the SlotKind in that declaration; it does not itself point to the world-side object. A meta-description designates that description episteme through ordinary C.2.1 recursion.
When a description claim needs empirical grounding, recover one exact C.2.1 EpistemeEmpiricalGroundingRelation between the description episteme and the admitted grounding holon. GroundingHolonSlot is only the signature-local participant meaning in that relation's declaration; a groundingHolonRef in a card or description designates the participant. The selected structure cannot fill that participant because it is not a holon. Viewpoint, claim scope, effective reference scheme, publication use, rendering, and presentation carrier remain separately governed.
A stale description has another episteme edition or an obsolete currentness claim. Neither condition by itself changes the model-use structure or its world-side relations.
Recover DDD context mapping by direct object
Start with three questions: what reusable way of mapping was used, what work actually happened, and what claim-bearing product resulted? Identify that product under C.2.1. Call the same episteme a view only after it passes one exact E.17.0 viewpoint-conformance test. Keep the relation structure it describes and every diagram, page, or publication separate.
Code/schema split. Start from the exact claim, not the source phrase. Claim-bearing source-code or schema content such as PressControllerCode-18 is a C.2.1 episteme with an exact EntityOfConcern and effective scheme. A repository, file, publication form, or presentation carrier that bears that content remains under its direct representation/publication/carrier pattern. A deployed controller, database, or software organization remains an actual system or selected structure under its subject pattern. The phrase code base or database schema grants none of those identities and never supplies one universal kind.
Positive case: the fixed claims expressed by PressControllerCode-18 participate as the expression episteme in ModelExpressionCoherenceRelation. Near misses: PressControllerRepository-2 is only the repository or carrier being referred to, and DeployedPressDatabase-4 is the deployed database system or structure. Neither near miss may fill an episteme participant merely because source practice calls it a code base or schema.
This dispatch table is a reading aid for selecting the governing FPF object and pattern. Only that direct pattern supplies object identity, relation obtaining, or dependent-kind membership. If a separately current claim says that the candidate episteme first existed through the performed mapping Work, apply A.15.PROD only to that exact local inception claim. If an earlier episteme participates as source, use C.2.P to recover the exact source expression and route the source-use relation to its direct governor. Evaluation Work and any result episteme remain separate. None of those facts, and no product name, representation, rendering, publication occurrence, form, or carrier, grants U.View membership.
FPF Map remains the mapping-method head for mapping subjects to coordinates in a declared Space. The quoted DDD product name stays a retrieval cue; by itself it grants neither dependent U.View membership, the FPF Map reading, nor identity with the structure.
BoundedModelUseStructure and A.22's conditional cross-structure rule concern different structures. First identify every bounded model-use structure from its own model, admitted holons, three direct relation families—including each applicability occurrence's exact U.ClaimScope participant—exact applied constraint claims, and named frame. A scope or membership result is not copied into the constraint discriminator. Only then may a distinct A.22 structure select several such endpoints and independently governed obtaining crossings among them. Until those crossing occurrences and all four A.22 base discriminators exist, no member of that conditional specialization is asserted and its A.22-local label remains pending. Maintenance Work remains separate from both structures. A candidate context-mapping episteme may carry claims about a proposed crossing organization without designating an exact structure. Once the direct crossing and A.22 identity exist, a corresponding C.2.1 episteme may designate that exact cross-structure and its participants. Only an explicit C.29 representation may show the structure or proposal; the episteme is a U.View only after exact E.17.0 conformance obtains.
Preserve the lightweight path
Most local claims need no bounded model-use structure declaration. Name the exact current participant, semantic-locality value, system-role-assignment occurrence, or direct relation occurrence under its subject pattern and stop.
Select and expose BoundedModelUseStructure only when the joint organization of independently governed model applicability, actual model use, fixed-content model-expression coherence, exact applied constraint claims, and the named frame changes the next engineering move. Keep each claim scope solely in its applicability occurrence unless a distinct applied constraint proposition refers to it. If a crossing matters, open the separate A.22 cross-structure question only after its direct governor makes that exact crossing obtain between already identified endpoint structures; never add it to either endpoint identity. Recognize an episteme as U.View only after exact E.17.0 conformance. Publish that already recognized view under E.24.PUB only when a declared audience and use need it.
Archetypal Grounding
Full control-model assurance replay
The first-minute case in section 0 is enough for ordinary entry. This longer replay checks the ontology and stop conditions without turning them into the first-use path. Any claim of authority over the Work in the filled cases below needs its own governing basis.
- Applicability decision.
ModelApplicabilityRelationobtains among model epistemePressControlModel-5, systemPress-3, and claim scopeSafetyControlClaimScope. C.2.1 fixesPlantControlReferenceSchemeas the model episteme's effective scheme, so it supplies the interpretation basis without becoming a fourth participant. The derivedModelApplicabilityIntervalremains open while the model's declared applicability conditions hold forPress-3over the exactU.ContextSlicevalues admitted bymember(slice, SafetyControlClaimScope)under that scheme. - Actual-use decision. A.13 first recovers
Operator-12 : U.Systemas exact actual performer through obtainingOperatorAssignment-8, and A.15.1 independently admitsPressOperationWork-91 : U.Work. Because this decision expressly represents assignment-bound model use, exact F.6performedUnderAssignment(PressOperationWork-91, OperatorAssignment-8)then obtains. The already recovered performer actually usesPressControlModel-5concerningPress-3during that Work. Those four relation participants plus the derived maximal continuousModelUseIntervalreidentify oneModelUseRelationoccurrence. - Scope boundary. Under the A.2.6 membership predicate,
EmergencyStopContextSlicebelongs toSafetyControlClaimScope. This membership claim explains part of the applicability boundary; it is not another relation occurrence selected into the structure. - Fixed-content coherence decision.
ControllerImplementsControlModelPredicateis an admitted local predicate value. Its ordered inputs are the fixed claim contents ofPressControlModel-5andPressControllerCode-17; it returns true exactly when the code expresses every controller-command and feedback distinction required by the model, and false when a required distinction is missing. Both epistemes havePlantControlReferenceSchemeas their C.2.1 effective scheme, so the relation-side comparison scheme is that same value and no Bridge is inferred. The predicate returns true for these participants, so their participant-determinedModelExpressionCoherenceRelationoccurrence obtains before any selected maintenance episode. - Maintenance and change stay separate.
- Work:
Engineer-4 : U.SystemperformsControllerCoherenceWork-22 : U.WorkunderControllerEngineerAssignment-7. First recover Engineer-4's A.13 core for this action, including the same obtaining assignment; A.15.1 then independently admits the dated Work from its performance history, enactedControllerAlignmentMethod-2, extent, and containing-System relation. Because this case explicitly attributes performance underControllerEngineerAssignment-7, F.6 afterward relates that already admitted Work to the assignment. The assignment obtains, names Engineer-4 as holder, and covers the Work. - Transformation and later episteme: A.3.4 independently identifies
PressControllerCodeCarrierChange-24 : U.Transformationas the bounded change of continuingPressControllerCodeCarrier-6 : U.PresentationCarrier, using the exact edit boundary, before-and-after code-expression facts, and the carrier-continuity rule. Changed claim content identifies later epistemePressControllerCode-18under C.2.1. - Stop: No current FPF relation says that
ControllerCoherenceWork-22caused or realizedPressControllerCodeCarrierChange-24, so returnmissing work-to-change governor; temporal overlap and a shared code referent do not supply it. A.15.PROD remains closed for a claim that the Work first constitutedPressControllerCode-18until its exact entity-inception basis, including that missing link, is governed.
- Work:
- Evaluation and result stay separate.
- Evaluation Work:
Evaluator-2 : U.SystemperformsCoherenceEvaluationWork-23 : U.WorkunderCoherenceEvaluatorAssignment-5. First recover Evaluator-2's A.13 core for this action, including the same obtaining assignment; A.15.1 then independently admits the dated Work from its performance history, enactedCoherenceEvaluationMethod-4, extent, and containing-System relation. Because this case explicitly attributes performance underCoherenceEvaluatorAssignment-5, F.6 afterward relates that already admitted Work to the assignment. The assignment obtains, names Evaluator-2 as holder, and covers the Work. State any needed operation application through its A.6.1 binding. - Result: C.2.1 separately identifies result episteme
CoherenceEvaluation-23, which asserts whether the coherence predicate holds; only an exact A.15.PROD inception basis may relate that episteme's first existence to the evaluation Work. The result's assertion, evidence-use relation, and provenance remain distinct. - Next tuple: Because
PressControllerCode-18has different claim content, it forms another participant tuple withPressControlModel-5; predicate truth for that tuple decides whether another coherence occurrence obtains. Maintenance, method enactment, changed referent, evaluation, result, evidence, and provenance neither substitute for that truth nor enter the relation's participant set or identity.
- Evaluation Work:
- Crossing stop. If a diagnostics crossing matters, first retain the independently identified source and target structures, then record direction, required fit, permitted loss, and claim scope. F.9 governs correspondence between local senses. Omit the proposed crossing from any positive cross-structure member and return
missing CROSS-LOCALITY-BRIDGE governor. The already governed endpoint relations remain available for their own selections.
Filled A.22 basis for the press-control structure. Its exact constituents are model episteme PressControlModel-5, use-locus system Press-3, and expression episteme PressControllerCode-17. Its selected occurrences are ModelApplicabilityRelation(PressControlModel-5, Press-3, SafetyControlClaimScope), ModelUseRelation(OperatorAssignment-8, PressControlModel-5, PressOperationWork-91, Press-3), and ModelExpressionCoherenceRelation(PressControlModel-5, PressControllerCode-17, ControllerImplementsControlModelPredicate, PlantControlReferenceScheme) as established in steps 1–4. OperatorAssignment-8 and PressOperationWork-91 remain actual participants used to establish the selected ModelUseRelation; they are not copied into the constituent plurality. Its exact applied constraint claims are PressSafetyScopeUseConstraintClaim, whose proposition says that every target slice used in the release judgment satisfies member(targetSlice, SafetyControlClaimScope); PressCommandFeedbackConstraintClaim, whose proposition says that the change preserves the model's command-versus-feedback distinction; and PlantJointReviewConstraintClaim, whose proposition says that, under independently governed PlantReleaseRule-3, all three selected occurrences are required inputs to the release review when each is material. SafetyControlClaimScope, any membership outcome, boundary rendering, and the claim carriers enter no discriminator by themselves. Its fourth discriminator is PressControlReleaseFrame from section 0: ask whether the change is code-only or jointly model/use/coherence-relevant; provide that joint subject matter to the release review; return to the three direct relations if PlantReleaseRule-3 is absent or does not require their joint review. Missing any discriminator leaves the direct relations in place but blocks this structure selection.
The relation sentences above assert direct world-side occurrences; the scope sentence states an A.2.6 membership claim. If the question is only whether the model applies to the press, stop at ModelApplicabilityRelation. Select BoundedModelUseStructure only when the selected applicability, operating-use, and expression-coherence occurrences plus the exact applied constraint claims and frame change the decision or Work plan.
One subsystem, one model. The press-control replay above is the filled case. The machine keeps its U.System identity; the selected structure uses the exact constituents, three obtaining relations, applied constraints, and PressControlReleaseFrame. Without that complete basis, stop at the direct relations. A diagram or later crossing is unnecessary for the positive selection.
One subsystem, two competing models. DeviceSubsystem-2 remains one system. Two structures are available only because each organization is independently complete:
An exact C.2.1 EpistemeEditionRelation may separately establish historical continuation; it does not merge simultaneous organizations. Near miss: if either side lacks its coherence occurrence, an applied constraint, or its complete frame, that side has useful applicability and use facts but no selected BoundedModelUseStructure yet.
One model, two use loci. ClinicalTerminologyModel-7 participates in two independently complete non-software structures:
Across these five filled structures, each assignment occurrence and dated Work stays only in its selected ModelUseRelation and in the evidence establishing that occurrence. Changing either one reopens that relation and therefore the selected-occurrence discriminator; it is not also an independent constituent replacement. One spanning structure is available only when one exact constituent plurality, relation-occurrence organization, applied-constraint set, and selection-use frame genuinely spans both uses. Shared model identity alone neither merges nor splits them. Near miss: exact diagnosis and billing Work plus a shared model, without one side's coherence occurrence or filled frame, supports only the direct facts on that side.
Published classification model. The published NAICS model is an episteme. Exact F.6 performedUnderAssignment(ClassificationWork-4, ClassificationAssignment-3) and actual use of that model content concerning an organization supply the use branch. A positive NAICSClassificationModelUseStructure additionally needs exact applicability with ClassificationClaimScope as that relation's scope participant, fixed-content coherence with the classification expression, exact applied constraint claims stating which edition and classification distinctions the judgment must preserve, and NAICSClassificationFrame: ask which NAICS edition and distinctions govern this classification; use the complete organization for the classification claim; without the complete basis, stop at publication availability or the direct relation that actually obtains. The bare scope or one membership result is not an applied constraint.
When a proposed directional dependency is called Conformist, retain its source, target, direction, required fit, permitted loss, and claim scope. Return missing CROSS-LOCALITY-BRIDGE governor until a compatible direct relation exists.
Stale description. An already recognized Context Map view is six months old while the same already governed applicability, actual-use, and model-expression-coherence relations continue. Its currentness claim can become obsolete; revising the U.View episteme or publishing another rendering changes those epistemic and publication objects only. Reidentify each structure using all four discriminators and the continuity rule in section 4.3.
Context-mapping assurance case. This case tests the heavier method, product, view, and publication boundaries after the ordinary entry path has succeeded.
- Method and Work.
Architect-9 : U.Systemperforms datedContextMappingWork-14 : U.WorkunderArchitectureAssignment-6. First recover Architect-9's A.13 core for this action, including the same obtaining assignment; A.15.1 then independently admits the Work from its performance history, enactedContextMappingMethod-3 : U.Method, extent, and containing-System relation. Because this case explicitly attributes performance underArchitectureAssignment-6, F.6 afterward relates that already admitted Work to the assignment. The assignment obtains, names Architect-9 as holder, and covers the Work. The repeatable Method and this dated Work remain different objects. - Candidate product. C.2.1 independently identifies episteme
ContextRelationsAnalysis-8. Its EntityOfConcern is the six-part proposed crossing organization: source, target, direction, required fit, permitted loss, and claim scope. The episteme is not the proposed organization. - Current stop. No independent direct governor currently makes the proposed crossing obtain. A.22 therefore lacks the relation-occurrence discriminator needed for base identity, and the candidate episteme does not designate an exact member of the conditional crossing-analysis specialization. Stop at the proposed organization.
- Later positive route. Only if a future direct governor admits that exact crossing and all four A.22 discriminators are recovered may a corresponding C.2.1 episteme designate the resulting exact structure. Changing the EntityOfConcern remains subject to C.2.1 episteme identity.
- Source use and inception. If a current claim says
ContextRelationsAnalysis-8first existed through the mapping Work, A.15.PROD governs only that exact local inception claim. If source epistemeContextNotes-7participates, C.2.P recovers its exact source expression and routes the source-use relation to its direct governor. - View evaluation.
Reviewer-6 : U.SystemperformsContextViewConformanceEvaluationWork-15 : U.WorkunderContextViewReviewerAssignment-10. First recover Reviewer-6's A.13 core for this action, including the same obtaining assignment; A.15.1 then independently admits the Work from its performance history, enactedContextViewConformanceEvaluationMethod-5, extent, and containing-System relation. Because this case explicitly attributes performance underContextViewReviewerAssignment-10, F.6 afterward relates that already admitted Work to the assignment. The assignment obtains, names Reviewer-6 as holder, and covers the Work. Any result episteme and any A.15.PROD inception claim about that result remain separate. Under E.17.0,ContextRelationsAnalysis-8becomes aU.Viewonly when its declared conformance relation toContextMappingViewpoint-4obtains. - Representation and publication stop. The product name, mapping method, performed Work, source use, evaluation result, representation, rendering, publication occurrence, form, and carrier grant neither crossing-structure identity nor
U.Viewmembership and remain under their direct patterns.
Bias-Annotation
This pattern has a DDD lineage bias because bounded context is the source term. Outside software, use A.1.1 only when the domain has one claim-bearing model edition, explicit applicability, actual use in assigned Work, fixed-content expression coherence, and a present decision changed by their joint organization. Industrial control, clinical or billing terminology, and published classifications can meet that test through different direct governors; a familiar context label cannot.
It has a structure-selection bias. The lightweight stop rule prevents mere local terminology, model mention, or implementation and organizational partition from becoming a structure without the required model-use relation organization.
It also has a model-coherence bias. Actual systems, work, methods, transformations, epistemes, and system-role-assignment occurrences keep their own identities and can remain the referents designated by receiving epistemes when the joint relation organization is not the subject of the receiving use.
Conformance Checklist
- A positive
BoundedModelUseStructureexposes all four A.22 discriminators: exact constituents, exact selected obtaining applicability/use/coherence occurrences, exact applied constraints, and one named question/action/stop-or-return selection-use frame. - The three direct relation declarations satisfy
WF-A1.1-APP,WF-A1.1-USE, andWF-A1.1-COH; any imported-sense receiving use additionally satisfiesWF-A1.1-APP-USEorWF-A1.1-COH-USE. Missing conditions return the named stop rather than a positive assertion. - Every
ModelExpressionCoherencePredicatevalue satisfies the local five-part membership and value-identity rule. EveryModelExpressionCoherenceRelationoccurrence is participant-determined by<model episteme, expression episteme, predicate value, comparison scheme>and has no interval discriminator. BoundedModelUseStructureis governed asU.Structure; its identity uses the four A.22 discriminators and their continuity rule.- Reidentification compares all four discriminators and then applies A.1.1:4.3. A changed applied constraint or changed question/action/stop-or-return frame reopens identity even when constituents and relation occurrences are unchanged; a changed optional explanatory guard alone reopens the use it protects; if it changes an applied constraint or frame value, compare that discriminator; a changed page, graph, rendering, or publication does not.
- Semantic locality follows the direct-value triage in A.1.1:4.4. A local rule, inference, unit, evidence use, or status use remains at its exact subject pattern; a broad label or unrepaired generic-context field cannot manufacture the missing participant.
- A description episteme designates its exact EntityOfConcern under C.2.1. When a description claim needs empirical grounding, recover one exact obtaining
EpistemeEmpiricalGroundingRelation. - DDD Context Mapping is recovered as method, dated Work, claim-bearing product, proposed or obtaining crossing organization, view conformance, representation, and publication under their separate subject patterns.
WF-A1.1-CROSSblocks a positive cross-structure member while the direct crossing governor or an A.22 discriminator is missing. - A code/schema cue is classified from the exact claim as claim-bearing episteme content, repository/file/form/carrier, or deployed system/structure; the cue itself supplies no common kind.
- Two model uses over one subsystem yield two structures only when each independently supplies all three obtaining relation families, applied constraints, and its exact selection-use frame. Missing coherence or another discriminator leaves that side at its direct relations.
- Use the structure only when its joint organization changes a receiving decision. The reader can name the admissible action and the stop or return condition; use F.19:4's plausible-reader test for any optional explanatory guard.
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits. Teams can compare model-use boundaries without inventing an enclosing whole. Competing models over one subsystem and one model across several loci become expressible through complete structure bases. Local vocabulary, rules, inferences, units, evidence use, and status use remain recoverable through subject patterns rather than a context proxy.
Costs. A load-bearing structure claim must recover three direct relation families, exact applied constraints, and one question/action/stop-or-return frame. Semantic transfer sometimes stops at a subject pattern that still cannot express the claim without a generic context field; that stop preserves the known participants and relations while the missing predicate is repaired.
Limits. A.1.1 does not decide model truth, local system-role-kind classification, system-role-assignment occurrence or state, a relation among system-role kinds, rule validity, measurement, status, evidence, claim-scope membership, reference-scheme construction, system parthood, Work performance, release authority, or publication currentness. It selects only the bounded model-use organization after those direct claims are available.
Rationale
The selected object must survive two decisive tests. One subsystem under two models needs two bounded contexts without duplicating the subsystem. One model coherently used across several loci may need one bounded context without pretending those loci are parts of another whole. A dependent U.Structure over exact relations passes both tests.
The practical DDD lesson retained here is that boundaries matter because model applicability, actual use, expression consistency, and relationships can change engineering decisions. FPF does not copy that sentence as one ontology: it separates participant-determined fixed-content coherence from maintenance Work, identifies each bounded model-use structure without crossings, and includes an independently obtaining crossing only as a selected relation occurrence in a distinct A.22 structure over already identified endpoints.
SoTA-Echoing
The source line is not one settled ontology. The 2015 reference defines a bounded context as a description of a boundary. The January 2026 worked case also uses the term for an actual system part and for use of the published NAICS model. FPF keeps those three readings distinct instead of choosing one of them as a universal context object.
Scoped FPF synthesis hypothesis and defeaters. This edition hypothesizes that, for the bounded uses declared here, the decision-relevant organization is one BoundedModelUseStructure over exactly the three direct relation kinds ModelApplicabilityRelation, ModelUseRelation, and ModelExpressionCoherenceRelation, its exact model-use substrate, exact applied constraint claims, and named frame. Each claim scope remains only the applicability-relation participant unless a distinct applied constraint proposition refers to it. Crossings belong only to a distinct A.22 structure over already identified bounded model-use structures. The hypothesis is usable only while each direct relation has coherent participant meanings, an obtaining rule, and an occurrence-identity rule, each applied constraint proposition is recoverable, and selecting their joint organization changes a concrete practitioner decision.
Fail this edition for the affected case, or reopen only the affected part of the synthesis, when:
- any one of the three direct relations lacks coherent participant meanings, a coherent obtaining rule, or a coherent occurrence-identity rule;
- a DDD case needs a materially different relation organization rather than this three-relation organization; or
- selecting the joint organization changes no practitioner decision compared with stopping at the direct relations.
The external sources therefore change recognition and the tests applied to the working problem. Current FPF direct governors and the scoped, defeasible synthesis above supply the normative Solution. Constructional ontology tests a construction claim; it neither chooses the FPF kind nor proves the no-holon conclusion by citation.
Relations
A.1governs constructive recognition of exact candidates under already admitted holon kinds and its locally declaredU.System/U.Epistemedistinctions. Direct identity patterns define or constrain candidate identity;E.24.UKgoverns public-kind admission; A.14 and direct part-relation patterns define or constrain parthood; C.13 governs constructive assembly.A.22governs baseU.Structureidentity through exact constituents, selected obtaining relations, applied constraints, and one named selection-use frame. It also governs the conditional cross-structure question after a direct crossing governor exists.C.2.1governs model, expression, rule, inference, and description episteme identity, effective reference schemes, exact EntityOfConcern and ClaimGraph content,EpistemeEditionRelation, and empirical grounding. It also identifies the separate bounded-use claim about an F.9 Bridge.A.2.6governsU.ClaimScope,U.ContextSlice, and membership.C.16governs measurement bases, readings, scales, units, and direct comparability.A.2.4and A.10 govern evidence use; F.10 governs status family and status use; B.3 governs assurance.A.2distinguishes local system-role kinds and their classifications.A.2.1defines and testsU.SystemRoleAssignmentspecies, occurrences, and states;A.2.7defines and tests any separately needed relation among system-role kinds in model-use loci. E.10.ROLE routes any other technical use of role before one of these claims is selected.A.3.1,A.15.1, andE.18govern Context Mapping method, performed mapping Work, and transformation-flow structures. A.15.PROD enters only for a separately needed local entity-inception claim.F.17andF.18govern sense cells, durable public labels, candidate-name history, public rows, lineage, and name refresh. A.1.1 consumes the settled names without copying their dossiers.F.9defines an obtaining Bridge between exact F.17SchemeSenseCellvalues. A Bridge carries relation semantics, not a receiving-use decision or a structure-to-structure crossing. A separate C.2.1 claim states bounded suitability. A.10 handles ordinary reliance; B.3 adds a bounded result only when an actual named assurance claim is current.E.17.0,E.24.PUB, andC.29separately govern view conformance, publication occurrence and availability, representation, rendering, form, and carrier.C.2.Precovers an exact source expression and routes any source-use relation to its direct governor.A.6.0andA.6.5govern theRelationSignatureand SlotSpecs declared here;A.6.RELgoverns progressive explicit individuation after the direct relation kind, obtaining condition, and occurrence-identity rule exist.F.19tests whether an explanatory guard is justified for the intended reader.
A.1.1:End
Finding the Acting or Changed System
Type: Part A practitioner application pattern Status: Stable Normativity: Normative unless marked informative
Plain name. Find the system that acts or is intended to change.
Mint or reuse. This pattern introduces no U-kind, relation kind, result kind, or application-record kind. A.1.SCR is a PatternID. It tests one exact U.Entity under the already admitted U.System kind only when a current engineering decision depends on systemhood.
Practitioner entry
Use this when. Use this pattern when a decision depends on which exact system acts, is intended to change, carries a capability, persists through a lifecycle, or is being considered or designated as the project system-of-interest—and the proposed subject is still unclear. Ask: Which exact system acts or is intended to change here, and what decision depends on treating it as a system?
First useful move. State the claim, the proposed actor or change bearer, and what you will decide differently if it is or is not a system. If the phrase already names Work, a Method, capability, transformation, episteme, structure, or a direct relation and your decision does not depend on systemhood, name that object and leave through its subject pattern. Apply the complete A.1 criterion only in the system-dependent branch.
First-minute recognized case. A maintenance decision asks whether Pump-37 or the larger pumping assembly must be isolated before repair. The exact pump has identified constituents, obtaining part relations and assembly, a reidentification rule across seal replacement, a composition-grounded pumping characteristic, and governed boundary/interface facts. Its organization can causally participate in pumping and maintenance Work while preserving identity. The first result is: Pump-37 is the acting U.System whose boundary controls this isolation decision.
Subject-pattern and proposed-system readings. “We develop the surgeon's mastery” ordinarily names the person, one holder-dependent U.Capability, training Work, or evaluation. Keep those subject-pattern readings. If the source instead proposes the physically or operationally realized whole SutureControl-M17, identify that exact U.Entity and evaluate it—not a substituted surgeon or capability—under the already admitted U.System kind. Choose the reading on which the current decision depends.
Near-identical non-system case. PumpKit-37 contains parts of the same types and carries the same product label, but its constituents are not assembled by the required part relations, it has no composition-grounded pumping characteristic, and it cannot participate in the plant installation while preserving pump identity. The first result is: the kit is not the pump system; the current subjects are the material collection and its description.
Honest unknown case. WorkshopController-9 is an exact boxed device, but the team cannot recover its internal assembly, reidentification rule, or operating boundary. The evaluation is unknown and names those missing inputs; the decision that assumes an acting controller remains blocked. The entity itself satisfies or fails the criterion independently of current knowledge.
What this buys. A real actor, change bearer, lifecycle subject, capability holder, or project system-of-interest decision gets a tested identity and boundary. A direct Work, Method, capability, structure, episteme, or relation question leaves immediately without an unnecessary A.1 evaluation. Continue through A.1.STM only if the practitioner still cannot connect this recognition result to the project's outside use; recognition alone does not open the long map.
Not this pattern when. If the subject and its admitted kind are already clear, use the subject pattern of the claim. If service or access wording hides a promise, participant, bearer, permission, Work occurrence, status, evidence, or direct relation, begin with A.6.P §4.11a. Enter A.1.SCR from that route only when the repaired claim itself depends on whether the exact entity recovered by A.6.P—an exact bearer or access-providing arrangement—is a system. If only a name for an already recoverable object is unclear, use F.18.
Problem frame
Familiar nouns can pull attention toward the wrong system or erase a supported proposed-system reading. Mastery may name a capability or the exact physical/operational whole SutureControl-M17. Session may name Work, an interval, a record, or GameSessionWhole-GS204. Access may name promise, permission, state, bearer, Work, or InternetAccessArrangement-CA17. Program may mean code, a Method, an intended designator, a deployed realization, or a run. The engineering cost is a wrong actor, identity boundary, change bearer, capability holder, or project system-of-interest—and the same error occurs when a convenient neighboring referent replaces the exact entity before A.1 evaluates it.
A.1 is the pattern for constructive recognition under admitted holon kinds. This child does not relax or duplicate that criterion. It tells the practitioner when the complete test is worth doing, permits an immediate subject-pattern exit when it is not, and returns one result tied to a concrete decision.
Problem
Without this conditional route, practitioners commonly:
- classify every unusual noun before asking what the decision needs;
- treat wording, physical embodiment, a system-role label or assignment, or a record as proof of systemhood;
- stop at a list of PatternIDs without naming the actor or change bearer;
- infer designation as the project system-of-interest from recognition or from being affected by Work;
- reject a system reading without naming the actual Work, Method, capability, structure, episteme, or relation that remains useful.
Forces
Solution
State the system-dependent decision
Start with four plain statements:
- the claim you are trying to use;
- the exact entity proposed as actor, change bearer, capability holder, persistent subject, or project system-of-interest;
- the decision or action that would differ if this entity were or were not a system; and
- the observation, boundary fact, or construction fact that would settle that difference.
Do not use bare system candidate as a working noun. Before referent recovery say the proposed system reading of the phrase. Once an actual referent is identified, say the exact U.Entity being evaluated under the already admitted U.System kind. Say an alternative being considered for designation as the project system-of-interest only when one named project plan or decision compares possible referents.
Take the subject-pattern exit first
Before testing systemhood, ask whether the current decision already concerns one of these objects:
If this result answers the decision, stop here. Name the object, its subject pattern, and what you can now do. Do not apply A.1 as a recurring project ritual.
If a needed relation has no current governor, state the exact participants and blocked receiving use, return missing-governor[...], and continue under A.6.RCD. Do not substitute relatedTo, a graph edge, or a local bundle.
Apply A.1 only when systemhood remains load-bearing
When the decision still depends on systemhood, recover all six A.1 constructive components. A.1 supplies the criterion.
Then apply the already admitted U.System condition: the whole has an actual physical or operational organization through which it can causally participate in Work or transformation while preserving identity. A system-role assignment, capability, Work occurrence, plan, codebase, or description may provide evidence for these conditions.
Return one decision-bearing result
After one candidate bearer is recognized, rejected, or left unresolved, use A.1.CSD only when the current question is which other Systems may undergo relevant changes and that discovery can change a named decision or investigation. A.1.SCR does not generate the bearer set or qualify consequence paths; it supplies only the load-bearing recognition result or blocker.
These are response forms, not a schema.
Persist a classification assertion or evaluation-result episteme only when another use must inspect or cite it; C.2.1 is then the pattern for that episteme. true | false | unknown describes an evaluation and changes no kind extent.
Add only the neighbors used now
After the first result, add only claims consumed by the decision. Shared extent, one carrier, a common label, or co-occurrence establishes none of their identities or relations.
Keep service/access recovery independent
When service or access wording is the unresolved phrase, start in A.6.P §4.11a. A.6.P names the exact service-provision Work, Method, PromiseContent, system-role assignment, bearer, access-providing arrangement, permission, status, or direct relation. Use A.1.SCR only if the repaired sentence makes a separate system-dependent assertion about the exact entity recovered there—an exact bearer or access-providing arrangement.
“My service stopped” does not by itself say that a system stopped. Service-provision Work may have ceased, an exact deployed or physical bearer may have stopped or become unavailable, an access-providing arrangement may be proposed as the exact system whose functioning stopped, or promised availability/fulfilment may have failed. Use A.1.SCR only to test a separately proposed exact bearer or access-providing arrangement when its system boundary matters to the decision.
Preserve the project system-of-interest bridge
The primary expression is project system-of-interest, inherited from systems engineering without adding target, aim, or goal semantics. systemOfConcern may serve as a historical systems-engineering Plain synonym for that same designation.
A project plan or decision may designate one system as the project system-of-interest. Keep six questions separate:
- identify the exact actual system, or keep a merely intended future referent as a designator in plan, decision, or description content;
- name the plan or decision that designates it and the intended change or use;
- admit composite project Work only after A.15.1 and A.15.6 qualifications hold;
- state each actual work-to-referent, transformation, production, evaluation, delivery, acceptance, or later-use fact under its own governor;
- test any
SystemOfInterestSystemRoleinterpretation and any A.2.1 system-role assignment separately; and - when the recognized system must be reconnected to the long dependency from outside use through architecture, Work, change, and recursive builders, identify each exact admitted performing System, recover its A.13 core, and identify the applicable Method described in A.1.STM before independently admitting each dated Work occurrence under A.15.1. Add F.6 only when the receiving claim also needs precise assignment-bound attribution through that performer's same obtaining assignment. Otherwise state the next exact subject assertion under its predicate.
Infer no project designation from system recognition, affectedness, familiar wording, a system-role label, or shared realization. If the decision needs the unsupported compound project-selection truth, preserve missing-substrate[project-selection-conjunction] until one constructor substrate and edition define that claim.
Use physical grounding without cross-kind identity
Ask what physically or operationally exists, where its boundary lies, and what preserves or ends its identity. This pressure helps test a proposed system reading and reject description-only substitutes. It does not identify a system with a local system-role kind, system-role assignment, capability, Work, transformation, Method, plan, evidence, or description. Do not import BORO categories, unrestricted composition, or a new 4D record.
Archetypal Grounding — Seven Heterogeneous Worked Cases
Each row states whether the A.1.SCR trigger actually fires. The rows are examples.
Enumeration-integrity rule. The seven rows have different subjects, kinds, relations, entry decisions, and exits. Add a later example by showing its exact decision, subject, subject pattern, route, and stop.
Scale-free and difficult-noun recognition stress
Use the same six A.1 constructive components and acting-eligibility condition for every exact entity below. The table supplies bounded fixtures, not shortcuts or a system taxonomy. true means the supplied inputs determine satisfaction; false means a required component fails; unknown names the missing input and blocks system-dependent reliance. Evaluation creates no kind membership or neighboring claim. For the sixth component, each positive fixture below states one local larger-assembly condition and the exact fixture fact that meets it. These fixture conditions are inputs to this evaluation, not universal rules, new relation kinds, or grounds for any neighboring claim in the third column.
Bias-Annotation
Conformance Checklist — Practical Checks
Common Anti-Patterns and Exact Repairs
Consequences
The pattern makes full system recognition more useful by applying it only where identity and boundary change an engineering decision. It also makes non-system results productive: Work, Method, capability, structure, episteme, and relations can close their own questions. The cost is that the practitioner must state the decision and may need to stop when construction facts or a relation governor are missing.
Rationale
The smallest reusable repair is a conditional MethodDescription, not a new kind or universal router. A.1 supplies the system-recognition predicate. A.1.SCR contributes a working situation, non-system subject result, complete-test branch, decision-bearing results, project-designation guard, and migration cases. This prevents ontology work from becoming a ritual, prevents a familiar noun from selecting an actor or project system-of-interest, and prevents a convenient neighboring referent from erasing an exact proposed-system reading before evaluation.
Extent-sensitive identity remains useful because it forces the practitioner to state what exists and survives change. Unrestricted composition and category import remain rejected. The seven cases demonstrate transfer across domains without asserting a common kind.
SoTA-Echoing
Informative. These sources provide bounded pressure on the practitioner route. A.1 and the named subject patterns remain authoritative for kinds, relations, and pass conditions.
The conditional method assembled here—state the decision, close with an exact non-system subject assertion when possible, apply the complete A.1 test only when systemhood remains load-bearing, and use the Method described in A.1.STM for a recognized project subject only when the outside-use dependency is still missing—is a scoped FPF synthesis of these pressures, not an external consensus claim. Reopen the synthesis if A.1 changes its constructive criterion, A.6.P changes the service/access recovery boundary, A.15.6 changes project designation, or later cross-domain evidence defeats the scale-free decision method or one of its explicit stops.
Relations
- Builds on: A.1 for the complete constructive criterion, admitted holon kinds, acting eligibility, and
true | false | unknownevaluation discipline. - Leaves directly through: A.2.2, A.3.1, A.3.2, A.3.4, A.15.1, A.15.2, A.22, C.2.1, E.18, and the exact relation pattern when systemhood is not load-bearing.
- Service/access first use: A.6.P §4.11a; A.1.SCR applies only to a separate system-dependent claim about the exact entity recovered there—an exact bearer or access-providing arrangement.
- Uses for projects: A.15.6 for the actual and intended system distinction, plan or decision designation of the project system-of-interest, separate tests of the system-role kind and assignment, project-relevant network selection, and
missing-substrate[project-selection-conjunction]; A.1.STM only when the returned recognition result must re-enter the system-thinking long map. - Uses for missing relations: A.6.RCD with exact participants, receiving use, and
missing-governor[...]. - Coordinates with: A.1.CSD when a returned bearer result opens the separate question of which other Systems may undergo relevant changes; A.1.STM for the separate long-map use after recognition; and E.10 for lexical triggers.
- Does not replace: A.1, direct kind patterns, relation patterns, A.6.P, or F.18 designation recovery.
A.1.SCR:End
Discovering Systems That May Bear Consequences
Type: Part A practitioner discovery pattern Status: Stable Normativity: Normative unless marked informative
Plain name. Find other Systems that may change.
Governed branch. The broad head is U.System recognition under A.1. This narrower branch examines concrete change-producing possibilities for one current focus, discovers actual Systems or intended System referents that may change under those possibilities, and returns qualified claims for one named receiver. The focus governs the account's aboutness; it is not thereby the world-side changer. Any obtaining change-producing occurrence and any causal claim remain separately governed. The pattern does not recognize every candidate, establish causality, evaluate the changes, or make the receiving decision.
Primary EntityOfConcern. One exact proposed or observed focus entity whose possible or observed consequences are being investigated. The receiving decision or investigation is a neighboring use of the result. Candidate bearers remain participants in its claims.
Practitioner Entry
Use this when. Use this pattern when proposed or observed Work, realization, operation, use, maintenance, misuse, failure, recovery, retirement, policy, or change may alter Systems omitted from the current decision or investigation, and finding one of them could change a probe, constraint, alternative, monitoring condition, explanation, or reopen decision.
Ask: Which other Systems may undergo a relevant change, through what supported relation or still-modal path, and what should the receiver do next?
First useful move. Name the exact focus and receiver. Generate a small set of concrete change-producing possibilities, trace outward through supported direct relations or explicitly modal path claims, and challenge the current boundary for a missing bearer.
First useful result. Return the smallest bounded affected-System consequence account that changes or holds open the named receiver. One qualified consequence claim and one unresolved bearer or path are enough when they lead to a probe, constraint, alternative, monitoring condition, or honest stop.
Cheap stop. Stop if the current bearer set and consequence claims already support the receiver at the declared configuration, scope, horizon, and evidence window. Also stop when an exact non-System finding or missing relation blocks the next claim; return that finding to its direct owner instead of inventing a System.
What goes wrong if missed. A familiar participant list becomes the boundary of inquiry, a possible path is reported as an obtaining relation, a scale label stands in for a constructed whole, or unlike changes disappear inside one aggregate. The receiver closes while a cheap observation or alternative could still have changed it.
What this buys. The practitioner gets a reviewable set of possible bearers, relation-status claims, changed characteristics, evidence limits, and next probes without importing a full domain impact, risk, due-diligence, or assessment procedure.
Not this pattern when.
- If one proposed entity must first be tested as a
U.System, useA.1.SCR. - If the current question is an already named direct relation, use its A.6 governor.
- If the receiver relies on a causal effect, intervention, or counterfactual claim, use
C.28for that claim. - If the current question is comparison or choice among configurations, use
C.11.CRCandC.11after the needed bearer claims exist. - If the domain already has a qualified discovery Method with its own quantities, thresholds, evidence rules, and authority, use that Method; use A.1.CSD only for the shared early discovery result.
Precision Restoration
Affectedness creates no AffectedSystem, ConsequenceBearingSystem, AffectedSystemRole, ImpactRelation, U.Level, priority, aggregate, or decision. Use each stronger claim only under its direct owner.
Problem Frame
A change rarely ends at the boundary drawn for its proposer. For example, material, energy, chemical, biological, information, access, exposure, load, resource, capability, institutional, and dependency paths can reach other physical or operational wholes. Some paths already obtain; others are only plausible descriptions awaiting observation.
Find enough actual Systems or intended System referents whose changed states or characteristics can alter one named decision or investigation. Living, natural, engineered, artificial, human, non-human, low-agency, and non-intelligent Systems enter by the ordinary A.1 criterion, not by their visibility or ability to answer.
Scale words do not solve the search. A constituent, containing System, neighboring whole, and later reidentified whole are relevant only through their actual construction, delimitation, direct relations, or a genuine whole-reidentification question. Consequences on several sides remain separate even when a domain calculation later compares them.
Problem
Without a bounded discovery move, practitioners commonly:
- stop at systems already named by interfaces, ownership, participation, contracts, or observation;
- turn a plausible path into an asserted world-side relation;
- treat organism, population, team, organization, society, or ecosystem words as a ready ladder of Systems;
- force collections, places, descriptions, Methods, Work occurrences, or declared scopes into System rows;
- combine unlike bearer, horizon, evidence, and receiver coordinates before their differences are inspectable; or
- continue brainstorming without a decision-relative stop or next probe.
The result is either premature closure or an unbounded catalogue. Both fail to change the receiver at useful cost.
Forces
Solution
Discover outward from concrete possibilities, preserve the status of every relation and bearer claim, and stop at the smallest account that changes one receiver.
Perform the Move
- Recognize the working situation. Use A.1.CSD only when an omitted System could change a named decision, investigation, probe, constraint, monitoring condition, explanation, or reopen condition.
- Name focus and receiver. State the exact proposed or observed focus entity, current configuration when relevant, exact receiving decision or investigation, scope, place when material, and horizon.
- Generate change-producing possibilities. Consider intended and plausible Work, realization, operation, use, maintenance, misuse, failure, recovery, adaptation, continuing change, retirement, and later conditions that matter here. These are examples of possibilities, not a lifecycle or mandatory sequence.
- Trace paths and challenge the boundary. Follow supported obtaining direct-relation occurrences separately from modal path claims. For a modal claim, name the proposed relation kind, candidate participants, conditions, support, and uncertainty. Then ask which Systems capable of bearing the stated change remain outside the current frame.
- Recover relation status and holon basis. Establish every claimed world-side relation occurrence—such as part-whole, participation, dependency, crossing, or exposure—only through its direct governor. Recover an environment from one focal System delimitation, exact external referents, supported crossing relations, and the selected use; recover a delimitation or boundary through its own FPF construction and supporting facts, not as a relation occurrence. Support a containing-System claim through the exact part-whole relation and construction. A context or declared scope remains a use-bounding fact and does not by itself make a world-side relation obtain. Use exact construction facts rather than a level word. Use B.2 or B.2.2 only when current facts create a real whole-reidentification question, then inspect possible bearers on both sides.
- Recognize or retain bearer references. Use
A.1.SCRonly when an actual candidate's systemhood is load-bearing. Keep a not-yet-present or unidentified bearer as an intended referent or explicit unknown inside modal content. Preserve a collection, place, scope, or other holon under its own kind or blocker. - Qualify each consequence claim. Name the changed state or characteristic, exact bearer, obtaining-occurrence or modal-path status, conditions, configuration, direction and magnitude cue when known, time, grounded whole/part or declared-scope coordinate when current, evidence, uncertainty, and causal status.
- Keep cross-scale coordinates distinct. Preserve each bearer's changed state or characteristic, conditions, horizon, evidence, uncertainty, and receiving use. A later domain aggregate may be added for its own use; it does not replace the original claims or set priority by scale.
- Connect the result. For each material claim, state whether the receiver needs a constraint, alternative, evidence-producing probe, specialist return, monitoring condition, reversible step, or explicit unresolved gap. Route a stronger claim to the pattern or practice that defines and tests it.
- Prioritize inquiry without erasing sides. Investigate first what could reverse or constrain the receiver, what is hard to reverse, what has large uncertainty and cheap information, and what bearer/path combination is poorly observed. Keep the original coordinates visible.
- Stop and reopen. Stop at the smallest account that changes or holds open the receiver. Record plausible missing bearers or paths, the cheapest next discovery action, and the observation, new System, changed whole, changed use, evidence, or specialist result that reopens the account.
This sequence of actions is a reasoning aid. Discovery, observation, design, comparison, and specialist inquiry may proceed concurrently and reopen one another.
Keep Relation and Holon Status Explicit
An exact modal claim is useful because it tells the next observer what must be checked. It remains modal until the obtaining predicate is supported.
Record the Result as One Ordinary Episteme
The account is reusable only when its C.2.1 identity and working content are explicit:
A thin account may contain one qualified consequence claim plus one unresolved bearer, path, or specialist return when those entries already change the receiver. Blank fields do not assert closure. Bearers and unknowns are participants in the ClaimGraph, not extra EntityOfConcern values. If one truthful focus cannot govern the combined claims, keep the claims local or identify several account epistemes.
Recognition and Assurance Split
Recognition. A cold reader can find the focus, receiver, at least one possible bearer, the obtaining-or-modal status of its path, the possible changed characteristic, support and uncertainty, and the next probe or stop.
Assurance. Trust in systemhood, relation occurrence, measurement, causal effect, source reliance, comparison, and specialist result remains with the direct patterns and practices.
Four First-Screen Situations
The same discovery action changes all four situations. Their domain Methods, quantities, evidence rules, and decisions remain different.
Minimally Viable Worked Case: Nutrient Pulse
FeedPulsePlan-FP4 proposes a larger nutrient pulse for BioreactorOperatingSystem-BR7. The receiving investigation is ProbeDecision-PD4: choose the next observation before changing the feed setting for the next 48 hours. The plan is the account's one exact focus EntityOfConcern; the ClaimGraph examines the possible feed-operation occurrence it specifies rather than treating the plan as a physical cause. The probe decision is the account's neighboring use.
Baseline instrumentation supports one obtaining substrate-transfer occurrence from FeedLine-F2 into the reactor medium and one obtaining effluent-flow occurrence from BR7 to TreatmentTrain-TT2. Microscopy and persistence observations support the constructive recognition of individual bacterial Systems and BiofilmPatch-BP3: matrix-linked constituents, persistent assembly, whole-level nutrient-processing and shear-resistance characteristics, and actual participation in nutrient transformation establish the patch as a distinct System. The exact constituent relations used for the patch are recorded under their part-whole governors. No generic impact edge is added.
The proposed larger pulse has not occurred. The account therefore keeps four paths modal:
The account keeps bacterial, biofilm, reactor, and treatment-train characteristics separate. It does not average them into one score. Its discovery residual names an observed unattached aggregate outside BiofilmPatch-BP3. Current evidence supports treating the observed members as a collection; whether that collection also forms a whole/System remains unknown because assembly, persistence, and the kind-specific A.1 facts are unsupported. The next recognition probe images the same aggregate across two sampling intervals and records any stable assembly relation and whole-level behavior. Recover those A.1/C.13 facts before classifying it; only supported failure of a required A.1 component or condition warrants a negative System result.
The first useful result is the four-part probe: spatial bacterial sampling, image-based biofilm-coverage observation, pressure-drop monitoring, and effluent measurement. The current pulse setting remains the reversible alternative until those observations support a change. Stop when ProbeDecision-PD4 can choose that probe set and alternative and every retained modal path has a support statement, uncertainty, and reopen observation. Reopen if a new whole is recognized, the feed configuration changes, or an observation reverses one path claim.
Bias Annotation
Conformance Checklist
Common Failures and Repairs
Consequences and Reopen Condition
The pattern makes quiet and remote Systems discoverable without turning discovery into a role taxonomy or universal assessment procedure. It gives downstream work a qualified starting point: an actual bearer, an intended referent, a supported relation occurrence or modal path, a possible changed characteristic, and the evidence-producing move that matters next.
The cost is explicit uncertainty and more disciplined relation handling. Some inquiries stop with a missing System-recognition or relation fact; that stop is useful because it identifies the next observation.
Reopen the account when the focus, configuration, scope, horizon, whole/part construction, obtaining-relation support, bearer recognition, observation, specialist result, or receiving use changes. Reopen this pattern itself only if repeated cross-domain use cannot express the shared discovery move without a new genuinely transdisciplinary result.
Conditional Consumer Boundary
The core account ends before stronger neighboring claims. Continue only when the next question is current:
For the last branch, one admissible D.1 value-frame edition is multilevel holonic consequentialism: inspect consequences for every constructively identified affected holon without automatic priority for a person, collection, or larger whole. That frame is conditional and plural under D.1. It adds no field to the A.1.CSD account. Establish any conflict, priority, or decision claim under its direct pattern.
Rationale
A.1.SCR answers whether one proposed entity is a System. A.1.CSD begins after a focus is current and asks which other Systems may undergo relevant changes. Merging the two would burden every systemhood check with an open-ended consequence search and would confuse candidate generation with recognition.
A.1.STM locates one unsupported answer across a long dependency; C.28 qualifies one causal-use claim; C.11.CRC constructs a finite comparison. None generates the bounded bearer/path/change account at comparable effort. A.1.CSD therefore stays a thin sibling in the A.1 family and returns each stronger claim to its direct owner.
The result remains an ordinary C.2.1 episteme because the recurring need is a reusable set of qualified claims, not a new world-side kind or relation. One focus gives the account identity; several bearers give it content.
SoTA Echoing and Source Use
Each row distinguishes a descriptive result, constructive Method, normative premise, or institutional preference; it retains only the action supported for this use.
These sources converge on path tracing, boundary challenge, proportional inquiry, qualified uncertainty, and reopening. Their taxonomies, normative ends, calculations, evidence thresholds, and authority do not converge and are not imported.
Relations
- Builds on:
A.1for admitted holon and System recognition;C.2.1for the account episteme;A.14,B.1,B.1.2, andC.13for exact relations, wholes, collections, delimitation, crossings, and constructive grounding. - Uses conditionally:
A.1.SCRfor a load-bearing bearer-recognition question;B.2andB.2.2only for genuine whole reidentification;A.6.RCDfor a missing direct-relation governor;A.10,C.27,C.28,C.29,C.30.ILC,C.11.CRC,C.11, and the D-family only for their exact neighboring questions. - Supplies: a bounded affected-System consequence account to a named decision or investigation. Current
SYSE.17adds engineering possibilities, project/configuration inputs, engineering returns, assurance interfaces, and specialist authority boundaries. - Does not replace: domain impact, risk, due-diligence, value-engineering, ecological, safety, legal, medical, economic, governance, policy, participation, or facilitation Methods; System recognition; causal support; comparison; assurance; authority; or decision.
A.1.CSD:End
Using the System-Thinking Long Mantra
Type: Part A practitioner application pattern Status: Stable Normativity: Normative unless marked informative
Plain name. Use the system-thinking long mantra.
Mint or reuse. This pattern introduces no U-kind, relation kind, project kind, case kind, map kind, or record kind. A.1.STM is a PatternID. Long mantra and attention map are Plain names for a repeatable reminder and its readable dependency display.
Practitioner entry
Use this when. Use this pattern when a project team has, or is choosing, one common project system-of-interest but cannot tell which answer is missing on the map from the change expected outside that system to the work and systems that make or change it, and onward to the work and systems that make or change those builders. Use it also when a local result has no supported next fact connecting it to production or change, release, runtime use, or that outside change.
First useful move. Name the final result that matters now: a release, runtime use, or specific change expected outside the project system-of-interest. If a local result is current, say exactly what it is about and name the next supported fact needed to connect it to production or change, release, runtime use, or that outside change. Read backward only far enough to name the first answer that is absent, stale, disputed, or unsupported. Then state that exact question and use the one subject pattern whose Use this when accepts it as a locator for the required definition or constraint.
Memorable reminder.
Start with the change needed outside the system the project is about. Choose that system and its boundary by that use; only then choose its inside. Ask how it will be made or changed, who or what can do that work, and what must make or change those builders. Read backward to the first unsupported answer. Follow real work and changes forward; for each local result, name the supported next fact that connects it to production or change, release, runtime use, or the outside change—or stop where that fact is missing.
This reminder is the Plain long mantra. Section 4 gives the working steps for using it.
Not this pattern when. If the current question is already one system-recognition, project designation, service/access, architecture, Method, Work, transformation, TFS/network, causal-use, evidence, or assurance question, use that direct pattern and stop there. Do not traverse the long map merely because a project mentions a project system-of-interest.
What this buys. The practitioner returns one located gap, one subject pattern, and one next question or action—or a truthful stop.
Problem
A project can get every nearby statement locally right and still lose the long dependency. One team improves a component, another produces a builder, and another measures operation, yet nobody can show which supported relation carries those results toward use of the project system-of-interest. The gap is often hidden by a diagram arrow, the word creates, or a calendar sequence.
The opposite failure is to turn the reminder into a universal route. Then project Work becomes a network, a case becomes a slice type, a planned system is treated as already existing, and every arrow appears to be the same relation. A.1.STM keeps the long question visible while every local truth stays with its subject pattern.
Forces
The attention map
Keep these regions visible. They are questions and result locations, not stages or fields of a record.
Read backward across these regions to justify a needed result and locate the first unsupported answer. This is logical attention, not didactic order, a WorkPlan, dated Work order, U.Transfer, or transformation direction.
Trace forward through independently grounded facts: performer systems and assignments, dated Work, changes of continuing referents, production participation, identity inception, completion, later use, and environment-side change. In the runtime region, identify the exact environment or input referent and its A.3.4 change separately from the direct causal, interaction, functioning, participation, or Work claim for the already existing project system-of-interest; add work-facing assignment, Method, or Work only when those claims separately obtain. These facts may occupy several TFS or network members. Shared identity or temporal adjacency connects none of them without a directly governed relation occurrence and its endpoint bindings.
Solution
- Choose by the final result. Name the release, runtime use, or specific change expected outside the project system-of-interest. If a local result is current, say exactly what it is about and ask which supported fact connects it next to production or change, release, runtime use, or that outside change. If another long mantra better matches the final result, leave A.1.STM.
- Place supported answers and the current scope. Put only answers supported by named facts, observations, decisions, or results in the matching regions. At project level, name the admitted E.18.NET selection and its exact use question; before admission, keep a Plain provisional map and name the missing member, relation occurrence, or endpoint binding. In neither case call the network project Work. For one current case, state only four things in ordinary language: the exact subject or claim; the bounded references and direct claims needed to answer this closure question; the separately governed closure basis; and one named downstream receiving use that remains outside the closed case. Use A.15.6 to choose any technical reference form the case actually needs; do not copy those forms here. Keep plans, descriptions, Methods, Work, systems, changes, relations, evidence, and assurance distinct; do not turn this placement into a dossier or record schema.
- Find the first unsupported dependency. Read backward from the final result and choose the earliest missing, stale, disputed, or unsupported answer that blocks the next dependency. First means logical firstness, not calendar firstness.
- Use one subject pattern. Perform the working move described by the pattern whose
Use this whenaccepts the missing question, and retain the resulting assertion or named stop. Do not copy itsSolutioninto this pattern. - Return only what the next use needs. Put the answer back in the map. Select an E.18.NET network only when its members, relations, constraints, use frame, and endpoint bindings are grounded. Usually return the individual answers. Select another A.22 structure only when one named later task must reuse their organization as one thing and all four identity discriminators pass. Otherwise keep the direct plurality or Plain provisional map.
- Trace forward and test. Follow actual Work, production and identity facts, later changes, participation in use, and environment-side changes through their subject patterns. Repeat for each relevant builder branch. Bind evidence to the claim it supports; stop at the first unsupported direct link and reopen only the smallest affected earlier answer.
Four orders remain separate throughout: the order used to teach the map; the logical dependency read backward; planned or actual Work order; and the subject relations that obtain. One ordering establishes none of the others.
Minimal worked use
A pump-modernization project needs PumpUnit-3 to restore reliable water delivery in its operating environment. The plan designates the already existing pump as the project system-of-interest. A.1 recognition, that designation, any SystemOfInterestSystemRole, and any system-role assignment remain four separate questions.
The team already supports the outside-use hypothesis and a controller-architecture choice. Reading backward exposes the first unsupported answer: can the planned controller result become an actual system ready for installation? The team leaves A.1.STM for the subject patterns. It identifies ControllerSubassembly-7 and other pre-existing materials as the continuing subjects of any A.3.4 changes; recovers each actual fabricator's A.13 core; independently admits fabrication Work under A.15.1; and uses A.15.PROD separately for production participation, controller identity inception, and production completion. This minimal case consumes no exact assignment-bound attribution, so it does not open F.6. It does not describe transformation of the controller before the controller exists.
For the controller-production case, the subject and closure basis are explicit. The case closes only when the independently governed identity-inception, completion or readiness, evidence, and decision claims needed here pass. The named downstream receiving use—installation and later operation in PumpUnit-3—is visible but remains outside the closed case.
At project level, the team may select TFS members concerning controller production, pump modification, qualification, and pump operation together under E.18.NET only after each member is independently identified and the required production, installation, participation, use, or feedback occurrences and endpoint bindings obtain. Until then the network remains a Plain provisional explanation with the missing link named. Actual facts are then traced forward from fabrication Work and changes, through controller inception and pump modification, to later pump operation. When runtime use is claimed, the already existing PumpUnit-3 and its direct participation claim remain separate. If dated runtime Work is claimed, recover every performer's A.13 core and independently admit the occurrence under A.15.1; add F.6 only when precise assignment-bound attribution is also current. Keep either actor-side claim separate from any A.3.4 change of one exact continuing delivery-side environment or input referent; the expected reliable-delivery hypothesis alone establishes neither actuality. A failed relation or missing binding stops that claim without erasing the valid local results.
If later operation shows that reliable water delivery depends on an upstream reservoir-control assembly outside the proposed PumpUnit-3 boundary, the team reopens the outside-use, project designation, and boundary hypotheses before revising the architecture and network selection. It does not preserve the old inside merely because Work has already begun.
Direct exits and near misses
Recognition stress boundary
Before a map relies on an acting system or changed-system boundary, use the one A.1 recognition architecture through A.1.SCR. Its heterogeneous stress cases cover an engineered pump, an animal, a human, a software-realized AI agent, a robotic AI agent, a coordinated collective and roster near miss, the Moon and a tide bearer, plus the exact proposed-system readings SutureControl-M17, GameSessionWhole-GS204, and InternetAccessArrangement-CA17 beside their ordinary subject-pattern readings.
A.1.STM consumes only the returned recognition result. It does not repeat the six-component test, replace the exact entity with a convenient neighboring bearer, infer a system-role assignment from causal participation, or infer Method, Work, transformation, promise, permission, project designation, or a system-role kind from systemhood.
Conformance checklist
Common anti-patterns
Consequences
Benefits. Teams can locate a missing long-range dependency. Local results remain usable, builder recursion remains visible, and a missing relation stays an explicit stop rather than becoming a convenient arrow.
Costs. Practitioners must name the final result, keep several kinds of order apart, and return to subject patterns for local truth. A provisional map may remain incomplete for a long time.
Limits. This pattern does not identify a system, designate a project system-of-interest, select architecture, admit Work or transformation, close a case, identify a TFS network, or establish evidence or assurance. It only governs how a practitioner uses the long attention map to find and return the next result.
SoTA-Echoing
Informative. These sources provide bounded pressure on use of the long attention map. The named subject patterns remain authoritative for kinds, relations, participants, and pass conditions.
The reconciliation of long-mantra attention, subject-qualified results or blockers, minimal case closure, and E.18.NET recursion is a scoped FPF synthesis of these pressures, not an external consensus claim. Reopen the smallest affected clause if practitioner testing cannot distinguish the map from the Solution, a WorkPlan, or CGUS; if outside-before-inside or system-of-interest practice changes; if E.18.NET cannot express recursive builders without false membership; if a case exposes a missing runtime, closure, relation predicate, or link; or if creator graph, function/role, service, target-like system wording, fixed sequence, or a universal contribution edge again becomes load-bearing.
Rationale
The useful inheritance from systems-thinking mantras is the connected attention span: expected outside change and project-system boundary, separately grounded runtime transformation and participation, internal organization, making or changing the system, and recursive builders. FPF preserves that span while rejecting a single algorithm, a creator graph ontology, word-induced systemhood, and a universal route. Project-level network placement and a minimal subject- or claim-centred case placement keep the span usable without identifying project, network, case, or record. The smallest reusable account is therefore a thin use pattern beside A.1, not an expansion of system recognition or architecture.
Relations
- Builds on: the Plain long/local boundary in Preface;
A.1andA.1.SCRfor exact system recognition; andA.15.6for project system-of-interest designation, actual project Work, and subject- or claim-centred case recovery. - Coordinates with:
C.32.P2Sand the C.30 family for outside-use-to-architecture reasoning;A.3.4and the patterns for exact dynamics, interaction, causality, participation, assignment, Method, and Work claims in runtime change and system participation;A.2andA.2.1for system-role-kind interpretation and assignment;A.3.1,A.12, the A.15 family,A.15.PROD,A.15.5, andA.21for Method, Work, production, identity, readiness, and gates;E.18andE.18.NETfor TFS and project-level network selection;A.15.6for the minimal case recovery and closure boundary;A.10andB.3for evidence and assurance;A.1.CSDwhen the missing answer is which other Systems may undergo relevant changes; andC.28only for actual causal-use claims. - Optional demonstration:
A.22.CGUSmay govern a separately admitted demonstrative unfolding slice. Ordinary use of this long mantra requires no CGUS, F.17 row, durable card, or registration. - Does not replace: any direct pattern named above. A.1.STM returns that pattern's result or stop to the attention map and defines no world-side predicate.
A.1.STM:End
System-Role Kinds and Assignments
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Work-facing system classification and assignment.
Use this pattern when one admitted U.System can contribute to different work or functioning without becoming a different system, and the current claim must say either:
- which exact work-facing kind the system counts under now; or
- which system-role assignment actually obtains.
A system here is any individual independently admitted by A.1. It can be a person, team, organization, service, organism, or non-human technical object. The SystemRole head in a name such as ReviewerSystemRole says that candidates are systems.
Typical moments:
- the same pump counts as a cooling circulator in plant operation and as a test article in qualification work;
- a project must decide whether Alice counts as a reviewer in one review slice;
- a relied-on claim says that a system holds a named system role but leaves the assignment occurrence unclear;
- ordinary wording says that a publication, method, capability, or relation participant “plays a role”, although the direct relation is still hidden;
- a proposed “part of a role” may instead be another kind, a relation among kinds, an assignment-state predicate, a capability condition, a responsibility or commitment relation, or a method or Work structure.
Primary EntityOfConcern. One exact local U.Kind whose candidates are U.System individuals and whose operative membership condition distinguishes a stable, assignable, work-facing contribution. C.3 recovers the kind through that candidate domain and condition, a useful member/non-member boundary, and a continuity rule. A practice or source reference may locate the definition or prompt comparison; it does not identify the kind. Such a kind is called a system-role kind. Assignment is a neighboring direct relation, not part of the kind.
Primary working reader. The first reader is an engineer-manager, analyst, or FPF author who must keep system identity stable while making classification and assignment inspectable. A later reader must be able to recover the kind's candidate domain, work-facing membership condition, member/non-member boundary, continuity rule, declaration edition, candidate and slice, useful definition provenance, and any separately obtaining assignment and Work attribution.
First useful move. Start with the ordinary conclusion: “Alice counts as a reviewer for this submission” or “PumpUnit-3 is assigned as cooling circulator for this operating episode.” For classification, name the local system-role kind and evaluate the candidate with one KindSignature under C.3.2. Add a U.SystemRoleAssignment occurrence only when holding or assignment identity is actually claimed.
Concern-word boundary. Concern is Plain reader- or viewpoint-facing wording. It does not admit U.Concern or replace the exact EntityOfConcern, viewpoint episteme, kind, assignment, or receiving relation needed by the claim.
What goes wrong if missed. One label absorbs kind identity, classification, holder, assignment, capability, responsibility, and Work. Or every contribution is forced into a system role even when the real claim concerns evidence use, a relation participant, a declaration slot, or ordinary wording. In both cases readers cannot tell what exists, what merely describes it, and what actually happened.
What this buys. Systems retain their identities while work-facing classifications and assignments change. Membership is testable from the system features named by the membership rule rather than labels or circular hierarchy edges. Practices and sources may reuse one kind or define different kinds; comparing their exact distinctions decides which. Ordinary contribution wording can stay readable without manufacturing an ontology.
Not this pattern when.
- Use
A.2.1when the current object is aU.SystemRoleAssignmentspecies or occurrence and its participant, predicate, or identity law matters. - Use
A.2.2for capability andA.2.5for assignment state. - Use
A.2.7for substitution, incompatibility, bundle, qualification, or another admitted relation among system-role kinds. - Use
A.15and its neighbors for method admission, planned Work, performed Work, and Work attribution. - Use
E.24.UKwhen a local system-role kind is proposed as a durable public FPF U-kind. - Use
E.10.ROLEwhen the source word role is ambiguous. If the recovered meaning is relation participation, a declaration place, an interface place, or a representation position, continue withA.6.RSIR. - When an episteme rather than a system is current, recover its direct use, evidence, publication, external-rule, currentness, or reliance relation through the relevant subject pattern.
Problem Frame
One system can contribute in several ways while remaining the same system. PumpUnit-3 remains the same pump when it counts under CoolingCirculatorSystemRole for plant operation and under TestArticleSystemRole for qualification. A person remains the same person while counting under author and verifier kinds in different slices and holding different assignments.
These are local typed distinctions, not durable universal kinds. Each system-role kind has U.System candidates and a condition that distinguishes the stable, assignable contribution in question. C.3 also requires a useful member/non-member boundary and a continuity rule. Practice or source provenance helps readers find and compare the definition but decides neither sameness nor difference. A KindSignature edition states how candidate features are evaluated. A C.3.2 judgment then answers whether one System counts under that kind in one slice. A separate assignment occurrence says that a System is assigned under its declared U.SystemRoleAssignment species.
Ordinary language also uses role to mean contribution or position. A design method can use a standard publication as a source for a constraint; a report can participate in an evidence relation; and a value can fill a relation slot. Those useful claims make neither the episteme nor the slot filler a system-role kind or assignment participant. The current relation must be recovered before the wording carries an FPF technical claim.
Problem
Without this pattern:
- one system's changing contributions are modeled as changes of system identity;
- a familiar label or taxonomy row is treated as a kind and as proof of membership;
- kind identity and the membership criterion are treated as the same thing;
- an assignment is used as a family-wide membership rule, or classification is used to manufacture an assignment;
- the holder, kind, assignment interval, capability, responsibility, and Work are compressed into one record;
- matching labels across local practices, sources, or editions are treated as identity or permission for reuse;
- proposed subkind edges or extension rows create their own membership evidence;
- ordinary role wording turns epistemes, slots, positions, or interfaces into system-held roles.
Forces
Solution
Use an exact local U.Kind when U.System candidates need one stable, assignable, work-facing membership distinction. Recover the kind through the candidate domain, operative condition, useful member/non-member boundary, and continuity rule. Keep practice or source provenance as a locator and comparison cue. Give a live technical name the SystemRole head, such as ReviewerSystemRole or CoolingCirculatorSystemRole. Do not introduce U.SystemRole; the concrete value is already a local U.Kind under C.3.
Then keep four moves separate:
- identify the local system-role kind;
- declare or select the
KindSignatureedition used for membership; - evaluate one system, kind, signature edition, and slice under C.3.2;
- add a directly declared
U.SystemRoleAssignmentspecies and occurrence only when an assignment actually obtains.
Capability, assignment state, method admission, performed Work, responsibility, commitment, permission, authority, evidence, reliance, and publication remain direct neighboring claims.
Recognize a System-Role Kind
A local kind is a system-role kind only when all of these conditions hold:
- its candidate
ValueKindisU.System; - its operative membership condition states the stable, assignable, work-facing contribution and uses directly governed candidate features;
- at least one intended member and one relevant non-member or boundary case make the distinction testable;
- its continuity rule says which changes preserve that distinction and which require another kind; and
- its
KindSignaturedoes not treat a label, taxonomy row, description, assignment record, classification judgment, extension row, or proposedU.SubkindOfedge as the feature by form.
The kind asks what continuing distinction classifies candidate systems. A particular C.3.2 judgment asks whether one system satisfies the current signature now. Practice or source provenance shows where to inspect the definition; it neither creates nor splits the kind.
CoolingPumpKind is not thereby a system-role kind. Its identity can be a physical or functional pump distinction rather than an assignable work-facing contribution. ShortAssignmentKind, if declared to classify assignment occurrences by duration, is also not a system-role kind because its candidates are assignments rather than systems.
Evaluate Membership without a Circular Shortcut
Each membership clause names the candidate feature's subject pattern, predicate or governed feature, applicability, dependencies, and slice. The classification has four explicit inputs:
An assignment may be one feature only when the local KindSignature explicitly uses that independently obtaining assignment predicate. There is no family-wide rule that assignment means membership. The judgment being computed, a broader-kind judgment, an extension row, or the proposed U.SubkindOf occurrence cannot be a premise of the same judgment.
Missing a required feature or dependency yields unknown, not false. Evidence supports a claim about the governed feature; it does not create that feature or the membership result.
Every U.SubkindOf proposal evaluates the aligned narrower and broader signatures independently for the same candidate and slice. Admit the order only when the C.3.1 monotonicity condition holds. The edge records an already established implication; it never produces either classification judgment.
Keep Kind Identity, Declaration, and Extension Separate
The system-role kind is not its KindSignature, taxonomy episteme, reference scheme, classification judgment, or KindExtension. Same-kind continuity across declaration editions requires the C.3.1 comparison of candidate domain, operative membership distinction, member/non-member boundary, and continuity rule. A compatible criterion or scheme edition can preserve the kind while later judgments cite the edition actually used. A changed source or practice triggers that comparison but does not decide it.
An old role taxonomy or scheme can help recover the candidate domain, membership distinction, boundary probes, continuity rule, or provenance of the current definition. Its label or identifier does not decide sameness. A selected BoundedModelUseStructure can qualify one receiving interpretation when that independently established organization matters; it is designated in the receiving assertion or use and is stored neither on the kind nor as an optional participant of a generic assignment or kind relation. A genuinely structure-dependent relation species instead declares the structure as a required participant, uses the stronger predicate, and states the resulting occurrence-identity law.
Use A.1.1 before citing that structure. Select BoundedModelUseStructure only when exact model applicability, actual model use in assigned Work, fixed-content expression coherence, exact applied constraints, and one named selection-use frame jointly change the receiving decision. If the direct kind, relation, assertion, or Bridge already answers the question, stop there; neither a model-use label nor a wish for more background selects the structure.
Admit Only Exact System-Role-Kind Domains
U.Kind is too broad as the assigned-kind participant domain of an assignment species. Each bounded system-role vocabulary declares one local domain whose candidates are local kinds satisfying the recognition conditions above. For example:
A direct assignment species uses that local domain as the ValueKind of its declaration-local AssignedSystemRoleKindSlot. The slot therefore rejects CoolingPumpKind, ShortAssignmentKind, and arbitrary local kinds. This is local C.3 typed use, not admission of U.Kind as a durable public root.
Assignment Boundary
A.2.1 defines the U.SystemRoleAssignment family. The family contains directly declared relation species rather than one permissive universal signature. Every species declares:
HolderSystemSlot : U.System;- a declaration-local
AssignedSystemRoleKindSlotwhoseValueKindis one exact local system-role-kind domain; - any additional real participants needed to distinguish that species; and
- its own obtaining predicate, applicability, and occurrence-identity rule.
A simple species can declare only the holder and assigned-kind participant meanings. A stronger appointment, authorization, or work arrangement can declare another participant meaning when its actual value changes occurrence identity. The specialized occurrence itself remains a U.SystemRoleAssignment; do not keep a second generic occurrence beside it merely for projection.
An assignment occurrence begins when its predicate starts obtaining for the fixed participants, continues over the maximal uninterrupted predicate-true interval, and ends when a participant changes or the predicate ceases to obtain. A taxonomy episteme, reference scheme, KindSignature, assertion, or interval description can interpret or describe the claim without becoming another world-side participant.
Assignment does not prove classification unless the kind's signature uses that independently obtaining relation as a feature. Classification does not create an assignment. Neither one proves capability, agency, responsibility, authority, commitment, permission, functioning, method enactment, or performed Work.
Relations around the Kind and Assignment
Select only the objects needed by the current claim. None of these values is a “part of the role”.
SystemRoleKindDescription is an F.4 description episteme whose exact EntityOfConcern is one system-role kind. An episteme about an assignment or a relation among kinds has that assignment or relation as its EntityOfConcern instead.
Recover Contribution Wording before Formalizing It
The phrase “the role of X” often means that X contributes to a use. Apply E.10.ROLE first. If X is an admitted system and the claim needs a work-facing classification, recover the local system-role kind and C.3.2 judgment; add an assignment only when holding is claimed. Otherwise keep X in its actual kind and name the direct relation or declaration place.
Use these recognition probes to identify the relation in the current claim. If no direct relation can yet be named, return the exact missing-governor rather than minting a system-role kind.
System-Role Vocabularies and Relations among Kinds
A system-role-vocabulary or taxonomy episteme may state local kind names, declarations, and selected relation claims under an effective reference scheme. Each live kind needs the C.3 distinction that lets readers recover it; each judgment cites its actual signature edition. An assignment claim separately requires an obtaining A.2.1 relation.
Use A.2.7 to state one selected SystemRoleKindRelationStructure over exact local system-role kinds and admitted relations among them. A receiving use can cite an assertion about substitution, incompatibility, bundle, qualification, or another residual relation alongside separately stated assignments, state, capability, and Work. Systems and assignments are not participants of the kind-relation structure.
Algebraic, graph, matrix, embedding, or neural representations are mathematical lenses over that selected structure when a project declares the lens use. They neither create the kinds nor make a relation obtain.
Reduced Use and Stronger Claims
Ordinary “Alice is reviewer” or “this component plays a control role” wording can remain Plain when no decision, attribution, admission, or reliance depends on another technical distinction. Do not materialize a kind, judgment, or assignment merely to decorate the sentence.
When a stronger claim appears, add only the needed object:
- the local kind and judgment when classification matters;
- the assignment occurrence when who holds what and when matters;
- the direct state, capability, method, Work, responsibility, commitment, permission, evidence, reliance, or publication relation when that relation carries the claim;
- the exact C.3.3 kind relation and, when local meanings differ, F.9 relation needed for cross-local use, without merging the kinds or creating assignments.
The earlier Plain sentence is not evidence for a stronger claim.
Archetypal Grounding
Reviewer Membership and a Non-Circular Subkind
The JournalReview practice records one local kind under C.3. The source label locates the definition; the kind itself is recovered through its system-candidate domain, substantive-review condition, boundary probes, and continuity rule:
The capability and fit predicate are governed under A.2.2. They are features used by the criterion, not substitutes for the kind or judgment. One application can therefore state:
The later result follows only from a known failed currentness or fit condition. Ending an assignment alone changes neither judgment because this signature does not use assignment as a feature. If a dependency is unavailable, the result is unknown.
For RoboticsEngineerSystemRole U.SubkindOf EngineerSystemRole, evaluate the two aligned signatures independently for every admitted candidate and slice needed by the declared domain. Only after every defined true narrower judgment implies a true broader judgment may C.3.1 admit the relation. The proposed edge proves neither judgment. An independently obtaining robotics assignment also proves neither judgment unless the relevant signature explicitly uses it as a non-circular feature.
Pump in a Cooling Loop
CoolingCirculatorSystemRole names a local kind whose candidates are admitted systems. Its membership condition requires the governed circulation features needed for the plant-operation contribution; member/non-member probes and the continuity rule expose the boundary. PlantOperations-2026 locates the current definition but does not identify the kind. PumpUnit-3 is judged against that exact signature edition and slice; the judgment does not change pump identity.
When the plant also claims an assignment, it uses a directly declared species:
The interval is assertion content about the known extent; the occurrence continues only while the species predicate obtains without interruption for the same participants. PlantOperationsSystemRoleVocabulary-2026, its reference scheme, and the relevant signature can be cited as interpretation evidence. They are not extra assignment participants.
Closing the open interval later refines the same occurrence description when uninterrupted identity is preserved; the stated interval neither makes the relation obtain nor becomes another participant.
The assignment proves neither circulation capability over every operating region nor performed circulation or maintenance Work. Those claims use A.2.2, A.15.1, and the applicable Method, transformation, measurement, and evidence relations.
A Standard Used in Design Work
An engineering team uses RFC 9110 while designing an HTTP service. Keep these claims separate:
DesignTeam-2independently counts underProtocolDesignerSystemRolein the current slice when its signature criterion is satisfied.- One design-assignment occurrence may obtain as an instance of a declared
U.SystemRoleAssignmentspecies. - The RFC publication is the source episteme in the direct source-use or external-rule relation selected by the design claim.
- Recover
DesignTeam-2as the exact actual performer through A.13, then let A.15.1 independently admit the dated design Work. Because this case expressly says the Work was performed under the exact design assignment, F.6 afterward establishes that relation through the same obtaining A.13 assignment; F.6 identifies neither assignment nor performer, and failed attribution would leave the Work intact. The Work may separately produce a MethodDescription or SystemDescription only through the applicable production claim.
The Same Label in Two Local Practices
An editorial-review practice and a safety-assurance practice can each use ReviewerSystemRole. Compare their exact C.3 definitions before deciding whether one kind continues. In this case the safety-assurance condition admits a materially different contribution and member/non-member boundary, so two kinds are present. The practice names help locate those definitions; a shared label, vocabulary source, or reference-scheme spelling establishes neither sameness nor a Bridge.
Suppose a staffing dashboard proposes u-reviewer-display: show assignments from both practices in one Reviewer column. First recover the two exact local kinds and any F.17 cells needed by the displayed expressions; then establish only the C.3.3 kind relation and F.9 local-sense relation that the display actually consumes. State a separate C.2.1 bounded-use assertion with direction d-safety-to-editorial-display, rule r-preserve-reviewer-differences, and tolerance t-shared-label-only, plus polarity and effective scheme. The rule keeps the practices' admission, independence, evidence, and completion fields separate and tolerates only the shared display label.
Current A.10 provenance and RelianceDisposition=pass can support that display use. They do not justify substitution between assignments or merge the two kinds. If an actual named assurance claim about that use is current, only its B.3 result can support that bounded assurance use; a non-positive disposition stops or narrows it. Consequence alone creates no assurance claim. A Bridge Card can package the Bridge, bounded-use assertion, evidence, and disposition, but it grants no assignment, eligibility, capability, use suitability, or performed-Work inference. A selected BoundedModelUseStructure is cited only in the receiving use whose interpretation it changes.
A Relation Participant Slot Named role
An external notation may call one relation position role. Apply E.10.ROLE and A.6.RSIR to recover the participant meaning and declaration-local SlotKind. Its ValueKind is the participant kind. The external label creates neither a system-role kind nor an assignment. A System participates in the relation as declared; it holds a system-role assignment only through a separate occurrence of a declared assignment species.
Bias Annotation
Working Guidance
- Identify the candidate and confirm its independent A.1 admission as
U.System. - Recover the local kind by saying which systems can count, which work-facing condition separates members from relevant non-members, and what changes preserve that distinction. Record practice or source provenance only when it helps find or compare the definition.
- Declare or select the exact
KindSignatureedition and its direct governed feature criteria. - Evaluate the candidate, kind, signature edition, and slice as
true,false, orunknown. - Add an assignment only when an occurrence of a declared assignment species actually obtains.
- State each claim about state, capability, Method, Work, responsibility, commitment, permission, authority, evidence, or reliance through the pattern that defines or constrains it.
- Evaluate every subkind proposal from independently obtained aligned judgments; never use the proposed edge as a membership premise.
- For cross-local use, keep both kinds and their assignments distinct and establish only the C.3.3 kind relation, F.9 local-sense relation, and bounded-use claim actually needed.
- If the source uses role for another object, apply E.10.ROLE and continue with the recovered subject pattern; stop at
missing-governorwhen no relation is yet admitted.
Conformance Checklist
Common Anti-Patterns
Consequences
Rationale
System-role kinds solve a local classification problem. System-role assignments solve a relation-occurrence problem. The pump does not become another system because its contribution changes, and a kind does not become an assignment because one system currently counts under it.
The architecture therefore keeps these levels separate:
- the local system-role kind, its candidate domain, work-facing membership distinction, boundary probes, continuity rule, and useful definition provenance;
- the
KindSignatureand one C.3.2 judgment over a system and slice; - any directly declared
U.SystemRoleAssignmentoccurrence; - direct neighboring relations for state, capability, Method, Work, responsibility, commitment, permission, authority, evidence, reliance, description, and publication.
Fields in a SystemRoleKindDescription belong to the description episteme. Proposed “parts” repeatedly resolve into other kinds, relation predicates, assignments, Method or Work structures, or parts of description epistemes. The useful structure is the exact relation structure governed by A.2.7, not role mereology.
Semantic locality needs no universal context participant. C.3's candidate domain, operative membership distinction, boundary probes, and continuity rule recover the kind. A practice or source reference locates the definition and warns where comparison may be needed; it is not an identity participant. An assignment species declares only its real participants. A receiving assertion or use can cite a selected model-use structure when that structure actually changes interpretation.
SoTA-Echoing
SysML is not used as a SoTA authority or lineage here. A modeling notation does not decide the identity of a system-role kind, classification judgment, assignment occurrence, participant slot, responsibility relation, or Work.
Relations
Builds on: A.1 for system admission; A.1.1 for selecting a BoundedModelUseStructure only when its complete decision-relevant relation organization, applied constraints, and named selection-use frame are current; C.3, C.3.1, and C.3.2 for local kind identity, declaration, classification, extension, subkind, and continuity; A.6.0, A.6.5, and A.6.REL for assignment declarations and occurrences; C.2.1 for interpretation and assertion epistemes.
Governs with: A.2.1 for system-role assignments; A.2.2 for capability; A.2.5 for assignment state; A.2.7 for relations among system-role kinds; A.15 and F.6 for Method-Work alignment and attribution; F.4, F.5, and F.18 for description and naming.
Crosses locality through: C.3.3 for exact local kinds, F.9 for relations between exact F.17 cells, and A.6.9 for ambiguous sameness wording across local boundaries, followed by a bounded-use assertion and current reliance when the receiving action needs them. A matching name, Bridge, card, or selected model-use structure creates neither identity nor assignment.
Keeps separate from: responsibility, commitment, permission, authority, state, capability, Method, Work, evidence, reliance, publication, external-rule, and currentness relations. Apply E.10.ROLE to ambiguous wording and A.6.RSIR only when relation participation or its declaration must be recovered.
A.2:End
U.SystemRoleAssignment - Contextual System-Role Assignment
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain name. Assignment to a system role.
Use this pattern when another claim must rely on one obtaining assignment of an admitted U.System under one exact local system-role kind.
Typical moments:
- a MethodDescription names
InspectorSystemRole, but no current assignment occurrence has been established; - dated Work must be attributed through
performedUnderAssignment(W, RA)and the exact assignmentRAis still missing; - the same system receives the same system-role kind during two separated episodes;
- two overlapping commissions or positions distinguish two assignments with the same holder and system-role kind;
- an appointment, installation locus, or work commission may be a real additional participant of one domain assignment species;
- a roster, configuration row, observation, decision, or evidence item supports an assignment claim without becoming an assignment participant.
Primary EntityOfConcern. One assignment occurrence whose relation species is declared directly under U.SystemRoleAssignment. Every species declares a holder participant with U.System as its domain, an assigned-kind participant drawn from one exact local system-role-kind domain, its own predicate and applicability, any real additional participant meanings, and its occurrence-identity rule. The occurrence supplies the actual participant values, including its holder System.
Primary working reader. An engineer-manager, analyst, Method author, or FPF author who must identify assignment and Work attribution without merging classification, capability, responsibility, authority, Method, Work, evidence, or publication into the assignment.
First useful move. Write the ordinary claim first: “Robot-7 is assigned as inspector for Shift-17.” Then identify the declared assignment species, the participant meanings and predicate it declares, and the participant values that satisfy that predicate in this case. Expose an occurrence reference only when another claim must distinguish or cite this episode.
What goes wrong if missed. A kind name is mistaken for an assignment, a permissive generic signature accepts arbitrary kinds, two real commissions collapse into one record, or a taxonomy and scheme become world-side participants. Work can then be attributed to the wrong occurrence while capability, authorization, and evidence hide as assignment fields.
What this buys. Simple assignments remain simple, stronger assignments retain their real participants, and every occurrence exposes its actual holder through the species-declared holder slot used by F.6. Repeated episodes are distinguishable without manufacturing a second generic assignment beside a stronger one.
Not this pattern when.
- Use
A.2and C.3.2 for the system-role kind and one classification judgment. - Use
A.2.2for capability,A.2.5for assignment state, andA.2.7for relations among system-role kinds. - Use
A.3,A.15, andA.15.1for Method, MethodDescription, Work, and enactment. - Use
F.6for performed-Work attribution through an already identified assignment. - Use the direct responsibility, commitment, permission, authority, access, decision, evidence, reliance, provenance, publication, external-rule, or currentness pattern when that relation is current.
- Use
E.10.ROLEwhen the source word role has not yet been resolved; useA.6.RSIRwhen it means relation participation or a declaration place.
Problem Frame
InspectorSystemRole can classify Robot-7 for one maintenance slice without any assignment occurrence. Conversely, an assignment can obtain while no Work occurs, and a local KindSignature can use or ignore that assignment when classifying the holder.
U.SystemRoleAssignment is the common relation family. It has no permissive root RelationSignature. Concrete domain species declare the participant law that their occurrences actually satisfy. A simple inspection assignment may need only the holder and assigned kind. A project-review appointment may also depend on one exact commission. The stronger occurrence itself is the assignment; it does not sit beside a weaker generic assignment with the same projection.
The holder can be any independently admitted U.System, including a person, team, organization, service, organism, or non-human technical object. Assignment establishes neither capability, responsibility, commitment, permission, authority, access, gate passage, functioning, Method enactment, nor performed Work.
Taxonomy epistemes, reference schemes, KindSignatures, assertions, and interval descriptions can interpret or describe the assignment claim. They are not generic world-side assignment participants. A selected BoundedModelUseStructure belongs in the receiving assertion or use unless one separately admitted relation species makes that structure a required identity-bearing participant.
Problem
Without this pattern:
- a system-role kind or familiar job label is used as if it identified an assignment episode;
- one broad
U.Kindslot admits physical, functional, assignment-occurrence, and arbitrary local kinds; - a root signature hides different participant laws behind optional fields;
- a strong appointment is represented as one generic assignment plus another unrelated occurrence;
- assignments with the same holder and kind but different commissions or separated episodes collapse;
- taxonomy, scheme, context, interval, decision, and evidence become generic participants;
- assignment is treated as classification, capability, authorization, responsibility, or Work;
- a storage key replaces the predicate and uninterrupted occurrence identity.
Forces
Solution
Declare each assignment relation species directly under U.SystemRoleAssignment. Do not give the family one universal participant signature. Every admitted species declares:
HolderSystemSlot : U.System;- one declaration-local
AssignedSystemRoleKindSlotwhoseValueKindis the exact local system-role-kind domain used by that species; - its direct assignment predicate and applicability;
- every additional actual participant that changes the predicate or occurrence identity; and
- its occurrence-identity rule.
The HolderSystemSlot and AssignedSystemRoleKindSlot names are declaration-local SlotKinds. Their spelling does not create global slots. Their complete A.6.5 SlotSpecs state ValueKind, refMode, participant meaning, multiplicity, and any constraints.
Simple Direct Species
A simple species has only the two common participants:
JournalReviewSystemRoleKindDomain is the exact local C.3 domain defined by A.2. CoolingPumpKind, ShortAssignmentKind, and arbitrary local kinds cannot fill this species' assigned-kind slot merely because each is a U.Kind.
A Stronger Species Retains Its Real Participants
When an appointment, organizational position, installation locus, or work commission changes the predicate or occurrence identity, the domain species declares that participant. For example, conditional on a domain pattern already admitting ProjectReviewCommission and its appointment predicate:
The commission is a participant because this admitted species makes it one. A decision episteme, roster row, or evidence item about the appointment is not thereby the commission or another participant.
If no current pattern admits the proposed participant kind or direct predicate, return [A.6.RCD](/generated/patterns/A.6.RCD) missing-governor for that specialized assignment. Do not hide the gap in an optional field.
Occurrence Identity
An occurrence of a declared species begins when that species' direct predicate starts obtaining for fixed participant values. It continues over the maximal uninterrupted predicate-true interval. It ends when a participant changes or the predicate ceases to obtain. A later resumption is another occurrence even when every participant value is the same.
A context field ending in ...SystemRoleAssignmentRef uses U.RelationRef constrained to U.SystemRoleAssignment and resolves to the exact occurrence while keeping its declared species recoverable.
An assignment assertion or occurrence description can state assignmentInterval with a temporal reference, start, end or explicit open end, and continuity claim. Closing an open interval later refines the same description when world-side obtaining was uninterrupted. Missing evidence yields unknown; it does not split the occurrence. A demonstrated non-assignment interval ends it.
Keep ordinary interval content here. When a positive temporal aspect itself becomes a relied-on object—its temporal reference, validity or currentness window, duration, cadence, rhythm, or interval structure—use C.27.TA for that aspect and keep the assignment occurrence separate. Use C.27 only for the different question of whether a temporal claim is adequate.
Taxonomy, scheme, KindSignature, assertion, interval description, and selected publication form can be cited when they matter to interpretation or evidence. Only the species' declared participants and predicate determine world-side occurrence identity.
One Strong Occurrence, Not a Generic Duplicate
If Alice has overlapping Commission-A and Commission-B, then ReviewAssignment-A and ReviewAssignment-B are two ProjectReviewAppointmentAssignment occurrences even when holder and ReviewerSystemRole match. Their commission participants and predicates distinguish them.
“Alice is the reviewer” is a readable existential projection over any qualifying occurrence. It is not a third assignment occurrence. Do not create a generic two-participant assignment beside either appointment simply to support that sentence or F.6.
Every admitted species supplies the common projection:
The projection does not erase additional participants or assert that another occurrence exists.
Assignment and Classification Are Independent
A C.3.2 judgment classifies one system under one local system-role kind for one signature edition and slice. An assignment occurrence relates participants under its species predicate. Either can be current without the other.
An assignment can be one membership feature only when the exact local KindSignature explicitly cites that independently obtaining predicate. RoboticsAssignment-1 alone makes neither RoboticsEngineerSystemRole nor EngineerSystemRole true. A later U.SubkindOf result records monotonic implication among independently evaluated judgments; it creates no broader assignment.
Demand-Driven Materialization
Ordinary use can stop at:
Expose an occurrence identifier only when a receiver must distinguish episodes, cite the assignment as a participant, compare assertions, or preserve provenance. If a required participant or the predicate cannot be recovered, lower the claim or return the exact missing governor. Never insert a dummy value or broaden the assigned-kind domain.
Direct Neighboring Relations
Assignment-establishing world-side relations and epistemic support are not interchangeable. A constituting decision or installation occurrence affects a species only when its direct predicate says so. Evidence can support relying on the assertion without constituting the assignment.
Performed-Work Attribution
F.6 retains one direct attribution with a comparison-only projection:
A.13 first identifies the actual performer S, and A.15.1 independently admits W : U.Work from its performance history, enacted Method, temporal extent, and containing-System relation. F.6 is needed only for a precise assignment-bound attribution—when the current use must also say exactly under which assignment W was performed. It then establishes performedUnderAssignment(W, RA) against the same assignment already used by A.13 and requires S = attributedPerformerSystem(W, RA) = RA.HolderSystemSlot. The projection exposes the assignment holder only for comparison with S; it identifies neither assignment nor performer, and a missing or failed F.6 check leaves the Work intact.
SystemRoleAssignmentSlot in F.6 accepts any admitted assignment species because its ValueKind is the family U.SystemRoleAssignment. It is not a union of a generic relation and stronger non-assignment values. ReviewWork-A can be attributed to ReviewAssignment-A, and ReviewWork-B to ReviewAssignment-B, without creating generic duplicates.
Assignment does not prove that Work occurred. Work does not alter assignment identity. For source wording such as RoleEnactment, first use A.13 to identify the actual performer and A.15.1 to admit the dated Work independently. If the current use also needs to say exactly under which assignment the Work was performed, add that assignment and the separate F.6 performedUnderAssignment check. Do not create a duplicate run-time kind or occurrence.
Source Context Shorthand
Holder#Role:Context@Window is source notation, not the assignment ontology. Apply E.10.ROLE to recover the system-role kind or another meaning. Recover the object denoted by Context and its direct relation separately. It can be an actual system or Work locus, a claim scope, or a selected BoundedModelUseStructure; these have different kinds and uses.
If one assignment species genuinely depends on a structure or locus, its direct pattern declares that participant and stronger identity law. Otherwise keep the recovered object in the receiving assertion or use; never invent a generic context participant.
Archetypal Grounding
Robot Assigned for One Inspection Shift
The maintenance domain declares a simple species and an occurrence:
The two fields designate the species participants. The interval is assertion content about the occurrence extent. MaintenanceSystemRoleVocabulary-2026, its effective scheme, and the relevant KindSignature can be cited to interpret the claim without becoming participants. Sensor capability, assignment state, inspection Method, and any performed inspection Work remain separate.
Repeated Assignment Episodes
Robot-7 is assigned again on the next day under the same species and kind. The predicate does not obtain continuously across the two shifts, so the second shift is another U.SystemRoleAssignment occurrence. Reusing one staffing-row identifier cannot collapse the episodes.
Motor Assigned as Drive
For a current equipment assignment, declare the species and identify its occurrence: Motor-M1 is the holder and DriveMotorSystemRole is the assigned-kind value. PumpAssembly-A remains the actual assembly System and Work locus rather than a generic context participant. If installation in that exact assembly distinguishes assignment identity, the domain species must declare a real installation-locus participant and predicate, and the occurrence must supply its actual value.
The separate claim “Motor-M1 drives PumpAssembly-A during PumpRun-17” is not established by assignment. Until a domain predicate supplies its participants, applicability, and identity, return missing-governor for the motor-drive-functioning relation. Torque capability, installation Work, pumping Work, and the assignment remain usable independently.
DDD Model-Use Structure Changes a Receiving Interpretation
Two software contexts each use ApproverSystemRole. ApprovalService-2 can hold an assignment that obtains in the fulfilment context; name both the occurrence and its declared species. A receiving interpretation use can cite both the assignment-occurrence reference and Orders-Fulfilment-ModelUseStructure when the selected structure changes that use.
The structure was independently recovered under A.1.1. It qualifies the receiving interpretation and is not a generic assignment participant. A future species that truly depends on it must declare the structure as a required participant and state the stronger predicate and identity law.
Two Review Commissions
Alice is independently admitted as U.System. Commission-A and Commission-B satisfy the admitted ProjectReviewCommission kind. Two overlapping ProjectReviewAppointmentAssignment occurrences have the same holder and ReviewerSystemRole but different commission participants.
ReviewWork-A is attributed to ReviewAssignment-A; ReviewWork-B is attributed to ReviewAssignment-B. “Alice is the reviewer” can remain a recognition sentence, but it does not merge the appointments or identify which Work belongs to which occurrence.
Reviewer and Review Report
A.13 first recovers ReviewService-4 as the exact actual performer through its obtaining review assignment, and A.15.1 independently admits ReviewWork-82. Because this example expressly distinguishes which assignment covered the review, F.6 afterward establishes that Work-assignment relation through the same assignment. F.6 identifies neither assignment nor performer, and failed attribution would leave the Work intact. ReviewReport-82 is a separately identified U.Episteme. When the Work first constitutes that episteme and the inception claim matters, A.15.PROD recovers one local entity-inception claim from the exact Work, change, and identity bases. The report can later participate in an evidence relation.
Bias Annotation
Working Guidance
- State the assignment claim in ordinary language.
- Select or admit the direct assignment species; do not start from a universal root signature.
- Confirm the holder and exact local system-role-kind domain.
- Declare every real additional participant and the species predicate; reject placeholder fields.
- Decide whether a receiver needs explicit occurrence identity. Stop at the readable assertion when it does not.
- Distinguish repeated episodes by uninterrupted predicate obtaining, not by storage identifiers.
- Keep classification, capability, state, Method, Work, responsibility, commitment, permission, authority, access, evidence, reliance, and publication under their direct patterns.
- Use context fields ending in
...SystemRoleAssignmentRefonly withU.RelationRef constrained to U.SystemRoleAssignmentand an exact recovered occurrence. - For source shorthand, recover each hidden value by kind and relation before relying on it.
Conformance Checklist
Common Anti-Patterns
Consequences
Rationale
The family is needed because system classification and assignment occurrence answer different questions. Direct species are needed because the participant law for a simple shift assignment differs from the law for an appointment tied to a real commission, position, or locus.
One root signature would either reject legitimate stronger assignments or hide them behind optional slots. A generic occurrence beside a stronger one would duplicate the world-side episode and make F.6 choose between competing identities. Subtyping the direct species under U.SystemRoleAssignment preserves one assignment identity and one common holder projection.
Predicate obtaining, assertion, explicit individuation, identifier assignment, evidence, and publication also answer different questions. Keeping them separate lets evidence be corrected without rewriting the occurrence and lets ordinary recognition text remain shorter than a full relation declaration.
SoTA-Echoing
Relations
Builds on: A.2 for system-role kinds and their exact local domains; A.6.REL for relation obtaining and occurrence identity; A.6.5 for complete SlotSpecs; and C.2.1 for assertions and interpretation epistemes.
Coordinates with: A.2.2 for capability; A.2.5 for assignment state; A.2.7 for relations among system-role kinds; A.3 and A.15 for Method and Work; A.15.1 and F.6 for performed-Work attribution.
Uses when current: A.1.1 for a selected model-use structure; C.27.TA when a positive temporal aspect is itself relied on; C.27 for temporal-claim adequacy; C.3.3, F.9, and A.6.9 for cross-context use; and direct responsibility, commitment, permission, authority, access, decision, evidence, reliance, provenance, currentness, and publication patterns.
Does not replace: a local system-role kind, a separate System-classification judgment, assignment state, capability, Method, Work, responsibility, commitment, permission, authority, access, assignment decision, evidence, publication, or their descriptions.
A.2.1:End
U.Capability - System Ability Envelope and Measures
Status: Stable
U.Capability is the FPF object for "can do within bounds".
Use this pattern when a project claim says that a person, team, machine, software service, organization, composite cell, or other system can produce a kind of result, perform a class of work, or meet a performance threshold. The claim is about a holder's capability instance, not about who is assigned, which method is described, which work occurred, or what was promised to another party.
Primary EntityOfConcern. The EntityOfConcern is U.Capability: an E.24.UK-admitted dependent durable U-kind name for holder-dependent capability instances. An individual U.Capability instance is a holder-dependent concrete governed object of a named U.System, recognized as that system's ability to perform a work family or produce a result class within a declared envelope, measure set, qualification window, and currentness condition. A statement, report row, certification, evidence relation, source-use relation, dashboard display, or currentness assessment about that instance is a neighboring governed record or relation, not the capability instance itself.
Primary working reader. A manager, architect, engineer, safety assessor, scheduler, or model author who needs to decide whether a holder can be used for a Work claim, Method step, service promise, or architecture move without smuggling a system-role kind or assignment, MethodDescription, past Work, evidence, or quality wording into the capability instance.
First useful move. Ask: who is the holder system, what work family or result class is the ability about, under what envelope, with what declared measures, during which qualification window, and which separate statement, evidence relation, source-use relation, or currentness assessment currently supports reliance on that capability?
What goes wrong if missed. A system-role label or assignment becomes a hidden proof of ability, a MethodDescription is treated as if it can perform Work, a phrase such as “the system possesses algorithm A” is taken to admit an unspecified episteme as U.MethodDescription, a single successful run is generalized into a stable ability, or a promise is made without a measured capability behind it.
What this buys. Capability becomes checkable and reusable: a Work-admission claim can test the exact system-role assignment, SystemRoleAssignmentStateRelation, Method-side admission conditions, and capability thresholds separately.
Not this pattern when.
- If the current claim is which admitted System is assigned to an exact local system-role kind, use
A.2.1. - If the current claim is whether that assignment is in an enactable state, use
A.2.5. - If the current claim is a local system-role kind, its classification, description, designation, exact assignment, relation structure, or bundle, use
A.2,A.2.1,F.4,F.18, orA.2.7for that exact object. - If the current claim is a way of doing, use
A.3.1; if it is an episteme describing that way, useA.3.2. - If the current claim is dated performed work or planned work, use
A.15,A.15.1, orA.15.2. - If the current claim is a promise to others, use the promise-content and commitment patterns.
- If the current claim is evidence, source, status, assurance, publication, or description use of an episteme, use the direct episteme-use pattern. Do not make the episteme a capability holder.
- If the current claim is one measured aspect with a declared scale, use
U.CharacteristicthroughC.16.P,A.19, and the applicable characteristic or Scale pattern. - If the current claim is a composite quality family such as availability, resilience, security, or maintainability, use
C.25Q-Bundle. - If the current claim is an architecture-characteristic starter head, project criteria row, architecture eval reading, or architecture-description concern, use
C.32.HCS,C.32.ACS,C.32.ACE, orC.30as applicable.
Problem Frame
These ordinary sentences make different claims about welding:
- "The welding robot is the welder on this line."
- "The welding robot can weld seam type W at 12 seams per minute."
- "The welding procedure says how to weld seam type W."
- "The robot welded batch B at 10:20."
- "The supplier promises 12 seams per minute."
Only the second sentence can support a U.Capability instance when the holder, Work family, envelope, measures, and currentness conditions are recoverable. The sentence itself is a statement about the capability instance. The others may state a local system-role assignment, MethodDescription, performed Work, or promise content. When FPF collapses them, project reasoning becomes brittle:
- System-role assignment becomes fake ability. “Assigned as verifier” is treated as “able to verify”.
- Method description becomes fake ability. A recipe or algorithm is treated as sufficient evidence of the holder's ability.
- Past work becomes fake ability. One successful work occurrence is treated as stable capacity.
- Promise content becomes fake ability. A service promise hides the real system envelope and measured bounds.
- Description becomes fake holder. A standard, report, model card, or dashboard is said to "have capability" because it is useful in a capability argument.
- Unbounded ability becomes unreviewable. "Can machine titanium" does not name conditions, measures, version, calibration, or currentness.
Kind and Boundary
U.Capability is retained as a dependent durable U-kind name under E.24.UK. A concrete U.Capability instance is the holder-dependent capability instance of a named U.System; its identity is grounded by the holder, work family or result class, envelope, measure set, qualification window, and currentness condition. The statement that asserts the ability, the evidence that supports reliance, and the fit predicate that tests work admission are separately governed records or relations rather than the U.Capability instance.
CapabilityHolderRef. The holder is an admitted U.System: a physical, cyber, socio-technical, organizational, team, composite-cell, deployed-software, or other System satisfying A.1 for this claim.
WorkFamilyOrResultClassRef. The ability is about a class of work the holder system can perform or a result class it can produce. The envelope may cite the exact U.Method that prospective Work occurrences would enact, or a separately identified U.MethodDescription whose claims constrain the capability use. For a candidate episteme, apply A.3.2 before calling it a U.MethodDescription.
CapabilityEnvelope. The envelope states the bounded conditions under which the ability holds: input range, environment, resources, configuration, system version, calibration state, staffing composition, access constraints, safety limits, or other current conditions.
CapabilityMeasureSet. The measures state achieved or required bounds with units, scales, tolerances, success predicates, reliability, throughput, latency, precision, defect rate, or other declared characteristics. A measure may cite a U.Characteristic, Q-Bundle slot, or architecture-characteristic criteria row as an input for a capability-fit check, but that characteristic, Q-Bundle, or architecture row does not become the capability.
QualificationWindow. Capability is stable enough to plan with but not timeless. The instance may depend on software version, calibration horizon, team training state, wear, operating season, regulatory state, or other temporal currentness relation.
CapabilityStatementRefs. A CapabilityStatement is a governed episteme or publication-side record that says a capability instance exists, describes its holder, envelope, measures, and window, or cites it for planning.
EvidenceRelationRefs and SourceUseRelationRefs. Evidence, tests, certifications, prior work summaries, simulations, audit records, standards, and model results can justify a capability statement through direct evidence or source-use relations.
CurrentnessAssessmentRefs. A currentness assessment is a dated assessment relation saying whether the capability instance remains usable under its qualification window and current conditions. CapabilityCurrentnessCondition states what must remain true; an assessment evaluates that condition.
CapabilityFitConditionRefs. A capability-fit condition is an admission predicate, threshold, or gate relation that tests a holder capability and any declared characteristic, Q-Bundle, or architecture-characteristic inputs against a current local system-role-kind classification, exact assignment, Method step, WorkPlan, Work occurrence, ClaimScope, qualification window, or gate need. Unless a separate E.24.UK admission is written, it is not a U.* kind.
Neighboring-term boundary. When a neighboring pattern uses U.WorkScope, recover the set-valued condition part of CapabilityEnvelope: the inputs, environment, resources, configuration, and assumptions against which an intended work slice is checked. When it uses U.WorkMeasures, recover CapabilityMeasureSet. JobSlice names the intended work slice for a work-admission check. QualificationWindow names the temporal currentness relation for the capability instance. These are neighboring governed terms, not substitute names for U.Capability.
Positive Solution
Use U.Capability when the object under discussion is the holder's ability to achieve a result class within a declared envelope and measure set.
Minimal capability instance:
Separate supporting record:
Plain sentence forms (choose one for the current claim):
Either sentence form is a publication or statement about the capability instance.
Separation From Neighboring Values
Work-Admission Use
A Method step or Work claim may require both an exact system-role assignment and capability conditions.
The checks are separate:
- one
U.SystemRoleAssignmentspecies defines the holder and assigned-kind participant meanings, the local system-role-kind domain, and any other participant meaning that changes the assignment predicate or occurrence identity; an occurrence supplies the holder System and other values for the case, and neither species nor occurrence establishes capability or Work; SystemRoleAssignmentStateRelationsays whether that assignment satisfies the selected state predicate over the required window;- one exact
U.Methodsupplies the method-side condition, while an independently admittedU.MethodDescriptionor work-admission episteme may state the capability threshold used by the check; - capability names the holder system's ability within the envelope, measure set, and window;
- capability-fit condition tests whether that instance meets the current threshold or gate need;
- after execution, A.13 first recovers the exact actual performer and A.15.1 independently admits the dated Work occurrence; F.6
performedUnderAssignment(W, RA)is added only when this capability account or its receiving use expressly consumes precise assignment-bound attribution through the same obtaining A.13 assignment, while actualenactsMethod(W, M)separately relates the Work to the exact Method;
Do not put the threshold into the local system-role-kind name. Do not treat a system-role classification or assignment as proof of ability or action. For performed Work, name the actual performer system. Do not treat a fit predicate, Q-Bundle, architecture-characteristic row, evidence relation, or currentness assessment as the capability instance. An algorithm-possession phrase is only a dispatch cue; it establishes neither dated performance nor U.MethodDescription membership.
Worked Cases
Manufacturing Cell
WeldingShiftAssignment is a declared species under U.SystemRoleAssignment. Under A.2.1 its signature defines the holder and assigned-kind participant meanings and uses WelderSystemRoleKindDomain as the local assigned-kind domain; it adds another participant only if that participant changes the assignment predicate or occurrence identity. One occurrence has RobotArm_A as holder, WelderSystemRole as the assigned-kind value admitted by that domain, and an extent lasting while the predicate obtains without interruption for the same participants. The assertion has exact claim content, EntityOfConcern, and effective ReferenceScheme; a ClaimScope, selected slice, interval, or qualification window is stated separately when it changes interpretation or validity. None of those values is another assignment participant. A separate Work or system-locus relation may place intended or performed welding at AssemblyLine_2026 when that relation obtains. The assignment proves neither permission, ability, action, nor performed Work.
The capability instance is separate; a statement or record may describe it:
If a Method step requires an obtaining WeldingShiftAssignment whose local kind is WelderSystemRole and bead-width tolerance below 0.2 mm, the assignment and capability are both checked. The assignment does not supply the tolerance, and the capability does not assign the robot to the shift.
Shared boundary case — Robot-7 possesses an inspection algorithm. InspectionReleaseAssignment is a declared species under U.SystemRoleAssignment; under A.2.1 its signature defines the holder and assigned-kind participant meanings and uses InspectorSystemRoleKindDomain as the local assigned-kind domain. Occurrence InspectionAssignment-17 has Robot-7 as holder and InspectorSystemRole as the assigned-kind value admitted by that domain. This simple species declares no taxonomy, reference-scheme, generic-context, or interval participant. An assertion about the occurrence may cite MaintenanceRoles-2026, Maintenance-Scheme-A, and the candidate inspection interval as interpretation and description content.
Robot7-TurbineInspectionCapability-2026 is the separate holder-dependent capability instance for turbine-inspection Work within its declared sensor, calibration, input, measure, and qualification bounds. A statement that Robot-7 “possesses inspection algorithm A” does not by itself identify that capability instance, Method TurbineInspection@Maintenance-2026, a deployed-software relation, or a MethodDescription episteme.
Dispatch the phrase by claim: use A.2.2 only for the bounded ability; A.3.1 for the Method; a deployed-software or possession relation when that is the claim; and A.3.2 for candidate episteme TurbineInspectionProcedure-v3 only after its EntityOfConcern resolves to that Method and one substantive claim says how it is done.
Assignment and capability still do not prove execution. If InspectionWork-17 actually occurs, A.13 first recovers Robot-7 as the exact actual performer through obtaining InspectionAssignment-17, and A.15.1 independently admits the Work. Because this example expressly states assignment-bound attribution, F.6 afterward establishes performedUnderAssignment(InspectionWork-17, InspectionAssignment-17) through that same assignment; F.6 identifies neither assignment nor performer, and failed attribution leaves the Work intact. The Work occurrence separately stands in enactsMethod(InspectionWork-17, TurbineInspection@Maintenance-2026).
Software Service as Deployed System
PlannerService_v4 is a deployed system. It may have capability to generate job-shop schedules for 50-500 jobs and 5-40 machines, with benchmark optimality above 0.95 and latency below 20 ms in PlantScheduling_2026.
The algorithm paper and method description are not the capability. The deployed system has the capability only while its version, dependencies, input range, and operational measurements satisfy the declared currentness condition; a benchmark report or model card is support for a statement about that instance.
Organization or Team
FinanceDept can close books for eight legal entities under IFRS with ERP v12, staffing at or above six qualified people, and close duration below five business days. That is a capability of the organizational system.
The monthly-close service promise is a promise-content claim. The actual close for March 2026 is performed Work. Staff assignments and their SystemRoleAssignmentStateRelation occurrences are neighboring claims. The capability instance keeps the department's ability visible and measurable; the management report describing it is an episteme about that instance.
Episteme Anti-Case
"ISO 26262 has safety capability" is not a capability statement about a holder-dependent capability instance. The standard is an episteme used as source, requirement, or assurance input. A safety engineering team or toolchain may have a capability to perform safety-case work using that standard within a declared envelope.
Capability Currentness and Lowering
Lower or reopen a capability instance, or lower reliance on a statement about it, when any of these changes:
- the holder system changes composition, version, calibration, staffing, training state, toolchain, or environment;
- the envelope no longer covers the intended work slice;
- measures no longer meet the required threshold;
- the qualification window expires or becomes contested;
- evidence, source-use, test, audit, or simulation relations become stale or are reclassified, lowering the support or currentness assessment rather than becoming the capability;
- the method or method description changes the required capability threshold;
- the system-role assignment or its state relation changes, causing a Work-admission claim to fail even while capability remains true;
- a composite holder changes dependency conditions.
Repair the smallest object that changed. A stale calibration window lowers the capability currentness assessment and may lower reliance on the capability instance; it does not rewrite the local system-role kind. A failed system-role assignment lowers Work admission; it does not by itself lower the holder's measured ability. A stale report lowers a statement or evidence relation before it lowers the capability instance itself.
Composite Capability
A composite system may have a capability that none of its parts has alone. Treat the composite as the holder.
The concrete capability instance is asserted for Cell_3, not for every part. Dependencies may be named, but the bounded capability claim is about the composite holder.
Checklist
Anti-Patterns and Repairs
Consequences
Benefits.
- Planning separates "can do" from "is assigned now".
- Method steps can name capability thresholds without putting extra meaning into system-role-kind names.
- Work records can be judged against the capability instance and fit predicate current at the time of work.
- The internal ability and measured envelope supporting a promise are explicit.
- Composite-system ability can be stated at the right holder instead of scattered across parts.
Costs.
- Capability tables need envelope, measures, and currentness fields.
- Teams need to stop using system-role labels or assignments as shortcuts for ability.
- Some old "function", "service", "process", and "algorithm" sentences need kind recovery before they can be used in FPF.
The cost is intentional: without it, FPF cannot distinguish authorization, ability, method, and performance.
SoTA-Echoing
Source-currentness note: DoDAF and TOGAF are used here as stable capability-planning lineage, not as the full current frontier. Current pressure comes from analyzable architecture, uncertainty-aware engineering, stakeholder-context formalization, and model integration. The NIST zero-trust line is used only for the split between current authorization and measured ability. SysML 2.0 is intentionally excluded as a SoTA authority or lineage for this decision: its model-element vocabulary does not settle the identity of capability holder, system-role kind, assignment, Method, Work, evidence, or capability occurrence, and no claim here depends on it.
Relations
Excluded Objects
Do not use U.Capability as the current object for:
- local system-role kind, direct system-role assignment,
SystemRoleAssignmentStateRelation, structure of relations among system-role kinds, or system-role-kind description; - method, method family, method description, or algorithm description;
- work plan, work occurrence, run record, or measurement trace;
- evidence graph, source record, model card, standard, report, dashboard, publication, or specification-use relation;
- promise content, commitment, permission, authority relation, or policy decision;
U.Characteristic, scale row, coordinate, score, metric, indicator, or threshold;C.25Q-Bundle, quality-family label, mechanism, status, or evidence slot;- architecture-characteristic starter head, project criteria row, eval program, eval reading, selected-structure adequacy claim, or architecture-description concern;
- capability-fit predicate, gate, admission relation, or work-entry readiness record;
- structural part, module, interface, port, or functional structure unless the current claim is the ability of a holder system expressed through that structure.
These values may be related to a capability instance, a statement about it, or a fit check over it. Name the neighboring value, record, relation, or predicate through its own governing pattern when that neighboring claim is current.
A.2.2:End
U.PromiseContent (Promise Content)
Type: Definitional promise-content episteme pattern Status: Stable
Kind Settlement
U.PromiseContent is a dependent durable promised-outcome episteme under the episteme settlement.
Use This When
Use this pattern when a project needs to state what is promised to a consumer before asking who is obligated, what work occurred, which system exposes access, or which evaluation method and A.10 evidence relations support a fulfilment assertion.
Typical moments:
- an SLA publication, service catalog, product offer, public API promise, utility offer, or government-service description contains a statement about what a consumer may rely on;
- a team says "the service" but might mean promise content, provider organization, API, access point, delivery system, method, ticket, or performed work;
- a fulfilment claim needs evaluation work that applies declared acceptance criteria to exact delivery-work facts, affected entities and post-work states, and any exact delivery or acceptance relation current for the use; the actual evaluation-operation result binding, optional verdict episteme, and A.10 evidence relations remain separate;
Primary EntityOfConcern. The EntityOfConcern of this pattern is U.PromiseContent: a consumer-facing promise-content episteme. For each PromiseContent episteme, the exact C.2.1 EntityOfConcern is the A.2.3:4.1.1 OutcomeSpec episteme designated by promisedOutcomeSpecRef. Its claim graph states the promised outcome, any eligibility predicate, and acceptance claims; accessSpec separately describes the access method when that description is current.
First useful move. Write the promise content as a clause: what outcome is promised, under which exact effective U.ReferenceScheme and U.ClaimScope, which exact local consumer system-role kind or other eligibility predicate applies, how access is described when relevant, and which acceptance criteria selected work facts and post-work states must satisfy. Name the evaluation method, evidence epistemes, and A.10 evidence relations separately so a fulfilment assertion can be checked. Use U.Commitment only for an actual duty bearer after the applicable constitutive rule and its required instituting basis obtain.
What goes wrong if missed. The word "service" starts naming provider, API, method, ticket, work, department, and promise at once. Teams then judge work against an implicit promise, treat access systems as obligations, or count performed work without knowing which promised outcome it was meant to satisfy.
What this buys. One consumer-facing promise-content episteme with explicit outcome and acceptance claims. Each neighboring claim keeps its named EntityOfConcern and direct relation, defined or tested by its own pattern.
Not this pattern when. If the current EntityOfConcern is an individual deontic relation, use A.2.8; if it is performed delivery Work, use A.15.1; if service or access wording hides its concrete subject or direct relation, start with A.6.P:4.11a. An exact bearer or access-providing arrangement is only one possible recovered reading; code or another episteme, Method, Work occurrence, participation, promise, permission, status, and direct relations keep their own readings. Use A.1 or A.1.SCR only when a separate repaired claim depends on that exact entity being a system. If source agreement or SLA wording combines several objects, use A.6.C to unpack them.
Problem frame
Across domains the word service is used for many different things: a server or provider, an API, a procedure, a run, a department, even a product bundle. Such polysemy is productive in everyday speech but toxic in a normative model.
FPF therefore reserves U.PromiseContent for one kernel meaning: a consumer-facing promise content clause. When service denotes something else, use A.6.P:4.11a to recover whether it denotes code or another episteme, a Method, a Work occurrence or ordinary run, provider participation, an exact bearer or access-providing arrangement, permission, status, or a direct relation. A product label chooses none of these readings, and bare service has no default system reading. After recovery, name the referent or relation. Apply A.1 or A.1.SCR only when the recovered referent is an entity and the claim depends on its being a system.
This keeps the kernel minimal while keeping the prose readable to non‑mathematicians: the canonical symbol is U.PromiseContent, and the head kind in normative text is always promise content.
Modularity note. A.2.3 defines the promise-content episteme and PromiseContentUse. It does not redefine a local system-role kind, system-role assignment, access specification, delivery work, actual operation application and result binding, result-episteme identity, affected-subject change, A.10 evidence relations, evaluation, commitment, delivery, acceptance, speech act, or publication claim; use the patterns that define or constrain those claims. A.6.P:4.11a recovers which concrete service or access referent or relation the wording denotes; it does not replace the named participants and their direct relations with a locally minted service-situation relation. Use A.6.C to unpack agreement, SLA, or guarantee wording that combines unlike objects.
Plain reading. A promise content says what a consumer may rely on. A provider System can be classified under a local provider system-role kind. When a claim needs exact delivery Work, use A.13 to identify the System that actually did it. A.15.1 then admits the dated occurrence as Work from its Method, history, extent, and containing System, without relying on F.6. If the current use also needs to say exactly under which assignment that Work was performed, F.6 checks the separate relation against the same assignment used by A.13. A U.MethodDescription describes the Method.
PromiseContentUse obtains between the delivery-work occurrence and the selected promise-content edition during the named interval. Work-participation, affected-referent, change, delivery, and acceptance relations state what happened.
A separately performed evaluation applies the declared operation or method; its result binding states the evaluation value. If another use needs a verdict episteme, use C.2.1 to identify it and A.15.PROD to state any applicable entity-identity-inception claim. Evidence relations support the relied-on assertions.
Lexical note (L-SERV and A.6.P:4.11a). Bare service does not determine one FPF referent. When that word carries a relied-on claim, use A.6.P:4.11a to recover the concrete referent or relation: for example, a promise-content episteme and an access-point system have different kinds and participate in different relations. E.10 L-SERV triggers that recovery. After recovery, name the referent or relation and use the pattern that defines or constrains the current claim. Resolve the defining or constraining ClaimGraph only when this claim or a named later use depends on a particular rule edition; the pattern id then serves as its locator.
Problem
Without a first-class U.PromiseContent, a project description tends to make five recurring category errors:
- Provider = Service. Calling the provider system or team “the service” collapses that provider referent with the promise-content episteme.
- API = Service. Treating an interface or endpoint as the service hides the promised consumer-side outcome and its acceptance criteria.
- Method or plan = promise content. Treating a semantic method, a method-description episteme, or a work plan as the promise content hides the consumer-facing outcome and acceptance claims.
- Run = Service. Logging Work as "a service" erases the promise-content episteme and acceptance specification needed for SLA reasoning.
- Business ontology lock-in. Large domain schemes are imported wholesale, losing FPF universality and comparability across projects and domains.
Forces
Solution - Define U.PromiseContent as the promise-content episteme
Definition (normative).
A U.PromiseContent is an externally oriented promise-content episteme. Its claim content states a promised consumer-side outcome, any eligibility predicate, and acceptance criteria by which fulfilment is evaluated. Its optional accessSpec describes the access method. Interpretation is fixed by its effective U.ReferenceScheme; U.ClaimScope states where the claims hold.
U.PromiseContent is not a deontic commitment relation. One or more explicit U.Commitment occurrences under A.2.8 may have the promise content in their referents position; the promise-content episteme does not obligate an actor by itself.
In normative prose, the head phrase is promise content. Service offering clause and service promise clause are admissible Plain twins for that promise-content use; bare service does not identify a promise-content episteme.
Species-level identity follows C.2.1:
promisedOutcomeSpecRef is a U.EpistemeRef field that designates the exact A.2.3:4.1.1 OutcomeSpec episteme about which the promise claims are made; that episteme is the exact EntityOfConcern of this PromiseContent episteme. The field is not EntityOfConcernSlot: that SlotKind names the participant meaning only inside the reusable C.2.1 constitution RelationSignature. OutcomeSpec is a specification-use episteme form, not a separately admitted U-kind. The exact claimScope qualifies where the promise-content claims hold and remains outside the identity tuple.
- FPF kind:
U.Episteme. - Time stance: the promise content can be authored before delivery; later exact delivery-work facts, affected entities, post-work states, and any current delivery or acceptance relations are tested against the declared outcome and acceptance predicates. Evaluation work and the actual operation-result binding remain separate; when a verdict episteme is constituted, C.2.1 and A.15.PROD govern its identity and inception, while A.10 evidence relations support the relied-on assertions.
- Orientation: consumer-facing promise claims, not provider capability claims.
- Publication boundary: The selected promise-content
U.Epistememay participate in an exactEpistemePublicationRelationfor a declared audience and bounded use.PublicationFormExpressionRelationrelates that selected edition to its publication form, andPublicationFormBearingRelationrelates aU.PresentationCarrierto the form it bears. Promise-content identity follows the C.2.1 episteme identity rule; no publication-relation occurrence, form, or carrier enters that rule.
Promise-content schema
contentcarries the promised-outcome, eligibility, and acceptance claims together with the optionalaccessSpecvalue when an access-method description is current; it is not an untyped text slot.providerSystemRoleKindRefandconsumerSystemRoleKindRefare promise-content fields typed by the existingU.KindRef; each resolves to one exact local system-role kind.accessSpec,acceptanceSpec, andunitOfDeliveryare episteme values carried by value in the claim graph; a publication or other declared representation may express them throughU.EpistemeRefvalues that resolve to those same epistemes without changing their kinds. Changing one of these content values or resolved kind references changescontentand therefore the promise-content identity.promisedOutcomeSpecRefresolves to the A.2.3:4.1.1OutcomeSpecepisteme.effectiveReferenceSchememakes the claim graph and its references interpretable.providerSystemRoleKindRefandconsumerSystemRoleKindRefidentify local work-facing kinds; actual providers and consumers enter only through named occurrences of directly declared species underU.SystemRoleAssignment.claimScopeis the exactU.ClaimScopeover which the promise claims hold; it states the applicable operating conditions, populations, locales, and other admitted slices instead of leaving extent implicit.accessSpecdescribes the access method enacted when the admitted holder system of an eligible consumer system-role assignment requests access; an access-point system remains separate.acceptanceSpecstates the acceptance criteria and selects the exact evaluation Method. It cites a MethodDescription edition only when the acceptance claim depends on that episteme's claims. Evidence-admissibility conditions may be stated there; actual evidence-use relations remain separate.unitOfDeliverystates how accepted delivery work is counted when counting is current.- There is no generic
modelUseStructureReffield. When an independently selectedBoundedModelUseStructurechanges one actually model-local receiving interpretation, the receiving assertion or use designates that structure separately; the structure neither identifies the promise content nor becomes an optional participant ofPromiseContentUse. A genuinely structure-dependent relation species would require its own direct pattern, mandatory structure participant, stronger predicate, and occurrence-identity rule. - An internal delivery method remains
U.Method. An already identified episteme is aU.MethodDescriptiononly when its exactEntityOfConcernresolves to that Method and at least one claim says how that Method is done. A promise-content or acceptance claim may cite that episteme for one named use; Method-selection work, performed work, andPromiseContentUseremain separately governed.
OutcomeSpec - promised Work, post-work result, or both
This section is the authoritative FPF locus for the promise-facing OutcomeSpec shape. A.7 supplies the strict distinction among the specification episteme, Work occurrence, affected referent, post-work state, counting rule, and evidence; it does not define another schema.
promisedOutcomeSpecRef resolves to an independently identified specification-use episteme that says what is promised. OutcomeSpec is a specification-use episteme form, not a separately admitted U-kind.
Mode completeness is exact:
WorkOnlyrequiresworkSpecand omitsresultSpec;ResultOnlyrequiresresultSpecand omitsworkSpec; andCompositerequires both.
workSpec constrains selected facts about delivery Work. A Method constraint resolves directly to the Method; a separate MethodDescription reference is optional and edition-specific. resultSpec constrains the exact affected referent selected for the delivery and its required post-work state. At fulfilment time, state any actual-change, production, delivery, acceptance, or receiving-use relation under its own predicate. An optional mathematical Delta expression remains a separate lens only when a named comparison uses it; no U.Work.Delta field or universal change record is required.
In ordinary agreement wording, outcome may mean Work, achieved state, or both. Recover the intended mode instead of inventing one OutcomeInstance kind. A downstream bundling, invoicing, or dispute claim separately references the actual Work occurrences, affected entities, post-work states, direct relations, evidence epistemes, and evidence-use relations it needs.
Examples. Work for at least five minutes is WorkOnly. A hole at least one metre deep exists at the stated site is ResultOnly. Cut and style the client's hair within twenty minutes, with the resulting hairstyle satisfying the evening-style condition is Composite. In the last example, the exact Method constraint, delivery Work facts, client or hairstyle referent, post-work state, and evidence-use relations remain separate.
The head noun outcome is intentionally broad. When the passage means Work, affected entity, or required post-work state, name that object directly. Counting is not part of OutcomeSpec; A.2.3:4.1.2 governs unitOfDelivery.
Unit-of-delivery counting
Use unitOfDelivery only when a receiving use counts accepted delivery. It is a specification-use episteme carried in the promise content.
An ordinary rule may say: Count one accepted delivery per appointment; rework under the same appointment does not add another unit. When replay or measurement needs a structured representation, use only the fields that rule requires:
The selector admits only Work occurrences for which the promise's delivery and acceptance predicates are satisfied. When one Work occurrence can satisfy several promise contents or rework can repeat one delivery, dedupeKeyRef or the cited counting policy states the intended boundary. A measurement Method, its description, evidence-admissibility rule, evidence epistemes, and evidence-use relations appear only when the count depends on a measurement reading or relied-on evidence. Pure counting needs none of that apparatus.
If unitOfDelivery is absent, the local default is one unit per obtaining PromiseContentFulfilmentRelation occurrence. A separately governed charging relation may consume the resulting quantity but does not define this counting rule.
Recommended acceptanceSpec mini-schema (informative, non-kernel)
Projects may express acceptanceSpec with the following small schema when downstream evaluation work requires replayable criteria and verdict semantics:
targetOutcomeSpecRefmakes explicit which promised outcome is being judged; if omitted, it is the containing promise content’spromisedOutcomeSpecRef.criterionRefsresolve to evaluation-criterion epistemes. Their predicates are evaluated over the same selected work facts and post-work state references used for the targetedOutcomeSpec; direct evidence relations separately support assertions about those facts and states.evaluationMethodRefresolves directly to the evaluation Method.evaluationMethodDescriptionRef, when present, cites one A.3.2-admitted episteme edition whose claims constrain or explain that Method; the description is neither the Method nor the evaluation Work.verdictScaleDescriptionRefresolves to one scale-description episteme governed by the characteristic and scale patterns. That description states the admitted verdict values and how non-delivery is represented. Informative examples include Booleanpass/fail, trichotomypass/partial/fail, or named graded values, with non-delivery represented asfail,N/A, orInconclusive; these values are examples, not defaults.GammaTimePolicyRefkeeps temporal selection explicit and non-retroactive (F.10 and F.12): it resolves to the policy stating whether judgement is per work occurrence, reporting window, or another named temporal selection. Population and locale remain inU.ClaimScope; they are not temporal-policy values.
This mini-schema is a recommendation only: it does not admit another U-kind. An acceptance-specification episteme may contain these declared schema fields by value or refer to their values through the declared RefKinds. The resulting episteme remains inspectable and bridge-ready.
What U.PromiseContent is not
- Not a provider: use an assignment occurrence and its declared species under
U.SystemRoleAssignment. The occurrence identifies the provider System and assigned local kind; the species defines those participant meanings and the assigned-kind domain. - Not an individual deontic commitment: that is one obtaining
U.Commitmentunder A.2.8 whose actual duty bearer, exact referents, constitutive rule, instituting basis, scope, and validity are established independently. - Not an access point or bearer: addressable service, server, desk, endpoint, process, component, application, host, or cluster wording first goes to A.6.P:4.11a. Recover whether it denotes code or another episteme, a Method, a Work occurrence or ordinary run, an exact bearer or access-providing arrangement, or another directly governed object; apply A.1 or A.1.SCR only when a separate repaired claim depends on an exact recovered entity being a system.
- Not a method or method description: the semantic way of doing is
U.Method; a recipe or other episteme describing that way isU.MethodDescription. - Not delivery work or its description: performed delivery is
U.Work; a ticket, case description, or incident description is a separately governed episteme about planned or performed work. - Not a schedule: that is
U.WorkPlan. - Not a capability: capability is the provider system's admitted ability to perform a declared work family or produce a declared result class within its
U.WorkScope, measure set, qualification window, and currentness condition. Delivery under a promise may depend on one or more capability instances. - Not its scope or use interval:
U.ClaimScopestates where the promise claims hold,U.WorkScopestates where a provider capability can deliver work, andPromiseUseIntervalSlotstates when onePromiseContentUseoccurrence obtains. These are three different values.
Promise content, delivery work, and evaluation work
-
Before delivery work: The promise-content episteme declares its effective
U.ReferenceScheme, namedU.ClaimScope, promised outcome specification, access specification when current, and acceptance specification. The provider system's ability remains a holder-dependentU.Capabilityinstance under A.2.2. A capability-fit predicate tests that instance against the thresholds selected for the planned delivery work, including any threshold stated by the chosen method description. Method-selection work may yield a C.11ChoiceResult;enactsMethodobtains between the later delivery-work occurrence and the selectedU.Method. A relied-on episteme is aU.MethodDescriptiononly when it meets A.3.2 membership, and the promise-content or acceptance claim may cite it for the named use. -
Run‑time: For request or visit Work, use A.13 to identify the actual consumer System
S, then let A.15.1 admitrequestWorkindependently. If the current use must also state under which assignment the request was performed, F.6 checksperformedUnderAssignment(requestWork, consumerRA)against the same assignment used by A.13 and comparesSwithconsumerRA.HolderSystemSlot. For delivery Work, use A.13 to identify the actual provider SystemS, then let A.15.1 admitdeliveryWorkindependently. If the current use must also state under which assignment the delivery was performed, F.6 checksperformedUnderAssignment(deliveryWork, providerRA)against the same assignment used by A.13 and comparesSwithproviderRA.HolderSystemSlot. For evaluation Work, use A.13 to identify the actual evaluator and let A.15.1 admit the dated occurrence before saying that it enacts the Method selected byacceptanceSpec. Add F.6 only if the current use must also state under which assignment the evaluation was performed. Cite the optional MethodDescription only when the evaluation claim depends on that edition. The actual evaluation-operation application carries its argument bindings and result value. When another use needs a durable verdict episteme, C.2.1 governs that episteme and A.15.PROD governs any current identity-inception claim. The counting rule inunitOfDeliverymaps admitted fulfilment occurrences to unit counts. The verdict episteme may assert whether a named service-level objective or another acceptance criterion was satisfied during the declared window. When a separately obtainingU.Commitmenthas the sameU.PromiseContentin its referents position, the supported assertion concerns fulfilment of content that is also a referent of the obligation. Neither the operation-result binding, verdict episteme, nor commitment is a property of the promise-content episteme.When a separate F.6
performedUnderAssignment(W, RA)claim is made,Wis already admitted andRAis the same assignment used by A.13. F.6 compares that assignment's holder with the actual performer already identified through A.13 and used by A.15.1. A missing or failed F.6 check leaves the Work intact.
Memory hook: Promise content states what is promised. A method constrains possible work. A system performs work. Evaluation binds a result value. A verdict episteme states the judgment. Evidence supports that assertion.
Didactic card: Relations around one service-delivery evaluation
Didactic (non-normative). This representation keeps each promise-content episteme, access-description episteme, work occurrence, and direct relation in one delivery evaluation visible without prescribing an order of work. Promise content and an access description remain epistemes; an individual commitment and a system-role assignment remain relations; delivery and evaluation remain work occurrences; evidence remains in its A.10 relations. When order matters, describe semantic method order in
U.MethodDescription, intended dated order inU.WorkPlan, and transformation dependencies in the relevantTransformationFlowStructure.
U.PromiseContentstates the promise. An A.2.8U.Commitmentrelation may refer to that content; its duty-bearer position is filled by one System or separately identified party. The provider-assignment species defines holder and assigned-kind meanings. Delivery and evaluation follow the §4.3 route: A.13 identifies who actually performed the Work, and A.15.1 admits the dated occurrence independently. The diagram shows an F.6 edge only when this case also needs the exact assignment under which that Work was performed. Evidence relations support selected delivery-work facts and post-work states. The evaluation operation carries its result binding, while C.2.1 identifies any verdict episteme and A.15.PROD states any identity-inception claim.This informative diagram is a publication-side representation, not new ontology. It prevents two category errors: treating
U.PromiseContentas the addressable access system, and treating a publication-side list or diagram of service senses as a relation occurrence that replaces the direct relations shown here.
Reading guide (one breath).
- The promise content is the consumer-facing outcome and acceptance statement.
- In the A.2.8 commitment relation, the actual duty-bearer position is filled directly and the referents position contains the promise-content clause. The exact constitutive rule and its required instituting basis must obtain before that individual relation is asserted.
- The provider system-role assignment is an occurrence of a declared assignment species. The species defines the holder, assigned-kind, and any other identity-bearing participant meanings; the occurrence identifies the provider System, its assigned local kind, and any other participant values. The assertion has exact claim content, EntityOfConcern, and effective ReferenceScheme; its ClaimScope, selected slice, normative-frame edition, qualification window, or operating condition is stated separately when it changes interpretation or validity. None is a world-side assignment participant.
- A.6.P:4.11a recovers the concrete referent or relation denoted by service wording. It adds no service-situation participant: provider assignment, access description, access-point system, delivery system, delivery method, promise content, and work occurrence remain distinct and keep their own kinds. Use A.10 for the evidence relations.
- Delivery Work is what happened. Follow the §4.3 performer-and-Work route, and add the separate F.6 assignment check only if this use must also say exactly under which assignment the Work was performed. Exact affected referents, pre-work and post-work states, and any actual-change, production, delivery, or acceptance relations remain separately identified. Evidence-use relations support assertions about those facts. Evaluation Work follows the same route before its selected evaluation Method, application result, and any verdict episteme are stated separately.
Litmus rule (addressability).
If the current claim is about invocation, connection, visitation, restart, or scaling, first use A.6.P:4.11a to recover the exact process, deployed component, endpoint, application, host, cluster, desk, or other bearer. That cue establishes neither U.System nor a whole delivery-system boundary. Apply A.1 or A.1.SCR only when the repaired claim depends on systemhood; after recognition, call the entity a service access point or service delivery system only when that exact boundary claim is current. Otherwise keep the exact bearer and keep promise content separate.
Archetypal grounding (engineer‑manager friendly)
Worked-case premise. E.24.UK has already admitted the public U.System kind. Every exact entity named as a system in the rows below independently satisfies the complete A.1 criterion, including acting eligibility. If that premise cannot be established, keep the exact entity without system membership and stop only the provider-assignment, access-point, delivery-system, or Work-attribution claim that depends on it; other direct claims may continue under their subject patterns.
Key takeaway. The same pattern yields one promise-content episteme in each domain. Direct system-role assignment, PromiseContentUse, evaluation-operation, evidence, acceptance, and publication relations retain their own participants and governors; evaluation remains separately performed U.Work.
Locality replay. In the cloud-storage row, identify CloudStoragePromiseContent-v3, CloudStorageOfferScheme-2026, and EligibleStorageAccounts-EU-2026Q3 as the exact promise-content edition, its effective scheme, and its U.ClaimScope. Then PromiseContentUse(PUT-2026-07-14-1042, CloudStoragePromiseContent-v3, Interval-PUT-1042) ties one dated delivery-work occurrence to that edition. Name a selected model-use structure only in a receiving assertion or use that is actually model-local. If another catalog scheme is consumed, add the exact obtaining F.9 Bridge, the separate claim that it suits this bounded use, and the A.10 evidence-provenance relation with RelianceDisposition=pass. Use B.3 only if an actual named assurance claim about this use is current.
Bias-Annotation
A.2.3 repairs the collapse of several service-related referents into one service label. A visible service name often denotes provider, access point, method, work, commitment, ticket, evidence, and promised outcome without saying which claim is current. The pattern recovers the promise-content episteme first; A.2.8 then governs commitment, A.2.1 provider participation, A.3.2 access description, A.15.1 delivery work, A.10 evidence claims, and the direct outcome and acceptance patterns their respective relations.
In an agreement or SLA, an A.2.8 U.Commitment may have promise content in its referents position. An agreement publication, service catalog, API page, or offer publication may be a U.PresentationCarrier bearing a form that expresses selected U.Episteme values about the agreement, promise content, commitment, or fulfilment work. An exact EpistemePublicationRelation may make each selected episteme available to its declared audience for its bounded use. These commitments, epistemes, forms, publication occurrences, and carriers retain separate identities.
Mapping the common “service” picture to FPF (didactic bridge)
A common service diagram is a representation. Recover the represented systems, epistemes, work occurrences, and relation occurrences as follows:
- Provider participation -> when this mapping needs the provider's assignment, name its occurrence and declared species under
U.SystemRoleAssignment. The occurrence supplies its holder System, assigned local kind, and any other participants; the species defines their meanings. For each selected delivery-work occurrence, follow the §4.3 route to identify the actual performer and admit the Work independently. Add F.6 only if the mapping must also say exactly under which assignment that delivery was performed; a missing or failed check leaves the delivery Work intact. - Acceptance criterion -> an evaluation-criterion episteme in
U.PromiseContent.acceptanceSpec; its target values, verdict scale, andGammaTimePolicyRefremain explicit. AU.WorkPlanis added only when planned delivery or evaluation work is current. - SLA obligation -> one A.2.8
U.Commitmentoccurrence whose actual duty bearer is explicit and whose referents include the relevantU.PromiseContent; assert it only after the applicable constitutive rule and required instituting basis obtain. Use A.6.C when one SLA publication combines wording about commitment, promise content, evidence specification, and publication relations. - Published SLA terms -> the selected
U.PromiseContent/U.Episteme, the exact publication form that expresses it for the bounded use, theU.PresentationCarrierbearing that form, and the obtainingEpistemePublicationRelationoccurrence that makes the selected edition available to the declared audience. When publication work also communicates or institutes a commitment, add the named A.2.9 speech-act and A.2.8 commitment relation occurrences; publication alone neither creates the commitment nor establishes fulfilment. - Operating conditions -> the named
U.ClaimScopeunder A.2.6. The acceptance specification may cite that scope; it does not replace it. - Promised subject -> resolve
promisedOutcomeSpecRef, then use the resultingOutcomeSpec.resultSpec.entityOfConcernReftogether with the exact affected referent, post-work state, and any direct delivery or acceptance relation current for the claim. - Customer material—“ours versus theirs.” -> If the current claim depends on who owns or has custody of data, an asset, or a case, name the exact obtaining system-role assignment when work-facing assignment matters, and name the ownership or custody relation with its actual participants when that is the claim. Neither relation substitutes for the other, and neither becomes a kernel-global property of
U.PromiseContent. - Access ->
accessSpec : U.MethodDescriptiondescribes the Method enacted when an eligible consumer holder requests access. Recover the endpoint, desk, manifold, or other exact bearer through A.6.P:4.11a. Its label and addressability establish noU.Systemmembership. Apply A.1 or A.1.SCR only when a current access-point, delivery-system, performer, or assignment claim depends on systemhood; otherwise keep the bearer claim separate. - One
PromiseContentUseoccurrence -> consumer request Work and provider delivery Work remain separate occurrences. Follow the §4.3 performer-and-Work route for each. If this mapping must also state the assignment under which either occurrence was performed, add its separate F.6 relation against the same assignment used by A.13; a missing or failed check leaves the Work intact. When request Work followsaccessSpec, its A.15.1methodDescriptionRefresolves to that sameU.MethodDescription; following the description does not by itself introduce a second relation occurrence.PromiseContentUseobtains between selected delivery Work and the selected promise-content edition duringPromiseUseIntervalSlot. - Consumer-side changed entity or relation -> recover the exact affected-referent and actual-transformation facts, plus any local entity-identity-inception, delivery, acceptance, or receiving-use claim that the current promise evaluation needs. If the changed entity is a holder system and its post-work state calls for a new or revised
U.Capabilityinstance, use A.2.2 for that capability instance and its currentness relations. - Service-enabled consumer-side capability or activity -> If the question is about ability, identify the consumer holder's
U.Capabilityinstance and state its A.2.2 qualification and currentness claim. If the question is about activity, identify the consumer-side datedU.Workunder A.15.1. If the claim also says that delivery changed the consumer or was used by that Work, state only the exact actual-change or receiving-use relation that currently obtains; otherwise keep the objects separate. Do not create another U-kind or a generic capability-use relation. When a domain claim concerns catalog entries, exposure relations, charging relations, or entitlement relations, govern those entries, participants, and relations directly. Relate them toU.PromiseContentonly through named relations; do not treat them as components ofU.PromiseContentor replace their direct relations with a locally minted context relation.
Conformance Checklist (normative)
CC‑A2.3‑0 (Prose head phrase).
In normative prose, an instance of U.PromiseContent SHALL be referred to as a promise content (or service offering clause or service promise clause) and SHALL NOT be referenced by the bare head noun service. Separately, apply E.10 L-SERV and A.6.P:4.11a when service or access-like wording occurs in a relied-on FPF claim, recommendation, decision, gate, assurance, publication, or reuse and hides the concrete subject, participant, predicate, kind, permission, Work occurrence, or next route. Quoted, historical, illustrative, and harmless ordinary wording remains outside this recovery rule.
CC‑A2.3‑1 (Type).
U.PromiseContent IS a consumer-facing promise-content U.Episteme. One or more exact EpistemePublicationRelation occurrences may make the same selected promise-content edition available through separately identified publication forms and U.PresentationCarrier values without changing its episteme identity; no publication form or presentation carrier is the promise content. U.PromiseContent is not a U.System, U.Method, U.MethodDescription, U.Work, or U.WorkPlan.
CC-A2.3-2 (Semantic locality).
Every promise content names its effective U.ReferenceScheme, promisedOutcomeSpecRef, and exact U.ClaimScope. A selected BoundedModelUseStructure may be designated only by the receiving assertion or use when it changes one actually model-local interpretation; it is neither a promise-content field nor an optional participant or identity discriminator of PromiseContentUse.
CC-A2.3-3 (System-role kinds stay distinct from holders and assignments).
providerSystemRoleKindRef and, when present, consumerSystemRoleKindRef are promise-content fields typed by U.KindRef and resolve to local system-role kinds. Provider and consumer Systems enter through assignment occurrences whose species are declared under U.SystemRoleAssignment; a kind label or reference alone identifies neither a holder nor a performer.
CC-A2.3-4 (Acceptance).
acceptanceSpec MUST be present and MUST define how delivered U.Work is judged as pass, fail, or a declared grade against named evaluation criteria and target values. Any SLA deontics are represented through U.Commitment. The promise content MUST declare Claim scope (G) where operating conditions, populations, locales, or another claim extent matter. Every verdict cites an explicit Gamma_time window.
If the acceptance criteria mention measurable characteristics such as availability, latency, accuracy, cost, or safety, each characteristic MUST be introduced through C.16 and C.25 with its scale, unit when applicable, U.DHCMethod measurement template, and direct evidence relation. If the reading depends on a particular way of measuring, cite the U.MethodDescription that describes that measurement method. The characteristic is referenced by its exact identifier rather than by an unqualified KPI label.
CC‑A2.3‑5 (Access).
When the promised use relies on a request-facing access Method, accessSpec MUST identify the A.3.2-admitted U.MethodDescription that describes it. Separately recover the endpoint, desk, manifold, or other exact bearer through A.6.P:4.11a. Apply A.1 or A.1.SCR only when a current claim depends on that bearer being an access-point U.System; otherwise keep the bearer without the stronger claim. If no access-method description is current because access is ambient, accessSpec may be omitted. In either branch, keep an eligibility predicate in the promise content when eligibility is promised; when eligibility depends on a separately obtaining admission relation, identify that relation and use the pattern that defines or tests it.
CC‑A2.3‑6 (Unit of delivery + counting rule).
When fulfilment work is counted, declare unitOfDelivery (for example, one request, kWh, or case). The resulting count may fill a declared quantity position in a separately governed charging relation; that charging relation does not determine the unit-of-delivery specification.
When declared, unitOfDelivery includes the A.2.3:4.1.2 counting rule that maps fulfilment Work to unit counts without silent double counting. If omitted, the default is one unit per obtaining PromiseContentFulfilmentRelation occurrence.
CC‑A2.3‑7 (No actuals on Promise Content).
Resource and time actuals belong to the performed U.Work occurrence under A.15.1. An incident-log episteme may describe that occurrence and may separately participate in an evidence relation for a stated claim; neither the log nor its participation in that evidence relation fills a U.PromiseContent slot.
CC-A2.3-8 (Provider capability stays separate).
When delivery depends on provider ability, use the A.2.2 U.Capability instance for the provider holder system and the separate capability-fit predicate for the planned delivery work. Do not insert capability into promise-content identity or infer capability or fit from a system-role designation or assignment.
CC-A2.3-9 (Edition and promise-use interval).
A change to content, promisedOutcomeSpecRef, or effectiveReferenceScheme creates a new promise-content episteme edition under the C.2.1 identity rule. Each PromiseContentUse occurrence has one promise-content edition and one delivery-work occurrence as participants and PromiseUseIntervalSlot as its temporal qualifier; an untyped version or timespan entry fills none of those positions.
CC‑A2.3‑10 (Lexical rule). Apply E.10 L-SERV and A.6.P:4.11a only when service or access-like wording occurs in a relied-on FPF claim, recommendation, decision, gate, assurance, publication, or reuse and hides the concrete subject, participant, predicate, kind, permission, Work occurrence, or next route. The author MUST name that hidden choice or stop the relied-on use; quoted, historical, illustrative, and harmless ordinary wording is outside this rule.
CC‑A2.3‑11 (No mereology). Do not place a promise content clause in PBS or SBS, or treat it as a part or component. Structural assemblies live in PBS and SBS; the promise clause is an episteme (A.2.3). When relied-on service wording still hides a concrete referent or relation, recover that hidden choice through A.6.P:4.11a; clear, quoted, historical, illustrative, and harmless ordinary wording creates no additional recovery duty.
CC-A2.3-12 (Plan, work, and evidence stay distinct).
Windows and calendars belong to U.WorkPlan (A.15.2). Performed delivery belongs to U.Work (A.15.1). Exact affected referents, pre-work and post-work states, and direct actual-change, production, delivery, or acceptance relations remain separate. Evidence epistemes and evidence-use relations support assertions about those facts; they are not slots or parts of the Work occurrence.
CC-A2.3-13 (Claim scope, work scope, and promise-use interval).
The promise-content episteme names one exact U.ClaimScope; an intended maximal extent is stated as that scope rather than represented by omission. A provider capability instance separately names U.WorkScope. PromiseUseIntervalSlot is the temporal qualifier of each PromiseContentUse occurrence. The ScopeCoverage predicate is satisfied only when the selected context slice is covered under an explicit Gamma_time selector; neither temporal extent nor capability scope replaces claim scope.
CC-A2.3-14 (Scheme and scope bridges).
Cross-scheme reuse first names the exact obtaining F.9 Bridge occurrence. A separate current C.2.1 claim with affirmative polarity must say that this Bridge suits the named bounded promise-content use, in the stated direction, under the use-specific correspondence rule, and within the permitted-loss tolerance. Ordinary reliance requires the exact A.10 evidence-provenance relation with RelianceDisposition=pass for that use. Use B.3 only when an actual named assurance claim is current; its result supports, narrows, or blocks only that bounded assurance use. Cross-scope reuse separately names the mapped U.ClaimScope and its A.2.6 relations.
CC-A2.3-15 (OutcomeSpec typing).
promisedOutcomeSpecRef MUST be a U.EpistemeRef resolving to an A.2.3:4.1.1 OutcomeSpec specification-use episteme. It MUST NOT point at a concrete U.Work occurrence, affected or delivered entity, actual operation-result binding, verdict episteme, or downstream effect, and OutcomeSpec MUST NOT be written as an independently admitted U.OutcomeSpec.
CC-A2.3-16 (OutcomeSpec is explicit and mode‑complete).
promisedOutcomeSpecRef MUST be present and MUST reference an OutcomeSpec that declares mode in {WorkOnly, ResultOnly, Composite} and satisfies A.2.3:4.1.1 mode completeness:
WorkOnly→workSpecpresent,resultSpecabsentResultOnly→resultSpecpresent,workSpecabsentComposite→ bothworkSpecandresultSpecpresent
CC-A2.3-17 (OutcomeSpec predicates and delivery-work relations).
For any delivery U.Work occurrence named by PromiseContentUse, let OS be the A.2.3:4.1.1 OutcomeSpec resolved from SC.promisedOutcomeSpecRef.
- If
OS.workSpecis present, the selected facts about the work occurrence satisfyOS.workSpec.workPredicateRef; whenmethodConstraintRefis present, the enacted method is compatible with that constraint. - If
OS.resultSpecis present, the exact affected referent and selected post-work state satisfyOS.resultSpec.postConditionRefon its declared state plane. Any actual-change, production, delivery, acceptance, receiving-use, or optional mathematical Delta-lens claim remains separately governed. - A.10 evidence relations obtain between each relied-on satisfaction assertion and its supporting evidence epistemes.
Explicitly individuate PromisedOutcomeDeliveryRelation only when a downstream relation or claim must refer to its occurrence identity and only after these mode-specific conditions are established; otherwise retain the readable deliversPromisedOutcome(W, OS) assertion.
CC-A2.3-18 (Acceptance evaluation supports rather than constitutes fulfilment).
Follow the §4.3 route: use A.13 to identify the actual evaluator and let A.15.1 admit the evaluation Work independently before saying that it enacts the Method selected in acceptanceSpec over the same Work facts and post-work states used to test delivery. Add F.6 only if this evaluation account must also state under which assignment the Work was performed. Cite a MethodDescription only when the claim depends on that exact edition. The actual operation application carries its argument and result bindings. Any durable verdict episteme, identity-inception claim, and evidence-use relation remains separate and supports the fulfilment assertion without constituting the relation.
CC-A2.3-19 (OutcomeSpec ↔ unitOfDelivery coherence).
If unitOfDelivery is present, its counting rule states a selectorRef that selects only work occurrences eligible to satisfy SC.promisedOutcomeSpecRef in the declared mode. When one occurrence can fulfil several promise contents, the rule states either dedupeKeyRef or cites the counting-policy episteme that defines the counting rule. A selector may denote work occurrences filling FulfilmentWorkOccurrenceSlot in obtaining PromiseContentFulfilmentRelation occurrences; it does not count work for which fulfilment has not been established.
CC-A2.3-20 (Unit-of-delivery is computable from work facts).
If unitOfDelivery is present, it follows A.2.3:4.1.2. A pure count needs only its selector, quantity rule, and any deduplication boundary. Add a measurement Method, MethodDescription, evidence-admissibility condition, evidence epistemes, and evidence-use relations only when the count actually depends on a measurement reading or relied-on evidence.
Promise-content use, delivery, evaluation, and evidence
Keep PromiseContentUse, PromisedOutcomeDeliveryRelation, evaluation U.Work, the actual evaluation-operation application and result binding, any verdict episteme, and A.10 evidence relations separate. A direct relation may obtain even when the current episteme about it is unresolved; evidence supports the claim and does not become the relation.
Core relations
PromiseContentUse : U.Relation. This direct use relation obtains between one delivery-work occurrence and one promise-content edition during one named promise-use interval; it makes no fulfilment claim.
Its occurrence key is <DeliveryWorkOccurrenceSlot, PromiseContentSlot, PromiseUseIntervalSlot>.
PromisedOutcomeDeliveryRelation : U.Relation. This derived relation obtains between one delivery-work occurrence and the A.2.3:4.1.1 OutcomeSpec resolved from the PromiseContentUse occurrence in which that work participates, when the conditions below hold.
The relation obtains only when one PromiseContentUse occurrence has the delivery Work and promise-content edition as participants, that edition resolves the same OutcomeSpec, and the mode-specific conditions hold. workSpec tests selected Work facts. resultSpec tests the exact affected referent and selected post-work state; any actual-change, production, delivery, acceptance, receiving-use, or optional Delta-lens claim remains separately governed. Its occurrence key is <DeliveryWorkOccurrenceSlot, PromisedOutcomeSpecificationSlot>. The readable predicate is deliversPromisedOutcome(W, OS). An episteme may assert that this relation obtains and evidence may support the assertion; neither makes the underlying facts satisfy the specification.
Acceptance evaluation result. Follow the §4.3 performer-and-Work route before saying that the evaluation Work enacts the Method selected in acceptanceSpec. Add F.6 only if this result must also state under which assignment the evaluation was performed. A MethodDescription is cited only when its edition-specific claims are used. The operation application, result binding, optional verdict episteme, any identity-inception claim, and A.10 evidence-use relations remain separate. They support the assertion rather than making fulfilment obtain.
PromiseContentFulfilmentRelation : U.Relation. This derived relation obtains between one delivery-work occurrence and one promise-content edition when the conditions below hold.
The semantic predicate for this relation is satisfied only when PromiseContentUse obtains for the same work and promise-content participants, PromisedOutcomeDeliveryRelation obtains for that work and the OutcomeSpec resolved from that promise content, and the acceptance predicate declared by acceptanceSpec is satisfied for the exact delivery-work facts, affected or delivered entities, post-work state, and any direct delivery or acceptance relation required by the criterion. PromiseContentFulfilmentRelation obtains for the declared participants when that semantic predicate is satisfied. Its occurrence key is <FulfilmentWorkOccurrenceSlot, FulfilledPromiseContentSlot>. The readable predicate is fulfilsPromiseContent(W, SC). A later evaluation may change the supported assertion about whether the relation obtains; it does not change relation identity. When satisfaction of any required predicate is unresolved, no positive fulfilment assertion is available for reliance.
The explicit RelationSignature declarations are warranted only when unitOfDelivery selectors or fulfilment measures refer to relation-occurrence identity. Ordinary prose may stop at the readable predicates when no later relation refers to that occurrence identity.
Invariant:
fulfilsPromiseContent(W, SC)impliesPromiseContentUse(W, SC, T),deliversPromisedOutcome(W, resolve(SC.promisedOutcomeSpecRef)), and satisfaction of the acceptance criteria declared inSC.acceptanceSpec; an evaluation-result episteme and A.10 evidence relations support the corresponding assertion without becoming relation participants. Invariant: One work occurrence can fulfil several promise contents only when each promise content's counting rule statesdedupeKeyRefor cites the counting-policy episteme that defines the counting rule; no silent double counting.
Promise-content delivery measures
Let W(SC, T) be the set of delivery-work occurrences for which PromiseContentUse obtains with SC during interval T. Let W✓(SC, T) be the subset for which PromiseContentFulfilmentRelation obtains with SC.
- Delivered units:
delivered(SC, T)is computed fromW✓(SC, T)using the A.2.3:4.1.2 counting rule. WhenunitOfDeliveryis absent,delivered(SC, T) = |W✓(SC, T)|, one unit per obtaining fulfilment occurrence. - Rejection rate:
rejectRate(SC, T) = 1 − |W✓(SC,T)| / |W(SC,T)|(declare handling ofpartial). - Lead time: declare the characteristic definition and aggregation separately. The definition may use work duration or request-to-completion delta; the aggregation may use an average or named percentile.
- Availability and uptime claims: select one declared characteristic instead of treating the labels as synonyms. Derive its observed characteristic value from selected work facts and telemetry observations through its C.16 measurement template,
Gamma_timepolicy, and evidence relations; cite aU.MethodDescriptionwhen a particular measurement method affects the reading. - Cost‑to‑serve: sum of
Γ_workoverW✓per resource category (A.15.1).
Each resulting U.Measure claim is derived from selected facts about U.Work occurrences through its C.16 measurement template and named A.10 evidence relations; when a particular measurement method matters, its U.MethodDescription is cited. Resource and time actuals belong to the performed U.Work occurrences.
Aggregation across time uses the Gamma_time policy referenced by the named C.16 measurement template or acceptance specification; an unqualified KPI label does not select that policy. When a measure needs a B.1.4 temporal-phase aggregation of one carrier, name one ContextTemporalAggregation@Context record and its exact selected policy—for example, union of observed values or their convex hull—together with carrier identity, time window, coverage and non-overlap conditions, and admissible use. If those one-carrier conditions do not hold, this example is inapplicable; state the aggregation actually required and apply its defining rule. Union and convex hull are policy choices, not defaults; Gamma_time does not select either by itself.
Common misclassification repairs
- A microservice label is being used for the whole service claim. Use A.6.P:4.11a to recover whether the source word denotes service-provision Work, a Method, PromiseContent, provider participation, or an exact deployed process, component, endpoint, application, host, or cluster. Apply A.1 or A.1.SCR only when a repaired bearer claim depends on systemhood. Deployment and the label establish neither membership nor a delivery-system or access-point boundary; the consumer-facing outcome and acceptance claims remain in
U.PromiseContent. - An API label is being used for the whole service claim. If the referent is an interface specification, use the exact episteme and
U.MethodDescriptiononly when A.3.2 admits it. If it is an addressable endpoint, recover that bearer through A.6.P:4.11a and apply A.1 or A.1.SCR only when a current claim depends on systemhood. Neither the API label nor addressability establishes membership, and neither referent is the promise-content episteme. - A process or procedure label is being used for the whole service claim. Recover the semantic way of doing as
U.Method, its description asU.MethodDescription, planned work asU.WorkPlan, and performed occurrences asU.Work. Keep the promised outcome and acceptance claims inU.PromiseContent. - A ticket or case record is being used for the whole service claim. Recover its claim-bearing content as a ticket or case-description
U.Episteme; keep the publication form andU.PresentationCarrierseparate. Relate that episteme to the namedU.WorkPlanorU.Workoccurrence it describes. - Cost or elapsed time is attached to the promise content. Keep resource and time actuals on the performed
U.Workoccurrence. Derive a measure over work occurrences participating inPromiseContentUseonly through its declared characteristic, C.16 measurement template, named A.10 evidence relations, aggregation rule, andGamma_timepolicy; cite aU.MethodDescriptionwhen a particular measurement method affects the reading. - Promise content is placed in a product or system breakdown. Keep the promise content as an episteme. The access and delivery systems may have parts and selected structures under A.22 and C.30; the promise-content episteme is not one of those parts.
- A person or organization name is stored as the provider system-role kind. Identify the exact local provider system-role kind through
providerSystemRoleKindRef. If an actual provider-assignment claim is current, identify the exact person or organization and apply A.1 because A.2.1 requires an admitted holderU.System; otherwise do not create the assignment. Then state one named occurrence of a directly declared species underU.SystemRoleAssignmentand its explicit interval.
Existing promise-description repair applications
- Name the promises. As an informative first pass, list roughly 5–15 consumer-facing promises used by the project; the range is a prompt, not an admission threshold. Represent each as
U.PromiseContentwith effective reference scheme, promised outcome specification, acceptance specification, and claim scope, plus access specification and unit of delivery when current. - Separate provider from promise content. Recover each provider, access point, or delivery bearer through A.6.P:4.11a. Apply A.1 or A.1.SCR only where a provider-assignment, access-point, delivery-system, performer, or other claim depends on systemhood. When an assignment is claimed, name its A.2.1 occurrence and declared species, with the provider System as holder.
- Relate promise content to delivery and evidence. Add
PromiseContentUsefor every delivery-work occurrence evaluated under the promise. EstablishPromisedOutcomeDeliveryRelationonly after exact work facts, affected or delivered entities, post-work states, and any direct delivery relation required by the resolvedOutcomeSpecsatisfy it; establishPromiseContentFulfilmentRelationonly after those facts and states satisfy the declared acceptance criteria. Record the actual evaluation-operation result binding, any evaluation-result episteme, the evidence epistemes it cites, and the A.10 evidence relations separately. - Define evaluation characteristics. As an informative first pass, select roughly 2–4 characteristics for each promise content; the range is a prompt, not a conformance limit. Use a recognizable §8.2 formula family—availability over a named window, lead time as a declared delta plus aggregation, rejection rate
1 − |W✓| / |W|, or cost-to-serve as summed Work resource use—or state an exact declared alternative. For each characteristic, name its scale, unit when applicable, C.16 measurement template,Gamma_timepolicy, direct evidence relations, and exact formula; cite aU.MethodDescriptionwhen a particular measurement method affects the reading. Do not let a KPI label stand in for this declaration. - Bridge domain schemes. If a domain ontology distinguishes business, technical, or internal service kinds and relations, retain its reference scheme and name the exact obtaining F.9 Bridge for each selected sense and FPF counterpart. Add the separate C.2.1 claim that the Bridge suits the named use, then require the A.10 evidence-provenance relation with
RelianceDisposition=pass. Use B.3 only for an actual named assurance claim. KeepPromiseContentUse, Work, delivery, fulfilment, result, evidence, assurance, and publication separate. - Tidy relied-on language. Apply L-SERV and A.6.P:4.11a only when service or access-like wording hides a concrete subject, participant, predicate, kind, permission, Work occurrence, or next route in the current relied-on use. State what the wording denotes and use the pattern that defines or constrains that claim, or stop the use; use A.1 or A.1.SCR only when a recovered bearer claim depends on systemhood. Reserve
U.PromiseContentfor the consumer-facing promise content, and leave clear, quoted, historical, illustrative, and harmless ordinary wording outside this step.
Consequences
Rationale
Everyday "service" language is useful because one label can denote promise content, provider systems, access points, commitments, methods, work occurrences, and evidence epistemes. When those claims guide evaluation or work, FPF distinguishes the referents and states their direct relations. U.PromiseContent gives the promised-outcome side one stable episteme, A.6.P:4.11a recovers the referent intended by the service wording, and each named direct relation remains governed by its direct pattern.
The pattern keeps promise content in the episteme family because it is a clause or description whose outcome and acceptance predicates state conditions on delivery work, affected referents, and post-work states. A fulfilment assertion and the evidence relations supporting it remain distinct from those referents and from the world-side relations whose obtaining the assertion describes. The referents position of an A.2.8 commitment relation may contain it, an A.2.9 speech-act occurrence may communicate or institute that commitment, and A.6.C may unpack agreement or SLA wording carried by a publication, while gate and policy relations remain separate.
SoTA-Echoing
Service-management, product, utility, platform, and public-service practice all distinguish offers, providers, access channels, service levels, work execution, and evidence of fulfilment, even when everyday language calls all of them "the service". A.2.3 keeps that practical distinction in FPF by giving the consumer-facing promise clause its own episteme value and by using the patterns that define or test provider, access, commitment, work, and evidence claims.
Service-level-agreement practice distinguishes promised content from obligation-bearing acts or agreements and from later performance evidence. FPF keeps that separation without importing a domain-specific service taxonomy; the promise-content episteme remains usable across utilities, healthcare, public services, manufacturing support, software services, and other project domains.
Relations
- Builds on: C.2.1
U.Epistemeidentity and reference scheme; A.2 for exact local system-role kinds; A.2.1 for directly declaredU.SystemRoleAssignmentspecies and occurrences; A.2.2U.Capability; and A.2.6U.ClaimScopeandU.WorkScope. A.1.1 is used only when an independently selectedBoundedModelUseStructurechanges one named receiving assertion or work use; the structure is not a promise-content constituent or generic relation participant. - Coordinates with: A.3.1
U.Method; A.3.2U.MethodDescription; A.15.1U.Work; A.6.1 for actual operation application and result binding; A.15.PROD for current entity-identity-inception claims; A.15.2U.WorkPlan; direct affected-subject, delivery, acceptance, and evaluation patterns; A.10 for evidence relations and ordinary bounded reliance; B.3 only when an actual named assurance claim is current; A.2.8 for commitment; A.2.9 for speech act; A.6.P:4.11a for service-wording restoration; F.9 for exact cross-scheme Bridge occurrences; C.2.1 for the separate bounded-use suitability claim; and A.7 plus the direct publication pattern when specification use or publication is current. - Constrained by lexical rules: E.10 L‑SERV (service disambiguation); also L‑FUNC, L‑PROC, L‑SCHED, L‑ACT.
- Informs: reporting and assurance patterns for measures over work occurrences participating in
PromiseContentUse, plus directly governed catalog entries, exposure relations, charging relations, and entitlement relations when those claims are current.
Didactic quick distinctions
- Promise content. A consumer-facing episteme stating the promised outcome, any eligibility predicate, effective reference scheme, claim scope, and acceptance specification; its optional
accessSpecdescribes the access method. - Method and method description.
U.Methodis the semantic way of doing.U.MethodDescriptionis an episteme describing that method; neither is delivery work. - Delivery Work and affected subject. Follow the §4.3 route to identify the actual provider and admit the dated Work independently; add the separate F.6 check only if this use must also state the assignment under which the delivery was performed. Exact affected referents, pre-work and post-work states, and actual-change, production, delivery, or acceptance relations state what happened under their own governors. A mathematical Delta expression is optional and remains a separate lens for a named comparison.
- Evidence and evaluation. Evidence relations support delivery and satisfaction claims. A separately performed evaluation occurrence has an actual operation application with a declared result binding; any verdict episteme is separately constituted and governed.
- Provider and consumer participation. The promise-content fields typed by
U.KindRefidentify local provider and consumer system-role kinds. Assignment occurrences identify admitted holder Systems and assignment extents; their declaredU.SystemRoleAssignmentspecies define the participant meanings. - Measures.
U.Measureclaims such as availability or lead-time readings derive from selected work facts through named characteristics, C.16 measurement templates, A.10 evidence relations, aggregation rules, and temporal policies; when a particular measurement method matters, itsU.MethodDescriptionis cited. - Structure boundary. Promise content is not a structural part. The systems that expose access or perform delivery retain their own parts, selected structures, and
ArchitectureOf@Contextrelations.
A.2.3:End
Episteme Evidence-Use and Status-Use Relations
Type: Boundary and relation-use pattern Status: Stable Normativity: Normative
Problem Frame
Use this pattern when an episteme, such as a report's content, is being used as evidence, source, status bearer, assurance input, or causal-use input for a claim.
Use it when the working question is:
- which episteme is being used;
- which claim, theory statement, status assertion, use, or causal-use question the episteme is being used for;
- which effective source scheme (when interpretation depends on it), ClaimScope, grounding holon, polarity, relevance window, assurance use, weight model, and provenance constraints are current;
- whether source wording such as "evidence role", "status role", "standard role", or "the report plays a role" hides an evidence-use, status-use, source-use, publication-use, assurance-use, gate-use, or causal-use relation;
- whether the evidence-use or status-use relation is sufficiently specified for the intended reliance, or only enough for orientation, source-finding, a reversible probe, or a narrowed use.
Primary EntityOfConcern. The EntityOfConcern is the evidence-use relation or status-use relation around an episteme.
First useful move. Name the exact episteme and the claim or governed status for which it is being used. Then point outward, when current, to the dated producing/evaluating work and actual bindings, domain-local result and direct governor, C.2.1 result episteme, A.10/G.6 provenance, G.11 currentness, receiving work and direct use relation, local RelianceDisposition, and B.3 assurance boundary.
What goes wrong if missed. Producing or evaluating work is attributed to the document itself, a dataset is treated as if it were classified under a work-facing system-role kind, a dashboard status is used as permission, a proof is used outside its theory-version fence, or a simulation-only counterfactual output is relabelled as realized causal evidence.
What this buys. A cheap first-use classification that identifies the episteme and its evidence-use or status-use relation. The further questions in §4.6 are answered through their direct patterns.
Not this pattern when. Use A.13 to identify the actual performer and A.15.1 to admit performed Work independently. If the current result must also identify the assignment under which that Work was performed, check it separately through F.6. Use A.6.1 for actual bindings, and use the exact formal, measurement, causal, diagnostic, conformance, comparison, selection, acceptance, gate, permission, commitment, system-role-kind, assignment, or decision pattern for its local result. Use C.2.1 for the result episteme, A.10/G.6 for provenance and bounded reliance, G.11 for currentness, B.3 for assurance, F.10 or another direct status pattern for status, and E.17 for publication. A.2.4 classifies only the episteme's first evidence-use or status-use.
Problem
Source text may use U.EvidenceRole or another evidence-like role label for a real need: an episteme can be used as evidence for a claim under an effective source scheme and exact ClaimScope, with polarity, time, assurance use, weight, and provenance constraints. Treat those spellings as source-word triggers. The FPF repair states an evidence-use relation; it does not classify the episteme under a system-role kind or place it in a U.SystemRoleAssignment.
Unresolved role-shaped wording can lead to the following failures:
- Episteme-as-holder drift. A paper, proof, dataset, standard, or dashboard cell is treated as if it were classified under a work-facing system-role kind or filled the holder position of an assignment.
- Evidence-word ontology drift.
ModelFitEvidenceRole,MeasurementEvidenceRole, orAxiomaticProofRoleis treated as a kind merely because the source label ends in Role, instead of being resolved to an evidence-use relation classification or local evidence-use label. - Claim relation collapse. Target claim, grounding holon, claim scope, polarity, relevance window, assurance use, weight model, and provenance constraints are hidden behind one source label ending in Role.
- Evidence and status collapse. A status badge, standard reference, approval-looking display, publication face, or requirement source is treated as evidence, status assertion, gate passage, permission, and assurance at once.
- Work confusion. The work that produced an episteme and the later use of that episteme as evidence are folded into one relation.
- Causal-use laundering. Observational association, intervention, realized counterfactual sample, identified counterfactual estimate, and simulation-only output are relabelled by evidence-wording instead of being governed by
C.28. - Cross-local leakage. Evidence accepted under one source scheme, ClaimScope, and use is reused under another without recovering the changed meaning, source currentness, reliance, or assurance-use conditions and any actual F.9 relation.
Forces
Solution
Do not create or use source spelling U.EvidenceRole as a durable FPF kind. Do not place an episteme in U.SystemRoleAssignment merely because it is used as evidence, source, standard, requirement, definition, explanation, publication, status bearer, or assurance input.
Use direct relation patterns instead:
First-use split
An A.2.4 assertion answers only: which episteme is classified for which evidence-use or status-use, under which effective source scheme when interpretation matters, with which ClaimScope, polarity or status value, and window. When source production, evaluation, a local result, result episteme, provenance, currentness, receiving work, reliance, or assurance matters, the assertion names the direct object and the pattern passage that defines or constrains its claim; it does not re-express them as slots of a generic evidence result.
Evidence-Use Relation Slots
An evidence-use relation obtains around an episteme and a claim or effect.
These SlotKinds are evidence-use relation positions.
Status-Use Relation Slots
A status-use relation is a relation around a bearer, status value, scope, window, source, and use.
These names are repair vocabulary for status-use relations. Durable status families remain governed by F.10 or a direct status pattern.
Minimal Evidence-Use Statement
Write only fields that decide this first use:
Minimal Status-Use Statement
A.2.4 does not fill a missing direct governor with a generic status, evidence, work-result, or evaluation-result relation.
Formal, empirical, causal, and status first uses
Source labels such as AxiomaticProofRole, ObservationEvidenceRole, MeasurementEvidenceRole, ModelFitEvidenceRole, CalibrationEvidenceRole, and BenchmarkEvidenceRole are wording triggers. Recover the exact first-use classification or relation; the labels are neither local system-role kinds nor result kinds by spelling.
Formal line. Classify the exact proof, derivation, counterexample, theory note, or proof-result episteme against the named theorem and theory-version fence. The formal pattern contains the defining content for entailment, refutation, malformed-proof, timeout, or checker-failure results; C.2.1 is the pattern for the episteme that states the result. When proof-checking is asserted as dated U.Work, use A.13 to identify the actual performer and A.15.1 to admit the occurrence independently. If the proof-checking account must also identify the assignment under which the Work was performed, check that relation separately through F.6. Keep the Method and bindings separate. A.2.4 states only how the episteme is used.
Empirical and measurement line. Classify the exact dataset, observation episteme, C.16 measurement-result episteme, replication result, calibration result, benchmark result, or model-fit result episteme against one named claim. For any producing or evaluating Work, use A.13 to identify the actual performer and A.15.1 to admit the dated occurrence independently. If that account must also identify the assignment under which the Work was performed, check it separately through F.6. Keep direct relations or A.6.1 bindings separate. Each local result remains with C.16 or its exact domain governor; A.10/G.6 retain provenance; G.11 retains currentness.
Causal line. C.28 is the pattern for the causal-use question, estimand, separate evidence/identification/estimate/sampling/simulation components, realizability, support result, supported use, and unsupported use. A.2.4 may classify the exact C.2.1 episteme used at first contact; evidence wording cannot turn simulator output into interventional or realized-counterfactual evidence.
Status line. A visible status carrier is classified separately from the governed status assertion. F.10 or the exact status pattern contains the defining content for the status value, G.11 is the pattern for edition currentness, and a gate, permission, commitment, system-role-kind, assignment, Work, assurance, or decision pattern contains the defining content for its own result. Display presence establishes none of them.
Work, result, provenance, and receiving-use boundary
Keep these objects separately recoverable whenever they are current:
- the classified episteme and the exact claim or status for which it is used;
- each actual performer identified through A.13; the dated source-producing or evaluating Work independently admitted through A.15.1; a separate F.6 check when the result must also identify the assignment under which that Work was performed; and separate Method, resources, and actual direct/A.6.1 bindings;
- the domain-local result and its direct governor;
- the distinct C.2.1 episteme that states that result;
- the A.10/G.6 source and provenance path;
- the G.11 currentness result when currentness affects use;
- the receiving dated work and exact premise, reference, decision-use, operation-argument, or other direct use relation; and
- the local A.10
RelianceDisposition, with B.3 entered only for an assurance claim or material reliance.
Use A.2.4 only to classify evidence use or status use around the episteme.
When episteme inception through work matters, A.15.PROD supplies the local entity-identity inception claim.
Shortcut cost and reopen condition
A.2.4 is the inexpensive first-use classifier. It may identify the episteme, target claim or status, effective source scheme when material, ClaimScope, polarity or value, window, intended use, applicable definition or constraint, and any unsupported overread grounded under F.19:4. It does not decide the source work, local result, provenance, currentness, assurance, causal support, gate passage, permission, commitment, publication interpretation, or receiving action.
Open only the exact subject question whose predicate decides the use: A.13 for the actual performer; A.15.1 for independent Work admission; F.6 when the result must also identify the assignment under which that Work was performed; A.6.1 for actual bindings; the domain result predicate plus C.2.1 for result content; A.10/G.6 for provenance and bounded reliance; G.11 for currentness; B.3 for assurance; C.28 for causal use; F.10 for a status family; or E.17 for publication. Reopen the A.2.4 classification when the episteme, target claim/status, scope, polarity/value, window, or intended use changes.
Archetypal Grounding
Proof result used as evidence
ProofResult-12 is a C.2.1 episteme stating an entailment under GraphTheory_v3.1. Dated checker work, its method, theory and proof bindings, and the formal entailment result are recovered under their subject patterns. A.2.4 classifies the episteme as supporting Theorem-12 inside the theory-version fence. A.10 records source/provenance; in later review work, a reviewer uses the episteme through an exact premise relation. Timeout or checker failure would remain distinct from refutation.
Measurement result used in acceptance
PressureResult-E is the C.16 measurement-result episteme for gas pressure at port P. It states the measurand, Characteristic, Scale, value, uncertainty, model, calibration basis, time stance, and dated measurement work. A.2.4 classifies it as evidence used for the exact pressure-limit claim. In separate evaluation work, an evaluator applies the G.4 clause through A.6.1 bindings and obtains unknown; a different C.2.1 episteme states that verdict. A.10/G.6 preserve provenance, G.11 currentness, and in later C.11 decision work, a decision-maker relies on the verdict episteme. Raw detector output, indication, pressure state, measurement result, verdict, and decision remain distinct.
Dashboard status cell
A release dashboard displays Ready. A.2.4 may classify the cell as a status-use carrier for one named status assertion. The source register, scope, window, status value, G.11 currentness, and provenance must be recoverable. A.21 remains the pattern for any gate decision, C.11 any release decision, A.2.8.PER any permission, A.15.1 any performed work, and B.3 any assurance claim. A copied or stale cell establishes none of them.
Simulation-only output
A simulation-output episteme is classified for one bounded C.28 claim. C.28 retains simulationResultRef, model assumptions, validation, the causal-use support result, supported use, and unsupported use. A.2.4 cannot relabel the episteme as realized-counterfactual or interventional evidence; simulation Work, simulator result, result episteme, provenance, and later reliance remain separate.
Bias-Annotation
This pattern mainly blocks six biases:
- episteme-as-system-role-holder bias: an episteme is placed in
U.SystemRoleAssignmentbecause it is useful as evidence or status; - evidence-name-as-kind bias: an evidence-use label ending in Role is treated as a local system-role kind without a C.3 identity basis and membership criterion;
- status-display-as-authority bias: a visible badge or status cell becomes gate passage, permission, or assurance;
- work-as-evidence-use collapse: producing work, produced episteme, and later evidence use are treated as one relation;
- scope-free evidence bias: target claim, grounding holon, claim scope, polarity, time, assurance use, or provenance constraints are omitted;
- causal laundering bias: causal evidence classes are changed by source vocabulary rather than by
C.28causal-use reasoning.
The repair is to recover the episteme first, then recover the evidence-use, status-use, source-use, publication-use, assurance-use, or causal-use relation that is current.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
The positive consequence is a smaller ontology and clearer use. Admitted systems may be classified under exact local system-role kinds and may hold obtaining system-role assignments; epistemes are instead used through direct evidence-use, status-use, source-use, publication-use, requirement-use, definition-use, explanation-use, assurance-use, or causal-use relations.
The cost is explicit relation recovery. A phrase such as "evidence role", "status role", "standard role", "proof role", or "benchmark role" no longer closes the claim. The user needs to recover which episteme, claim, scope, status, time window, provenance constraint, and direct pattern are current.
The payoff is that one episteme can be reused honestly across many claims. Each use can have a different target claim, grounding holon, scope, polarity, relevance window, assurance use, weight model, or provenance constraint without multiplying system-role kinds.
Rationale
Evidence-use and status-use remain admitted first-use relation positions because one episteme can be classified for different claims or governed statuses. The classification points outward to, and never replaces, performed Work, the domain-local result, the C.2.1 result episteme, provenance, currentness, receiving reliance, or assurance.
SoTA-Echoing
Source qualification was checked against the publishers' current surfaces on 2026-07-30. It remains qualified through 2027-07-30 unless a Recommendation, specification/tag, assurance standard, online causal edition, or adopted foundational-ontology account changes earlier. Only sources that change A.2.4's first-use classifier are decision-governing; other lineage examples remain non-governing.
Source refresh is local: replay the row's named SlotKind or rule, one case, and checklist locus before widening. A changed source cannot by itself alter the domain-local result, Work, provenance, currentness, assurance, causal verdict, local system-role kind, or system-role assignment handled under a neighboring subject pattern.
Relations
- Builds on:
A.2for exact local system-role kinds,A.2.1forU.SystemRoleAssignment,A.6.5for SlotSpec discipline, andC.2.1for episteme identity and its distinct constitution, empirical-grounding, and edition relations. - Coordinates with:
A.10andG.6for descriptive source/provenance paths;G.11for currentness;B.3for assurance;C.28for causal-use results;F.10for status families;C.2.1for result epistemes; exact domain patterns for local results; andE.17/E.10.D2for publication, view, explanation, and description-use cases. - Separates from: A.13 for actual performers; A.15.1 for independently admitted performed Work; F.6 when a receiving result must also identify the assignment under which that Work was performed; A.6.1 for actual bindings; A.15.PROD for episteme inception when current; gate, permission, commitment, system-role-kind, assignment, measurement, formal, diagnostic, conformance, comparison, selection, acceptance, causal, and decision patterns for their local results; and receiving-work patterns for actual later use.
- Precision-restoration route: When source wording says "evidence role", "status role", "standard role", or another role-shaped phrase around an episteme, use
E.10.ROLEto recover the governed object or relation. UseA.6.RSIRonly when the result is a relation participant meaning, declaration place, interface place, or representation position; useE.10.ARCHfor the wider ontology-first repair architecture.
Lowering, Repair, and Refresh
Lower an attempted A.2.4 use when the episteme is known but the target claim, scope, polarity, status value, time window, or provenance constraints are not recoverable. The lowered result may be source-finding, orientation, an evidence-needed note, a status-source request, or a narrowed reliance use.
Repair the use when a neighboring object is current: dated work and actual bindings, a domain-local result, its C.2.1 episteme, source/provenance, G.11 currentness, receiving work and direct use, A.10 reliance, B.3 assurance, gate passage, permission, commitment, publication, requirement, definition, or explanation.
Refresh the use when the episteme edition, target claim, grounding holon, claim scope, theory version, relevance window, source-currentness relation, status source, proof check, measurement trace, method description, or assurance-use relation changes.
A.2.4:End
SystemRoleAssignmentStateRelation - Assignment-State Recognition and Work Admission
Type: Definitional (D) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain designations. Say “this assignment to a system role satisfies this state condition” for the relation and “state condition for an assignment to a system role” for the predicate.
Use this pattern when one exact assignment to a system role already obtains, but a method step, Work occurrence, incompatibility check, or operational gate depends on that assignment satisfying a particular condition during a particular window.
Start with the practical question: Does this exact assignment satisfy this exact state condition throughout the window that matters now? The first useful result is the current SystemRoleAssignmentStateRelation occurrence or its absence. Add an assertion and evidence-use relation only when a later decision must rely on that result.
Typical working moments include these:
- a calibrated inspection robot is assigned to
InspectorSystemRole, but inspection Work should start only while calibration, synchronization, and operating-envelope conditions hold; - an incident commander remains on call, yet a conflict or fatigue condition may make that assignment non-admitting for one response window;
- a method description declares a state condition for an assignment to a system role, while the current assignment has not yet been tested against it;
- two assignments are incompatible only while both satisfy the conditions that make them work-admitting; and
- a model-use structure,
KindSignature, reference scheme, or bridge changes the meaning of one predicate clause and must therefore be included in that predicate's semantic basis.
Primary EntityOfConcern. The EntityOfConcern is one obtaining SystemRoleAssignmentStateRelation, a direct relation kind admitted under U.Relation. Its two participants are one exact obtaining U.SystemRoleAssignment occurrence and one by-value SystemRoleAssignmentStatePredicate. The relation's maximal continuous temporal extent comes from uninterrupted predicate truth while that assignment obtains.
Primary working reader. The first reader is an engineer, operator, method designer, safety checker, or manager deciding whether a current assignment can support the next method or Work claim without confusing assignment, capability, state, evidence, gate outcome, and performed Work.
What goes wrong if missed. A system-role label is treated as current readiness. A dashboard value is substituted for the world-side state relation. Missing evidence is read as proof that the predicate is false. Capability is mistaken for Work admission. A state-machine diagram is used as both the ontology and the method order.
What this buys. The reader can identify repeated state episodes inside one continuing assignment, keep evidence and world-side obtaining distinct, combine simultaneous conditions, and pass the exact state claim to the direct pattern governing the next decision or Work use.
Not this pattern when. Use A.2 and C.3 for the exact local system-role kind, A.2.1 for the assignment and its holder, A.2.2 for capability and operating envelope, A.2.7 for relations among system-role kinds, and A.15.1 for Work that actually occurred. Use A.2.4 or A.10 when the current object is the evidence-use relation rather than the assignment-state relation. A displayed status, credential entry, gate decision, or organizational position keeps its own direct pattern.
Kind Settlement
SystemRoleAssignmentStateRelation is admitted as a direct relation kind under U.Relation.
SystemRoleAssignmentStatePredicate is a local ValueKind declared by this pattern, not another root U-kind. One predicate value is identified by:
- the exact local system-role kind for whose assignments it is defined;
- normalized truth-condition ClaimGraph clauses naming the governed qualities or relations tested;
- its temporal reading;
- its applicability conditions; and
- the exact semantic basis whose edition changes meaning, including a
KindSignature, reference scheme, bridge, or model-use structure only when the clauses depend on it.
A displayed name such as InspectionReady can designate the predicate. The name alone does not identify it. Ready@InspectorSystemRole and Ready@ApproverSystemRole are different predicate values unless one separately declared predicate has one exact common domain and identical clauses, temporal reading, applicability, and semantic basis.
A compatible semantic-basis edition preserves the predicate only through an explicit predicate-continuity decision showing that those identity-bearing facts continue. A changed system-role kind, truth clause, temporal reading, applicability condition, or meaning-bearing semantic basis yields another predicate.
A SystemRoleAssignmentStateAssertion is a U.Episteme whose EntityOfConcern is the exact assignment or an explicitly individuated state-relation occurrence, according to the claim. Its ClaimGraph names the predicate, direct claim family, and assertionPolarity: affirmative | negative. An affirmative claim may state a known actual extent only after A.2.5 independently establishes obtaining. A receiving evaluation may separately state its target window. Supported, refuted, or unresolved reliance belongs to A.10 or a separately constituted evaluation result or reliance assertion. Assertion, reliance posture, evidence episteme, evidence-use relation, and world-side occurrence remain different objects.
A representation episteme may describe predicates, possible configurations, and possible changes. A statechart or state-machine display is a mathematical or representational lens.
Problem Frame
An occurrence of a declared U.SystemRoleAssignment species assigns an admitted System to one local system-role kind and supplies any other values required by that species. It does not establish that the assignment satisfies a condition needed by a Method or Work claim in the evaluated interval.
Robot-7 can remain under InspectionShiftAssignment-17 throughout an eight-hour shift while calibration expires at noon. The assignment continues. The InspectionReady state occurrence ends when its predicate ceases to hold. Recalibration can start another occurrence under the same assignment without creating another assignment.
The same distinction appears in social and computational Work. An on-call person can remain assigned while conflicted or fatigued. A service can remain assigned to ApproverSystemRole while one predicate concerns fulfilment approval and another concerns payment authorization. A tool-using agent can expose a capability while a concrete action remains inadmissible for the current task and inputs.
The engineering problem is therefore to identify the exact assignment, predicate, and interval; distinguish affirmative or negative assertion polarity from reliance posture; recognize an occurrence only while the direct predicate is true; and connect an assertion to evidence only when a consequence-bearing use needs that support.
Problem
Without a direct assignment-state relation ontology, six recurring failures appear.
- Assignment becomes readiness. Holding an assignment is treated as satisfying every state precondition of every method that names its system-role kind.
- State label hides the predicate.
Ready,Approved, orActivetravels between domains although its truth conditions differ. - Evidence becomes the state. An evidence or display episteme is treated as the world-side relation.
- Missing evidence becomes falsehood. An unrecovered or stale evidence path is taken as proof that the predicate does not obtain.
- Capability becomes admission. A system's ability to perform an operation is overread as current admission of this concrete method or Work claim.
- State notation becomes method order. A transition arrow is treated as the Work that changes the state, although Method, Work, transformation, and state-change claim have different ontics.
Forces
Solution
Start from a readable assertion:
Robot-7's current assignment toInspectorSystemRolesatisfiesInspectionReadythroughout the inspection window.
When a receiving use needs reusable participant typing, use the declared RelationSignature. When it needs occurrence identity, apply the world-side identity rule in section 4.3.
Direct Relation Declaration
This pattern defines the RelationSignature for SystemRoleAssignmentStateRelation:
These are the only two generic participants. SystemRoleAssignmentStateRelation obtains exactly while the assignment obtains and the fixed by-value predicate is true under its temporal reading. Its actual extent is the maximal continuous interval of that obtaining. An affirmative assertion or occurrence description may state the known extent as systemRoleAssignmentStateExtent only for an independently established occurrence; a receiving evaluation may state a separate declaredSystemRoleAssignmentStateEvaluationWindow. Neither temporal value, assertion polarity, reliance posture, taxonomy episteme, reference scheme, bridge, nor model-use structure is another relation participant.
A relied-on assertion uses a direct evidence-use relation. Another world-side occurrence affects predicate truth only when an exact truth-condition clause cites that occurrence through its subject pattern.
Predicate Meaning and Semantic Basis
One SystemRoleAssignmentStatePredicate value names:
- the exact local system-role kind for whose assignment species the predicate is defined;
- normalized truth-condition ClaimGraph clauses, each naming its governed quality or relation, actual participants, and subject pattern;
- the temporal reading, such as truth at an instant, throughout a receiving-use window, or for a declared tolerated portion of that window;
- applicability conditions; and
- only the semantic-basis references whose editions can change those clauses or their interpretation.
This content defines one predicate value. The direct qualities and relations keep their own kinds and subject patterns.
Predicates need not be mutually exclusive. Calibrated, Synchronized, and InRange can hold simultaneously; InspectionReady may be a conjunction over them. Use an exclusive state configuration only when the subject-domain model actually needs one.
A shared label does not establish shared meaning. Cross-context reuse needs the same predicate identity or an explicit comparison or bridge stating which truth and admission effects are preserved. A bridge or scheme enters the predicate's semantic basis only when the predicate clauses really depend on it.
Occurrence Identity and Repeated Episodes
Do not replace the identity rule with a tuple key. One SystemRoleAssignmentStateRelation occurrence begins when one fixed assignment starts satisfying one fixed predicate. It continues while the assignment obtains and the predicate remains true without interruption. It ends when the assignment ceases, the predicate becomes false, or either participant changes. A later return to truth starts another occurrence.
An affirmative assertion or occurrence description may state the currently known systemRoleAssignmentStateExtent. Recording an end boundary for a previously open extent refines the description of the same occurrence when assignment obtaining and predicate truth were uninterrupted. A demonstrated predicate gap separates occurrences. Thus true → false → true produces two state occurrences inside one continuing assignment.
A later correction of an assertion interval, changed evidence relation, assertion edition, dashboard display, or publication creates no world-side occurrence while truth was uninterrupted. An evidence gap gives the receiving use unresolved reliance; it does not demonstrate a gap in predicate truth or add a third assertion polarity.
Assertion and Evidence Use
For a relied-on state claim, keep this order:
- name the exact
U.SystemRoleAssignment, by-valueSystemRoleAssignmentStatePredicate, direct claim family, and affirmative or negative assertion polarity; - when A.2.5 independently establishes obtaining and the receiving use needs occurrence identity, individuate the occurrence under section 4.3;
- state a
SystemRoleAssignmentStateAssertion : U.Epistemewhose ClaimGraph carries the predicate, direct claim-family reference, polarity, knownsystemRoleAssignmentStateExtentonly for an affirmative claim about an established occurrence, and any separatedeclaredSystemRoleAssignmentStateEvaluationWindow; - include a meaning-bearing semantic-basis reference in the predicate identity, while a non-meaning-changing receiving-use selection stays with that use;
- use
A.2.4for compact evidence use andA.10only when fuller evidence-basis detail changes the relied-on use; and - let the direct consumer apply the supported assertion under its own subject pattern.
When evaluation itself is current, recover the exact actual evaluator System through A.13 and let A.15.1 independently admit exact dated evaluation W_eval : U.Work. Add F.6 performedUnderAssignment(W_eval, RA_eval) through the same obtaining A.13 assignment only when this account or its receiving use expressly consumes precise assignment-bound attribution; F.6 identifies neither assignment nor performer, and missing or failed F.6 leaves the evaluation Work intact. A separately constituted evaluation result is a C.2.1 episteme whose ClaimGraph states the judgment about the assignment or established occurrence. Work, performer, assignment, result episteme, provenance, and receiving reliance remain neighboring objects; none becomes a state-relation participant or identity discriminator.
The actual state extent, target evaluation window, and evidence-relevance interval answer different questions. Expired evidence lowers reliance without retroactively rewriting an earlier world-side occurrence.
Work-Admission Use
A.2.5 supplies the state relation and exact assertion form. Use the direct subject patterns when Method selection, a gate decision, authority, or a claim that Work occurred is needed.
For a consequence-bearing admission use, the system performing the consumer's evaluation or decision Work applies that consumer's direct pattern and checks:
- the exact
U.SystemRoleAssignmentobtains throughout the receiving decision or Work window; - the consumer selects one exact
SystemRoleAssignmentStatePredicate, whose truth condition may be an explicit conjunction; - each relevant assignment has an obtaining
SystemRoleAssignmentStateRelationwhose actual extent covers the receiving-use window; - the assertion has the evidence relation and currentness that this consumer requires; and
- every other admission condition is separately established under its subject pattern.
The consumer's direct pattern defines any admit, deny, defer, or unresolved outcome. A.2.5 contributes only the exact state relation on which that decision Work may rely.
System-Role-Kind Relation Use
When substitution, incompatibility, bundle, or residual qualification among exact local system-role kinds is selected with A.2.7, test state sensitivity through exact assignments, state predicates, and windows.
- Substitution supports one admission condition only when the candidate assignment's current predicate satisfies the selected receiving rule.
- Incompatibility is stated for the exact same-holder or different-holder rule, Work identity condition, overlapping windows, and predicate conditions under which the conflict appears.
- A Work claim needing several system-role kinds uses the independently obtaining assignments and state occurrences needed by that claim. It does not require a Cartesian product of every possible state label.
A conjunction for one Work claim creates no composite system-role kind, assignment, or state predicate by form.
State-Machine and Change Lenses
Use statecharts or state machines when mutually exclusive configurations, orthogonal regions, guarded changes, or event handling improve the subject-domain model. The notation describes possible configurations and changes; it does not replace the direct relation occurrence.
A change arrow represents a proposed or observed change in predicate truth; it is not the world-side change by form. Recover the exact changed object or relation, then use the direct pattern governing that change. Use the Method description for any prescribed Method order.
When the model needs continuous coordinates rather than discrete labels, use A.19 for the characteristic space and let the by-value state predicate select a region, band, ordering condition, or other exact condition. Measurement and evaluation stay with C.16 and their direct patterns.
Semantic Basis and Receiving-Use Qualification
Most state claims need no bridge, reference scheme, or bounded-model-use structure. Directly governed truth-condition clauses are enough.
When a KindSignature, reference scheme, bridge, or BoundedModelUseStructure changes the meaning of a predicate clause, include its exact edition in SystemRoleAssignmentStatePredicate semantic basis and therefore in predicate identity. When it changes only how a separate receiving assertion, comparison, or Work use presents or consumes an unchanged predicate, cite it in that receiving use instead. The generic relation signature remains the two-participant declaration in §4.1.
Working Guidance
- Write the readable sentence naming the current assignment and state condition; name the receiving-use window only when the current check selects one.
- Recover the predicate by value: exact system-role kind, normalized truth-condition clauses, temporal reading, applicability, and only meaning-bearing semantic-basis editions.
- Derive the maximal continuous extent from assignment obtaining and predicate truth; separately check any receiving-use window against that extent.
- Ask whether the receiving use needs occurrence identity and whether it relies on the state claim. If both answers are no, keep the readable assertion and stop.
- For relied-on use, make the assertion episteme, polarity, direct claim-family reference, and required evidence-use relation explicit. Record supported, refuted, or unresolved reliance separately; absent evidence is neither negative polarity nor world-side non-obtaining.
- Leave capability fit, Method selection, gate outcome, authority, assurance, and performed Work with their subject patterns.
- Put a meaning-changing semantic basis in predicate identity and a merely use-qualifying selection in the receiving use, never in the generic relation signature.
Worked Slices
Robot Inspection After Recalibration
Robot-7 already holds this A.2.1 assignment:
The bearing-inspection method description declares InspectionReady, whose clauses require current calibration, clock synchronization inside tolerance, operating-envelope fit, and no active quarantine relation throughout the inspection window.
A calibration report is a separate U.Episteme; an A.2.4 evidence-use relation can support reliance on this assertion. At noon calibration validity ends and the predicate becomes false, so the first state occurrence ends while the assignment continues. Recalibration at 12:30 can make the same predicate true again and begins a second occurrence under that assignment.
Drive Motor in a Pump Assembly
Motor-M1 is the holder of an exact pump-maintenance assignment whose assigned local kind is DriveMotorSystemRole. The current Work claim needs DriveReady, whose predicate names the exact supply relation, torque capability-fit relation, thermal band, and installed-connection relation.
The pump assembly grounds those direct claims; it is not a mandatory context slot. No scheme or BoundedModelUseStructure is required because the direct predicate clauses determine the state. Torque capability can remain while a missing supply relation makes DriveReady false. An affirmative DriveReady assertion states the assignment's condition; use A.15.1 for any claim that pumping Work occurred.
Socially Constituted Credential State
A clinician holds one exact assignment whose local kind is ProcedureOperatorSystemRole. Predicate CredentialCurrentForProcedure-X depends on an accepted credential decision, its validity interval, and absence of a suspending decision.
The accepted decision relation helps constitute the predicate because the credential ontology says so. A certificate publication may evidence that decision but does not substitute for it. The state occurrence still has the assignment and predicate as participants; evidence and publication remain neighboring relations.
Two Approval Predicates
ApprovalService-2 holds an exact assignment to ApproverSystemRole. FulfilmentApprovalReady concerns fulfilment-state change; PaymentApprovalReady concerns payment authorization. Their truth clauses and applicability differ, so they are different SystemRoleAssignmentStatePredicate values even if one interface displays both as Ready.
If an independently selected model-use structure changes the meaning of one predicate's clauses, its exact edition belongs in that predicate's semantic basis. If it only selects which already identified predicate a view presents, it remains a receiving-use qualification.
Approved Standard or Evidence Dataset Is a Different Relation
Suppose a project says, “Standard S is approved.” The standard is an episteme, not a system under a work-facing assignment. Recover the direct status-use, decision, source-use, or publication-use relation.
Likewise, a dataset or report that “plays a role” remains an episteme used through direct evidence, source, measurement, freshness, provenance, or assurance relations. Apply A.2.5 only if an admitted system's exact assignment is being tested by a SystemRoleAssignmentStatePredicate that depends on one of those relations.
Archetypal Grounding and Bias Control
Physical system. A motor, robot, laboratory instrument, or production cell can hold an assignment while its state predicate changes as physical relations and measured characteristics change.
Human or organizational system. A person, team, or organization can remain assigned while a current conflict, credential, fatigue, resource, or decision relation changes the predicate relevant to one Work claim.
Computational system. A service or agent can expose a capability while each concrete action still needs current assignment, state predicate, task relation, and direct authorization or gate evaluation. This is one specialization, not the universal meaning of assignment state.
Episteme boundary. A representation or evidence episteme can describe or support a state claim.
The main bias risk is label-first reasoning. A familiar state word invites the reader to skip predicate recovery. Repair it by recovering the assignment, predicate by value, actual state extent, and only the assertion and evidence-use relation needed by the receiving use.
Conformance Checklist
Common Failure Modes and Repairs
Consequences
Benefits:
- one assignment can support several separately identifiable state episodes;
- simultaneous predicates remain expressible;
- predicate truth, assertion, evidence use, and Work admission can change independently and be repaired locally;
- Method and gate assertions cite an exact current relation instead of a status label; and
- physical, social, organizational, and computational cases use the same relation discipline.
Costs and limits:
- load-bearing predicates must be written by value, including temporal semantics and any meaning-bearing semantic basis;
- consequence-bearing reliance needs only the evidence currentness and direct consumer that its use requires;
- cross-context reuse may need a continuity or bridge decision rather than label matching; and
- A.2.5 does not define every subject-domain predicate, measurement method, authorization relation, or state-changing Method.
Reopen or lower only the affected claim when the assignment, predicate identity, actual state extent, receiving-use window, evidence relevance, direct consumer rule, or meaning-bearing semantic basis changes. Do not rewrite the system-role kind or assignment when only one state episode changes.
Rationale
The pattern starts from the world-side relation because state truth can matter before a record exists. A robot can cease to satisfy its inspection predicate before a dashboard refreshes. A credential decision can constitute an institutional condition before a certificate is published. A supported assertion is needed for some reliance uses.
Using uninterrupted predicate truth as the identity boundary distinguishes repeated episodes even when assignment and predicate stay the same. A description may refine an open interval's end without creating another occurrence; a genuine false gap does create a boundary.
Assignment state is neither capability nor Work. Capability says what operations a system can perform in an envelope. SystemRoleAssignmentStateRelation says whether one current assignment satisfies one predicate over an interval. A Work claim states what was actually performed. A Method, gate, or Work pattern may depend on all three, but none proves the others.
SoTA-Echoing
The sources' transferable contribution is bounded: current action decisions need exact participants and predicates; temporal monitoring can remain unresolved; capability and action admission differ; and state-machine notation is optional modeling machinery.
Relations
A.2.5:End
Unified Scope Mechanism (USM): Context Slices & Scopes
Status: Stable Type: Ontic pattern
Kind Settlement
U.ContextSlice and U.Scope are the durable USM values for scope work. U.ClaimScope, U.WorkScope, and U.PublicationScope are C.3-governed scope specializations under U.Scope, not independent root ontics. ContextSliceSet := Set[U.ContextSlice] is the mathematical ValueKind whose values are exact sets of independently identified context slices; it is neither a durable scope nor another U-kind. Each exact U.Scope has one ContextSliceSet value as its extension under the effective reference scheme. GammaTimePolicy, work-measure target sets, qualification-window policies, formality thresholds, detail values, abstraction-tier values, scope profiles, coverage metrics, guards, reports, and publication views remain policy values, characteristic values, non-U records, lenses, guard facets, or publication forms unless an exact admission predicate and current subject assertion establish another kind. Dotted forms such as U.Mechanism.Intension name the intension slot or intension form defined for U.Mechanism in A.6.1; they do not admit a separate structural U-kind.
One-line summary. A.2.6 lets a practitioner test one exact
U.ContextSliceagainst one exact set-valued scope. For a claim,member(slice, claimScope)istrueorfalse:trueadmits the claim-scope condition andfalsestops that use. An evaluation returnsunknownwhen its available basis cannot determine membership. The predicate is not aU.Relationoccurrence.
Use this pattern when a receiving action needs to decide whether a claim, capability, or publication use covers one exact combination of standards, environment, local sense, platform, cohort, or time selectors.
First useful move. Name the exact claim, its exact U.ClaimScope, and the target U.ContextSlice; evaluate membership. Stop on false. On unknown, obtain the missing evaluation input, narrow the attempted use, or abstain. Add a result episteme or table only when the receiving use needs one. If exact local senses must be translated, first name the obtaining F.9 Bridge, then state the separate affirmative C.2.1 claim for this translation's direction, rule, and tolerance. Before using the translated scope, establish evidence-based reliance through A.10 or assurance-based reliance through B.3.
What goes wrong if missed. Teams infer coverage from a document, table, “current context” label, or selected structure; treat an unevaluated slice as excluded; or mint ScopeDelimitationRelation occurrences for included and excluded slices. Those moves collapse predicate truth, evaluation, representation, and structure.
What this buys. One set-valued scope algebra supports exact membership, intersection, supported union, translation, widening, narrowing, and refit while keeping claim content, evaluation work, result epistemes, model-applicability relations, and selected structures separate. Vocabulary boundary. Use these scope names in live FPF wording:
- For epistemes, the only scope type is
U.ClaimScope(nick G in F–G–R). - For system capabilities, the only scope type is
U.WorkScope. - For publication views or forms, the only scope type is
U.PublicationScope. - The abstract architectural notion is
U.Scope— a durable scope value identified extensionally through one exactContextSliceSetvalue under the effective reference scheme. Intersection, SpanUnion, translation, widening, and narrowing operate on those extensions; refit changes an expression without changing the extension.U.Scopeis not aU.Characteristicand MUST NOT appear in anyCharacteristicSpace.
Source words such as applicability, envelope, generality, and capability envelope may appear only as explanatory aliases in non-normative notes.
Cross‑references.
- C.2.3 (Unified Formality F) and C.2.2 (F–G–R): this pattern defines G as
U.ClaimScope. - A.2.2 (Capabilities): capability gating now SHALL use
U.WorkScope. - F.9 (Bridges): use an exact obtaining Bridge only when membership content must be translated across exact local senses; a different label or reference scheme alone does not trigger translation. F.9 supplies the direct semantic relation only. The separate C.2.1 claim states the exact translation use, direction, rule, tolerance, and polarity; A.10 or B.3 governs reliance on that claim.
- Part E (Publication discipline; e.g., E.17 MVPK): publication views, cards, and lanes MAY declare
U.PublicationScopeto bound where a publication is admissible;U.PublicationScopeMUST NOT widen the underlyingU.ClaimScope/U.WorkScope. (USM supplies the scope calculus; Part E supplies publication discipline.)
Problem frame - Purpose and Audience
This pattern gives practitioners one exact question: does this slice belong to the scope needed by this use? It applies first to claim scope and reuses the same value algebra for work and publication scopes.
The claim-bearing episteme, capability, or publication object designates or uses an exact U.ClaimScope, U.WorkScope, or U.PublicationScope. The membership predicate, evaluation work, result episteme, gate, and evidence claim also remain separate.
With USM, a practitioner can:
- declare exact slice selectors and an exact scope predicate;
- evaluate membership as true, false, or currently unknown;
- combine exact scopes by intersection or independently supported union;
- translate only when exact local senses require an obtaining F.9 Bridge, a separate affirmative C.2.1 claim about this translation, and the current A.10 or B.3 reliance branch.
A.2.6 defines the scope values, membership predicate, mathematical scope algebra, exact reusable A.6.1 operation declarations, and use boundaries. Use A.15.1 for evaluation work, A.10 for evidence, A.21 for gate decisions, and A.22 for structure selection. The practitioner decides whether and which claim to widen for the receiving use.
Context
Cross‑disciplinary pressures
Modern projects couple formal specs, data‑driven models, safety cases, and operational playbooks. Each specification, model, safety case, or operational-playbook publication must say where it is valid—yet terminology drifts:
- Standards and specs often say applicability or scope.
- Modeling communities say envelope.
- Safety and performance documents speak about capability envelope.
- Knowledge patterns have used generality (G) as if it were “more abstract,” when we actually need “where the statement holds.”
Slice-bounded reasoning
U.ContextSlice is an addressable value identified by its exact declared selector schema and selector values under the effective reference scheme: for example local senses, named standard editions, environmental values, platform or cohort selectors, and a time selector when that selector belongs to the declared schema. One scope predicate may inspect only a projection of those selectors, but that projection does not reidentify the slice.
The practical question is therefore concrete: does this exact slice belong to this exact scope? A phrase such as “inside the current context,” a project label, or a selected U.Structure does not answer it.
Minimal, composable trust math
In F–G–R:
- F (formality) is “how strictly a claim is expressed” (C.2.3).
- G must be “where it holds,” not “how abstract it sounds.”
- R carries evidence and reliance currentness. Observed semantic mismatch or loss may be evidence about a proposed translation, while the permitted-loss tolerance belongs to the separate C.2.1 claim about that use.
When G is a set‑valued scope, composition becomes precise: serial dependencies intersect scopes; parallel, independently supported lines can publish a SpanUnion—but only where each line is supported.
Problem
- Synonym soup. Applicability, envelope, generality, capability envelope—different labels for the same mechanism led to mismatches in gating, review, and reuse.
- Abstraction confusion. Calling G “generality” invited teams to treat “more abstract wording” as “broader scope,” silently masking unstated assumptions.
- Split mechanics. Episteme vs system text used different algebra and guard language, though the same set operations were meant.
- Translation opacity. Exact local-sense translation was confused with ordinary designation resolution, causing automatic Bridge use and hidden changes to the supported slice set.
- Overloaded words. Validity clashed with Validation Assurance (LA); operation and operational clashed with Work and Run in A.15, producing governance ambiguity.
Forces
Solution - Overview
USM keeps the following things distinct:
U.ContextSlice- one addressable value identified independently of the predicate that later inspects it;ContextSliceSet- the mathematical ValueKindSet[U.ContextSlice], used for scope extensions and finite target sets;U.Scope- one durable scope value whose extension is one exactContextSliceSetvalue;U.ClaimScope,U.WorkScope, andU.PublicationScope- C.3 specializations for claim, capability, and publication uses;- membership semantics, mathematical scope algebra, and reusable operations - three separate layers: the bivalent predicate, its C.29 set representations, and the exact A.6.1 declarations used only when a receiving use needs an actual application and binding.
The primitive claim-scope question is member(x, S) for exact slice x and exact scope S. Intersection handles serial dependence. spanUnion is allowed only for independently supported areas. widen and narrow change the extension; refit preserves it while changing only a scope expression or parameterization. translate is used only when exact local-sense content must cross an obtaining F.9 Bridge and a separate affirmative C.2.1 claim names this translation's direction, rule, and tolerance. A receiving guard relies on that claim through a passing A.10 disposition or, when an actual named assurance claim is current, a B.3 AssuranceResult for the same use with disposition=supported-for-use; a different label or reference scheme alone selects none of these.
One exact U.ClaimScope may participate in a ModelApplicabilityRelation. That relation, its actual obtaining extent, a selected A.22 structure, a membership evaluation, and a table displaying members remain separate.
Lexical commitments. In normative text and guards, use Claim scope (G), Work scope, and Publication scope. Source words such as applicability, envelope, generality, capability envelope, or validity may remain only when quoted or explained; they do not name additional scope kinds.
Normative Definitions
Predicate semantics, mathematical algebra, and A.6.1 operations
Keep three layers explicit:
- Scope semantics.
member(x,S)is a bivalent predicate over one exactU.ContextSliceand one exactU.Scope. - Mathematical representation. The formulae below represent membership and set operations under C.29. Use the declarations and bindings below for an actual operation application.
- Reusable actual operations. When a receiving use needs one identified calculation or evaluation application and its bound result, use one of the exact A.6.1
OperationDeclarations below. These are argument and result declarations, never A.6.5 SlotSpecs.
Mathematical semantics.
Here T : ContextSliceSet is a finite target set, F : Set[U.Scope] is a finite scope family, B is an exact obtaining F.9 Bridge, C_use is the exact current C.2.1 claim with B as EntityOfConcern and affirmative polarity for this named scope-translation use, and RS is the exact target reference scheme. The claim's content names the direction, scope-correspondence rule, and permitted-loss tolerance used to select the target image; its effective ReferenceScheme makes those designations interpretable. scopeSubset, coversSet, widen, narrow, and refit are mathematical predicates or comparison classifications, not actual A.6.1 operations in this edition. The formula represents the claim's proposed mapping but proves neither the claim nor reliance on it and declares no operation application. Work that authors or compares scope declarations remains separately governed.
A.6.1 declaration A — ScopeMembershipEvaluationMechanism.
EntityOfConcernRef: exact operation familyScopeMembershipEvaluationOperationFamily = {evaluateMembership}.- effective
U.ReferenceScheme: the scheme under which this mechanism's argument, result, and application meanings are interpreted. SubjectKind:U.Scope.RangedValueKind:U.ContextSlice.ResultKind: declaration-local finiteU.KindMembershipEvaluationValue = {true, false, unknown}under C.3. Its membership rule admits exactly those three values. It is not a world-side third truth value, public U-kind, gate decision, or result episteme.SliceSetandExtentRule: absent; membership of the kindU.Scopeis not slice-dependent in the A.6.0 sense.
OperationDeclaration evaluateMembership:
ApplicationPredicate: with those bindings, evaluate member(targetSlice, scope) under the bound interpretation basis; return true or false when the basis determines the predicate and unknown when a required selector resolution or translation input is unavailable. The application leaves both arguments unchanged.
ApplicationIdentityRule: one application is one independently bounded evaluation invocation selected by the current calculation or evaluation-work locus. Repeating the evaluation with the same arguments is another application when another invocation occurs; argument equality alone does not merge them.
ApplicationExtentRule: the application begins when its exact argument bindings and interpretation basis are fixed for the invocation and ends when membershipJudgment is returned or the invocation stops without a result. A result binding cannot begin before the value is returned.
ScopeMembershipEvaluationMechanism LawSet. With the same exact argument bindings, interpretation basis, and effective reference scheme, evaluation is deterministic. true reports that the basis determines member(targetSlice, scope); false reports that it determines non-membership; unknown reports only that it cannot determine either result.
ScopeMembershipEvaluationMechanism AdmissibilityConditions. Admit an application only after the exact slice, exact scope, and exact interpretation basis are bound. unknown is admitted when that basis records an unavailable required selector resolution or translation input. A missing exact scope, slice, or basis blocks the application rather than creating a guessed binding.
ScopeMembershipEvaluationMechanism Applicability. Use this declaration only for evaluating exact U.ContextSlice and U.Scope values under its effective reference scheme. The receiving use names its exact U.ClaimScope, selected evaluation time when current, selected CHR:ReferencePlane only when the use is plane-dependent, and any mechanism-specific condition.
ScopeMembershipEvaluationMechanism SignatureManifest (optional). When dependency replay needs it, name the actual imported or provided declarations for U.ContextSlice, U.Scope, and the local MembershipEvaluationValue.
ScopeMembershipEvaluationMechanism neighboring objects. An evaluation application can occur within dated work governed by A.15.1. A separately persisted result episteme remains optional under C.2.1; A.15.PROD enters only for a current claim that work first constituted that episteme. Evidence-use and gate occurrences stay under A.10 and A.21. None of those objects, nor another evaluation invocation, reidentifies this mechanism unless it reveals changed declaration content.
ScopeMembershipEvaluationMechanism refinement or conservative extension. A refinement preserves evaluateMembership, its argument and result meanings, binding rules, application predicate, identity and extent, and the bivalent-truth boundary while stating every strengthened law or admission condition. A conservative extension adds exact optional arguments, results, or operations without changing those inherited meanings or admitted uses.
A.6.1 declaration B — ScopeDerivationMechanism.
EntityOfConcernRef: exact operation familyScopeDerivationOperationFamily = {deriveIntersectionScope, deriveSpanUnionScope, deriveTranslatedScope}.- effective
U.ReferenceScheme: the scheme under which this mechanism's operation meanings and returned scopes are interpreted. SubjectKind:U.Scope.RangedValueKind:U.Scope; each derivation operation still returns aU.Scope, so no distinct mechanism-levelResultKindis current.SliceSetandExtentRule: absent for the same A.6.0 reason stated above.
ApplicationPredicate rules. deriveIntersectionScope returns the scope represented under C.29 by intersection of extension(S) for S in scopeFamily. deriveSpanUnionScope implements the already established SpanUnion: it is admitted only when independenceBasis establishes the section 7.3 independence condition and returns the scope represented by SpanUnion(scopeFamily). deriveTranslatedScope is admitted only when the bound Bridge obtains and the bound C.2.1 claim has that Bridge as EntityOfConcern, affirmative polarity, and content naming this scope-translation use, its direction, rule, and tolerance. The application applies that rule within that tolerance and returns the scope represented by translate(bridgeOccurrence, scopeTranslationClaim, sourceScope, targetReferenceScheme). The formulae and claim alone declare no application or result binding.
For every governed-reference argument, record presence, citation, or a compatible token is insufficient: the reference must resolve to the exact value actually used. For every result row, the result binding obtains only when that exact application returns the independently identifiable extensional scope.
ApplicationIdentityRule: each derivation application is one independently bounded calculation invocation identified through its exact invocation boundary, mechanism edition, and operation designator rather than the argument tuple alone. Repeated calculations with equal arguments remain distinct applications.
ApplicationExtentRule: the application begins after every required argument is bound for that invocation and ends when the derived-scope value is returned or the invocation stops without a result. A result-binding extent cannot begin before that scope value is returned.
ScopeDerivationMechanism LawSet. Serial composition uses intersection. Parallel publication uses the one established SpanUnion and preserves only slices supplied by independently supported lines. Translation returns only the target-slice image selected by the bound claim's rule and tolerance over the bound obtaining F.9 Bridge. No derivation operation widens support by itself.
ScopeDerivationMechanism AdmissibilityConditions. Intersection and SpanUnion require at least two exact scopes. deriveSpanUnionScope additionally requires the bound independence basis to meet section 7.3. deriveTranslatedScope requires both an exact obtaining Bridge and the exact affirmative C.2.1 claim whose named rule and tolerance select the claimed target image. A missing or non-obtaining Bridge or a missing or non-affirmative claim blocks that positive derivation application rather than creating a guessed scope; the latter does not negate an otherwise obtaining Bridge.
ScopeDerivationMechanism Applicability. Name the exact source scopes and reference schemes required by the selected derivation. For translation, also name the bound Bridge and separate C.2.1 claim. Before a receiving guard, assertion, publication, or structure selection relies on the returned scope, require the exact A.10 evidence-provenance relation for this bounded use. For ordinary reliance, require RelianceDisposition=pass. If an actual named assurance claim about that use is current, require its B.3 AssuranceResult for the same bounded use with disposition=supported-for-use. A direct domain rule may require such a claim, but neither scope translation nor consequence creates it.
A missing or non-affirmative use claim or a non-passing A.10 disposition stops ordinary reliance without changing membership truth or the Bridge. When an actual named assurance claim is current, a B.3 AssuranceResult with disposition=narrowed supports only its stated narrower use; abstain, evidence-needed, reopen, or blocked stops the attempted use. A.10 pass or B.3 supported-for-use supports only the named use. Neither is legal, policy, or deontic authorization, and neither proves that a derivation application or another receiving object occurred. Any required authorization remains under its direct pattern. The receiving use also names its exact U.ClaimScope, selected time when current, selected CHR:ReferencePlane only when plane-dependent, and derivation-specific conditions. GammaTimePolicy enters only when time changes membership; ReferencePlane is absent from ordinary set algebra.
ScopeDerivationMechanism SignatureManifest (optional). When dependency replay needs it, name the actual imported or provided declarations for U.Scope and, for translation, the exact F.9 Bridge declaration and C.2.1 claim identity rules. The independence basis, particular Bridge, and particular scope-translation claim are application arguments, not declaration-manifest entries by adjacency. scopeTranslationClaim is only this declaration's argument label; it names no public claim kind. A.10 and B.3 reliance objects remain under their subject patterns rather than becoming a common mechanism signature.
ScopeDerivationMechanism neighboring objects. A derivation can occur within dated calculation work under A.15.1. Its bound independence-basis episteme, Bridge, and C.2.1 scope-translation claim retain their own identities and direct patterns. The exact A.10 relation and disposition, or the exact B.3 AssuranceResult when an actual named assurance claim is current, states whether the use has the needed evidence or assurance support; neither is a mechanism argument or result. The returned U.Scope is independently identified by its extension. Evidence, publication, gate, assurance, and any downstream Work, assertion, relation, or publication occurrence remain with their direct patterns. None of those objects, nor another derivation invocation, reidentifies this mechanism unless it reveals changed declaration content.
ScopeDerivationMechanism refinement or conservative extension. A refinement preserves the inherited derivation operations, argument and result meanings, binding rules, application predicates, identity and extent, and the intersection, SpanUnion, and translation semantics while stating every strengthened law or admission condition. A conservative extension adds exact optional arguments, results, or operations without changing those inherited meanings or admitted uses.
Relation between the declarations. These are two independently identified U.Mechanism epistemes. They coordinate by value: a later evaluateMembership application may bind a scope returned by one derivation application. If a receiving claim needs a refinement, extension, equivalence, or other direct relation between exact mechanism editions, state its endpoints, predicate, scope, and preserved and changed content under A.6.1.
U.ContextSlice - exact membership target
U.ContextSlice is an addressable durable value formed from one exact declared selector schema and one value for every selector present in that schema. A scope predicate may inspect a declared projection of the slice, but it does not determine the slice's identity. A minimal slice declaration contains:
The slice is one value. A finite target is one value of mathematical ValueKind ContextSliceSet. Two slice designators resolve to the same U.ContextSlice exactly when their declared selector schemas match and every declared selector resolves to the same value under the effective reference scheme. A predicate's current argument projection, missing evaluation input, or receiving action cannot merge or split slice identity.
For example, slice_A and slice_B may share substrate Al6061, temperature 140 °C, and rig edition Calib-v3 while carrying different declared cohort selectors. A temperature-only scope predicate can return the same result for both slices, but the slices remain distinct; a cohort-sensitive predicate can distinguish them without reidentifying either one.
Do not write an implicit “current” or “latest” selector. If time changes membership, name the exact point, interval, or policy. If time does not change membership, do not add a fictitious temporal field merely to complete the tuple.
U.Scope - set-valued scope
U.Scope is a durable value with one exact extension of mathematical ValueKind ContextSliceSet. U.ClaimScope, U.WorkScope, and U.PublicationScope are its C.3 specializations for receiving uses; the specialization does not copy the extension or add another identity discriminator.
For exact scope S and exact slice x, the primitive delimitation semantics is:
The predicate has the exact slice and exact scope as arguments. It is not by itself an explicitly individuated U.Relation occurrence. Included slices satisfy it; excluded slices do not. The excluded area is not materialized as an unbounded complement entity.
For effective reference scheme RS, define extension_RS(S) := { x : U.ContextSlice | member(x, S) }. Two scope designators resolve to the same extensional U.Scope value when their extensions contain exactly the same independently identified slices under the same or explicitly reconciled reference scheme. An equivalent predicate expression, unit conversion, factoring, or publication change can preserve that value; a boundary change that adds or removes even one slice identifies another scope value.
A set or predicate expression, table, diagram, or query result can represent or designate a scope or a set of evaluated slices under C.29 and C.2.1.
USM admits subset, intersect, spanUnion, translate, widen, and narrow over exact scope extensions. refit is a same-extension normalization: it changes a predicate expression, units, or factoring while preserving member(x,S) for every exact slice under the effective reference scheme. A changed expression may require another declaration or claim-bearing episteme edition under its direct governor; it identifies another U.Scope only when the extension changes.
If a future receiving use genuinely requires stable identity for membership occurrences, A.2.6 must first declare a direct relation kind with exact participant meanings, obtaining condition, recurrence rule, and non-optional occurrence-identity rule under A.6.REL. Until then, do not use ScopeDelimitationRelation, ScopeDelimitationMode, or ScopeDelimitationInterval.
U.ClaimScope (G) and membership evaluation
U.ClaimScope is the exact set-valued scope used to say where one claim holds. The claim-bearing U.Episteme and the scope value are distinct; the episteme designates the exact scope current for that claim.
An evaluation of member(x, S) is also separate:
- the predicate semantics determine membership;
- an exact system performs dated evaluation work by an exact method, using a direct evaluation relation or A.6.1 operation binding;
- a separately current C.2.1 result episteme may state
true,false, orunknown; - evidence and freshness claims remain under A.10 and their direct governors.
unknown reports that the evaluation cannot currently decide because a required selector, designation resolution, or translation input is unavailable. It does not mean false, does not exclude the slice, and does not create a third world-side membership state. A receiving guard abstains, narrows the attempted use, or follows an explicitly governed reliance policy; it does not rewrite the predicate.
One exact U.ClaimScope participates in ModelApplicabilityRelation when model applicability is current. A declared ModelApplicabilityInterval belongs to an assertion or occurrence description. The actual applicability occurrence uses the maximal continuous extent over which its predicate obtains, as governed by A.1.1; the interval is not another direct participant.
A BoundedModelUseStructure may be selected over exact model-applicability and other governed relation occurrences under applied constraints that refer to exact claim-scope values. Keep three routes distinct. A bare scope, slice, membership outcome, or displayed boundary never enters A.22 identity. One exact U.ClaimScope remains a participant of an independently governed ModelApplicabilityRelation; when that exact obtaining occurrence is selected into the structure, the occurrence contributes through A.22's relation-occurrence discriminator. Separately, one exact applied constraint claim may refer to that scope and contribute through A.22's applied-constraint discriminator. Neither route turns the scope into a structure constituent, a membership-relation occurrence, or a second delimiter. The same scope may participate in differently selected relation occurrences or be referenced by differently identified structures, and a changed structure does not by itself reidentify the scope.
Expression. State a Claim scope as an exact predicate or condition block over slice selectors: assumptions, parameter ranges, cohorts, platform or standard editions, exact local senses when current, and time conditions only when they change membership.
Algebra. Serial dependencies use intersection. Independently supported areas may use spanUnion with the independence basis stated. widen and narrow change the declared set; refit preserves it. translate uses the section 7.5 Bridge-plus-use-claim branch and keeps reliance separate.
U.WorkScope — scope of doing Work (capability)
Carrier. U.Capability (a system’s ability to deliver specified U.Work).
Meaning. U.WorkScope is the set of U.ContextSlice values under which a capability's deliverability claim may be evaluated. Work-measure targets and qualification windows are checked separately at use time; they are not members or identity fields of the scope.
Expression. The capability declaration designates an exact U.WorkScope expressed only as conditions over U.ContextSlice: environment, versioned standards or platforms, resource regimes, exact local senses when current, and gammaTime only when time changes membership. Quantitative deliverables and qualification windows are not part of the scope value:
- Declare targets as work-measure target sets (e.g., latency <= L, throughput >= T, tolerance <= epsilon) bound in guards (WG‑2).
- Declare inspection/recertification policies as qualification-window policies bound in guards (WG‑3).
The use‑time admission requires all of:
WorkScope covers JobSliceANDWorkMeasures satisfiedANDqualificationWindowHolds(capability, qualificationWindowPolicy, evaluationTime).
Method–Work gating. A Work step’s guard MUST check that the target slice is covered by the capability’s Work scope and that required measures and qualification windows are satisfied.
Composition and Delta-moves. Work scope uses the same algebra as Claim scope (intersection / spanUnion / translate / widen / narrow / refit). Section 7.5 selects translate only for exact local-sense translation through an obtaining F.9 Bridge plus the separate affirmative C.2.1 claim and its current reliance branch.
Separation from knowledge. A Work scope is a set-valued scope. The capability declaration uses it to delimit where a deliverability claim is evaluated. Measurements and monitoring may support that claim through separately governed evidence and reliance judgments.
Required guard facets (capabilities).
- Work-measure target set (mandatory). A set of measurable targets with units and tolerated ranges, evaluated on the JobSlice.
- Qualification-window policy (mandatory for operational use). A time policy stating when the capability is considered qualified; evaluated at the exact evaluation time selected by the receiving guard, not copied into
U.WorkScope. These facets are separate fromU.WorkScopeand live in the R‑lane (assurance). They MUST be referenced in Method–Work guards (see §10.3 WG‑2/WG‑3).
U.PublicationScope — scope of a publication view or publication form
Carrier. Publication faces, publication forms, interop publication forms, cards, lanes, and MVPK faces are publication-lane objects whose renderings live on carriers; the carrier remains separate from the publication view or form.
Meaning. The set of U.ContextSlice where a publication (a view, card, or lane about some object or morphism) is admissible for use within its underlying Claim scope or Work scope.
Relation to other scopes (normative).
- If the publication is about an episteme
E:PublicationScope(view_E) ⊆ ClaimScope(E). - If the publication is about a capability
C:PublicationScope(view_C) ⊆ WorkScope(C). - If the publication is about a composition, its scope is a subset of the intersection of the exact contributing scopes. When exact local senses require translation, use section 7.5 for each affected source scope: obtaining F.9 Bridge, separate affirmative C.2.1 use claim, and current A.10 or B.3 reliance before the returned scopes are intersected.
Expression. Declare U.PublicationScope as an exact predicate over only the U.ContextSlice selectors that restrict publication use: for example versioned standards, environment, audience, interface availability, exact local senses, or gammaTime when time changes membership. It may be narrower than the underlying scope but must not be wider.
Algebra and Delta-moves. Publication scope uses the USM algebra. A widened publication scope is admissible only when the resulting set remains a subset of every relevant underlying Claim scope or Work scope and the publication conditions support each added slice; the underlying scope need not change when it was already broader.
Orthogonality to measurement. U.PublicationScope is a USM scope object (set‑valued), not a CHR Characteristic and MUST NOT appear as a slot in a U.CharacteristicSpace.
View refinement (profiles). When a stricter publication profile/view refines another (e.g., a typed card that requires additional pins), its U.PublicationScope MUST NOT be wider than that of the less formal view.
Scope Algebra
Membership and coverage
For exact slice x and scope S, evaluate member(x, S).
true: the slice is included and the scope condition for the attempted use passes;false: the slice is excluded and that use stops or selects another scope;unknown: the available evaluation cannot decide; the guard abstains or follows an explicitly governed reliance policy without asserting exclusion.
For a finite target set T : ContextSliceSet, coversSet(S,T) abbreviates for every x in T, member(x,S). Scope-to-scope scopeSubset(S1,S2) instead means for every x, member(x,S1) implies member(x,S2). A target set is neither a scope nor a substitute for one. There is no “close enough” membership and no implicit widening.
Membership evaluation work, its inputs and A.6.1 bindings, an optional C.2.1 result episteme, and a C.29 table remain neighboring objects.
Serial Composition (Intersection)
Rule S‑INT (serial). For an essential dependency chain C1 → C2 → … → Ck that supports a claim/capability, the effective scope along that chain is:
If Scope_serial = ∅, the chain is inapplicable and MUST NOT contribute to published scope.
Monotonicity. Adding a new essential dependency can only narrow (or leave unchanged) the serial scope.
Parallel Support (SpanUnion)
Rule P‑UNION (parallel). If there exist independent support lines L₁,…,Lₙ for the same claim/capability, each with serial scope S_i, the publisher MAY declare:
Constraints.
- Independence MUST be justified (different support lines must not rely on the same weakest link).
- The union MUST NOT exceed the union of supported slices; “hopeful” areas are disallowed.
- Publishers SHOULD annotate coverage density/heterogeneity (informative) to aid R assessment, but numeric “coverage” is not part of G.
- Independence criterion. Support lines in a SpanUnion MUST be partitioned so that each line has a set of essential components disjoint from the others’ essential components (no shared weakest link). The partition (or a certificate thereof) SHALL be referenced in the publication.
Why a G-ladder/levels/scales is not needed (and must not be introduced)
1) G is not an ordinal scale; it is set-valued.
Under USM, U.ClaimScope is a set‑valued USM scope object over U.ContextSlice. The only well‑typed primitives are membership and set operations (⊆, ∩, ⋃). Imposing ordinal “levels” such as G0…Gk violates the type discipline and produces non‑invariant behavior (the same set could be “rated” with different numbers under different heuristics). (See also LEX‑CHR‑STRICT.)
2) G composes via ∩ / SpanUnion, not via min / avg.
USM already fixes composition: along a dependent path use intersection; across independent support lines publish SpanUnion. None of these operations relies on (or preserves) any linear order. An ordinal “G ladder” invites people to take minimums/averages, which is incorrect for sets and breaks the established algebra.
3) A G ladder drags in “abstraction level,” which is orthogonal.
Early “G ladders” effectively encoded abstraction/typing (instances -> patterns -> formal classes/types -> up-to-iso). That is valuable didactics, but not applicability. We have already separated these concerns: abstraction is captured, if needed, by AbstractionTier (AT) as an optional facet; applicability is U.ClaimScope (G).
4) A G ladder breaks locality and Bridge semantics. When exact local senses require translation, an obtaining F.9 Bridge establishes their direct semantic relation while a separate C.2.1 claim states the proposed mapping rule and tolerated loss. There is no canonical way to translate an ordinal G level: the mapped area may be narrower or differently factored. USM translates exact sets only through that bounded claim and keeps A.10 or B.3 reliance separate rather than rewriting G.
5) A G ladder duplicates ESG guards without adding decision power.
What teams often want to “compress into a G number” is actually (a) the quality of expression and (b) the completeness of the declared scope. The first is an F threshold; the second is handled by explicit guards: Scope covers TargetSlice, gammaTime is explicit only when membership varies with time, and a separate freshness-window check when current. A ladder for G adds confusion but no decision power.
Normative directive.
U.ClaimScope (G) SHALL remain a set‑valued USM scope object; no ordinal or numeric ladder SHALL be defined for G. If a profile needs scalar reporting, it MAY publish an explicit report‑only proxy CoverageMetric(G), but CoverageMetric(G) MUST NOT substitute for G in norms, gates, Bridge semantics, bounded-use claims, or reliance decisions. Authoring and gating SHOULD use F thresholds (C.2.3) and explicit guard predicates (A.2.6) rather than pseudo‑levels of G.
Translation across exact local senses
Use translation only when ordinary designation resolution cannot settle the exact local senses needed by the target membership predicate. Then proceed in this order:
- resolve the source and receiving F.17
SchemeSenseCellvalues and name the exact obtaining F.9 Bridge that relates them; - state the proposed scope translation separately: name the source scope, target scheme, source-to-receiving direction, scope-correspondence rule, and tolerated loss, then cite the exact current C.2.1 claim with that Bridge as EntityOfConcern and affirmative polarity for this use;
- before a guard relies on the claim, require the exact A.10 evidence-provenance relation for this bounded use; ordinary reliance requires
RelianceDisposition=pass; when an actual named assurance claim is current, require its B.3AssuranceResultfor that same use withdisposition=supported-for-use; and - use
translate(Bridge, UseClaim, SourceScope, TargetReferenceScheme)as the C.29 mathematical representation, or invokederiveTranslatedScopewith those same four values when one actual calculation and returned scope are needed.
The Bridge establishes the direct semantic correspondence. The separate claim selects this translation's direction, rule, and tolerance. A Bridge profile, Bridge Card, reference-scheme difference, project label, or slice designator cannot supply that claim or its reliance basis. A missing or non-obtaining Bridge blocks the semantic branch. A missing or non-affirmative use claim blocks reliance. A non-passing A.10 disposition blocks ordinary reliance; when an actual named assurance claim is current, a B.3 result other than supported-for-use stops or narrows the assurance-bearing use. None of these outcomes makes an otherwise obtaining Bridge false.
An A.10 pass, or a B.3 AssuranceResult with disposition=supported-for-use, supports only the named use; neither authorizes it. A direct domain rule may require an assurance claim, but it must be stated separately. Observed mismatch, calibration error, and counterexamples are evidence about the use claim. The permitted loss is the tolerance inside that claim. If the rule and tolerance support only a proper subset of the source area, return that explicitly narrower target scope. Neither the Bridge nor the claim supplies direct support for adding a slice, and neither makes membership true. The exact deriveTranslatedScope application remains an A.6.1 operation application; the claim and reliance basis do not prove that it occurred.
Δ‑Operations (Widen, Narrow, Refit)
- Δ‑G+ (widen). Monotone expansion:
S proper-subset S-prime. Every added slice requires direct support under the receiving use; a Bridge and affirmative translation-use claim can define a mapping but supply no such support by themselves. - ΔG− (narrow). Monotone restriction:
S′ ⊂ S. Often used to remove areas invalidated by new findings. - Refit. A different expression or parameterization designates the same extensional scope after normalization (for example, changing units or factoring common predicates). Refit MUST NOT alter membership and does not create another scope value.
Refit (normalization). A refit MUST preserve membership exactly: extension_RS(S_after) = extension_RS(S_before), so both expressions designate the same scope value. Any change that alters boundary inclusion through rounding, unit conversion, or discretization is a ΔG± change, not a refit.
Edition triggers. A changed extension identifies a different scope value. A changed predicate expression with the same exact extension preserves the scope value but is a content change in the declaration or claim-bearing episteme that carries the expression; its direct governor decides whether another episteme edition is needed.
Discriminating cases. Under one effective reference scheme, 20 °C <= temperature <= 30 °C and the exactly converted 293.15 K <= temperature <= 303.15 K have the same extension and can be related as a refit while designating the same scope. Replacing the inclusive upper boundary with temperature < 30 °C removes every slice exactly at 30 °C; that one membership-boundary change identifies another scope rather than a refit.
Invariants
- I-LOCAL. Interpret membership under the effective reference scheme and exact local senses current to the declaration. Translate only through an obtaining F.9 Bridge plus the separate affirmative C.2.1 claim for that translation; keep A.10 or B.3 reliance outside membership truth.
- I‑SERIAL. Serial scope is an intersection; it cannot grow by adding dependencies.
- I‑PARALLEL. Parallel scope MAY grow by union, but only where independently supported.
- I‑WLNK. Weakest‑link applies to F and R on dependency paths; G follows set rules (∩ / ⋃).
- I‑IDS. Idempotence: Intersecting or unioning a set with itself does not change it.
- I‑EMPTY. Empty scope is a first‑class value; guards MUST treat it as “not applicable”.
Empty & Partial Scopes
- Empty scope (
∅). No slice satisfies the declared predicate. A receiving guard stops. - Partial scope. Publishers SHOULD avoid “global” language when actual scope is thin; instead, publish explicit slices and (informatively) coverage hints to guide R assessment.
Locality, Time & Version Semantics
Local interpretation without a context container
Interpret a scope predicate under the effective reference scheme and exact local senses named by the claim or scope declaration. Evaluate it against exact U.ContextSlice values.
Do not assume that a similarly named selector elsewhere has the same sense. Use ordinary designation resolution when it suffices. Use translate only when exact local senses need an obtaining F.9 Bridge and a separate affirmative C.2.1 claim states the proposed translation's direction, rule, and tolerance; establish the current A.10 or B.3 reliance branch before acting on the returned scope.
Time selector Γ_time
When membership depends on time, the scope predicate and target slice name an exact gammaTime point, interval, or policy and state which boundary changes a slice from member to non-member or back. Implicit “latest” is forbidden. When time does not change membership, omit the selector. Evidence freshness remains a separate R-lane predicate.
Standards, versions & notations
When a standard, interface, or schema edition affects membership, name the exact edition. A notation change with faithful designation resolution does not change G. If exact local senses require translation, the F.9 Bridge establishes their relation, the separate C.2.1 claim states this translation's rule and tolerance, and A.10 or B.3 governs reliance.
Determinism of evaluation
For a fixed exact scope, exact slice, and available evaluation inputs, the evaluation method returns one reproducible result. false stops the attempted use. unknown also blocks admission but does not assert non-membership.
Interaction with R (freshness & decay)
For empirical claims and operational capabilities, R typically binds evidence freshness windows. Scope does not decay with time; trust in the support does. Guards MAY combine “Scope covers” with “Evidence freshness holds” as separate predicates.
Lexical Discipline (Part E compliance)
L‑USM‑1 (names). Use Claim scope (G) for epistemes, Work scope for capabilities, and Publication scope for publication views or forms. Use Scope only when discussing the abstract mechanism. Avoid naming any characteristic as “applicability,” “envelope,” “generality,” “capability envelope,” or “validity”.
L‑USM‑2 (Work and Run). Prefer Work and Run vocabulary from A.15 for system execution contexts. Do not introduce “operation” or “operating” as characteristic names; use Work scope.
L‑USM‑3 (Validation). “Validation/Validate” remain reserved for LA in assurance lanes (Part B). Do not name a scope object “validity”.
L-USM-4 (Domain). “Domain” is a recognition cue, not a guard input. Name the exact U.ContextSlice selectors needed by the membership predicate.
L-USM-5 (First mention). On first use in a pattern or working instruction, write “Claim scope (G)” so the F-G-R meaning is recoverable.
Guard Patterns (ESG & Method–Work)
Common guard shape
A claim-scope guard starts with one exact judgment:
Admit the scope condition only when the result is true. Stop on false. On unknown, abstain, obtain the missing input, narrow the attempted use, or apply a separately governed reliance policy. Evidence freshness, formality, time currentness, decision, and assurance remain separate predicates.
Add a translation branch only when the membership predicate uses exact local senses that ordinary designation resolution cannot align. Require the obtaining F.9 Bridge and the separate affirmative C.2.1 claim for this translation before deriving a scope, then require the current A.10 or B.3 reliance branch before the receiving guard relies on it. A different reference scheme or location label alone is not such a trigger.
Claim-scope guard family
EG-1 - Exact membership.
Name the exact claim-bearing episteme, exact U.ClaimScope, and exact target slice. The episteme, scope, and slice remain different values.
EG-2 - Formality or evidence, only when current. A receiving state may separately require a C.2.3 formality threshold or an A.10 freshness judgment.
EG-3 - Unknown evaluation. When a required selector, designation resolution, or translation input is unavailable, return unknown as the result binding of the exact evaluateMembership application, or as the result of the directly governed evaluation when no reusable application is current. Abstain or follow the exact receiving reliance policy; do not assert member = false. Add a C.2.1 result episteme only when a named receiving use needs the conclusion to persist. Use A.15.PROD only when the current claim is that dated work first constituted that episteme.
EG-4 - Translation. When exact local senses differ, require the obtaining F.9 Bridge and the separate affirmative C.2.1 claim naming this scope translation's direction, rule, and tolerance. After the exact A.10 or B.3 branch supports reliance for that use, derive the scope with deriveTranslatedScope(SourceScope, ExactBridgeOccurrence, ExactUseClaim, TargetReferenceScheme), then use that returned scope in evaluateMembership. Scheme difference alone does not select this branch.
EG-5 - Scope-value versus declaration change. Widen or narrow only when the extension gains or loses at least one independently identified slice; that extension change identifies another U.ClaimScope. A changed predicate expression with the same exact extension is a refit: it preserves the exact scope value and may require another scope declaration or claim-bearing episteme edition under its direct governor. A result-record, table, or selected-structure change alone changes neither the scope value nor its declaration.
Method–Work guard families (capabilities)
WG‑1 - WorkScopeCoverage (mandatory). A capability can be used to deliver a Work step only if:
WG‑2 - work-measure target set satisfied (mandatory for deliverables). Guards MUST bind quantitative measures that the capability promises in the JobSlice:
WG‑3 - qualification-window policy holds (mandatory for operational use). Operational guards MUST assert that the exact qualification-window predicate (qualification, inspection, or recertification) holds at the receiving guard's exact evaluation time:
WG-4 - Translation branch for capability use.
Translate U.WorkScope only when its condition predicates use exact local senses that differ from those needed by the job slice. Require the obtaining F.9 Bridge and a separate affirmative C.2.1 claim naming this Work-scope translation's direction, rule, and tolerance; establish the exact A.10 or B.3 reliance branch before the capability guard uses the result. A capability object and job slice carry no hidden .Context field that automatically selects this branch.
Observed mapping loss is evidence about the use claim, and permitted loss is its tolerance. When the claim's rule and tolerance support only a subset, return an explicitly narrower Work scope.
WG‑5 - Δ(WorkScope). When widening Work scope (new operating ranges/platforms), the guard MUST require evidence at the new slices (measures + qualification windows). Refit (e.g., new units/parametrization) requires no new evidence.
Translation guard
Use this branch only after the exact local-sense translation need, the obtaining F.9 Bridge, and the separate affirmative C.2.1 claim for this translation are current. The claim names the source-to-receiving direction, scope-correspondence rule, and tolerated loss. Before the receiving guard relies on it, require the exact passing A.10 branch or, when an actual named assurance claim is current, a B.3 AssuranceResult that carries the same bounded use with disposition=supported-for-use.
The source claim-bearing episteme designates SourceScope. The Bridge relates exact local senses under F.9. The C.2.1 claim supplies this translation's rule and tolerance, and A.10 or B.3 supplies the separate reliance basis. An unmapped slice yields unknown for the attempted evaluation unless the returned scope explicitly excludes it; it is not silently dropped and reported as false.
Time selector
Name gammaTime in the context slice only when the applicable membership predicate varies with time. State the boundary that changes membership. If a work qualification or evidence-freshness condition varies with time, name its exact evaluation time and interval or policy under that condition's direct governor rather than copying it into scope. For example, qualificationWindowHolds(controller, Recertification90d, evaluationTime) is a separate guard; it is not a scope selector.
Do not write implicit “latest.” When time does not affect membership, omit the selector instead of inventing a nominal current value.
Archetypal Grounding - Worked Examples
Claim-scope membership boundary
Claim-bearing episteme E_adhesive states that Adhesive X retains at least 85 percent tensile strength on Al6061 for two hours at 120-150 °C under rig edition Calib-v3. It designates exact claim scope G_adhesive.
slice_in = {substrate=Al6061, temp=140°C, dwell=90min, rig=Calib-v3}.member(slice_in, G_adhesive)is true.slice_out = {substrate=Al6061, temp=160°C, dwell=90min, rig=Calib-v3}. Membership is false; the attempted use stops.slice_unknown = slice_in, evaluated with an interpretation basis whose required rig-edition resolution is unavailable. Evaluation returnsunknown; it neither excludes the slice nor permits the use.
LabEvaluator_A may perform exact membership-evaluation work through the declared USM operation. When a named audit or replay use needs a judgment to persist, a C.2.1 episteme may record it. A table showing the three rows is a C.29 representation.
The same G_adhesive may participate in two independently governed model-applicability relation occurrences and may be referred to by exact applied constraint claims in two A.22 structures. Only a selected obtaining model-applicability occurrence or an exact constraint claim as applied contributes through its corresponding A.22 discriminator; the common scope itself contributes through neither path and neither merges nor identifies the relations or structures. A declared applicability interval in either occurrence description is separate from the actual maximal continuous obtaining extent.
Translation only when local senses require it
An assembly use expresses temperature through an exact local calibration sense different from the laboratory sense used in G_adhesive. F.9 Bridge B-lab-assembly-temp obtains between those two cells under its calibration-correspondence profile; the profile contains no translation-use rule or loss tolerance.
Separate C.2.1 claim C-adhesive-scope-translation has that Bridge as EntityOfConcern and affirmative polarity. Its content names use translate G_adhesive for the assembly membership check, direction laboratory-to-assembly, the calibration rule for mapping the source interval, and tolerance no selector-meaning loss and at most 2 °C boundary uncertainty.
Use that translation only while exact A.10 relation EP-adhesive-scope-translation connects the claim and that bounded use to evidence record CalibrationComparisonRecord.Calib-v3-to-AssemblyCalibration-v5.2026-07-25. Provenance edge CalibrationComparisonRecord.Calib-v3-to-AssemblyCalibration-v5.2026-07-25 --carriedBy--> CalibrationComparisonRegister.Calib-v3-to-AssemblyCalibration-v5.2026-07-25.csv names its carrier. The window runs from 2026-07-25 through 2026-10-23 and closes earlier if either calibration edition, the mapping rule, or the 2 °C tolerance changes.
The path supports neither reverse translation, a mapping outside the named rule or tolerance, nor a claim that the A.6.1 application or membership evaluation occurred. This fixture asserts no evidence-producing or evidence-interpreting Work, current system-role assignment, or Method trace. If the record, carrier, or provenance edge is missing or stale, or the window closes, stop before translation and set RelianceDisposition=reopen; otherwise RelianceDisposition=pass applies only to this bounded use. No assurance claim is made.
The actual A.6.1 application deriveTranslatedScope(G_adhesive, B-lab-assembly-temp, C-adhesive-scope-translation, AssemblyReferenceScheme) applies the named rule and tolerance and returns the explicitly narrowed receiving scope [122,148]°C. The receiving membership evaluation uses that scope.
If the receiving use merely uses another designation for the same sense under an ordinary resolvable reference scheme, introduce no Bridge, use claim, or translation.
Capability: robotic weld Work scope
- Context:
RobotCell‑Weld@2026. - Capability: “Weld seam W at bead width 2.5 ± 0.3 mm, cycle ≤ 12 s.”
- Work scope:
{humidity<60 %, current∈[35,45]A, wire=ER70S‑6, controller=FW‑2.1}. - Job slice:
{humidity=55 %, current=40A, wire=ER70S‑6, controller=FW‑2.1}. - Qualification evaluation time:
2026-07-25, outside the Work-scope tuple. - Guards (WG‑1..3): coverage true; measures satisfied;
qualificationWindowHolds(controller, Recertification90d, 2026-07-25)is true because certification occurred on2026-05-26. - Outcome: capability admitted for this Work.
Controller certificate age does not change Work-scope membership in this case. When the 90-day qualification condition fails, WG-3 stops operational use without removing the Job slice from the scope.
Serial intersection (API + dataset compatibility)
- Claim A (API Standard):
v2.3request schema with constraint “idempotent under retry”. - Claim B (Dataset cohort): “metrics valid for cohort K with schema
ds‑14”. - Composition: service S depends on both A and B → serial intersection of Claim scopes:
{api=v2.3} ∩ {cohort=K, schema=ds‑14}. - Target slice:
{api=v2.3, cohort=K, schema=ds‑14}→ membership true. - Target drift (e.g.,
ds‑15). The changed target slice lies outside the intersection ⇒ path inapplicable for that slice.
Parallel support (SpanUnion) in a safety case
- Line L1: tests on dry asphalt support braking property; scope
S1={surface=dry, speed≤50 km/h}. - Line L2: simulations for wet asphalt; scope
S2={surface=wet, speed≤40 km/h}. - Independence basis: partition
P-brakingidentifies complete disjoint essential-component sets for this braking claim: L1 usesDryTrackTestRecordandDryRigCalibration; L2 usesWetBrakeModel,WetValidationRecord, andWetRigCalibration. - Published scope:
SpanUnion({S1,S2})={(dry, ≤50), (wet, ≤40)}, with reference toP-braking. - Guard: allowed; union does not include
(wet, 45)because not supported.
With only the method labels, leave P-UNION unresolved. If CalibrationRecord-Q is essential to both lines, P-UNION fails for this pair; retain the individual lines and use their component scopes to assess any dependent combination.
ML model deployment with different local feature senses
- Model claim: “AUC >= 0.92 on cohort K, pipeline P, feature sense
Training.F.” - Claim scope:
{cohort=K, pipeline=P, exactLocalSense=Training.F}. NogammaTimeselector is present because this example does not claim that model applicability changes with the slice time. - Target slice: product
On-Device@v7, pipelineP-prime, feature senseDevice.F-prime. - Translation trigger: ordinary designation resolution fails because
Training.FandDevice.F-primehave different declared semantics, not merely different labels. Exact F.9 BridgeB-training-device-featureobtains between those cells under a lossy-subset correspondence profile; the profile carries no device-use rule or tolerance. - Bounded translation claim: exact current C.2.1 claim
C-device-feature-scope-translationhas that Bridge as EntityOfConcern and affirmative polarity. It names usetranslate the training claim scope for the On-Device@v7 membership check, direction training-to-device, the subset-mapping rule, and toleranceno feature-kind substitution and no target slice outside the tested mapped subset. - Evidence and reliance: Before translating, verify that exact A.10 relation
EP-device-feature-scope-translationconnects claimC-device-feature-scope-translationand this bounded use to both records below.- Mapping evidence:
MappingTestRecord.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25, with exact carrier edgeMappingTestRecord.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25 --carriedBy--> MappingTestReport.TrainingF-to-DeviceFprime.OnDevice-v7.2026-07-25.json. - Training evidence:
TrainingEvaluationEvidence.K-P-TrainingF.2026-07-25, with exact carrier edgeTrainingEvaluationEvidence.K-P-TrainingF.2026-07-25 --carriedBy--> TrainingEvaluationReport.K-P-TrainingF.2026-07-25.json. - Window and stop: the 180-day window runs from
2026-07-25through2027-01-21and closes earlier if pipelinePorP-prime, either feature-sense edition, or the tested mapped subset changes. If a record, carrier, or edge is missing or stale, the window closes, or a named dependency changes, stop before translation and setRelianceDisposition=reopen; otherwiseRelianceDisposition=passapplies only to this bounded use. - Boundary: the path supports neither feature-kind substitution, a target outside the tested subset, material release or assurance, nor a claim that deployment occurred. This fixture asserts no evidence-producing or evidence-interpreting Work, current system-role assignment, or Method trace. No assurance claim is made; a material release use stays with its direct release rule, and an actual assurance claim uses B.3.
- Mapping evidence:
- Guard: bind
translatedScope := deriveTranslatedScope(G, B-training-device-feature, C-device-feature-scope-translation, ProductReferenceScheme), then evaluateevaluateMembership(TargetSlice, translatedScope, InterpretationBasis); separately require the chosen formality predicate. The translated scope covers only the tested mapped subset. - Outcome: admit only a target slice in the returned subset; otherwise return false or unknown according to the exact returned scope and available evaluation input.
Bias-Annotation
USM counters three recurring biases. First, scope wording can hide a claim that the object is usable everywhere; require an addressable U.ContextSlice instead of a vague domain phrase. Second, abstract wording can be mistaken for wider scope; keep abstraction tier and detail separate from U.Scope. Third, publication convenience can be mistaken for content permission; U.PublicationScope bounds the publication surface and does not widen U.ClaimScope or U.WorkScope.
Conformance Checklist (USM)
Common Anti-Patterns and How to Avoid Them
Consequences
A correct USM use makes scope checks reproducible: every judgment names an exact scope and slice, and true, false, and unknown evaluation results have different actions. Translation appears only for exact local senses after an obtaining F.9 Bridge, a separate affirmative C.2.1 claim about the proposed translation, and its current A.10 or B.3 reliance branch are distinguished. The cost is naming the selectors, mapping rule, tolerated loss, and evidence that actually affect the receiving use while keeping membership truth, operation application, result epistemes, representations, model applicability, and structure separate.
Playbooks (Informative)
Manager’s six-step use
- Name the claim and exact scope. Do not start from a context label or table.
- Name the target slice. Designate the independently identified slice; bind only the declared selector projection that this membership evaluation needs.
- Evaluate membership. True admits the scope condition; false stops it; unknown requires abstention, a missing input, or a narrower attempted use.
- Keep other checks separate. Formality, evidence freshness, capability measures, qualification, gate, and decision have their own predicates.
- Translate only when needed. Name the exact local senses and obtaining F.9 Bridge; then state the separate affirmative C.2.1 claim for this translation's direction, rule, and tolerance and establish its A.10 or B.3 reliance branch before using the returned scope.
- Persist only what the use needs. A C.2.1 result episteme may record the judgment when a named receiving use needs it to persist; a C.29 table may display it. Use A.15.PROD only when the current claim is that the work first constituted that episteme.
Architect’s design rubric for scopes
- Prefer predicates over prose. Name the parameters, ranges, and standard editions that affect membership; name
gammaTimeonly when time affects membership. - Factor common conditions. Use Refit to normalize units and factor shared predicates; do not widen by stealth.
- Partition support lines. If you plan a SpanUnion, document independence up front.
- Keep scope thin & honest. Publish what you can support; add slices as support appears (ΔG+).
- Design translations early. Test the direct F.9 Bridge first, then state each proposed translation use separately with its direction, mapping rule, tolerated loss, and evidence plan; do not turn an expected loss score into permission to use the mapping.
Minimal DSL snippet for scope blocks (illustrative)
(Illustrative only; the specification does not mandate a particular syntax.)
Profiles as Scope configurations (informative)
Idea. A Scope profile is a named, editioned configuration that expands to a concrete U.Scope predicate block (over U.ContextSlice), used to avoid repetition and to keep declarations consistent across carriers.
Rules.
- P1 (Expansion). Profiles are macros: guards MUST expand them to explicit predicates before evaluating
Scope covers TargetSlice. - P2 (Edition). Profiles are editioned. A changed predicate expression is a content change for a carrier that references the profile even when the exact scope extension is preserved; a changed extension additionally identifies another scope value.
- P3 (No stealth widen). A profile update MUST NOT implicitly widen a carrier’s published scope; ΔG+ must be explicit in that carrier.
- P4 (Translation awareness). If a profile expands to predicates whose exact local senses require translation, name the obtaining F.9 Bridge and the separate affirmative C.2.1 claim for that translation's direction, rule, and tolerance. The receiving guard must recover the current A.10 or B.3 reliance branch; a different label, scheme, profile, or Bridge Card alone is insufficient.
- P5 (No hidden context container). A profile expands to predicates; it is not a context object, scope pattern, or additional scope kind.
Examples (illustrative).
- An engineering team defines
Ops-Lab-v3as a profile pinning standard editions and environment selectors. It leavesLabEvidenceRelevanceWindow365dto the receiving A.10/R guard and contains nogammaTime, because evidence age does not change scope membership. - A field team defines
WinterCampaign-v1withgammaTime in [2026-11-01, 2027-03-31]because the exact scope predicate admits only slices during the declared winter campaign; a slice before or after those boundaries is a non-member. - A publication stack defines
TechCard‑Lite@Σas a profile that narrowsU.PublicationScopeto slices where required pins are available.
Governance Hooks & Audits
Durable audit evidence, when needed
When a scope-aware decision needs durable audit evidence, its C.2.1 result episteme may name:
- Using object and exact scope. The claim-bearing episteme, capability, or publication object designates or uses the exact scope.
- Exact target slice. Designate the independently identified slice with its complete declared selector schema and values. An evaluation may bind only the projection its scope predicate inspects; that projection does not replace slice identity. Include
gammaTimein the schema only when that temporal selector is part of the exact slice being evaluated. - Evaluation outcome. Record
true,false, orunknown, plus the evaluation method or work occurrence when replay needs it. - Separate guard outcomes. Record work measures, qualification windows, formality, or freshness only when the receiving use checks them; none is membership.
- Translation evidence, only when triggered. Name the exact obtaining F.9 Bridge, the separate C.2.1 claim with its polarity, use, direction, rule, and tolerance, and the exact A.10 or B.3 reliance branch. Record any observed loss as evidence rather than a Bridge identity field.
- Scope change. Say whether the declared set widened, narrowed, or remained identical under refit.
USM compliance levels (informative)
- USM-Ready. Exact scope and slice values are declared; editors can distinguish membership from evaluation, evidence, representation, and structure.
- USM-Guarded. Guards evaluate exact Claim scope or Work scope membership, including
gammaTimein the scope predicate only when time changes membership. Measures, qualification, and freshness remain separate checks. - USM-Auditable. Durable result epistemes identify the exact scope, slice, and evaluation result. When translation was triggered, they cite the obtaining F.9 Bridge, separate bounded-use claim, and current A.10 or B.3 reliance.
- USM‑Composed. Serial intersection and SpanUnion are implemented in composition tooling.
Audit checklist (informative)
- Does each guard name a concrete TargetSlice?
- Is membership reproducibly evaluable from the exact declared predicate and required inputs?
- Are freshness and coverage separate predicates?
- When exact local-sense translation was required, are the obtaining F.9 Bridge, separate C.2.1 use claim, direction, rule, tolerance, polarity, and current A.10 or B.3 reliance branch named?
- For parallel support: is independence justified?
Risk controls (informative)
- Silent widening. Require ΔG+ review; flag any scope increase without new direct support. A Bridge may translate supported conditions but does not supply support.
- Opaque slices. Disallow “domain” placeholders; enforce addressable selectors.
- Time drift. Require an exact
gammaTimeboundary only when the scope predicate itself changes membership across time; keep qualification, calibration, recertification, data-age, and evidence-freshness windows under their direct guards.
Extended FAQ (informative)
Q1. Is “Claim scope” the same as “domain”?
No. “Domain” is descriptive and often fuzzy. Claim scope is addressable: it supplies an exact predicate over the U.ContextSlice selectors that determine membership, including gammaTime only when the predicate changes membership across time. Guards reference the exact slice, not a generic domain.
Q2. How do we express partial coverage across different cohorts or platforms?
Declare each supported serial scope (S₁, S₂, …) and publish SpanUnion({Sᵢ}) with independence justification. Do not include unsupported slices.
Q3. Can raising F (formalizing) widen G? Only if the formalization explicitly changes the scope predicates (ΔG+). Formalization alone does not widen scope.
Q4. What is the difference between Work scope and SLOs? Work scope is where the capability can deliver; measures within the guard are what it promises there (SLO targets). Both are required at use time (WG‑1..3).
Q5. Can we assign numeric coverage to G?
Not normatively. G is set‑valued. You MAY attach an informative, explicitly declared CoverageMetric(G) (e.g., a proportion under a pinned policy) to aid R assessment, but guards use set membership and CoverageMetric(G) MUST NOT replace G.
Q6. How do we handle “latest data” scopes?
First decide what “latest” is doing. If it means that evidence or data must be no older than 90 days, do not put it in Claim scope: require the A.10 evidence-provenance path to satisfy its exact 90-day relevance or currentness window at the receiving use time. Put gammaTime in the scope only when claim applicability itself changes with the slice time, and state the membership boundary—for example, slices whose observation time falls outside the declared interval are non-members. The word “latest” alone supplies neither boundary.
Q7. How do we use a scope with differently named slice selectors?
First resolve whether the designations refer to the same values under the effective reference scheme. If exact local senses differ and membership must be expressed across them, name the obtaining F.9 Bridge. Then state the separate affirmative C.2.1 claim for the proposed translation's direction, mapping rule, and tolerated loss, establish the exact A.10 or B.3 reliance branch, and evaluate the scope returned by deriveTranslatedScope.
Q8. What about abstraction level or detail?
Keep AT (AbstractionTier) and D (Detail and Resolution) as orthogonal, optional annotations. They never substitute for Claim scope or Work scope.
Q9. Can a capability’s Work scope be broader than a predecessor claim’s Claim scope on a dependency path? They are on different carriers. In a serial dependency, the effective scope is the intersection; the broader one does not dominate.
Q10. When does an empty scope make sense? No slice satisfies the declared predicate, so the receiving guard stops. This may occur during early drafting or after a refutation.
Annexes (informative)
Source wording -> USM dictionary
(Use these source terms only in explanatory notes; not in guards or conformance text.)
Minimal data model hints
ContextSlice tuple (suggested keys):
effectiveReferenceScheme, one exact declaredSelectorSchema, the values of every selector in that schema, and optional selector families such as exactLocalSenseRefs, standardOrInterfaceEditions, environmentOrPlatformSelectors, cohortOrJurisdictionSelectors, and gammaTime only when that selector belongs to the declared schema because membership changes across time. A scope predicate declares which projection it inspects; it does not define the tuple's identity.
Claim-scope predicate block:
assumptions, cohorts, platformOrStandardEditions, environmentSelectors, exactLocalSenseRefs?, and gammaTime? when time changes membership.
Work-scope predicate block:
environmentSelectors, platformOrStandardEditions, resourceRegimeSelectors, exactLocalSenseRefs?, and gammaTime? when time changes membership.
Publication-scope predicate block: the exact audience, interface, availability, and other selectors that restrict publication use, always as a subset of the underlying claim or work scopes.
Separate use-time guard: work-measure targets, qualification windows, evidence freshness, and any decision threshold. These are not fields of the scope value. (These are informative; the spec does not mandate a concrete serialization.)
Pseudocode membership evaluation (illustrative)
required_selectors returns the projection needed by this scope predicate. UNKNOWN belongs to the evaluation result because a required input is unavailable. The underlying membership predicate remains bivalent for an exact, fully interpreted scope and slice.
Rationale
A.2.6 needs a scope mechanism to express the set-valued condition under which a claim, work capability, or publication surface may be used. USM makes those membership conditions addressable, composable, and reopenable while preserving the F/G/R separation. When exact local senses require translation, F.9 supplies the Bridge, C.2.1 supplies the separate claim about this use, and A.10 or B.3 supplies reliance; A.2.6 alone governs the scope calculation and membership question.
SoTA-Echoing - F-Cluster Unification for A.2.6 (F.17 and F.18)
Intent. This annex applies the F‑cluster method to triangulate USM terms against a diverse set of post‑2015 sources and communities (“Contexts”), and then fixes the Unified Tech and Plain names used in A.2.6.
F.17 Unified Term Survey (UTS) — Method & Scope
Contexts surveyed (SoTA, diverse):
- ISO/IEC/IEEE 42010 (architecture description)
- OMG Essence (Kernel: Alphas, Work Products, States)
- NIST AI RMF 1.0/1.1 (trustworthy AI)
- ASME V&V 40–2018 / FDA 2021–2023 (model credibility)
- W3C SHACL (2017+) / SHACL‑AF (data constraints)
- OWL 2 / ontology engineering (2012+, current practice)
- IETF BCP 14 (RFC 2119/8174) (normative keywords & guard style)
- DO‑178C + DO‑333 (avionics, formal methods supplement)
- ISO 26262:2018/2025 (automotive functional safety)
- IEC 61508 (2010+, current revisions) (basic safety)
- ACM Artifact Review & Badging v1.1 (reproducibility signals)
- MLOps/Cloud SLO practice (SRE / platform) (operational guardrails)
Survey focus (terms we align): U.ContextSlice, generic Scope and set algebra, Claim scope (G), Work scope, Bridge plus a separate bounded-use claim and reliance basis, Γ_time, widen, narrow, refit, translate, SpanUnion, serial intersection, separation from F and R, and avoidance of overloaded validity and operation terms.
UTS Table (F.17) — Cross‑context term mapping
Summary. Across all Contexts, two stable notions recur: (1) evaluate in a concrete context (→ U.ContextSlice), and (2) declare where something holds or is deliverable (→ set‑valued Scope). “Context of use,” “operating modes,” “targets,” “class extension,” and “OSED” are all Context‑flavored presentations of Claim scope or Work scope. Terms like validity and operation are semantically close but collide with LA and FPF’s Work and Run lexicon; we therefore do not adopt them as characteristic names.
F.18 Term Selection — Unified Tech & Plain names
Selected names (normative)
Why these names (decision grounds):
- “Scope” wins over “envelope/applicability/validity”. It is short, self‑documenting, and already idiomatic in SRE/SW, while “validity” clashes with Validation Assurance (LA) and “envelope” suggests geometry, not membership.
- “Claim scope” vs “Work scope”. Two‑word compounds meet the FPF clarity rule: the first token reveals the carrier (Claim vs Work/Capability), the second the mechanism (scope).
- Keep G. The F–G–R triple is canonical; we retain G as nickname for Claim scope.
- “Context slice” keeps the evaluation target addressable through its exact declared selector schema and values; one membership predicate may inspect only a projection without reidentifying the slice.
- “Operation”, “operating”, and “validity” avoided. They are overloaded in existing FPF lanes (Work, Run, and LA) and create policy ambiguities in guards.
Phrasebook (for editors, normative)
- Use “Claim scope (G) covers TargetSlice” and “Work scope covers JobSlice” in guards.
- When time changes membership, name exact
gammaTime; never say “latest.” Omit it when time is irrelevant. - To compose, say: “intersection along dependency paths; SpanUnion across independent support lines.”
- When exact local-sense translation is current, say: “through an obtaining F.9 Bridge and a separate affirmative C.2.1 claim for this direction, rule, and tolerance; rely on it only through the current A.10 or B.3 branch, then evaluate membership on the returned scope.”
- When widening/narrowing, write “ΔG+ / ΔG−” and log the support change; use “Refit” for unit/param normalization.
Rosetta summary (informative, for rationale box)
Outcome. The UTS shows clear convergence across SoTA Contexts on addressable context and set‑valued applicability. F.18 therefore fixes: Context slice, Scope, Claim scope (G), Work scope, Publication scope with the algebra and guard clauses mandated in A.2.6. This closes synonym drift while remaining readable for engineering managers and precise for assurance tooling.
Relations - Cross-Pattern Coordination
With F–G–R (C.2.2)
- G is Claim scope. Use set algebra (∩ / SpanUnion).
- F remains the expression rigor (C.2.3); R captures evidence currentness and bounded reliance. Observed loss may bear on the translation-use claim; its permitted-loss tolerance remains in that claim rather than in G or the Bridge profile.
- Weakest‑link. On dependency paths: F_composite = min(F), R_composite = min(R); G follows §7.2–§7.3 (set rules).
With Formality (C.2.3)
- No conflation. Raising F does not change G unless scope predicates change.
- Guarding rigor. ESG may use
Formality >= F_kalongside scope coverage.
With Work & Run (A.15)
- Work scope delimits the exact job slices on which a capability's deliverability claim is evaluated.
- Method–Work gates use Work scope coverage plus measures and qualification windows.
With exact F.9 Bridge occurrences
- Translation boundary. Use an exact F.9 Bridge only for exact local-sense translation. State the translation's direction, rule, tolerated loss, and polarity in a separate C.2.1 claim. Before the receiving use proceeds, require A.10
passfor ordinary reliance or, when an actual named assurance claim is current, a B.3AssuranceResultfor the same use withdisposition=supported-for-use. - Best practice. Return an explicitly narrower scope when the bounded-use claim's rule and tolerance support only a proper subset; do not turn observed mapping loss into a Bridge identity field or a generic R penalty.
With Capability governance (A.2.2)
- Capabilities MUST declare Work scope, measures, qualification windows; gates MUST verify all three.
- Capability refits that preserve the set (unit changes) are Refit, not Δ(WorkScope).
A.2.6:End
SystemRoleKindRelationStructure - Relations among System-Role Kinds
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Use This When
Plain designation. Say “structure of relations among system-role kinds” for SystemRoleKindRelationStructure.
Use this pattern when several exact context-local system-role kinds are already admitted, and a later admission, allocation, or interpretation check needs one of these results:
- an assignment to one system-role kind may satisfy a condition written for another kind;
- two system-role kinds are incompatible under one exact holder, Work, and time rule;
- several independently obtaining assignments are required together under one allocation rule; or
- one system-role kind narrows another, and the practitioner must decide whether that narrowing is monotonic
U.SubkindOfor a different residual relation.
Typical working moments include these:
- a pressure-test MethodDescription names
HydraulicsTechnicianSystemRole, while the proposed holder is assigned toSeniorHydraulicsTechnicianSystemRole; - the same system must not hold author and approver assignments for the same hazard-analysis Work during overlapping windows;
- a surgical procedure needs surgeon, anesthetist, and scrub-practitioner assignments together, with three distinct holders;
RoboticsEngineerSystemRolemay be a subkind ofEngineerSystemRole, but neither a nested label nor one assignment can establish that order.
First useful result. Write the readable direct relation or U.SubkindOf claim needed by the receiving use. Recover its exact predicate. Stop there unless another claim needs one relation occurrence as an identifiable object or needs several obtaining relations selected into one structure.
Primary EntityOfConcern. For one direct question, the EntityOfConcern is the exact relation occurrence or exact C.3.1 U.SubkindOf occurrence. When several such occurrences must be selected together, it is one SystemRoleKindRelationStructure: a dependent U.Structure selected from exact local system-role-kind constituents and exact obtaining relations under the exact applied constraints and one named selection-use frame.
The structure contains neither holder systems nor system-role-assignment occurrences. A graph, taxonomy table, policy file, or organization chart may describe it but does not become the structure or any selected relation by form.
Primary working reader. The first reader is an engineer, Method designer, safety practitioner, clinical team designer, or manager deciding which relations a later check may rely on. The reader should be able to recover the exact system-role kinds, relation rule, applicability, occurrence identity, and assignment inputs without treating a name hierarchy or policy row as the relation itself.
What goes wrong if missed. A job-title order is used as admission authority. An independence rule omits the holder, Work, or overlap condition. A bundle name hides whether one or several systems must hold the assignments. A semantic restriction is called U.SubkindOf although a known broader classification can be false. A scheme or taxonomy edition is then inserted as a participant of every relation even when it changes no meaning.
What this buys. Admission substitution, incompatibility, joint allocation, monotonic kind order, and residual qualification remain different claims with different truth and identity laws. Actual holders remain systems, actual assignments remain direct species of U.SystemRoleAssignment, and the system performing a receiving check remains visible.
Not this pattern when. Use A.2 and C.3 to admit and classify exact local system-role kinds. Use A.2.1 for assignments and their holders, A.2.5 for SystemRoleAssignmentStatePredicate and SystemRoleAssignmentStateRelation, A.2.2 for capability, A.3 patterns for Methods, and A.15 patterns for planned or performed Work. Use F.9 and A.6.9 for an actual cross-scheme Bridge, then a separate bounded-use assertion and reliance decision. Use C.29 when a graph, matrix, algebra, embedding, or table is the object under evaluation.
Problem Frame
A system applying a maintenance-admission Method may admit a current assignment to SeniorHydraulicsTechnicianSystemRole where the MethodDescription names HydraulicsTechnicianSystemRole. A system applying a safety Method may reject overlapping author and approver assignments. A clinical MethodDescription may state a joint condition over three assignments. A classification review may ask whether every true RoboticsEngineerSystemRole judgment implies a true EngineerSystemRole judgment.
These uses all concern exact system-role kinds, but they do not concern the same relation. The assignment occurrences used by a receiving check are also not participants of the kind relation. They remain independently obtaining A.2.1 relations whose holder, exact assigned kind, extent, and any real domain participant are recovered under their direct species.
A system-role-kind description or taxonomy episteme may state a relation claim, and its reference scheme may help interpret that claim. The world-side relation obtains under its direct predicate. When a KindSignature, scheme, Bridge, or other edition changes the relation rule, include that edition in the predicate's semantic basis; otherwise keep it as interpretation material outside occurrence identity.
SystemRoleKindRelationStructure is the selected organization among exact kinds and exact obtaining relations. For any checking Work, identify the acting system and dated Work under their direct patterns; the selected structure supplies only the organization used by that check.
Problem
The practitioner needs a reusable relation for a later engineering check, but familiar shorthand collapses four different questions:
- Can an assignment to one system-role kind satisfy an admission condition written for another?
- Are assignments to two system-role kinds incompatible under a stated holder, Work, and time rule?
- Must assignments to a finite set of system-role kinds be present together, and how may holders be allocated?
- Does one kind monotonically narrow another, or does the restriction require a different relation?
Calling every answer a hierarchy loses the predicate. Calling the answer a role part introduces mereology without constructive assembly or a meta-holon transition. Calling the answer a policy, chart, taxonomy, or scheme confuses a relation with an episteme or convention that describes or interprets it. The receiving check then cannot show which premise it used or what change would invalidate the outcome.
Forces
Solution
Start with the one relation family needed by the receiving use. Use exact local system-role kinds as its participants and put the rule, applicability, and only meaning-changing semantic-basis editions in its by-value predicate. Current assignments, assignment-state relations, capability, evidence, and the receiving window remain inputs to the later check.
Build a structure only when several exact relation occurrences must be selected together:
The structure specializes A.22's four-part identity: the exact system-role-kind constituents, the exact selected obtaining relation occurrences, the exact constraint claims applied, and one named selection-use frame stating the question, admissible action, and stop or return condition. stopOrReturnCondition and stopOrNonAdmissibleOverread name that same condition, not two independently filled values. A groundedNonAdmissibleOverread? is optional explanatory material under F.19:4's plausible-reader test and is not an identity discriminator. A changed rendering, identifier, selecting Work, publication, table, or graph changes no structure while all four values remain unchanged. Replacing a constituent, selected relation occurrence, applied constraint, or use frame identifies another structure. Without a required constraint or named frame, the material is still an arrangement or description rather than an admitted SystemRoleKindRelationStructure.
Direct Relation and Declaration Discipline
Substitution, incompatibility, bundle, and residual qualification are four families of direct relations under U.Relation. This pattern gives their different laws. Each context declares its exact direct species with exact local ValueKinds in its RelationSignature; A.2.7 does not introduce a permissive root signature or four additional universal Tech kinds over every possible system-role kind.
Apply the relation-object order from A.6.REL:
- recover the exact participant kinds and by-value predicate;
- establish from current facts or accepted constituting history whether the predicate obtains;
- individuate one occurrence only when a receiving use needs occurrence identity;
- assign a stable reference only when another episteme needs it; and
- keep assertion, evidence, reliance, and representation separate from the occurrence.
Each direct species declares one SlotSpec for every actual system-role-kind participant and one by-value predicate SlotSpec. A context-local kind domain gives each system-role-kind SlotSpec its exact ValueKind. A system-role-taxonomy episteme, effective reference scheme, KindSignature, Bridge, or selected model-use structure is not another generic participant. Include its exact edition in predicate identity only when the rule depends on that edition.
Establish predicate truth under the context-local rule. If a specialized direct relation obtains only through an accepted appointment, policy decision, installation, or other constituting act, the context-local predicate must name that act and its acceptance condition.
Logical form supplies argument order, set semantics, and relation laws. Use the direct rules to establish participant kinds and predicate truth, and to recover occurrence identity when the receiving use needs it. Use the relevant patterns when the claim also concerns a Method, Work, transformation, agency, constructive assembly, or holon admission.
If current facts concern one actual bounded change, make that change a separate subject and use A.3.4 to recover one U.Transformation at the resolution and boundary needed by the use. Name its affected entity, boundary, precondition, postcondition, and obtaining relations. Keep it distinct from the relation among system-role kinds, an assertion about that relation, and the Work that checks it. U.Transformation by itself supplies neither a transformation-composition predicate nor holonhood.
Admission Substitution
Use the admission-substitution family when one assignment may satisfy a receiving condition written for another system-role kind. The relation is directional.
For an exact context-local species, declare:
One predicate value is identified by the ordered candidate and required system-role kinds, the exact receiving-use rule, applicability, and only the semantic-basis editions that change that rule. Reversing the two kinds requires another predicate evaluation. A job-grade order, common word stem, or U.SubkindOf relation may be evidence or another premise; none is the substitution relation by itself.
Current assignments and any required A.2.5 state occurrences are inputs to the receiving check. They are not participants of the relation among kinds. Establish classification, assignment, capability, authorization, gate outcomes, and Work under their direct patterns as the receiving use requires them.
Incompatibility
Use the incompatibility family when assignments to two system-role kinds cannot be jointly admitted under one exact rule.
For an exact context-local species, declare:
The predicate is identified by the unordered pair of kinds, the exact same-holder or different-holder rule, Work identity condition, temporal-overlap test, applicability, and only meaning-changing semantic-basis editions. The relation obeys the symmetry law:
The exact assignments later evaluated are receiving inputs. A conflicting allocation is a case satisfying the incompatibility rule; it is not what creates the kind relation. A system applies the receiving Method and records the resulting admit, reject, defer, or unresolved outcome under the pattern for that decision.
Monotonic Kind Order and Residual Qualification
When one exact system-role kind appears to narrow another, test C.3.1 U.SubkindOf first. Use that relation only when the paired classification judgments satisfy monotonicity under the exact aligned editions and effective-reference-scheme edition required by C.3.1:
The proposed U.SubkindOf edge is never a premise for either membership judgment. Direct feature criteria must establish both judgments independently. A known narrower true with broader false refutes the relation. An unavailable broader dependency yields unknown and leaves the order unresolved.
When the restriction is useful but non-monotonic, use a separate residual relation rather than weakening U.SubkindOf:
The residual predicate names the exact restriction, applicability, orientation, and only meaning-changing semantic-basis editions. A receiving Method needing substitution must establish that separate directional relation.
Joint-Admission Bundle
Use the bundle family when a receiving use needs assignments to a finite set of system-role kinds together and the holder-allocation rule matters.
For an exact context-local species, declare:
The predicate is identified by the exact order-insensitive set, joint-admission and holder-allocation rule, applicability, and only meaning-changing semantic-basis editions. It states whether one system may hold several assignments, distinct systems must hold specified assignments, some assignments may be shared, and how the receiving window is tested.
Exact current assignments and the receiving window remain inputs to the later check. The bundle specifies a joint condition over distinct system-role kinds. Use the applicable direct pattern when assignment, team, or Work identity is needed. A list of labels without a joint-admission and allocation rule is not a bundle relation.
Occurrence Identity and Continuity
For substitution and residual qualification, one occurrence begins when fixed ordered kinds satisfy one fixed predicate. For incompatibility, the participant identity is the unordered pair. For a bundle, it is the order-insensitive finite set. In every case, the occurrence continues through the maximal uninterrupted interval during which the fixed predicate obtains for those fixed participants.
A compatible declaration, scheme, KindSignature, Bridge, or other semantic-basis edition preserves the predicate only through an explicit continuity decision showing that the rule, orientation or set semantics, applicability, system-role-kind identities, and meaning-bearing semantic basis remain unchanged. Otherwise another predicate and relation occurrence begin. Equal displayed labels establish no continuity.
An affirmative assertion or occurrence description may state the known systemRoleKindRelationExtent only after current facts or accepted constituting history satisfy the predicate and the identity rule recovers the occurrence. Closing an open extent refines the same occurrence when obtaining was uninterrupted. A demonstrated predicate-false gap ends it; later truth begins another. Missing evidence leaves reliance unresolved and does not demonstrate a truth gap.
systemRoleKindRelationExtent is content of an affirmative assertion or occurrence description, not a temporal SlotSpec. A target declaredSystemRoleKindRelationEvaluationWindow belongs to the receiving assertion or check and is not part of the direct relation signature or occurrence identity.
For U.SubkindOf, use C.3.1's own obtaining and identity law, including its exact effective-reference-scheme edition. Do not replace it with the generic A.2.7 interval rule.
SystemRoleKindRelationStructure identity follows all four A.22 discriminators: exact kind constituents, exact selected relation occurrences, exact applied constraint claims, and the named selection-use frame. A scheme change that changes a constituent, selected relation, applied constraint, or use frame changes the structure; selecting System, Method, Work, result episteme, and publication remain outside identity.
Assertion and Receiving Check
A relied-on kind-relation claim is a C.2.1 assertion episteme, not the relation occurrence. Keep these moves in order:
- name the exact direct relation family or
U.SubkindOf, participant kinds, predicate, and applicability; - establish whether current facts or accepted constituting history satisfy that predicate;
- when the receiver needs occurrence identity, apply the direct identity rule and recover the already obtaining occurrence;
- only then let an affirmative assertion use that occurrence as its
EntityOfConcernand state its known extent; and - add evidence, currentness, and reliance only when the receiving use needs them.
When no positive occurrence is recovered, a negative, candidate, counterfactual, or unsupported affirmative claim normally uses the exact admitted relation kind, or another independently identified entity, as its EntityOfConcern. Its ClaimGraph carries proposed fillings, predicate, polarity or modality, and meaning-bearing semantic basis. It carries no fabricated positive occurrence reference or actual extent.
Unresolved reliance preserves the assertion's stated polarity and leaves relation obtaining and occurrence identity unchanged. C.2.1 still identifies the assertion by its content, exact EntityOfConcern, and effective reference scheme.
Supported assertions serve as typed premises for another Method. A system performing a receiving check normally:
- resolves the exact local system-role kinds and any current direct
U.SystemRoleAssignmentspecies or A.2.5 state occurrences needed by the rule; - tests the exact relation predicate without copying assignments or state occurrences into the kind-relation participant set;
- individuates the relation only when the receiving use needs its identity;
- records the appropriate assertion and its separate reliance posture;
- evaluates capability, resource, interface, risk, evidence, currentness, assurance, or other conditions under their direct patterns; and
- performs the checking Work by the selected Method and records the outcome defined for the next question's exact decision kind.
Current facts make a world-side relation obtain. Optional individuation recovers one occurrence. An episteme asserts it. Evidence supports reliance. A system performs the check.
Recover Apparent Decomposition
When ordinary wording says subrole, role part, or combined role, start from the engineering question:
This recovery introduces no system-role mereology. Recover exact kinds, relations, assignments, predicates, Methods, and Work through the direct patterns above.
Representation, Model-Use, and Cross-Scheme Boundaries
A graph, table, matrix, algebra, embedding, policy file, taxonomy, or organization chart may describe a SystemRoleKindRelationStructure or support a C.29 mathematical-lens use. It is not the selected structure or any selected relation occurrence by form. State what organization the representation preserves and loses before relying on it.
Reference an independently selected BoundedModelUseStructure only when interpretation depends on that model-use organization. Keep it with the receiving assertion or use unless one direct relation predicate truly depends on its exact edition; only then does that edition enter the predicate's semantic basis.
When a comparison, translation, or reuse crosses schemes, first recover the exact F.17 sense cells and obtaining F.9 Bridge. Then state a separate C.2.1 bounded-use assertion naming direction, correspondence rule, tolerated loss, polarity, use, and effective scheme. Ordinary reliance requires the current A.10 evidence-provenance relation and a passing disposition for that use. Use B.3 only when an actual named assurance claim is current; require its result for the same bounded assurance use. Establish any required authorization separately.
Apply the direct rule for each claim of bounded-use suitability, an A.2.7 relation, assignment, authorization, receiving-check outcome, or performed Work. A Bridge, profile, or card may provide information for that claim. A local relation that obtains keeps the participant set and identity declared here.
Lightweight Path
Ordinary prose may state a readable relation and stop:
Add an exact direct-species RelationSignature when reusable participant typing matters. Individuate an occurrence only when another claim depends on its identity. Assign a stable reference only when another episteme needs it. Build a SystemRoleKindRelationStructure only when several selected relations must be used together and all four A.22 discriminators are recoverable. Completeness is not a reason to materialize every layer.
Worked Slices and Archetypal Grounding
Manufacturing Admission Substitution
Plant A admits SeniorHydraulicsTechnicianSystemRole and HydraulicsTechnicianSystemRole as exact local kinds. During 2026H2, the pressure-test admission Method uses this rule: an assignment to the senior kind may satisfy the condition written for the technician kind only for PumpPressureTestMethodFamily and only while the candidate assignment satisfies A.2.5 predicate PressureTestReady.
The direct species uses the local PlantMaintenanceSystemRoleKindDomain:
The predicate names the ordered two kinds, receiving Method family, PressureTestReady rule, 2026H2 applicability, and the exact semantic basis whose edition changes either clause. PlantMaintenanceRoles-2026 and Plant-A-Maintenance-Scheme may be cited in the assertion; they are not extra relation participants. If a later compatible edition preserves all identity-bearing clauses, an explicit continuity decision preserves the predicate. Otherwise another predicate and occurrence are required.
The system performing admission checking resolves the candidate's exact A.2.1 assignment and its current PressureTestReady state occurrence. Those are inputs to the receiving rule, not substitution-relation participants. Capability is checked separately. A claim about performed pressure-test Work needs its own A.15 basis.
Safety Separation of Duties
For one hazard-analysis Work item, the same system must not hold both author and approver assignments during overlapping windows. The direct species uses the exact SafetyCaseSystemRoleKindDomain and a predicate identified by the unordered pair {HazardAnalysisAuthorSystemRole, HazardAnalysisApproverSystemRole}, same-holder rule, same-Work rule, overlap test, applicability, and meaning-bearing semantic basis.
The predicate has characterized these kinds continuously since 2026-01-01. A particular pair of assignments with the same holder and Work item during overlapping windows is a later case satisfying the rule; it does not create the kind relation.
A verifier system applies the work-admission Method to two exact assignment occurrences and the target Work item. The checking Work produces the receiving decision.
Clinical Joint Admission
A surgical MethodDescription states a joint rule: assignments to SurgeonSystemRole, AnesthetistSystemRole, and ScrubPractitionerSystemRole must be held by three distinct systems throughout the procedure window selected by the receiving check.
The set is order-insensitive. The predicate names the three exact kinds, distinct-holder rule, full-window rule, procedure applicability, and meaning-bearing semantic basis. The taxonomy episteme and clinical reference scheme may help an assertion designate or interpret the kinds; they are not participants of the bundle relation.
For one planned procedure, the receiving check separately names its evaluation window and resolves three independently obtaining assignments. The bundle supplies the allocation rule; the three system-role kinds remain distinct even when the holders form one procedure team. Credentials, state, capability, gate decisions, and procedure Work remain separate.
Robotics Kind Order and Independent Musician Assignment
The lab proposes:
The proposal is not a premise for classifying Vasya or any other system. Under the exact aligned KindSignature editions and effective reference-scheme edition, direct robotics-engineering features are evaluated against both kinds. Only if every defined true RoboticsEngineerSystemRole judgment implies a true EngineerSystemRole judgment may C.3.1 establish the relation.
A known robotics-engineer true with engineer false refutes the relation. If a dependency required by the broader judgment is unavailable, the result is unknown and the order remains unresolved. A restriction concerning only one Method family, project phase, or allocation condition that fails monotonicity uses a residual qualification relation instead.
Vasya may separately hold assignments to RoboticsEngineerSystemRole and MusicianSystemRole. Those assignment identities and extents remain under A.2.1. Robot-engineering Work, music-performance Work, and teaching-robots-music Work remain A.15 occurrences. Establish capability and admission substitution separately when the receiving use needs them.
Conformance Checklist
Failure Modes and Repairs
Consequences
Benefits. Receiving Methods can reuse exact kind relations without hiding their predicates. Safety checks state separation conditions precisely. Joint Work distinguishes the required kind set from holder allocation. Monotonic order remains a classification law rather than a label convention. Residual restrictions remain useful without weakening U.SubkindOf. Relation assertions can stay readable until a receiving use needs occurrence identity.
Costs. A consequence-bearing use must state the rule that an informal hierarchy or bundle name concealed. Each context-local relation species needs exact kind domains and predicate identity. Cross-context reuse may need a Bridge and bounded-use reliance. A compatible edition needs an explicit continuity decision before the same predicate is claimed.
Limits. This pattern ends at the exact relation among system-role kinds and any selected structure over those relations. Use A.2.1 for assignments, A.2.2 and A.2.5 for capability and assignment-state relations, and A.15 for planned or performed Work. The final decision remains an occurrence of its own exact outcome kind. Storage and visualization remain implementation and lens choices.
Reopen only the affected relation or structure when a participant kind, rule, applicability, meaning-bearing semantic basis, truth interval, selected relation occurrence, or C.3.1 basis changes.
Rationale
Systems applying receiving Methods often need stable organization among system-role kinds before they inspect actual assignments. Keeping that organization as a dependent U.Structure preserves its engineering use without inventing a system-role holon, assignment configuration, second taxonomy, or universal context object.
The families are separate because their laws differ. Substitution is directional. Incompatibility is symmetric under one joint condition. A bundle uses an order-insensitive finite set and an allocation rule. Monotonic qualification belongs to U.SubkindOf; non-monotonic restriction stays residual. One generic hierarchy cannot preserve those distinctions.
Relation realism prevents a document model from becoming the ontology. Direct predicates determine obtaining, and identity laws determine whether the same world-side relation occurrence continues; assertions, policies, and diagrams describe those facts. Slot discipline makes context-local participant domains reviewable and keeps the system-role kind, holder, assignment, predicate, slot, and representation position distinct.
SoTA-Echoing
The software sources are stress cases, not the universal subject. Their transferable contribution is the separation of kind definitions, instance assignments, evaluation inputs, and outcomes.
Relations
A.2.7:End
U.Commitment (Deontic Commitment Relation)
Status: Stable Type: Definitional ontic pattern
Use This When
Use this pattern when you need to decide whether one actual system or party is obliged, required as a duty, recommended as a duty, or prohibited from doing something in a stated scope and time.
Start with the ordinary question: does this actual bearer have this duty now? Name the bearer and the duty content. Then find the policy or prescription, the rule by which it creates an individual duty, and the actual event or other basis that the rule requires. The first useful result is one obtaining U.Commitment, a demonstrated non-obtaining result, unknown, or missing-governor[individual commitment institution].
What goes wrong if missed. A policy sentence, system-role kind, assignment, publication, ticket, interface description, or complete-looking record is treated as the duty itself. A named office is called responsible without a responsibility predicate. Evidence is made constitutive merely because the duty is auditable.
What this buys. The actual duty bearer, content, modality, scope, validity, constitutive rule, and instituting basis remain inspectable. Generic prescriptions stay usable as generic claims, while evidence and records can support claims about actual commitments.
Not this pattern when. Use A.2.3 for promise content, A.2.9 for the communicative Work that may institute a duty, and A.2.8.PER for permission or authorization. For responsibility, use an admitted domain responsibility predicate; if none exists, return its exact A.6.RCD missing governor. Use a gate pattern for admissibility and A.15.1 for performed Work. If no current subject pattern defines how the proposed individual duty is instituted, return missing-governor[individual commitment institution] instead of completing a record by convention.
Kind Settlement and Wording Boundary
U.Commitment is an enduring individual deontic relation. It covers obligation, recommendation-as-duty, and prohibition.
The words bind and binding already denote technical bindings in FPF; they do not name this relation. Source phrases such as binding promise, must, shall, guarantees, is responsible for, or legally required are recognition cues. Recover their exact claim before selecting U.Commitment.
Problem Frame
FPF needs both generic normative content and actual individual duties:
- a policy can say what would apply to systems of a stated kind;
- one constitutive rule can say when that content creates an individual duty;
- actual world-side facts can satisfy or fail that rule;
- one assertion or record can describe the resulting relation for reliance or audit.
Those are different objects. If a generic policy and an individual relation share one record-shaped ontology, an assignment row or published clause can appear to create a duty by being filled in. If the actual bearer is replaced by a system-role kind or assignment, the model cannot say who is obliged. If responsibility is inferred from the duty, another independent relation disappears.
Problem
How can a practitioner state an individual deontic relation so that:
- the actual duty bearer is explicit;
- the duty referents, modality, scope, and validity are exact;
- one applicable constitutive rule and its required actual basis make institution testable;
- a generic prescription remains generic until the rule is satisfied;
- relation identity survives compatible description changes but not a changed bearer, content, rule, or interrupted validity;
- records and evidence support the claim without constituting the relation; and
- responsibility, permission, authority, assignment, Work, and compliance remain separately governed?
Forces
Solution
Direct Participants and Predicate Parameters
One U.Commitment occurrence has:
- exactly one actual duty bearer, expressed by either
dutyBearerSystemRef : U.EntityRef constrained to an admitted U.Systemor a separately governed localdutyBearerPartyRef : PartyRef; - a non-empty exact set of duty referents stating the action, avoidance, outcome, promise content, claim, or other governed object to which the duty applies; and
- optional actual counterparties or beneficiaries when the duty is owed to someone.
Exactly one duty-bearer branch is filled. A system-role kind, classification judgment, assignment occurrence, organizational-position label, publication, policy, or claim record is not the bearer.
The normalized modality is a by-value predicate parameter:
SHALL and REQUIRED map to MUST; SHALL NOT and PROHIBITED map to MUST_NOT; RECOMMENDED maps to SHOULD; and NOT RECOMMENDED maps to SHOULD_NOT only after the source claim has been recovered as a duty. MAY and OPTIONAL do not normalize into U.Commitment; route their current meaning to A.2.8.PER, an admissibility predicate, or ordinary prose.
Scope and validity delimit applicability. Duty referents are cited by exact identifiers when they already exist. Useful referent kinds include a claim ID, U.PromiseContent, an action or outcome specification, an admitted Method, or an already identified Work occurrence when the duty concerns that occurrence. A MethodDescription is cited only when the duty depends on claims in that exact episteme edition; description is not mandatory indirection to the Method.
The current normative policy or prescription, its constitutive rule, the actual instituting basis, provenance, and adjudication evidence are grounds or qualifiers. They are not extra duty bearers and do not become deontic participants by appearing in a record.
When the Relation Obtains
For proposed occurrence C, the direct predicate C : U.Commitment obtains only when all of the following hold:
- the actual duty bearer and any actual counterparties are admitted, and the duty referents are identified;
- one identified normative policy or prescription is current and applies to those participants, referents, scope, and time;
- that policy contains or cites one exact constitutive rule for an individual commitment rather than only generic content about a system-role kind;
- the rule's required instituting basis and world-side facts obtain;
- modality, scope, validity window, and every rule-required condition are satisfied; and
- no valid revocation, defeat, expiry, or supersession has ended the relation.
For the current A.2.9 path, the instituting basis is an actual U.SpeechAct Work occurrence recognized by the current policy, with the actual performer and exact covering system-role assignment independently established. Another basis is usable only when a subject pattern admits it and gives its occurrence rule.
If the corpus lacks the constitutive rule or the required instituting-relation predicate, return missing-governor[individual commitment institution]. If an applicable rule is false, the proposed commitment does not obtain. If a required evidence dependency is unavailable, reliance on the assertion is unknown; do not invent the relation or infer its negation.
Occurrence Identity and Continuity
One occurrence is identified by:
- the actual duty bearer;
- exact duty referents and counterparties;
- normalized modality and scope;
- constitutive policy and rule;
- the actual instituting basis, only when that rule makes the basis identity-bearing; and
- one maximal continuous validity interval.
The actual instituting basis is always required for obtaining. It is part of occurrence identity only when the exact constitutive rule says that reinstitution identifies another duty. A compatible policy edition, new record, or later instituting act preserves the occurrence only through an explicit continuity decision showing that every identity-bearing fact and the rule's deontic effect continue. A changed bearer, modality, referent set, constitutive rule, identity-bearing basis, or interrupted validity yields another occurrence. The commitment ID and its describing claim do not decide sameness.
When a rule makes a duty end with a system-role assignment, an assignment boundary ends that commitment. When the rule makes the duty persist for the same actual system across a replacement assignment, state that continuity explicitly. A different actual bearer always requires another commitment occurrence.
Generic Prescriptions and Assignment-Mediated Rules
A generic prescription states what one exact policy or other normative episteme requires; it does not create an individual duty bearer or commitment occurrence. A claim that one actual System or separately governed party has that duty instead cites one separately obtaining A.2.8 U.Commitment.
For example, a policy can concern ProviderSystemRole or another exact local system-role kind. Its systemRoleKindRef : U.KindRef can appear in the rule's antecedent, but the policy episteme is not an individual U.Commitment.
An exact systemRoleAssignmentRef : U.RelationRef constrained to U.SystemRoleAssignment can show that an actual system satisfies one applicability condition for a time. The assignment is still not the duty bearer or the commitment relation. The only valid direction is:
Classification or assignment alone never completes the implication. The rule states whether the duty starts, continues, and ends with the assignment.
Assertion, Record, and Adjudication
An assertion or record about a commitment is a separately identified claim-bearing episteme. A compact reliance record can expose:
Use the record to describe the relation. evidenceClaimRefs and carriers support reliance; they are not participants or instituting facts unless the identified constitutive rule makes one such fact current and the pattern for that subject supplies its test. If adjudication is intended, cite the exact evidence claims, criteria, and carriers. If no adjudication is claimed, do not invent an audit apparatus.
When a later use must compare incompatible commitments, keep the commitments unchanged and carry the needed conflict inputs in one local claim:
These conflict inputs stay outside commitment identity by default. Each authority relation must already obtain under its own predicate, and each selecting rule must be current and applicable to this selection use under the pattern that defines it. If this selection use requires an authority relation or selecting rule and that input is unavailable or no current pattern defines it, put its exact unresolved result in unresolvedInputRefs, such as missing-governor[commitment conflict authority relation] or missing-governor[commitment conflict selecting rule]. An optional field means that the input is not required for this use; it never licenses dropping a required input. For an interlevel ethical conflict, use D.3 to map the conflict and D.4 for mediation or decision use. When an explicit choice among already available options is current, C.11 supplies the ChoiceRule and ChoiceResult. Otherwise apply the direct pattern for the claimed conflict result; if none exists, return missing-governor[commitment conflict resolution].
Evidence used only to measure or verify the duty belongs to the support for the assertion. An evidence-producing or evidence-retaining duty instead names that production or retention content among its duty referents.
Direct Neighboring Relations
The common corpus has no universal responsibility predicate. VP.AllocationResponsibility can help a reader recognize the concern; the applicable domain responsibility predicate determines whether the relation obtains.
Boundary Claim Use
An A.6.B D-quadrant claim about an obtaining individual obligation, recommendation-as-duty, or prohibition cites the exact U.Commitment occurrence. A D-claim about generic policy content remains a claim about that content until the individual predicate above is satisfied.
Strong or weak permission, exercise, non-violation, and permission-conflict claims cite their exact A.2.8.PER result and do not acquire a U.Commitment payload. Gates remain A-claims, laws and definitions remain L-claims, and Work and evidence effects remain E-claims.
Archetypal Grounding
Incident Response
Current IncidentResponsePolicy-2026 says that systems assigned to ProviderSystemRole are subject to a four-hour incident-response prescription. That policy and its kind reference remain generic content.
OpsTeamProviderAssignment-2026 is an assignment occurrence with admitted System OpsTeam as holder; its species is declared under U.SystemRoleAssignment. If the policy contains the holder-application rule, speech act SA-Issue-IncidentDuty-2026 : U.SpeechAct is the policy-recognized instituting Work, and the predicate is satisfied, then IncidentResponseCommitment-2026 : U.Commitment obtains with OpsTeam as duty bearer. Its modality is MUST; its referents include SVC-SLO-RESP-4H and the Sev-1 applicability claim; its scope is IncidentManagement; and its validity window is the interval established by the rule.
The commitment assertion may cite E-SLO-RESP-1, incident tickets, timestamps, and the selected clock source for adjudication. Those values make reliance testable; SA-Issue-IncidentDuty-2026 remains the policy-recognized instituting Work.
If OpsTeamProviderAssignment-2026 ends and RecoveryTeamProviderAssignment-2026 begins, apply the constitutive rule's continuity conditions. When the rule ties duty continuity to the assignment, the OpsTeam commitment ends and a RecoveryTeam commitment begins only after its own required basis and facts obtain. If the rule instead preserves the duty for the same system across a replacement assignment, the continuity decision says so. A different bearer always means another occurrence. Likewise, a second policy-recognized act reissuing the same uninterrupted duty identifies another commitment only when the constitutive rule makes that instituting basis identity-bearing; otherwise the new act is a new ground or record for the continuing occurrence.
A policy-recognized speech act can also institute ShutdownNoticeCommitment-7 directly for admitted system PlantController-7.
IncidentResponseCommitment-2026 can obtain while no incident-ownership responsibility relation exists. Conversely, an admitted MaintenanceActionResponsibilityRelation@Plant can obtain while no U.Commitment obtains. Both can obtain for the same system and interval only as separately identified relations with separate predicates, participants, bases, and occurrence identities.
If the corpus lacks the constitutive rule or the required instituting-relation predicate, return missing-governor[individual commitment institution]. If the available facts establish that the rule's required instituting act did not occur, IncidentResponseCommitment-2026 does not obtain under §4.2. If deciding evidence is unavailable, reliance on the commitment assertion is unknown. A speech act, assignment, policy publication, or D-claim supplies only the facts it actually establishes.
Protocol Rule
A protocol description says: “Participants MUST follow the state machine; invalid traces are rejected; traces are retained for audit.” Recover separate claims:
- L-claims define the state machine and its safety or progress properties;
- A-claims define which runtime traces are admissible;
- one generic normative claim states the participant prescription;
- one actual
U.Commitmentis asserted only for an admitted bearer after an applicable constitutive rule and its required basis obtain; - the duty referents cite the state-machine, admissibility, and trace-retention content by exact identifiers; and
- evidence claims and trace carriers support later adjudication.
A ParticipantImplementerSystemRole reference in the policy names a kind. Identify the actual bearer and apply the constitutive rule with its required basis before asserting the individual commitment.
Invariants and Reasoning Primitives
- Every positive
U.Commitmenthas one actual system or party as duty bearer. - A system-role kind or assignment can be a rule ground but never the duty bearer.
- Generic normative content, individual relation, and describing assertion remain separate.
- The direct predicate includes an applicable constitutive rule and the actual basis that rule requires.
- Modality, scope, validity, and referents are explicit.
- Missing evidence makes reliance unresolved; it does not invent or negate the relation.
- Assignment turnover does not transfer a duty automatically.
- Responsibility, permission, authority, access, Work, result, and compliance remain separately governed.
- Compatible record correction does not decide world-side continuity.
- A Bridge or similar wording in another context creates no local commitment.
Bias Annotation
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Benefits
- Generic policy content and actual duty no longer collapse.
- Actual bearers are directly recoverable.
- Modality, scope, referents, and validity remain lintable.
- Assignment and responsibility independence is explicit.
- Assurance can be added proportionately without becoming universal process overhead.
Costs and mitigations
- A positive individual-duty claim needs more than a policy sentence. This is the necessary cost of claiming a world-side relation; generic policy content remains cheap to state.
- Domains with another instituting basis need the pattern that defines that basis. Until then,
missing-governoris an honest usable result. - Conflict resolution remains outside this pattern. Preserve each current commitment plus the exact source, independently obtaining authority relation, and selecting rule required by the named conflict or choice use; apply D.3/D.4 for an interlevel ethical conflict, C.11 for an explicit choice among available options, or return
missing-governor[commitment conflict resolution]when no direct result rule exists.
Rationale
Requiring an actual bearer, constitutive rule, and actual basis prevents description, assignment, and publication from becoming causes by form. Keeping assertion and evidence separate preserves both ontology and auditability. Keeping responsibility separate avoids replacing one ambiguous word with an equally ambiguous omnibus governance object.
SoTA-Echoing
Informative. These comparisons motivate the distinctions; they do not govern local claims.
- BCP 14 (RFC 2119 and RFC 8174). Controlled normative keywords support explicit modality, but keywords do not identify an individual bearer or institute a duty. Adapt.
- W3C ODRL 2.2. Duties, permissions, assignees, actions, constraints, and policy provenance motivate explicit participants and qualifiers. FPF keeps individual commitment, permission, policy episteme, and evidence separate. Adapt.
- Institutional and constitutive-rule approaches. Their distinction between rule content, institutional conditions, and resulting relations supports the required constitutive rule and actual basis. Adopt the separation.
- Policy-as-code practice. Admission predicates and policy evaluation should not be confused with individual obligation or performed Work. Adapt.
- Trace-based compliance and supply-chain attestations. Evidence and carriers can support adjudication while remaining distinct from relation obtaining. Adopt.
Relations
- Builds on: A.2 and C.3 for system-role kinds and classification; A.2.1 for declared system-role-assignment species and their obtaining occurrences; A.2.6 for scope and temporal qualification; A.2.9 for communicative Work; A.6.RCD for missing governors; A.7 for episteme and world separation.
- Coordinates with: A.2.3 for promise content; A.2.8.PER for permission; F.6 and A.15.1 for Work attribution; A.6.B and A.6.C for claim classification and boundary wording; A.10 for evidence and source reliance.
- Does not define: a universal responsibility, authority, access, compliance, or result relation; a system-role kind; a system-role assignment; a policy language; or a legal-party model.
A.2.8:End
Granted Permission, Exercise, and Non-Prohibition
Type: Definitional ontic support pattern Status: Stable Normativity: Normative unless marked informative
Use this when
Use this pattern when a policy, approval, permit, system-role rule, boundary claim, readiness check, or later work use needs to distinguish five questions:
- whether a sufficiently complete current frame supports a
NonProhibitionFinding@Context; - whether a valid grant currently obtains as
GrantedPermissionRelation@Context; - whether dated matching work exercises it through
PermissionExerciseRelation@Context; - whether checked actual work supports a
NonViolationFinding@Context; and - whether an incompatible current grant and norm require
PermissionNormConflictFinding@Context.
The first useful move is to name the beneficiary reference, permitted-action specification or checked work, current normative-frame edition and policy, ClaimScope, intended use, window, and the exact result needed now. Return exactly the warranted NonProhibitionFinding@Context, GrantedPermissionRelation@Context, PermissionExerciseRelation@Context, NonViolationFinding@Context, or PermissionNormConflictFinding@Context; do not infer one from another.
Not this pattern when. Use A.2.8 for one actual bearer's obligation, recommendation-as-duty, or prohibition; A.2.9 for the communicative work that institutes or revokes a grant; A.6.B for L/A/D/E classification; A.15.5 for work-entry readiness; A.21 for gate decisions; and A.15.1 for the identity and result of performed work.
The primary reader is a policy, boundary, work-planning, assurance, or operations practitioner who must decide exactly what a permission-looking claim can support. The performer of a grant speech act or later Work remains an admitted system under one exact obtaining system-role assignment.
Problem frame
Permission-looking language often compresses unlike values. “No rule forbids it” may be an incomplete search result. “The permit allows it” may refer to a document, an issuing act, or an enduring relation. “We used the permit” may mean only that a badge was visible, while no matching work occurred. A green gate can also look as if it defeated a current prohibition.
The concern is the smallest exact permission result needed for one beneficiary, action specification, normative-frame edition, ClaimScope, intended use, and window. The act, permit episteme, publication carrier, evidence relation, admissibility predicate, readiness relation, gate decision, actual Work, and work result remain distinct and are handled under their respective subject patterns.
Problem
How can FPF represent positive permission without turning it into an obligation modality, absence-of-evidence claim, permit document, gate result, readiness label, capability, or performed action?
A conforming account must make weak and strong permission different, keep grant occurrence identity inspectable, connect only eligible matching work to a current grant, keep both exercise and non-exercise from establishing a frame-relative non-violation finding, and expose same-scope normative conflicts instead of resolving them by display or wording.
Forces
Solution
Keep the permission objects separate
Use exactly the object warranted by the current claim:
NonProhibitionFinding@Contextis a frame-relative episteme returned before action when a sufficiently complete current normative frame contains no applicable prohibition.GrantedPermissionRelation@Contextis an enduring strong permission instituted under an exact policy.PermissionExerciseRelation@Contextconnects actual dated work to one obtaining grant occurrence when action and beneficiary eligibility match.NonViolationFinding@Contextis a frame-relative episteme about actual work that instantiates no applicable prohibition in the checked frame.PermissionNormConflictFinding@Contextis an episteme exposing an incompatible current grant and prohibition or commitment over matching content, scope, and window.
Absence of any one object does not imply another. In particular, no grant is inferred from a weak finding, no exercise is inferred from a grant, and work outside a grant is not called a violation of that grant.
Use the closed beneficiary reference family
The participant meaning is stable: the exact entity designated by the grant as beneficiary. The reference branch changes only the exercise-eligibility test:
beneficiarySystemRoleAssignmentRefnames one assignment occurrence and its declared species and applies only to that occurrence.beneficiarySystemRoleKindRefnames one exact local system-role kind; the policy states which current assignments to that kind make an actual performer eligible.PartyRefcovers work only when its exact performer or on-behalf-of relation satisfies the policy. Shared naming or organizational membership is insufficient.
This is a closed ref union over admitted U.Entity values, not U.PermissionBeneficiary, U.Authorization, or another new U-kind. A materially different beneficiary meaning requires a separate decision under the applicable subject pattern.
Record weak permission and non-violation as findings
nonProhibited and nonViolating are admissible only when the named frame is current and explicitly sufficiently complete for the intended use. Otherwise the finding is unresolved. Neither finding institutes permission or proves absence outside its frame.
Every ClaimAddress in this pattern means the reusable [C.2.1](/generated/patterns/C.2.1) ClaimAddress: an exact episteme-edition reference plus an intrinsic claim identity declared by that edition's ClaimGraph. A heading, row number, file location, or printed token is insufficient.
For NonViolationFinding@Context, recover the performer Systems from the named Work and cite each covering assignment occurrence and its declared U.SystemRoleAssignment species. If the checked norm instead turns on Work done for a PartyRef, cite the obtaining on-behalf-of relation defined in its pattern. These are case facts used by the evaluation, not a new beneficiaryPerformanceBinding episteme. Omit the on-behalf-of reference when no such branch is used.
Declare the strong granted-permission relation
The beneficiary and permitted-action specification are participants. The grantor system-role assignment, instituting act, policy, ClaimScope, validity window, and revocation are constructive grounds or qualifiers.
The relation begins only when an admitted holder U.System performs a U.SpeechAct under the exact grantorSystemRoleAssignmentRef, the act satisfies the current policy's grant-validity predicate, and it institutes permission for the named participants. The assignment's HolderSystemSlot resolves to that system: the system performs the act, while the assignment supplies only the holder and assigned-kind fact used by the policy. Any authority claim required by the policy obtains independently. The relation obtains while beneficiary applicability, policy continuation, scope, and window hold and no valid revocation or supersession ends it.
One occurrence is identified by the instituting speech-act occurrence, exact beneficiary ref and ref kind, action-specification edition, policy edition, ClaimScope, and effective interval. Beneficiary change, renewal, materially changed action specification, non-carried policy edition, or revocation ends or splits the occurrence. A policy edition preserves it only through an explicit satisfied carry-forward rule.
Declare actual exercise
Decide exercise from two observable questions about the existing objects: did this dated Work instantiate the grant's permitted-action specification, and did its actual performer satisfy the grant's beneficiary branch? For a beneficiarySystemRoleAssignmentRef branch, the named assignment must cover the Work and have that performer as holder. For a beneficiarySystemRoleKindRef branch, beneficiarySystemRoleAssignmentRef names the exact covering assignment whose declaration-local kind slot contains that kind. For a beneficiaryPartyRef branch, the performer must be that party or onBehalfOfRelationOccurrenceRef must cite the already obtaining relation whose predicate is defined by its subject pattern and whose use is licensed by the policy. If either question fails, this exercise relation does not obtain.
No actionMatchFinding or beneficiaryEligibilityFinding is required. The match and eligibility are direct obtaining predicates over the Work, grant, action specification, performer, and cited assignment or on-behalf-of relation. If a receiving assurance or audit use needs a separately recorded evaluation or evidence item, identify that item through the applicable evaluation or evidence-use relation; do not mint a placeholder episteme merely to fill this relation.
The exercise relation obtains only when those two predicates hold, the grant obtains throughout the exercise interval, and the work remains in scope. The work is a satisfier of permitted action content. Judge any obligation-satisfaction or discharge claim under the separate evaluation or compliance rule (A.2.8:4.6). The work consumes the grant only when the named policy explicitly makes it single-use or quota-bound.
Non-exercise leaves an obtaining grant unused and ordinarily still obtaining; it does not establish NonViolationFinding@Context. Exercise establishes only the exercise relation and likewise does not establish that finding without the separate checked-frame evaluation. Work outside the action specification, beneficiary binding, scope, or window does not exercise the grant; any further consequence is established only by the applicable prohibition, commitment, admissibility, or Work-related predicate. If a decision is required, an admitted system performs the dated decision Work under the relevant Method, covering assignment, and authority relation.
Expose conflict without inventing precedence
Create the finding only when the grant and current prohibition or commitment concern the same beneficiary/action content, overlapping scope/window, and incompatible practical conclusions. Check that match directly from the two claims and their participants; do not require a beneficiaryAndActionMatchFinding wrapper. Permission and an obligation to perform the same action are not automatically in conflict.
Resolve the conflict through exactly one of two branches:
- The current policy already decides.
applicablePrecedenceRuleAddresscites the policy claim whose stated conditions match this beneficiary, action, scope, and window. SetsettledByApplicableRuleonly when that rule itself selects which claim governs the blocked use. - A decision is required. Name the admitted
U.Systemthat decides, the covering assignment under which it performs the datedresolutionWorkRef, and the independently obtaining authority relation whose predicate is defined by its subject pattern and which authorizes this decision. The direct result relation for that decision must connect the Work to a currentPermissionConflictResolutionResult@Contextselecting either the grant occurrence or the conflicting norm claim for the stated scope/window.
PermissionConflictResolutionResult@Context is the exact decision result for this conflict. Exactly one of selectedGrantOccurrenceRef or selectedNormClaimAddress is filled. Its deciderSystemRoleAssignmentRef must cover resolutionWorkRef and have deciderSystemRef as holder; decisionAuthorityRelationOccurrenceRef must independently authorize that decision. If no policy rule decides and no such current result exists, the disposition remains unresolved, even when a responsible office or system-role kind is named. Permit text, readiness, or a passing gate does not silently defeat the prohibition.
Keep the handshakes narrow
Archetypal Grounding
Assignment, permission, access, and authority. AdminAssignment is a declared U.SystemRoleAssignment species. Occurrence AdminAssignment-4 has admitted System ServiceOperator-4 as holder and AdminSystemRole as assigned-kind value. That fact alone establishes no grant, access, or decision authority. A policy-valid speech act can separately institute one GrantedPermissionRelation@Context for AdminSystemRole, RestartServiceActionSpec, the declared scope, and the declared window. Matching dated Work exercises that grant only through a separate PermissionExerciseRelation@Context. If service access is claimed, cite its domain access predicate and participants; when no such predicate is available, return A.6.RCD missing-governor[direct service-access relation]. Permission, exercise, access, authority, assignment, and Work therefore remain separate.
Strong grant and exercise. PlantPermissionGrantorAssignment is a declared U.SystemRoleAssignment species. Occurrence MaintenanceCoordinator-A@DayShift has admitted System MaintenanceCoordinator-A as holder, and that System performs a policy-valid grant speech act under the assignment. The act institutes MaintenanceCalibrationGrant-2026-07-19 : GrantedPermissionRelation@Context for MaintenanceTechnicianSystemRole to run CalibrationProcedure-v3 during one service window. Its beneficiary uses beneficiarySystemRoleKindRef.
PlantCalibrationTechnicianAssignment is another declared species. Occurrence Tech-17@Shift-B has admitted technician System Tech-17 as holder and MaintenanceTechnicianSystemRole as assigned-kind value. Tech-17 performs dated CalibrationWork-17B under that assignment. The Work instantiates CalibrationProcedure-v3 within the grant's zone, window, and scope, so the action-match predicate holds. The assignment covers the Work and satisfies the kind branch, so the beneficiary predicate holds.
CalibrationExercise-17B : PermissionExerciseRelation@Context therefore connects CalibrationWork-17B to MaintenanceCalibrationGrant-2026-07-19, cites beneficiarySystemRoleAssignmentRef=Tech-17@Shift-B, and states the Work interval and scope. No auxiliary match or eligibility finding is created. The assignments supply holder and assigned-kind facts for the grant and Work attribution; any required authority relation obtains independently. The grant remains current for the rest of the window because the policy is not single-use. Claims about obligation, readiness, capability, gate passage, a safe result, or successful calibration need their own grounds.
Weak finding. A policy reviewer checks a named, current, sufficiently complete plant-access frame and finds no prohibition applicable to the exact system-role kind, action specification, zone, and window. The result is NonProhibitionFinding@Context(result=nonProhibited), not an instituted grant. If the emergency-policy register cannot be checked, the result is unresolved.
Actual-Work non-violation. After CalibrationWork-17B is performed, CalibrationComplianceEvaluation-17B : U.Work checks that Work against PlantCalibrationNormativeFrame-2026-07-19-e3, whose currentness and sufficient completeness for the technician, procedure, zone, and service-window use are named and whose applicable prohibitions are checked. The result is NonViolationFinding@Context(workRef=CalibrationWork-17B, performerSystemRoleAssignmentRefs={Tech-17@Shift-B}, normativeFrameRef=PlantCalibrationNormativeFrame-2026-07-19-e3, evaluationWorkRef=CalibrationComplianceEvaluation-17B, result=nonViolating). It needs no beneficiary-binding episteme: the covering assignment already relates the performer system to the beneficiary system-role kind. The separate exercise relation shows which grant the Work exercised; exercise alone does not establish non-violation, and non-exercise alone does not establish it either. If the frame is stale or insufficiently complete for this use, the non-violation result is unresolved.
Conflict and non-use. The system-role-kind-level calibration grant remains published while ContaminatedZoneEntryProhibition-7 forbids the same beneficiary and calibration action in Zone 7 during an overlapping interval. In the direct-rule case, EmergencyCalibrationPrecedencePolicy-e5 contains applicable claim CZ7-Prohibition-Overrides-CalGrant. The rule's conditions match, so the finding is settledByApplicableRule, cites that rule, and returns “do not enter Zone 7” for the blocked Work.
In a discretionary Zone 8 case, PlantSafetyDecisionAssignment is a declared U.SystemRoleAssignment species. Occurrence SafetyDirector-3@EmergencyShift has admitted System SafetyDirector-3 as holder, and that System performs CalibrationConflictDecisionWork-8 under the assignment. The separately obtaining PlantEmergencyExceptionAuthority-8 relation authorizes that decision, and current CalibrationConflictResolutionResult-8 selects the prohibition claim for the stated scope and window. Only then is the finding settledByDecisionResult.
A second Zone 8 request that merely names the Safety Director but has no dated decision Work or current result remains unresolved. A visible permit and green readiness tile cannot repair either gap. If no calibration Work occurs, the permission is neither exercised nor violated.
Bias-Annotation
Lenses: Gov, Arch, Onto/Epist, Prag, Did. Scope: permission-specific support across boundary and work uses.
The chief bias is document-and-display authority: a readable permit, badge, policy response, or green gate looks stronger than its recoverable relation. The repair is exact ground, participants, policy/currentness, scope/window, and separate evidence. A second bias is obligation-shaped deontics; the exercise and non-exercise rules preserve permission as latitude.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
Permission becomes inspectable without being inflated into a universal authorization ontology. Practitioners can distinguish a tentative frame-relative result from an enduring grant and from actual exercise, and can stop on unresolved conflict without letting a gate or permit display choose precedence. The cost is recording enough policy, identity, scope, window, and eligibility detail to support the intended use.
Rationale
Positive permission has different satisfaction and failure behavior from obligation. A grant can obtain while unused; non-use ordinarily violates nothing; matching action can exercise the grant without discharging a duty. Separating weak findings, strong grants, and exercise preserves these practical consequences while using existing episteme, relation, speech-act, policy, work, and evidence-use patterns.
SoTA-Echoing
These sources change the practical record and its failure results. They do not license a generic authorization kind, beneficiary kind, permit-as-relation shortcut, or automatic precedence rule.
Relations
- Coordinates with:
A.2.8for obligations, recommendations-as-duty, and prohibitions;A.2.9for instituting or revoking speech acts; andA.6.BandA.6.Cfor deontic claim classification and agreement-like boundary-language unpacking. - Supplies inputs to:
A.15.5readiness and direct mechanism/gate checks only when their own predicates explicitly consume a current grant, finding, or conflict result. - Relates to work through:
A.15.1for datedU.Workidentity andPermissionExerciseRelation@Contextfor the separate exercise claim. - Uses evidence from:
A.10and publication/currentness patterns for claims about the permission relation and its permit carriers. - Does not replace: system-role kind or assignment, capability, plan, gate, admissibility, policy precedence, evidence, performed Work, result, safety, assurance, responsibility, authority, access, or commitment patterns.
A.2.8.PER:End
A.2.9 — U.SpeechAct (Communicative Work Kind, Occurrences, and Records)
Status: Stable Type: Definitional work-ontic pattern
Kind Settlement
U.SpeechAct is the admitted communicative-work kind under U.Work. One individual such as SA-Approve-4711 : U.SpeechAct is an actual temporally bounded speech-act occurrence. A SpeechActRecord : U.Episteme may state claims about that occurrence.
Use This When
Use this pattern when one actual act of communicating matters because either:
- a named System or audience, including the producer returning later, should understand or do something because of it, and you need to judge the evidence, smallest repair, or stop; or
- a project must identify, model, audit, or rely on it as performed Work, for example as an approval, authorization, revocation, notice, declaration, or publication.
What goes wrong if missed. A response, silence, later action, or later change is treated as the meaning, achievement, or caused effect of the communication; or a document, interface, ticket, message, or log is treated as if it performed the act. Approval, wording, evidence carrier, commitment, receiving use, and performed Work then collapse into one phrase.
What this buys. A practitioner can first judge what the communication should enable and what evidence or repair the use needs. Exact communicative Work occurrences remain available for modeling, audit, and reliance without collapsing them into a claim-bearing SpeechActRecord, an utterance description, or an evidence carrier.
Typical moments:
- a report, model, message, or answer seems clear, but it is unclear who should understand or do what with it or what evidence would be enough;
- a response, later action, or later change is being used as proof that the named receiving use was achieved or that the communication caused the change;
- a release, gate, or work step depends on whether a named approval or authorization was performed;
- a publication, notice, or revocation may have an institutional effect only under an exact current policy or procedure, while the communicative act and any resulting effect retain distinct intervals;
- a commitment must cite the act that instituted it, rather than only pointing at a document;
- a message, ticket, signed record, or API call log is being mistaken for the act itself.
Primary EntityOfConcern. The EntityOfConcern is one actual act of communicating, admitted as communicative Work under U.SpeechAct. For a receiving-use question, identify that Work only far enough to say who should understand or do what and to keep the act distinct from its wording, representation, medium, response, and later effect. When exact occurrence identity, institutional force, audit, or reliance is current, first recover the exact actual performer System; its A.13 local agential kind and criterion, classification, obtaining assignment, scope, working situation, window, and adequate core evidence; a characteristic profile only when conditionally consumed; the exact communicative performance history; enacted U.Method; temporal extent; and an obtaining locally declared containing-System relation. A.15.1 admits the act from those facts. Only afterward, and only when exact assignment-bound attribution is current, use F.6 performedUnderAssignment through the same assignment. Also recover the recognition-taxonomy episteme, effective reference scheme, and any applicable policy or procedure. A SpeechActRecord, MethodDescription, utterance-description episteme, channel, and file, message, ticket, or log carrier remain separate objects.
First useful move. State who should understand or do what because of the communication, including later self-use by its producer, and what evidence would be enough for the present judgement. Keep response, achievement, later action or change, causal contribution, authority, consent, permission, and admissibility separate. Repair the smallest blocker in the wording, representation, prerequisites, medium, interaction, or a future receiving use—or stop. Only when the named modeling, audit, institutional, or reliance use needs exact occurrence detail should you recover the A.13 performer core and independently admit the act through A.15.1; only after that admission should a precise assignment-bound claim open F.6. Recover taxonomy, scheme, policy, optional channel, and any separate effect only when the use needs them. Create a SpeechActRecord only when a receiving use needs a persistent claim about the already admitted occurrence. A record may omit exact assignment attribution when that use makes none; any guard, gate, or claim that relies on exact assignment-bound attribution requires performedUnderAssignmentRef to the separately established F.6 relation for the already admitted act and the same A.13 assignment.
Not this pattern when. If the question is only what a document says, use A.7/C.2/E.17. If the question is only evidentiary support for a later claim or whether the communication caused a later effect, use A.10 or C.28 after identifying that claim. If the question is who is accountable under a deontic relation, use A.2.8. If the Work has no communicative effect, use A.15.1 directly.
Type: Definitional (D) Normativity: Normative (unless explicitly marked informative) Placement: Part A → A.2 System-role kinds, assignments, and agency kernel Refines: A.2 (System-role kinds and assignments) Builds on: A.2.1 (
U.SystemRoleAssignmentdirect species), A.2.6 (Γ_timeand windows), A.7 (EntityOfConcern, Description episteme, and carrier), A.10 (SCR/RSCR carrier discipline), A.13 (precise local agency basis), A.15.1 (U.Work), and F.6 (performedUnderAssignmentattribution) Purpose (one line): Admit communicative enactments underU.SpeechAct, make a named receiving use and its smallest evidence-backed repair usable before heavier occurrence detail, and provide a minimal optionalSpeechActRecordwhile keeping the act, record, utterance description, and evidence carrier separate.
FPF already treats communicative acts as observable events used in system-role-assignment-state checklists and grounding (“presence of act: AuthorizationSpeechAct exists…”); those checks cite actual occurrences admitted under
U.SpeechAct, not the kind itself. The spec’s micro-examples and conformance gates distinguish communicative Work (“performed a SpeechAct”) from operational Work (“executed Work”) while keeping both insideU.Work(cf. CC‑A15‑10 GateSplit).
A.2.9:1 — Problem frame
FPF repeatedly needs to reference “someone said/did the approving/authorizing/declaring thing”:
- System-role-assignment eligibility and enactability checklists often depend on the presence of an approval or authorization act within a freshness window.
- Governance patterns and boundary writing (A.6 stack) need provenance: “this obligation or commitment, or this separately represented granted permission, was instituted by that act”.
- Operational patterns need auditable notices (“depletion notice”, “override invoked”) whose existence and timing matter.
The same separation is needed before formal occurrence modeling. A reader may need to decide whether a report, answer, model, or message enabled one named use and what to repair. A visible response is not by itself achievement; a later action or change is not by itself evidence that the communication caused it; and the full occurrence-record apparatus should not be a prerequisite for this first bounded judgement.
Without a first-class kind for such communicative Work and a separate way to describe each occurrence, authors tend to:
- attribute agency to descriptions (“the spec approves…”, “the interface guarantees…”),
- collapse “utterance text” and “speech act event”,
- leave provenance dangling as “if modeled”,
- encode gates as prose obligations, or treat obligations as gates.
The definition below admits U.SpeechAct as an explicit Work kind and states the identity conditions for actual speech-act occurrences; their optional records remain separate from U.Commitment, utterance descriptions, and carriers.
A.2.9:2 — Problem
How can FPF represent communicative enactments so that:
- Agency is explicit: the actual performer
U.Systemfirst has the A.13 core for this communicative action—one exact local agential system-role kind and criterion, classification, the same obtaining assignment, scope, working situation, window, and adequate core evidence. A.15.1 then independently admits the act from its performance history, Method, extent, and containment. Only afterward does F.6 establishperformedUnderAssignmentthrough the same obtaining assignment when precise assignment-bound attribution is current. A characteristic profile remains conditional on a consumed Grade, autonomy or profile result, criterion-dependent characteristic, or assurance use. - The act is locatable in time: the act has an explicit Window (and thus freshness can be evaluated).
- The act is locatable in meaning: the act satisfies a type defined by an exact recognition-taxonomy episteme under an effective reference scheme; no generic bounded-context participant or Work judgement-context field substitutes for that basis, and
U.ClaimScoperemains only a claim-applicability object when a receiving claim needs one. - The act is auditable: it has at least one declared utterance description, evidence carrier, or both when used for gate checks or governance.
- Institutional effects are linkable: the act can institute or update commitments, system-role assignments, statuses, and other exact relations by reference only after each effect's direct obtaining conditions hold.
- Ambiguity is handled pragmatically: the model supports multi-function and multi-party communication without requiring full linguistic pragmatics.
- Receiving use stays affordable: a practitioner can name who should understand or do what, judge the available evidence, and repair the smallest blocker or stop without first constructing a complete occurrence record.
A.2.9:3 — Forces
A.2.9:4 — Solution
When a receiving use is current, state who should understand or do what because of the communicative Work, including later self-use by its producer, then judge that Work against evidence relevant to the stated use. A response, silence, later action, or later change may be evidence, but none by itself defines what the utterance means, proves that the use was achieved, or shows that the Work caused the later effect. Keep the communicative Work distinct from its wording, representation, medium, interpretation, response, later action or change, and any causal claim.
Repair the smallest thing that blocks the stated use—for example, wording, representation, prerequisites, medium, interaction, or a future receiving use—or stop. Judge earlier communicative Work against the use stated for that occurrence. A revised use applies to later communication or to a separately named reevaluation; it does not turn the earlier response into achievement of the earlier declared use. Authority, consent, permission, and ethical or institutional admissibility remain separate questions.
When exact occurrence identity, governance, modeling, audit, or reliance is current, use the admitted kernel kind U.SpeechAct. An individual SA : U.SpeechAct first passes the independent A.13/A.15.1 admission route: the exact actual performer System satisfies and is classified under one local agential system-role kind, holds one obtaining assignment, and has adequate core evidence; the communicative performance history, enacted Method, temporal extent, and containing-System relation are grounded. A characteristic profile is added only when conditionally consumed. If the use also claims the exact assignment under which the act occurred, F.6 then relates the already admitted SA to that same obtaining A.13 assignment. A separate recognition-taxonomy episteme and effective reference scheme make the act-type classification inspectable; an applicable policy or procedure defines any claimed institutional force. A SpeechActRecord may describe the occurrence and point to a MethodDescription, optional channel, utterance descriptions, or evidence carriers; none is the act or enacted Method.
A.2.9:4.1 — Normative definition
U.SpeechAct <: U.Work is a kind declaration. An actual Work individual is admitted as SA : U.SpeechAct when its primary effect is communicative: it places an utterance through an optional channel in a way classified by an exact speech-act recognition taxonomy under an effective reference scheme and, when institutional force is claimed, by a current policy, procedure, or protocol rule as potentially:
- asserting/informing,
- requesting/directing,
- promising/committing (as an instituting act),
- declaring/authorizing/revoking (status-changing acts),
- notifying (event announcement relevant for downstream work).
Per A.7 and A.15.1, the actual speech-act occurrence is a Work individual; its SpeechActRecord and utterance descriptions are epistemes, while its carriers are utterance carriers, publication carriers, or traces that allow observation and audit.
Occurrence identity specializes A.15.1. Admit a candidate as actual communicative Work from one exact communicative performance history, every actual performer's A.13 core, an enacted Method, temporal extent, and containing-System relation; do not use an F.6 conclusion as an admission premise. Several satisfied act types classify that one Work occurrence. Identify more than one occurrence only when distinct performance history, enacted Methods, institutional actions, or another admitted discriminator establishes distinct Work. A shared utterance, carrier, assignment, or interval decides neither sameness nor difference. If a named use still admits more than one defensible segmentation, cite its continuity or segmentation rule or leave the occurrence boundary unresolved. Check any precise assignment-bound attribution through F.6 only after admission.
Whether a given act type institutes commitments, permissions, publication relations, or status changes depends on an exact current policy or procedure and on the direct obtaining conditions of the claimed effect. Absent that basis, treat SA : U.SpeechAct only as actual communicative Work.
A.2.9:4.2 — Minimal occurrence-description record (normative)
Use the following declaration schema only when a receiving use needs a persistent claim about one already admitted actual speech-act occurrence. The record fields state claims about the referenced occurrence. A source that has only a candidate observation uses the separate non-conformant episteme/stub described under SpeechActRef discipline; it supplies neither a SpeechActRef nor a SpeechActRecord.
Occurrence-side constraints:
- (SA‑C0) Actual Work conformance. The individual referenced by
speechActOccurrenceRefMUST first satisfy independent A.15.1 admission: every actual performer has the A.13 core for the communicative action, scope, working situation, and window; the performance history is grounded; and the Work has an actualenactsMethod -> U.Methodrelation, temporal extent, and at least one obtaining locally declared Work-to-System containment relation. Add a characteristic profile only when a Grade, autonomy or profile result, criterion-dependent characteristic, or assurance use consumes it. A record that makes no exact assignment-bound attribution MAY omitperformedUnderAssignmentRef. Whenever that field is present or the record claims exact assignment-bound attribution, it MUST resolve to a separate F.6 relation established after admission for this already admitted act through the same obtaining A.13 assignment.methodDescriptionRef, when present, cites a separate C.2.1 episteme; the description is not enacted. - (SA‑C1) The System performs; exact attribution reuses the same assignment. The performer MUST be an admitted
U.Systemthat satisfies and is classified under one exact local agential system-role kind for this act. An observation-only or otherwise non-attribution record MAY omitperformedUnderAssignmentRefand MUST NOT be used to satisfy a guard, gate, or claim that depends on exact assignment-bound attribution. If the field is present, it MUST resolve to the separately obtaining F.6performedUnderAssignmentrelation for the already admitted act and the same obtaining assignment occurrence named by A.13, together with its declaredU.SystemRoleAssignmentspecies. If a guard, gate, or claim relies on exact assignment-bound attribution, the field MUST be present and that F.6 relation MUST obtain. The assignment MUST have the performer as holder, supply every other participant, cover the act, and satisfy its species predicate for the required scope, working situation, and window. Evidence supports those core facts; a characteristic profile enters only when conditionally consumed. Taxonomy and reference-scheme epistemes may interpret an assertion but are not assignment participants. Establish any authority required by the receiving use under its applicable rule. - (SA‑C2) Act types are independently satisfied recognition classifications. The occurrence MUST instantiate at least one
SpeechActTypeRefdefined by the exactrecognitionTaxonomyRefunder the statedeffectiveReferenceScheme. If a policy or procedure supplies an additional recognition condition, cite its exact current episteme and satisfy that condition separately. - (SA‑C3) Time honesty and interval separation. The occurrence MUST have an actual temporal extent so freshness can be evaluated; the record's
windowis a claim about that act extent. Every instituted commitment, grant, publication relation, status relation, or other effect keeps its own independently governed occurrence or validity interval. Coincident boundaries do not merge act and effect. - (SA‑C3a) Policy, procedure, and channel remain neighbors. A cited
policyOrProcedureRefis a separate current C.2.1 episteme; its currentness, applicability, and any edition relation must be established under their subject patterns. An optionalchannelRefnames an independently governed communication route or participating entity.
Keep three questions separate. utteranceSubjectRefs answers what the utterance or claim is about. institutionalTargetRefs answers which object or relation the act is intended to institute or update under the cited current policy or procedure. Actual change or institutional effect is a third world-side fact and is stated only through its exact direct change/effect relation and the matching typed institutes.* reference when the record needs it. An informative notice or assertion may have a subject without any institutional target or changed entity. Shared reference values do not collapse these relation meanings.
Record- and reliance-side constraints:
- (SA‑C4) A relied-on occurrence must be observable. When a gate, checklist, commitment, or grant relies on a
SpeechActRef, theSpeechActRecordSHALL identify that same occurrence and cite at least one applicable entry fromutteranceDescriptionLocatorsorcarrierRefs, or a separately governed evidence relation. Evidence-critical uses SHOULD cite at least one carrier through A.10. Record completeness alone does not prove occurrence or institutional force. - (SA‑C5) Institutional-effect claims are typed references to world-side effects.
institutes.*may reference only a separately obtaining commitment or relation occurrence through its declared RefKind. Eachinstitutes.commitmentsvalue resolves throughU.RelationRef constrained to U.Commitmentand is usable only when an identified policy applies and A.2.8's bearer, constitutive-rule, instituting-basis, and continuation conditions hold. Eachinstitutes.permissionsvalue resolves to oneGrantedPermissionRelation@Contextwhose participants, policy, scheme, and validity satisfy A.2.8.PER; eachinstitutes.systemRoleAssignmentsvalue resolves to one occurrence whose species is declared under A.2.1; and each publication value resolves to an obtainingEpistemePublicationRelationunder E.24.PUB. A status claim is an episteme about an effect; keep it and its A.10 evidence relation outsideinstitutes.*. A Bridge is added only if the receiving inference depends on translating or comparing local meanings across schemes. - (SA‑C6) F.9 only for a real cross-locality dependency. Cite an F.9 Bridge when a receiving check, gate, provenance claim, or effect inference actually compares, substitutes, or transfers a speech-act type or policy meaning between different local taxonomies, schemes, or policies. A different consumer, organization label, repository location, or downstream use does not by itself create that dependency. The same token in two local schemes does not establish equivalence, and a Bridge does not transfer institutional force by itself.
A.2.9:4.3 — SpeechActRef discipline (normative)
A SpeechActRef resolves to one actual Work individual admitted as SA : U.SpeechAct. It never denotes the kind itself or a SpeechActRecord.
- If an A.2.8 commitment predicate or assertion cites this occurrence as its instituting basis, the referenced occurrence MUST satisfy occurrence-side SA‑C0…SA‑C3a. A gate, audit, or provenance use additionally needs the record and evidence basis in SA‑C4 and needs SA‑C6 only when its inference really crosses local taxonomies, schemes, or policies.
- A
SpeechActRefMUST NOT be replaced by anEpistemeRef(“see the document”) when occurrence provenance is needed. ASpeechActRecordor utterance-description episteme may make claims about the occurrence but is not the act. - If a source cannot yet establish A.15.1 admission for one actual occurrence, it may create a separate
U.Epistemeidentified as a candidate observation stub. The stub is not aSpeechActRecord, supplies noSpeechActReforspeechActOccurrenceRef, and does not conform to the complete declaration schema or SA-C0. It carries a source-local candidate locator or C.2.1ClaimAddress, known observation claims, provenance for those claims, and explicit unknowns. If the actualenactsMethod -> U.Methodrelation cannot yet be recovered, record that unresolved claim and its source-gap provenance in the stub; never mint anAdHocCommunicationor otherU.MethodDescriptionto close it. The stub supports no gate or deontic provenance and remains observation-only. After A.15.1 independently admits one exact actual occurrence, create a distinct conformantSpeechActRecord; do not promote or relabel the stub in place, though a separately governed provenance or evidence relation may cite it.
A.2.9:4.4 — Separation rules with U.Commitment, GrantedPermissionRelation@Context, and U.PromiseContent (normative)
-
Instituting an enduring deontic relation. A speech-act occurrence may be the actual instituting basis for one
U.CommitmentorGrantedPermissionRelation@Contextonly under an exact current constitutive policy or rule and the effect pattern's satisfied direct predicate. The enduring relation is separately identified. Do not encode obligations or permissions as prose insideSpeechActRecord; cite only the exact already obtaining relation occurrences ininstitutes.commitmentsorinstitutes.permissions. -
Promise content and the act of offering it.
U.PromiseContentis the promised-outcome statement; a speech act may be the act of offering or issuing that promise, but the promise content lives in the promise-content object and is referenced from the resulting commitments. -
The act and its evidence carrier. A “signed approval PDF”, ticket, message, or API log is a carrier; it may carry an utterance-description episteme or a
SpeechActRecord. The speech act is the Work occurrence described or evidenced. -
Conditions for publication and institutional effects. Default interpretation rule (normative). A conformant model/interpreter MUST NOT infer a
U.Commitment,GrantedPermissionRelation@Context, publication occurrence, or subject-specific status relation solely from aPublish/Approvespeech-act occurrence or its record. Publication work may establish anEpistemePublicationRelationonly when E.24.PUB's selected edition, audience, bounded use, form, carrier, and availability conditions obtain. A constitutive policy may let an act institute a subject-specificApproved,Published, or similar status relation; then cite that exact relation occurrence through the subject pattern and separately cite any C.2.1 status claim and A.10 evidence. The claim represents the status; judge whether that status obtains under the cited status rule.
A.2.9:4.5 — Multi-function and multi-party support (normative)
-
Multi-function:
actTypesis a set. When one actual communicative Work performs several recognizable functions, one speech-act occurrence carries all satisfiedactTypes. Identify several occurrences only when the occurrence-identity rule in §4.1 finds distinct world-side grounds. Their records may share utterance or carrier references. If the named use still admits competing segmentations, cite its continuity or segmentation rule or leave the boundary unresolved. Institutional effects remain separately referenceable (SA‑C5). -
Multi-party:
addressedTois a set. Its optional members may be parties, exact local system-role kinds, or exact obtaining occurrences of directly declaredU.SystemRoleAssignmentspecies. State which branch each addressee uses. Identify the actual performer and establish any claimed authority, commitment, permission, responsibility or institutional effect under their applicable rules.
A.2.9:5 — Archetypal Grounding (Tell–Show–Show)
A.2.9:5.1 — Tell (universal rule)
When a named receiving use is current, first state who should understand or do what, what evidence would be enough, and the smallest repair or stop. Keep the act of communicating, its wording and medium, observed response, achieved use, later effect, causal contribution, and authority or permission questions distinct.
When governance or gating depends on “someone said or did X”, first identify that saying or doing as SA : U.SpeechAct through the A.13-qualified performer, grounded communicative history, Method, extent, and containment required by A.15.1. Then, if the gate relies on the exact assignment under which it was performed, establish F.6 separately through the same A.13 assignment. Add a SpeechActRecord only to state relied-on claims about the already admitted act, and keep any MethodDescription, optional channel, utterance text, and carriers separate. If the occurrence institutes an obligation, recommendation-as-duty, or prohibition, cite a separately obtaining U.Commitment; if it institutes strong permission, cite a GrantedPermissionRelation@Context. The act institutes neither effect without an applicable policy or rule and independently satisfied conditions.
Receiving-use worked slice. An engineer sends a threshold-change note to an operator. The named use is that the operator can identify the new threshold and the next safe action; the engineer should also be able to recover the reason for the change later. The operator replies “Got it” but updates the wrong parameter. That reply is evidence of a response, not achievement of the named use. The parameter update is a later action and world change; it does not by itself show that the note caused the change. Use A.10 when the evidentiary claim needs support and C.28 before claiming causal contribution.
Persistent observation-only record slice. After A.13 supplies the performer basis and A.15.1 independently admits SA-Threshold-Change-17 : U.SpeechAct, a later review needs a durable observation that the threshold note occurred but makes no claim about the exact assignment under which it was sent. SA-Threshold-Change-17-Record : SpeechActRecord states the occurrence and actual-performer references, actual Method and containment references, act window, recognition taxonomy and scheme, act type, utterance-description locator, and carrier; it sets reliancePosture = observationOnly and omits performedUnderAssignmentRef. This record can preserve the observation and support receiving-use replay, but it cannot satisfy a guard, gate, or claim that depends on exact assignment-bound attribution. If that use later becomes current, establish F.6 for the already admitted act through the same obtaining A.13 assignment and add the resolving reference.
The smallest repair may be a clearer threshold sentence or a changed table, followed by evidence that addresses the named use. If the operator lacks permission to make the change, return that blocker instead of repeating the message. If a later need adds audit use, apply it to later communication or a separately named reevaluation. It does not turn “Got it” into achievement of the earlier use.
A.2.9:5.2 — Show #1 (system archetype: change-control approval gates a deployment)
Situation (messy prose): “Change is approved, so the pipeline may deploy.”
Conformant modeling sketch. The first line names the actual communicative Work. The record then states claims about that occurrence. Check separately that the assignment and enacted-Method relations obtain, that the act satisfies the recognition classification, that the policy is current and applicable, and that the grant obtains. Because the deployment gate relies on exact assignment-bound attribution, this attribution-bearing record must include performedUnderAssignmentRef and its F.6 relation must obtain for the already admitted act through the same A.13 assignment.
- Actual occurrence:
SA-Approve-4711 : U.SpeechAct. - Performer and assignment:
ApproverSystemRoleis an exact local agential system-role kind whose criterion for this use is the capacity to issue the policy-recognized approval act under the board procedure;CAB_Chair_Ais classified under it for this scope and window, and evidence supports that core classification without a Grade or autonomy-profile claim.ChangeControlApproverAssignmentis a declaredU.SystemRoleAssignmentspecies. Under A.2.1 it declares the ordered holder and assigned-kind positions, their domainsU.SystemandChangeControlApproverSystemRoleKindDomain, its direct predicate and applicability, and its occurrence-identity rule. OccurrenceCAB_Chair_A_ApproverAssignment_2026obtains with admitted SystemCAB_Chair_Aas holder,ApproverSystemRoleas assigned-kind value, and an extent covering the act; it is the same assignment used by A.13 and F.6.CAB_Chair_AperformsSA-Approve-4711under that assignment. TaxonomyChangeControlSystemRoles_v3andChangeControlReferenceScheme_2026interpret the assertion rather than becoming assignment participants. The assignment grounds attribution. Apply the current approval policy's authority conditions toCAB_Chair_A. - Actual Method and containing-system relations:
enactsMethod(SA-Approve-4711, ChangeApprovalMethod_v3)independently obtains, withChangeApprovalMethod_v3 : U.Method.ChangeControlWorkBoundaryRelationsdeclaresApprovalWorkOccursWithinBoardBoundary(work, system)for the board-system delimitation and act window; occurrenceApprovalWorkWithinBoardBoundary-4711obtains forSA-Approve-4711andChangeControlBoardSystem. SA-Approve-4711-Record : SpeechActRecordstates:speechActOccurrenceRef = SpeechActRef(SA-Approve-4711);actualPerformerSystemRef = U.EntityRef(CAB_Chair_A);performedUnderAssignmentRef = U.RelationRef(PerformedUnderApprovalAssignment-4711), resolving to the F.6 relation betweenSA-Approve-4711andCAB_Chair_A_ApproverAssignment_2026;enactsMethodRef = U.EntityRef(ChangeApprovalMethod_v3);methodDescriptionRef = EpistemeRef(ChangeApprovalProcedure_v3), a separate C.2.1 episteme used here to identify and constrain the Method;recognitionTaxonomyRef = EpistemeRef(ChangeControlSpeechActTaxonomy_v3);effectiveReferenceScheme = ChangeControlReferenceScheme_2026;policyOrProcedureRef = EpistemeRef(ChangeControlApprovalPolicy_v3), current for this approval and grant use;channelRef = U.EntityRef(CAB_TicketChannel);actTypes = {SpeechActTypeRef(Approval)}under that taxonomy and scheme;reliancePosture = relianceReady,workContainmentRelationRefs = {U.RelationRef(ApprovalWorkWithinBoardBoundary-4711)}, andwindow = [2026-06-12T10:03Z, 2026-06-12T10:04Z];utteranceSubjectRefs = {ChangeRequestId(4711)};institutionalTargetRefs = {GrantedPermissionRelationRef@Context(PER-Deploy-4711)};utteranceDescriptionLocators = {U.EpistemeRef(ChangeTicket#4711)}andcarrierRefs = {CarrierRef(TicketSystemRecord#4711)};institutes.permissions = {GrantedPermissionRelationRef@Context(PER-Deploy-4711)}.
PER-Deploy-4711 : GrantedPermissionRelation@Context obtains separately under A.2.8.PER:
beneficiarySystemRoleAssignmentRef = U.RelationRef(OpsBotDeployerAssignment-CD_Pipeline_v7), resolving to the assignment occurrence and its declaredU.SystemRoleAssignmentspecies;permittedActionSpecificationRef = EpistemeRef(DeployChange4711WorkSpecification);institutingSpeechActRef = SA-Approve-4711;grantorSystemRoleAssignmentRef = U.RelationRef(CAB_Chair_A_ApproverAssignment_2026);grantValidityPolicyRef = EpistemeRef(ChangeControlGrantPolicy_v3)underChangeControlReferenceScheme_2026; the separately citedChangeControlApprovalPolicy_v3supplies the act-to-grant instituting rule;- scope, revocation stance, and validity interval
[2026-06-12T10:04Z, 2026-06-19T10:04Z]are explicit.
The one-minute speech-act interval and seven-day grant interval are different facts even though the latter begins when the former ends.
The utterance is about ChangeRequestId(4711); its policy-selected target and demonstrated effect are the separately obtaining grant. Nothing here claims that the change-request entity itself changed. Gate predicate A-Gate-Deploy-4711 may check exists SpeechAct(type=Approval, utteranceSubjectRefs includes ChangeRequestId(4711), actualPerformerSystemRef=CAB_Chair_A, performedUnderAssignmentRef=PerformedUnderApprovalAssignment-4711, within 90d), consume the current grant, and apply other prerequisites; passing the gate neither institutes nor equals the grant. No F.9 Bridge is needed merely because a pipeline consumes the result: this case uses one exact taxonomy, scheme, and policy. A Bridge becomes current only if another receiving use actually translates or compares a different local meaning.
Near misses. A ticket row alone is a carrier-backed claim, not the act. ChangeApprovalProcedure_v3 is a MethodDescription, not what the act enacts. A current approver assignment does not prove that approval Work occurred. Without the exact current policies, the occurrence remains communicative Work but establishes no grant.
This case retains kind versus occurrence versus record, utterance versus carrier, explicit performer and grant beneficiary, exact act and grant intervals, current policy bases, provenance from grant to instituting act, and strong permission versus admissibility gate as independently judgeable distinctions.
Show #2 (episteme archetype: publishing a spec edition)
Situation: “The interface spec declares MUST/SHALL requirements.” This sentence describes the specification's contents. The current task is to model publication of version 12 and determine its institutional effects.
Conformant modeling sketch. SA-Publish-API-v12 : U.SpeechAct is the act. PublisherSystemRole is an exact local agential system-role kind whose criterion for this use is the capacity to execute the policy-recognized publication act; StandardsEditor_A is classified under it for this scope and window, and evidence supports that core classification without a Grade or autonomy-profile claim. StandardsPublicationAssignment is a declared U.SystemRoleAssignment species. Under A.2.1 it declares the ordered holder and assigned-kind positions, their domains U.System and PublisherSystemRoleKindDomain, its direct predicate and applicability, and its occurrence-identity rule. Occurrence StandardsEditor_A_PublisherAssignment_v12 obtains with admitted System StandardsEditor_A as holder, PublisherSystemRole as assigned-kind value, and an extent covering the act; it is the same assignment used by A.13 and F.6. StandardsEditor_A performs the act under that assignment. Taxonomy StandardsSystemRoles_v12 and APISpecReferenceScheme_v12 interpret the assertion but are not assignment participants. The Work enacts Method SpecPublicationMethod_v12; SpecReleaseProcedure_v12 is only a separate description of that Method.
SpecPublicationWorkBoundaryRelations declares PublicationWorkOccursWithinSpecSystemBoundary(work, system) for the publication-system delimitation and act window; occurrence PublicationWorkWithinSpecSystemBoundary-v12 obtains for SA-Publish-API-v12 and SpecPublicationSystem. SA-Publish-API-v12-Record : SpeechActRecord states:
speechActOccurrenceRef = SpeechActRef(SA-Publish-API-v12);actualPerformerSystemRef = U.EntityRef(StandardsEditor_A)andperformedUnderAssignmentRef = U.RelationRef(PerformedUnderPublisherAssignment-v12), resolving to the F.6 relation between the act andStandardsEditor_A_PublisherAssignment_v12;enactsMethodRef = U.EntityRef(SpecPublicationMethod_v12)andmethodDescriptionRef = EpistemeRef(SpecReleaseProcedure_v12);recognitionTaxonomyRef = EpistemeRef(APISpecSpeechActTaxonomy_v12)andeffectiveReferenceScheme = APISpecReferenceScheme_v12;policyOrProcedureRef = EpistemeRef(APISpecPublicationPolicy_v12)and optionalchannelRef = U.EntityRef(StandardsReleaseChannel);actTypes = {SpeechActTypeRef(Publish), SpeechActTypeRef(DeclareNorms)}under that taxonomy and scheme;reliancePosture = relianceReady,workContainmentRelationRefs = {U.RelationRef(PublicationWorkWithinSpecSystemBoundary-v12)}, andwindow = [2026-06-14T09:00Z, 2026-06-14T09:06Z];utteranceSubjectRefs = {EpistemeRef(APISpec_v12)},institutionalTargetRefs = {EpistemeRef(APISpec_v12)},utteranceDescriptionLocators = {U.EpistemeRef(APISpec_v12)}, andcarrierRefs = {CarrierRef(GitTag:v12), CarrierRef(SignedReleaseArtifact:v12)};institutes.publicationRelations = {EpistemePublicationRelationRef(APISpec-v12-Publication)}.
APISpec-v12-Publication : EpistemePublicationRelation separately names the selected APISpec_v12 edition, audience declaration, bounded-use declaration, publication form, exact carrier, availability interval and governing publication conditions under E.24.PUB. It obtains only while that exact edition remains available under those conditions. Its interval need not equal the six-minute publishing act. The same episteme can be both utterance subject and publication object without those relations becoming identical.
Publication makes the selected APISpec_v12 edition available with its claim content unchanged. If D-StdStatus-APISpec_v12-Published is needed, keep it as a separate C.2.1 claim about the exact publication relation and cite its evidence through A.10; do not put the claim in institutes. Norms live in the published utterance description, while StandardsEditor_A performs the publishing Work. Another audience or scheme needs F.9 only when a receiving use actually translates or substitutes the local act or policy meaning.
Bounded non-use. If the only question is what APISpec_v12 says, stop at A.7/C.2/E.17. If the question is whether it is available to an audience, use E.24.PUB. If the question is evidentiary support for a status claim, use A.10. Keep A.2.9 only when the actual communicative Work occurrence itself matters.
A.2.9:6 — Bias-Annotation
Lenses: Gov, Arch, Onto/Epist, Prag, Did. Scope: Kernel universal when the named receiving use of communicative Work, or its governance, eligibility, gating, provenance, or protocol use, makes the act itself current.
- Gov bias: favors explicit accountable performers and auditable records; increases clarity but adds modeling overhead.
- Arch bias: optimizes evolvability by keeping institutional effects referenceable rather than embedded in prose.
- Onto/Epist bias: preserves the kind/actual-act/record/utterance-description/carrier distinctions and requires an actual performer for an occurrence claim.
- Prag bias: models only what is needed for decisions/audit (not full intention/sincerity/perlocutionary psychology).
- Did bias: keeps the record minimal and queryable for state checklists and boundary reviews.
A.2.9:7 — Conformance Checklist (normative)
- CC‑A.2.9‑1 (Occurrence, performer, and assignment). One Work individual is admitted as
SA : U.SpeechActonly through the independent A.13/A.15.1 route: exact actual performer System, local agential kind and criterion, classification, obtaining assignment, scope, working situation, window, adequate core evidence, conditionally consumed profile, grounded communicative history, enacted Method, extent, and containment. Any precise assignment-bound attribution is then checked separately through F.6 with the same obtaining assignment; its declared species, holder, other participants, predicate, and coverage remain recoverable. ASpeechActRecordMUST identify the actual performer throughactualPerformerSystemRef, MAY omitperformedUnderAssignmentRefwhen it makes no exact assignment-bound attribution, and MUST make every present attribution reference resolve to the F.6 relation for the already admitted act and the same A.13 assignment. The record MUST NOT claim authority on the basis of assignment alone.- CC‑A.2.9‑1a (Occurrence identity and segmentation). Several satisfied
actTypesclassify one communicative Work unless distinct performance history, enacted Methods, institutional actions, or another admitted discriminator establishes distinct occurrences. Shared utterance, carrier, or interval is not enough; unresolved competing segmentations retain an explicit continuity or segmentation question.
- CC‑A.2.9‑1a (Occurrence identity and segmentation). Several satisfied
- CC‑A.2.9‑2 (Exact Method and auxiliary description). The actual occurrence independently satisfies
enactsMethod -> U.Method. A currentmethodDescriptionRefresolves to a separate C.2.1 episteme used to identify, constrain, or justify that Method or intended Work; neither the reference nor the description is enacted. - CC‑A.2.9‑3 (Recognition taxonomy and scheme). The actual occurrence satisfies at least one
SpeechActTypeRefdefined by the exact recognition-taxonomy episteme under the stated effective reference scheme. Merely writing a token intoSpeechActRecord.actTypesis insufficient. - CC‑A.2.9‑4 (Actual extent versus effect interval). The occurrence has an actual temporal extent, and a record's
windowtruthfully states it at the required precision. Every instituted relation keeps its own occurrence or validity interval. - CC‑A.2.9‑5 (Observable relied-on occurrence and attribution branch). If a checklist, guard, commitment, or grant cites the occurrence, one
SpeechActRecordidentifies it and cites an applicable utterance, carrier, or direct evidence relation. Evidence-critical uses SHOULD cite at least one carrier through A.10. If that checklist, guard, gate, or claim relies on exact assignment-bound attribution, the record MUST includeperformedUnderAssignmentRefand satisfy SA-C1 through the separately obtaining F.6 relation for the already admitted act and same A.13 assignment; a record that omits the field cannot close that attribution-dependent use. - CC‑A.2.9‑6 (Current policy and typed world-side effects). A record's
institutes.*branch references only an exact commitment or obtaining relation occurrence through its declared relation-occurrence RefKind. AnotherGovernedRelationsitem also names the rule that defines and tests that exact relation. An institutional effect obtains only when the current policy or procedure supplies the applicable constitutive rule and current facts satisfy the direct predicate defined in its pattern or declaration; a status claim and its evidence stay separate. - CC‑A.2.9‑7 (F.9 only for actual cross-locality dependence). A receiving claim cites an F.9 Bridge only when it really compares, substitutes, or transfers speech-act or policy meaning across different local taxonomies, schemes, or policies. A new consumer or locality label alone neither requires a Bridge nor transfers force.
- CC‑A.2.9‑8 (No fabricated method anchor or candidate record). If the actual
enactsMethod -> U.Methodrelation cannot be recovered well enough to establish A.15.1 admission, do not create a conformantSpeechActRecord. Put the unresolved claim, source-gap provenance, known observations, and explicit unknowns in the separate candidate observation stub; that stub remains observation-only and cannot support a gate or deontic provenance. A placeholderU.MethodDescriptionnever closes the gap. After actual admission, create a distinct complete record rather than promoting the stub in place. - CC‑A.2.9‑9 (Subject, target, and effect stay distinct). A record uses
utteranceSubjectRefsfor aboutness andinstitutionalTargetRefsonly for a policy-selected target. It claims actual change or institutional effect only through the exact direct relation; an informative act needs no changed target. - CC‑A.2.9‑10 (Optional channel stays separate). A
channelRef, utterance description, carrier, or trace may support identification or observation. - CC‑A.2.9‑11 (Receiving use, evidence, and later effect). When communicative Work is judged for a named receiving use, state who should understand or do what and which evidence supports that judgement. A response or silence alone establishes neither meaning, achievement, causation, authority, consent, permission, nor admissibility. A revised use applies to later communication or to a separately named reevaluation; it does not turn the earlier response into achievement of the earlier declared use.
A.2.9:8 — Common Anti-Patterns and How to Avoid Them
A.2.9:9 — Consequences
Benefits
- Makes approvals/authorizations/notices first-class and queryable, enabling clean RSG checklists and guard rules.
- Provides stable provenance: commitments, granted permissions, and status transitions can cite the instituting act explicitly.
- Makes the actual performer recoverable in occurrence and institutional-provenance claims.
- Lets a practitioner judge one named receiving use and repair the smallest blocker without first building a complete occurrence record.
- Keeps observed response, achieved use, later action or change, causal contribution, and permission or admissibility as separately testable questions.
Trade-offs / mitigations
- A receiving-use judgement may remain conversational when no later claim must cite it. A reliance-bearing use requires a small structured
SpeechActRecordplus adequate evidence only when the occurrence itself must remain addressable. - Requires one exact recognition-taxonomy episteme and effective reference scheme for
SpeechActTypeRef; mitigated by starting with a small set (Approve, Revoke, Publish, Notify, Authorize) and extending that taxonomy deliberately.
A.2.9:10 — Rationale
FPF uses communicative acts both for ordinary receiving uses and as operationally meaningful events such as approvals, notices, and overrides. A.2.9 begins with who should understand or do what and the evidence needed for that use, then admits U.SpeechAct through the independent A.13/A.15.1 route when exact occurrence identity is current. F.6 follows only for a separate precise assignment-bound attribution. It treats each actual act as a temporally bounded Work individual enacting an exact Method and uses SpeechActRecord only for claim-bearing representation. Occurrence admission remains independent of its description and of any later assignment-bound attribution judgement.
A.2.9:11 — SoTA-Echoing (informative; current alignment with one historical anchor)
Informative. Alignment notes; not normative requirements.
- Adopt — ISO 24617‑2:2020 / multi-dimensional communicative functions. Modern dialogue‑act standards treat communicative behavior as potentially multi‑functional. A.2.9 mirrors this with an
actTypesset on one communicative Work and permits shared carriers across several acts only when their world-side histories establish distinct occurrences. - Adapt — commitment-based semantics for communication (multi-agent/protocol practice, 2015+). A pragmatic way to avoid mental-state modeling is to track communication by its social/institutional effects, especially on commitments, permissions, and protocol states. A.2.9 reflects this via separate
institutes.commitmentsandinstitutes.permissionslinks toU.CommitmentandGrantedPermissionRelation@Contextwithout modeling sincerity or intention. - Adopt (warning) — illocutionary pluralism in multiparty discourse (2015+). One utterance commonly performs multiple recognizable functions. A.2.9 avoids the “single force” trap by allowing several recognized functions on one act, while several acts sharing an utterance or carrier still require distinct occurrence grounds.
- Adopt, adapt, reject — purpose-relative grounding evidence and structured interaction. Adopt Clark and Brennan's (1991) purpose-relative grounding principle as a historical anchor: evidence of understanding must be sufficient for the current purpose. Current studies of grounding gaps in human–LLM dialogue (Shaikh et al., 2024, 2025) reinforce the risk of presumed shared understanding, while one structured-interface study (Do et al., 2024) shows that interaction structure can help in its tested setting. Adapt that line in §5.1 by naming the receiving use and evidence first, then changing only the wording, representation, prerequisite, medium, or interaction that blocks it. Reject any inference that a reply, silence, or favourable outcome fixes meaning, proves achievement, or establishes causal contribution. Reopen this guidance when new evidence changes what supports the named use, when participants or medium change materially, or when a relied-on source no longer transfers; recheck only the affected source claim, evidence threshold, medium, or interaction choice.
A.2.9:12 — Relations
Uses / builds on
- Uses A.13 and A.15.1 (
U.Work) for the independent actual-occurrence backbone: exact actual performer System; local agential kind and criterion; classification; obtaining assignment, scope, working situation, and window; adequate core evidence and only a conditionally consumed profile; grounded communicative history; enactedU.Method; temporal extent; and at least one obtaining locally declared containing-System relation. Uses F.6 only afterward for a preciseperformedUnderAssignmentclaim through the same obtaining assignment. Uses a separate optionalmethodDescriptionRefonly when the receiving claim needs that episteme. - Uses A.7 for the strict actual-act≠record/description≠carrier split.
- Coordinates with A.2.6 for scope/window discipline.
- F.18 can serve as a lexical entry point for naming
U.SpeechActand “utterance” in the promise/utterance/commitment triad.
Used by
- A.2.8 (
U.Commitment) when an exact policy treats the speech act as the required instituting basis and the direct commitment predicate independently holds, and A.2.8.PER when aGrantedPermissionRelation@Contextindependently obtains with this act asinstitutingSpeechActRef. - A.2.5 (RSG checklists/guards) when “presence of authorization/approval act” is a criterion.
- A.6.C for unpacking promise, approval, guarantee, and agreement-like boundary wording while preventing episteme-as-agent claims and preserving provenance.
A.2.9:End
Transformer Constitution (Quartet)
Intent
Establish a substrate-neutral way to say which system performed one dated world-side Work occurrence, under which exact U.RoleAssignment, by enacting which U.Method, and which separately governed method-description, capability, work-to-change, evidence, or aggregation claims the current use additionally relies on—without self-magic and without blurring run-independent semantics, the occurrence, and an episteme that describes or asserts it. The pattern keeps the Transformer Quartet object families distinct; it does not require every change claim or Work assertion to carry all four. A.3.4 independently identifies an actual bounded change; that identification alone establishes no acting system, agency, role assignment, method, or work. A.3 builds directly on Holon-Role Duality (A.2) and Temporal Duality (A.4) and is guarded by Strict Distinction (A.7) and Evidence Graph Referring (A.10).
Context
- Holonic substrate. FPF separates what things are (Holon → {System, Episteme, …}) from what they are being right now via roles. Only systems can bear behavioural roles, enact methods, and perform Work occurrences admitted under
U.Work; epistemes do not act. This work-facing rule does not imply that every actual change has an acting-system side. - Role, method, description, and occurrence stay distinct. A role is a mask, not behaviour;
U.Methodis a run-independent semantic way of doing,U.MethodDescriptionis an episteme that may describe that Method, and each individual admitted underU.Workis the dated performed occurrence that enacts it. - Run-independent semantics vs dated occurrence. A Method and any episteme that describes it are not the occurrence. When a claim about actual Work is current, its assertion or description designates the exact Work individual and the independently obtaining performer-assignment, enacted-Method, temporal, containing-system, affected-referent, binding, and resource-use relations required by A.15.1 and the receiving use. When actual change is also claimed, identify it independently under A.3.4 and use a separately governed work-to-change relation.
- Occurrence, assertion, evidence, and carrier. One Work individual is the world-side occurrence. A separate
U.Epistememay assert or describe it and designate the exact occurrence and obtaining relations. Logs, observations, evidence items, and publications have their own carriers and direct relations; neither a carrier nor a record becomes Work by referring to it.
Problem
Legacy phrasing (“actor / process / blueprint”) causes recurrent failures:
- Self‑magic in an actor-side claim: “the system configures itself” is used as if it already supplied a performer, role assignment, method, work occurrence, causal relation, and evidence.
- Plan = event: blueprint/algorithm reported as if execution happened.
- Capability = result: possession of a method counted as evidence of work.
- Episteme as doer: documents/models treated as actors.
- Occurrence-description leak: a method, plan, log, ticket, carrier, or evidence item is treated as the dated Work occurrence, while the assertion fails to designate the actual performer assignment, enacted Method, extent, affected referent, and direct relations. A.2/A.4/A.7/A.10 collectively forbid these, but A.3 must give the canonical quartet that authors can apply consistently.
Forces
Solution — The Transformer Quartet
For work-enactment, A.3 keeps four neighboring anchors visible: the performer-side assignment, a MethodDescription edition when the receiving use relies on one, the enacted Method, and the dated Work. For another independently grounded asymmetric actor-side claim, apply only the anchors required by its direct governor. These anchors qualify the actor-side claim; they are not occurrence conditions for every U.Transformation.
The four anchors (terms & types)
-
Acting side: for actual Work, each obtaining
performedByrelation points from the Work occurrence to an exactU.RoleAssignmentoccurrence whoseHolderSystemSlotresolves to the admitted performer System. For another actor-side claim, its direct owner grounds the participants and decides whether a work-facing role assignment is current. Canonical phrase after that grounding: system bearingTransformerRole@Context. Local shorthand: after explicit binding in the same subsection, you MAY write Transformer for that same system; re-bind on context change and do not use the shorthand where the domain already has a conflicting transformer term. The shorthand neither identifies an actual transformation nor upgrades causal participation or broad physical agentivity into Work. -
MethodDescription (description episteme, when relied on): an SOP, program, protocol, script, diagram, or other source is a
U.MethodDescriptiononly when it describes the exact Method. Its exact edition is cited only when the receiving claim about Work, assurance, gate, audit, or another use depends on that description. -
Method (run-independent semantic way of doing): the exact
U.Methodthat Work may enact. It is neither an occurrence nor a MethodDescription, role assignment, or holder capability. Order-sensitive composition belongs to B.1.5 only when that composition claim is current. -
Work (world-side dated occurrence holon):
U.Workis the admitted kind; one Work individual is an independently identified performed occurrence that stands in actualenactsMethod,performedBy, temporal,executedWithin, affected-referent, binding, and resource-use relations as applicable to its identity and the current use. AU.Epistememay assert or describe those facts and designate the occurrence; a ticket, log row, record, or carrier is not the Work. The occurrence neither requires one universal MethodDescription edition nor establishes an actual change, result, production, delivery, acceptance, or aggregate merely by occurring.
Safe memory line: A MethodDescription may describe a Method; one dated world-side Work occurrence may enact that Method; a Work assertion may designate that occurrence. The description, occurrence, and assertion are different holons, and none of these relations alone establishes actual change or result. Roles are masks (A.2/A.7); a Method is a reusable way of doing; a Work individual is the performed behaviour occurrence.
Contextual Role Assignment (U.RoleAssignment) for actor-side enactment
When a performed-work claim relies on a TransformerRole@Context assignment, use A.2.1's four-participant relation rather than a holder-role-context triple:
- The four participant designations correspond to the actual relation participants.
assignmentIntervalis assertion or occurrence-description content: it describes the currently known extent, is not a fifth participant, and does not make the relation obtain. - A generic
U.BoundedContextor selectedBoundedModelUseStructureis not anotherU.RoleAssignmentparticipant. When a receiving assertion or other claim about Work depends on a selected interpretation structure, designate it through that receiving use's exact relation. - The same system may bear several role values when their direct compatibility rules admit them; labels or shared context wording do not decide compatibility.
- When work on an episteme or carrier is claimed, the acting performer remains a System; episteme identity, carrier change, Work, publication, and evidence retain separate governors.
- An independently grounded
[A.3.4](/generated/patterns/A.3.4)occurrence supplies none of the assignment participants or temporal facts by itself.
Boundary & externality
A.3.4 first identifies the actual bounded change from its changed referent and subject-side occurrence facts. Add an asymmetric acting side and target side only when a direct participation, interaction, causality, or work owner independently grounds that factorization. If an explicit U.Interaction obtains, cite its direct governing relation; A.3 does not create one from the word “transformation.”
Natural, spontaneous, and formal transformations can therefore remain actual without an invented performer. Joint dynamics, relational change, or a non-separable or frame-dependent participation case also remains under its direct dynamics, relation, interaction, or causality owner until an asymmetric actor–target split is justified. Ordinary coupling and scale-free or minimal physical agentivity alone establish neither TransformerRole@Context, U.Method, nor a dated Work occurrence admitted under U.Work.
For genuine work on oneself, use the A.12 reflexive split only after two distinct internal positions are grounded for the current claim. The acting and changed positions may be subholons inside one containing holon; selecting those already grounded parts is an A.14/C.13 structure move, not a Meta-Holon Transition. Use B.2 only if the whole itself is reidentified.
Temporal alignment (A.4 bridge)
- A
U.MethodDescriptionis a separately identified episteme; cite its exact edition only when the receiving use relies on what that edition says. - A
U.Methodis run-independent and may be enacted by many dated Work occurrences. - One Work individual admitted under
U.Workhas its own governed temporal extent and stands in exactperformedByrelations to its performer assignments; an assertion or description may designate those facts, but is not the occurrence. No universal liveStateAssertionis a Work or Method condition. - When a work-to-change claim is current, identify the world-side Work under A.15.1, the actual change under A.3.4, and the exact direct relation between them. A formal ordering boundary or natural change remains under A.3.4 without a work-facing inference.
Evidence Graph Referring
An assertion or description episteme about one Work occurrence makes its exact performer assignments and enacted Method recoverable and cites a MethodDescription edition only when the receiving use depends on it. Logs, observations, provenance, evidence, and their carriers remain separately related under their direct owners; neither the assertion nor a carrier or output produced by the performer is the Work occurrence or self-certifying evidence for it or its effects.
Didactic dictionary (safe recovery)
- Process, workflow, SOP, algorithm, protocol, script, or recipe is source wording first. Recover whether the current object is a MethodDescription, Method, WorkPlan, dated Work, method-relation structure, or another directly governed object.
- Operation, job, run, or performance is a Work individual admitted under
U.Workonly when the A.15.1 occurrence basis is recoverable; a log row, ticket, assertion, description, or label does not make it Work. - Function in an equipment specification may describe a Method, a MethodDescription, a capability, an intended effect, or another direct relation; the word alone decides none of them.
- Creator becomes local shorthand for a Transformer only when an exact actor-side holder has already been bound as a system through the applicable direct relation and, for performed Work, an obtaining
U.RoleAssignment; otherwise recover the actual relation or stop.
Illustrative scenarios (substrate‑neutral)
Physical system — Cooling loop
The world-side occurrence run-2025-08-08-T14:03, an individual admitted under U.Work, stands in an obtaining performedBy relation to an exact RoleAssignment occurrence whose holder is PumpUnit#3, and in an actual enactsMethod relation to CirculateCoolingFluid@CoolingLoop. Cite centrifugal_pump_curve.ld as a MethodDescription edition only if the receiving claim about this Work depends on it. A separately obtaining resource-use relation connects the Work individual to the 3.6 kWh use; the measured ΔT=6 K and any actual fluid change remain separately governed measurement, transformation, and work-to-change claims.
Epistemic change — Proof revision
The world-side occurrence lemma-42-check-2025-08-08, an individual of U.Work, stands in an obtaining performedBy relation to an exact RoleAssignment occurrence whose holder is LeanServer, and in an actual enactsMethod relation to CheckAndReviseLeanProof@Lean. proof_tactic.lean, any exact MethodDescription edition, the theorem episteme, carrier or episteme change, and the check log remain separately governed. An exact evidence-use relation may use the log to support a receiving claim; production by the performer does not itself confer evidence status or support.
Reflexive maintenance — “calibrates itself”
When the calibration controller and sensor suite are independently grounded as distinct internal positions, split into Regulator (acting position) and Regulated (changed position), cite the exact interaction and independently obtaining relations involving any claimed Work occurrence, and keep evidence separately governed; no self-evidence.
Joint or non-separable physical participation
A tide-related change of seawater can be one independently grounded A.3.4 transformation. Moon–Earth–ocean gravitational coupling, joint dynamics, and causal participation are recovered through their direct relation, dynamics, interaction, and causality owners. Coupling or a minimal physical-agentivity reading alone does not make the Moon a holder of TransformerRole@Context and does not create U.Work. Use C.26 only if a residual probe-, frame-, order-, incompatible-read-, or no-faithful-export lens issue remains; C.26 is not physical quantum ontology or a second transformation owner.
Reflexive work — scratching oneself
For a genuine work-on-oneself claim, the containing holon is the person, the acting position is the grounded neural-control/right-arm subsystem, and the changed position is the grounded left-hand tissue or state. The exact U.RoleAssignment, applicable method, dated work, work-to-change facts, and A.3.4 occurrence remain separate. Selecting these already grounded subholons uses A.14/C.13; it is not an MHT unless the person as a whole is reidentified under B.2.
Conformance Checklist (normative)
CC‑A3‑0 - U.RoleAssignment presence.
A world-side Work occurrence performed by a system bearing TransformerRole@Context MUST stand in an exact obtaining performedBy relation to a U.RoleAssignment occurrence. A conforming assertion or description designates the Work, assignment, and relation; the assignment has A.2.1's four participants: exact holder System, role value, role-taxonomy episteme edition, and effective ReferenceScheme. State the currently known assignment extent separately as assignmentInterval in the assignment assertion or occurrence description when needed. A context label is not a generic fifth participant. For a non-Work actor-side claim, use its direct governor and introduce a work-facing assignment only when that relation is independently current.
CC‑A3‑1 - Acting-side distinction.
When an asymmetric actor-side claim is current, its directly governed acting and changed positions MUST be distinct for that claim. When performed Work is current, each obtaining performedBy relation reaches an exact RoleAssignment occurrence. In reflexive Work the acting and changed positions MAY be grounded subholons or positions inside one containing holon; the containing holon need not be reidentified. Do not force this split or a role assignment onto a natural, joint, relational, non-separable, or formal change merely to satisfy A.3. This preserves acting-side externalization without fictive actors.
CC‑A3‑2 - Method-description-Work-assertion separation.
U.MethodDescription is a description episteme, U.Method is a run-independent semantic way of doing, and a Work individual admitted under U.Work is a world-side dated performed occurrence. A Work assertion or description is another U.Episteme; a log, ticket, or carrier may express or support it but is not the occurrence. Neither Method nor MethodDescription is a run-time occurrence. A changed description edition and performed Work are separate facts, and a claim that Work occurred remains admissible without a MethodDescription reference when no receiving use relies on an exact description edition.
CC‑A3‑3 - Boundary-crossing evidence.
A conforming actor-side or work-to-change assertion MUST designate the exact direct participation, interaction, flow, causality, or work-to-change facts on which it relies; an A.3.4 occurrence alone supplies none of them. Conservation-class effects, when claimed, MUST satisfy the applicable B-invariants.
CC‑A3‑4 - Method and conditional description traceability.
Every Work individual admitted under U.Work stands in an exact actual enactsMethod relation to the U.Method it enacts; the assertion or description used by a receiving claim MUST designate both sides and that relation. Cite an exact U.MethodDescription edition only when the receiving claim depends on that edition to identify, constrain, or justify the Method. If actual enactment departs from a cited description, state the description-selection, override, exception, or deviation claim under its direct owner and apply the Work continuity policy to the actual occurrence facts. Absence of a description reliance claim is not silent drift.
CC‑A3‑5 - Episteme as object-under-change.
When Work on an episteme or its carrier is claimed, the performer is still a System; episteme identity, carrier continuity, edition succession, publication, and any actual carrier change remain under their direct owners. Do not infer a performer from the episteme change itself, and do not force every episteme history into one PhaseOf relation. See C.2.1, E.24.PUB, A.14's mereology firewalls, and direct epistemic aggregation owners when current.
CC‑A3‑6 - Units and measures for performed resource use.
Every performed resource-use fact relied on for a claim about Work MUST state its measure and units. A percentage that enters a resource aggregation must be grounded in the exact PortionOf measure needed by that use. Totals, allocation, overlap handling, deduplication, and optional Gamma_work notation belong to a separately recovered B.1.6 aggregation, not to Work identity.
CC‑A3‑7 - Authority, justification, and provenance boundary. Authority, justification, and provenance are not optional-looking required fields of a RoleAssignment occurrence or Work occurrence. When a receiving use relies on one of them, identify the exact episteme and direct authority, justification, source, evidence, or provenance relation and connect it to the exact assignment occurrence, Work individual, assertion, or description. None of those neighboring claims makes the assignment obtain or the Work occur.
CC‑A3‑8 - Agentic policy, planning, Work, and outcome separation.
An agentic case does not license a generic pipeline from policy, through a planned action, to an action. Recover each exact policy, objective, selection or decision, WorkPlan, RoleAssignment, dated Work, actual change, and outcome claim under its direct owner when that claim is current. A policy does not create a plan or Work; a plan does not prove Work; and Work does not prove an outcome. Do not mint U.PlannedAction or U.Action from ordinary action wording.
CC‑A3‑9 - Local interpretation and exact crossings.
Interpret each RoleAssignment occurrence through its exact role-taxonomy episteme and effective ReferenceScheme, and test compatibility through the exact rule current for that assignment use. Similar labels across localities establish neither equivalence nor conflict. When a receiving use needs exact local-sense correspondence, use F.9 only for the exact SenseCell correspondence and its admitted use; role-value, policy, criterion, verdict, or other mappings retain their direct owners.
CC‑A3‑10 - Use-driven aggregation boundary.
Neither a MethodDescription nor an assertion about Work MUST make every Gamma family runnable. When a receiving use needs order-sensitive Method composition, recover B.1.5 and optional Gamma_method; when it needs a temporal aggregate over exact Work intervals, recover B.1.4 and optional Gamma_time; when it needs a resource ledger, recover B.1.6 and optional Gamma_work. A system-boundary or epistemic aggregation likewise uses its exact direct owner. Each aggregation has its own EntityOfConcern, policy, evidence, and admissible use; none is a universal field or identity condition of MethodDescription, RoleAssignment, or Work.
Consequences
Benefits
- Explainability by construction. A conforming assertion about performed Work designates the world-side occurrence, exact
performedByRoleAssignment occurrences, enacted Method, and the direct neighboring description, capability, work-to-change, evidence, or aggregation claims on which the current use actually relies; actual-change identity remains separately inspectable under A.3.4. - No category errors. Keeping methods/roles out of mereology and enforcing DesignRunTag separation prevents the usual “process‑as‑part” and “version‑as‑component” mistakes. (A.14 + A.15.)
- Composable analytics without hidden ownership. Exact Work intervals and performed resource-use facts can feed separately recovered B.1.4 or B.1.6 aggregations; the selected policy, evidence, and result remain inspectable at that direct owner.
- Local plurality without whole-context bridges. Exact role taxonomies, ReferenceSchemes, compatibility rules, and use-specific mappings let local practices differ without treating a shared label or one bridge as wholesale equivalence.
Trade‑offs
- More explicit separation when reliance needs it. Start with the smallest grounded performer-assignment, Method, and Work claims; add MethodDescription, capability, policy, plan, change, evidence, and aggregation relations only when a named use depends on them.
- Discipline for genuine reflexive work. Modellers must ground distinct acting and changed positions before using a controller–plant or other reflexive split; this adds one relation when the claim needs it and avoids both self-magic and arbitrary decomposition.
Rationale (post‑2015 cross‑domain support)
Constructor theory (post‑2015).
Constructor theory informs the distinction between possible and impossible tasks and the conditions on substrates and constructors. A.3 adopts that modal discipline without equating a constructor-theory constructor with an FPF performer or TransformerRole holder. In the performed-Work branch, an independently grounded System may be the holder of an exact RoleAssignment, and a Work occurrence performed under that assignment may enact an exact Method; natural, spontaneous, joint, formal, or otherwise non-agentive transformation remains possible without that actor-side factorization. A MethodDescription may describe a task or Method, but it is neither the constructor nor the Work. (Royal Society Publishing, arXiv, Constructor Theory)
Active inference & free‑energy mechanics (2017→). When an agentic claim is current, active-inference and free-energy work motivates keeping policy, objective, observation, selection, planning, performed Work, and evidence distinctions visible under their direct owners. It does not supply a universal action pipeline, make agentivity a Work occurrence, or make one policy, plan, or posterior prove another. (MIT Press Direct, PubMed, arXiv)
Provenance and FAIR packaging (2016→).
FAIR, RO-Crate, OpenLineage, and ML Metadata motivate exact, machine-actionable provenance and evidence links when a receiving use relies on lineage, editions, runs, or jobs. A.3 therefore preserves those links as separately governed relations rather than making {authority, justification, provenance} constitutive fields of RoleAssignment or Work. (Nature, researchobject.org, SAGE Journals, openlineage.io, GitHub, arXiv)
Together, these lines of work support explicit actor-side participants and, for performed Work, exact role-assignment and performer relations, method-description/Method/Work separation, directly governed participation and deltas, and traceable local interpretation. They do not establish that every actual change has a performer, that broad physical agentivity supplies TransformerRole, or that coupling alone is U.Work.
Relations
A.7 Strict Distinction. A.3 keeps the target EntityOfConcern, MethodDescription, Method, RoleAssignment occurrence, dated Work occurrence, Work assertion or description, actual change, log or observation, and evidence relation distinct. A recipe or log is not part of the target, and a record about Work is not the Work occurrence.
A.12 Acting-Side Externalization & External Transformer. A.3's CC-A3-1 uses A.12 only when an actor-side or reflexive-work claim is current. The split keeps grounded acting and changed positions distinct for that claim; it neither invents an actor for non-separable change nor turns ordinary descent to already grounded parts into an MHT.
A.13 Agential Role.
When an agency claim is current, A.13 governs agenthood and the domain profile, while A.17, A.18, A.19, C.16, and A.10 govern its measurement and evidence as applicable; planned C.9 may later consolidate the profile but supplies no current governing force. A.3 keeps identity, role assignment, method, plan, work, transformation, and evidence separate. Scale-free or minimal physical agentivity, observerhood, self-evidencing, or causal participation does not by itself establish an obtaining U.RoleAssignment, TransformerRole@Context, method enactment, or dated Work.
A.3.4 Bounded Change Under Conditions. A.3.4 independently identifies one actual bounded transformation from the changed referent and subject-side occurrence facts. A.3 opens only when an actor-side enactment claim is additionally grounded. Natural, spontaneous, formal, relational, and joint-dynamics changes therefore need no fictive performer.
A.3.3, direct relation, interaction, and causality owners.
These owners establish participation and causal structure. Use an asymmetric actor-target factorization only when that result is independently grounded; retain a joint or non-separable account otherwise. C.26 may test a residual probe, frame, order, incompatible-read, or no-faithful-export lens issue, but it is neither physical quantum ontology nor a second transformation owner.
A.15 Role-Method-Work Alignment.
A.3 relies on A.15's separation of role value, exact world-side RoleAssignment occurrence, run-independent Method, conditional MethodDescription reliance, intended WorkPlan episteme, world-side dated Work occurrence, and any assertion, description, log, or evidence about that occurrence. The Work stands in an actual enactsMethod relation; a MethodDescription may describe the Method; neither the description, plan, nor record proves that Work or actual change occurred.
A.14 Advanced Mereology. A.3 consumes A.14/C.13 only for independently grounded part or structure relations and forbids role or recipe leakage into part-whole trees. Selecting grounded internal positions for a reflexive claim is not an MHT; B.2 opens only when the containing whole is actually reidentified.
B-cluster (Gamma sections).
A.3 supplies grounded actor-side facts and exact Work occurrences; receiving assertions may designate them, but A.3 does not require a universal bundle of Gamma calculations. B.1.5 governs order-sensitive Method composition and optional Gamma_method; B.1.4 governs a selected temporal aggregation and optional Gamma_time; B.1.6 governs a selected Work-resource aggregation and optional Gamma_work. System-boundary and epistemic aggregations use their exact direct patterns when current. Every such result has its own EntityOfConcern, policy, evidence, and admissible use rather than becoming a field or identity condition of MethodDescription, RoleAssignment, or Work.
Indexing to the glossary. Terms used here (TransformerRole, Work, Method, MethodDescription, PortionOf, PhaseOf, BoundedContext) remain exactly as defined in Annex A; see A.1/A.2/A.14/A.15 entries for lexical registers.
A.3:End
U.Method: Reusable Way of Doing with Explicit Applicability
Type: Definitional pattern Status: Stable Normativity: Normative
Problem frame
When several observed Work occurrences or named sources may show a reusable way but Method identity is still only a candidate, use A.3.1.MR first. It returns one source-traceable account per candidate, a distinguishing question, an honest record-only result, or a named blocker. Return here only when one candidate reusable way is ready for the U.Method identity test.
Use this pattern when a project needs to say how something is done in principle.
Typical moments:
- a team infers method identity solely from code, a BPMN diagram, or a solver model, or treats a workflow description as evidence of performed Work;
- a practice, procedure, protocol, proof script, optimization model, control strategy, or recipe is intended for reuse across many runs;
- two descriptions look different but may describe the same way of doing;
- a graph, query, table, dashboard, checklist predicate, or mathematical representation is being interpreted as if it were an instruction sequence;
- work planning, dated Work, MethodDescription, formal substrate, mechanism, system-role assignment, cultural-evolution, discipline, and evidence are starting to collapse into one vague "method" or "practice" word.
Primary EntityOfConcern. The EntityOfConcern is the U.Method: one reusable semantic way of doing under stated participant meanings, applicability, preconditions, intended effects or preserved conditions, and bounds. Cite an exact effective reference scheme and local senses only when their variation changes that method meaning. U.Method is a non-agentive holon kind: methods can have submethods, compose into whole methods, and participate as submethods of larger methods. A step label or step description is not a method part unless the recovered object is itself a U.Method.
First useful move. Name the reusable way of doing, its generic participant meanings, applicability, preconditions, intended effect or preserved condition, and the concern it addresses—for example changing, observing, comparing, classifying, evaluating, communicating, selecting, proving, or preserving. If local terminology changes that answer, cite the exact effective reference scheme and local senses.
What goes wrong if missed. Readers may mistake a diagram for work authorization, a query plan for performed work, a program for proof of operational success, or a graph path for a route actually followed.
What this buys. The project can reuse, compare, describe, plan, enact, and audit a way of doing without confusing the method with its descriptions, runs, mechanisms, mathematical substrates, evidence relations, gates, or authority claims.
Not this pattern when. If the sentence is about a document or representation that describes a method, schedules work, reports dated Work, declares a mechanism, presents a mathematical lens, cites evidence, decides a gate, asserts authority, or publishes a view, use the pattern that defines or tests that claim. For a claim-bearing episteme about one exact Method, apply A.3.2's same-individual membership test; a carrier or representation is not thereby linked directly to the Method. State any planning, enactment, realization, evidence, gate, authority, publication, or representation relation only under its subject pattern when it actually obtains.
Problem
Without a current U.Method distinction, FPF cannot repair method-like wording cleanly. Texts then slide among several different claims:
- Description as method. A SOP, code repository, proof script, BPMN diagram, SQL query, solver model, or protocol is treated as the method itself.
- Plan or run as method. A calendar plan, access plan, run log, telemetry trace, or work-result record is called the method.
- Mechanism or formal substrate as method. A mathematical object, formal substrate, mechanism declaration, causal model, or control structure is used as if it already selected the way of doing work.
- System-role or capability leakage. Named people, organizations, teams, permissions, system-role assignments, or capability thresholds are baked into the Method instead of remaining with their direct classification, assignment, authority, capability, or gate patterns.
- Programming-paradigm overread. Imperative, functional, logical, constraint, object-centric event, or effect-handler wording is taken as a direct ontology of work rather than one possible description or representation of a way of doing.
The practical harm is fragile reliance. Changing a publication looks like changing the method; a run error looks like method invalidation; a mechanism declaration starts authorizing work; and a dashboard cue starts acting like evidence or permission.
Forces
- A method has enough identity stability to support comparison, reuse, teaching, improvement, and audit across many runs.
- Work still happens in dated situations with exact performer assignments, actual participants, resource uses, conditions, and separately governed effects; a method statement establishes none of those occurrence-side facts.
- Method descriptions can be executable, formal, graphical, procedural, declarative, or hybrid; publication form alone does not decide the method ontology.
- Mechanisms and mathematical substrates often make a method explainable or constrained enough to rely on, but the mechanism claim and the method claim still answer different project questions.
- A useful method statement remains applicable to welding, clinical triage, proof construction, optimization, agent orchestration, lab protocols, software execution, and organizational work without making software notation the default model of method.
Solution
U.Method is the reusable semantic way of doing under stated applicability.
Local method mantra. Name the reusable way; say who or what it is for and when; state the intended result or preserved condition and any applicable limit or stop condition; add an effective reference scheme or a selected structure only if changing it would change the method identification or the next decision; keep descriptions, plans, Work occurrences, and mechanisms separate. Use this as an attention aid.
It is a non-agentive holon kind. Part methods can be selected, bounded, ordered, joined, adapted, and hidden or exposed through method interfaces to form a whole method with whole-level preconditions, effects, invariants, constraints, and assurance hooks. The whole method may then be used as a part method in a larger method.
A U.Method is:
- semantically local: its identity uses the declared participant meanings, applicability, conditions, intended effects or preserved conditions, and bounds; add an effective reference scheme and local senses only when a meaning difference would change the method identification or a stated comparison;
- semantic: it is the way of doing that descriptions denote and work may enact;
- concern-explicit: it states what a future enactment is intended to do or decide and its intended effect or preserved condition;
- description-independent: one method may be described by several
U.MethodDescriptionepistemes; - run-independent: one method may be enacted by many Work occurrences admitted under
U.Work; - assignment-independent: Method admission conditions may name local system-role kinds or capability-fit conditions, but named holders and obtaining assignments belong elsewhere;
- participant-semantic: it may state generic participant meanings and method-side applicability without declaring
RelationSignatureSlotSpecs,OperationAlgebraargument or result positions, planned fillers, or actual participants.
Do not begin by replacing method or practice with a preferred technical word. First finish the ordinary sentence, "Here the text is trying to name or assert ___." Then use this table:
Strategy wording by claim position
Treat strategy as ordinary source wording until the sentence's claim position is clear. Do not mint U.Strategy.
When the wording names a reusable way of deciding or acting under stated applicability, it identifies a U.Method. A clinical treatment strategy, manufacturing setup strategy, search strategy, or negotiation strategy qualifies only when it states the reusable action, participant meanings, preconditions, intended result, and bounds.
When a protocol, playbook, program, diagram, or prose passage describes that way, that episteme may be a U.MethodDescription. Reusable strategizing can itself be a U.Method; a dated strategy workshop, search episode, or planning session is a Work individual only when its A.15.1 occurrence basis is grounded.
When the sentence is about choosing among candidates, use A.19.SelectorMechanism and G.5 for the actual criteria, policy, and selector outcome. The label strategy does not replace those objects or prove that a reusable method has been stated.
Leave quoted or explanatory strategy wording alone when it carries no FPF claim. The repair is complete when a reader can say what the sentence asserts and which pattern contains the defining content for that assertion, not when every occurrence has been replaced.
Thin first-use method identification
Start with the least apparatus that lets another reader recognize the same method:
- Ordinary use. State the reusable way of doing, the kinds of participants it is for, when it applies, what it is meant to achieve or preserve, and any applicable use limits or stop conditions. If that sentence is enough for the decision at hand, stop.
- Later comparison or reliance. Use the needed entries in the Plain aid below when the ordinary statement is insufficient for another person to distinguish same-named methods, compare descriptions or variants, cite one edition in a plan, or audit why this method was selected.
- Organization of several methods or uses. Open
A.22,B.1.5, or another direct composition pattern only when the question is about the organization itself—for example, which methods were composed, selected, used as fallbacks, or enacted in the reviewed work.
Moving to a heavier level must solve one of those concrete problems.
The following is a Plain identification aid, not a record kind, ontic, serialization, or mandatory form. Omit every optional line that the stated decision does not use.
Use NotEstablished only for a stronger reading that passes F.19:4's plausible-reader guard test. State the smallest clear correction; omit the entry when the positive identification suffices. Use the FPF term ClaimBoundary when a named neighboring subject assertion depends on that boundary.
Add SemanticBasisIfMeaningVaries only when the same words have different meanings under another effective reference scheme or set of local senses. Add a claim scope, context slice, selected structure, or model-use relation only when its own predicate obtains and changing it would change the method identification or the later decision.
For every relied-on relation, name its participants, the relation that must obtain, and the pattern that defines or constrains it. A generic source, support, evidence, or current use entry is not a replay basis. RelianceWindow says which variant, time, or description edition the comparison relies on. ReviewIf names the concrete change that would make that comparison unsafe.
Closure and bounded non-use
Close positively when a reader can write the reusable action, generic participant meanings, applicability, preconditions, intended result or preserved condition, and any use limit or stop condition that changes the identification or decision. Resolve an effective reference scheme and local senses only when a meaning difference changes that answer. Cite a method description, selected structure, model-use relation, or Work relation only when the next decision actually reads that relation.
If the project also claims an actual change, finish the method identification first. Then open A.3.4 for the actual changed referent, temporal boundary, subject facts, and transformation identity.
Close by non-use when the source is only a description, plan, dated Work occurrence, mechanism declaration, selector result, system-role-kind relation, another direct relation, evidence relation, publication use, or quoted wording. If the material does not distinguish those positions, retain the source phrase as an unresolved cue and stop rather than inferring U.Method.
Method and mechanism settlement
Do not decide from words such as method, algorithm, process, or mechanism. First ask what the sentence lets the project assert:
A method statement may cite a mechanism episteme whose content declares operations used by that method. A shared concern or operation name does not make the two values identical. A selector may choose a method, and an A.6.1 application may bind a method as an actual value. State that use only when the selector outcome, application binding, or another admitted direct relation is present; otherwise keep the method and neighboring object separate.
Keep the nearby relation families distinct once, here. An F.9 Bridge between two exact F.17 SchemeSenseCell values states a cross-context sense correspondence; it does not change an effective reference scheme or establish identity. A claim that this Bridge suits one named use remains a separate C.2.1 bounded-use claim, and A.10 or B.3 governs reliance on that claim. An A.6.1 realization relation connects a mechanism declaration to a realizer; it is not the mechanism content. C.29 governs a mathematical preservation or representation claim. E.20 governs where mechanism meaning is maintained. Evaluation, measurement, and evidence-use patterns support their own claims; they do not add content to the method or mechanism.
When neither the reusable way nor the reusable operation declaration can be stated, keep the source wording unresolved. Replacing it with a more technical noun is not a repair.
Method, MethodDescription, WorkPlan, Work
Keep the four positions separate.
The same solver model, repository, protocol, diagram, or run packet may figure in several claims, so say what each sentence is about. The solver-model episteme may describe a method; its mathematical representation may expose a C.29 formal substrate; a dated solver run may be Work; and a measurement or evaluation result may support another claim through its evidence relation.
Method statement fields
A useful U.Method statement can usually answer these questions in ordinary project language:
This table is a recognition checklist, not a data schema. Start with the ordinary method sentence. Use A.6.1 for a reusable operation declaration, A.6.5 for a reusable direct-relation declaration, A.15.2 for planned use, and the exact direct relation or A.6.1 application binding for actual participation.
Representation and programming-paradigm discipline
A U.Method need not be written as an imperative sequence. A way of doing may be described or represented through code, rules, constraints, process diagrams, SQL queries, proof scripts, optimization models, or functional or effect-handler programs.
Choose by the claim being made:
- If the sentence states the reusable action, participants, applicability, intended result, and boundary, use A.3.1.
- If it points to code, prose, a protocol, diagram, solver model, or other episteme that describes the method, use A.3.2. Use A.6.0 or C.29 when the claim is instead about a formal declaration or mathematical representation.
- If it declares a law-governed operation family or asks where that declaration is maintained, use A.6.1 or E.20.
- If it schedules future work or reports a dated occurrence, use A.15.2 or A.15.1.
- If it claims evidence, provenance, or support, use A.10 and the direct evaluation or measurement pattern. If a representation's form or layout is being treated as sufficient to prescribe or authorize action, apply C.2.P.DR before choosing the pattern for that claim.
Keep cross-context and application claims separate from those five choices. F.9 governs a Bridge between two exact F.17 SchemeSenseCell values. A claim that this Bridge suits one named use remains separate under C.2.1, and A.10 or B.3 governs reliance on that claim. C.2.1, A.6.3, A.6.3.RT, A.6.4, or A.1.1 governs an actual change of episteme edition, reference scheme, representation scheme, retargeting, or model-use relation. A.6.1 governs a mechanism realization or application binding. State one of these only when its participants and predicate are present; otherwise stop at the source objects without asserting the relation.
Thus algorithm and practice remain source cues. “The SQL query is the method” fails unless the project can state the reusable way of querying, its admissible inputs, intended result, and stop independently of that query text. “Our review practice is the method” fails when the sentence is actually about a team assignment, dated review, discipline, tradition, evidence record, or publication.
Constructor and process-theory settlement
When a method concerns change, its statement says what change a future enactment is meant to achieve; it does not assert that any referent changed. The same identification rule applies to methods for other concerns, such as observation, comparison, classification, evaluation, communication, selection, proof, and preservation.
The constructor-theory and process-theory source line supports this separation but does not supply a universal method ontology. FPF uses it as follows:
- An exact actual performer first has the A.13 core; A.15.1 then independently identifies the dated Work, at least one obtaining
enactsMethodrelation, time, and at least one obtaining locally declared containing-system relation. Another enactment relation is named only when the receiving claim relies on it. F.6 enters only when that claim also consumes precise assignment-bound attribution through the same obtaining A.13 assignment; missing or failed F.6 leaves the Work intact. The System's classification and the obtaining assignment remain separate claims. - The
U.Methodis the reusable way under stated participant meanings, applicability, conditions, intended result or preserved condition, and bounds. AU.MethodDescriptionis an episteme that describes it. - A formal substrate or mathematical lens can make the method analyzable, and a
U.Mechanismcan declare the relevant operation family and laws. - A cross-context Bridge, changed reference or model-use relation, mechanism realization, evaluation, or evidence-use claim remains a separately stated relation with its own participants.
- A
U.WorkPlanprepares or schedules dated Work; a Work individual is the occurrence that actually happened.
For example, “the etch method changed Wafer-22” contains at least two claims. A.3.1 identifies the reusable etch method. Only if an actual bounded change of Wafer-22 is independently grounded does A.3.4 identify that transformation; any claim connecting the Work and transformation additionally needs its own predicate or an honest missing-governor result.
Apply the same distinction across physical, informational, organizational, and mathematical work.
Semantic identity and variants
Two U.MethodDescription epistemes may describe the same U.Method when the later comparison or reuse decision relies on the same method bases:
- effective reference scheme and local senses, when a meaning difference matters;
- generic participant meanings and declared applicability;
- compatible preconditions;
- compatible intended effects or preserved conditions;
- compatible safety and other non-functional bounds;
- accepted nondeterminism or search behavior; and
- the same work-facing acceptance relation, when that relation is part of the comparison.
Different control flow, proof notation, programming paradigm, diagram notation, or prose does not by itself make a different method. The converse also holds: the same name, repository, supplier label, or diagram family does not prove identity.
Keep one method across parameter ranges, equipment envelopes, or representation variants only when its declared applicability and the bases used by the comparison admit that variation. A changed intended result, participant meaning, safety bound, semantic basis, or acceptance criterion requires a stated refinement, substitution, or distinct-method decision.
Same-name locality replay. An emergency-department Triage method applies to patient presentations awaiting clinical assessment; a clinician enacting it uses clinical signs to assign urgency, escalates unsafe cases, and stops when the evidence cannot support that assignment. A software-defect Triage method applies to defect reports awaiting product handling; a product team enacting it uses reproduction evidence, severity, and ownership to choose routing and release impact, and stops when the report cannot support that choice. The shared label identifies neither method. Their participants, applicability, local senses, intended results, and stops distinguish them without a generic context object.
No-extra-locality replay. EuclideanGCD over positive integers closes as one method when the integer meanings, division-with-remainder rule, positivity precondition, decreasing-remainder invariant, and greatest-common-divisor result are stated. If those facts answer the comparison, add no claim scope, context slice, model-use structure, or other locality object.
Method relations, composition, and Work enactment
Start with the practical question, not a graph or the umbrella word specialization. Ask what must be decided now.
Before claiming refinement or replacement, decide whether the changed account still identifies the same Method. If it does, state what was preserved and what changed; do not invent a relation between two Methods. If two Methods are identified, a refinement comparison states its direction and use, the semantics retained from the first Method, what the second narrows or strengthens, and the action or result that changes.
A replacement comparison says which Method may replace which other Method, for what use, under which preconditions, with which intended result or preserved condition, and which bounds, interfaces, losses, and guards must remain visible. Do not infer the reverse direction. Shared kind criteria or similar descriptions do not prove replacement.
A parameter change inside the Method's declared applicability and identity rule is variation of the same Method. A change to a participant meaning, result, bound, interface, or acceptance condition that matters to identity identifies another Method or leaves the identity question unresolved.
A G.5 family row cites already identified Methods and states why they are grouped for the current use. A fallback can belong to a B.1.5 whole construction, a G.5 selector rule or result, or a local relation-bearing claim. A dispatch rule says which selector branch applies; state the current branch and its basis.
When FPF has no admitted predicate for refinement, replacement, fallback, or another relation-bearing claim, use A.6.RCD to choose the lightest sufficient result. For one use, a local claim may be enough; repeated use of the same rule may justify a reusable predicate definition. Continue through E.24 and E.24.UK only when a named later use must treat the relation occurrences themselves as stable objects. A local claim or predicate definition cannot become an A.22 edge.
Short positive. ChangeImpactReview can meet two Method-kind criteria and also be required by the independent constructions of ApproveControlSoftwareRelease and InvestigateFieldIncident. Those judgments and two methodPartOf facts remain separate.
Selector anti-case. A RapidRecoveryMethods row groups RollbackRelease, DisableFeatureFlag, and ShiftTraffic for one selector. Its stated grouping basis and fallback policy may support a G.5 result, but they do not establish a Method kind, one composite Method, or a refinement or replacement relation. If the fallback condition is incomplete, return the missing fact instead of drawing an edge.
MethodRelationStructure is only a local name for an A.22 structure selected from independently identified constituents and relations that already obtain. It is not a durable kind, Method holon, or relation type. Composition, refinement, replacement, parameter variation, family grouping, fallback, dispatch, and enactment are recognition cues; the cue does not decide the claim.
Filled A.22 basis — enacted-method review. For this one-off review, a practitioner selects only two A.15.1 enactsMethod occurrences. No durable selection judgment is asserted.
-
Independently identified constituents.
InspectPumpSeal@PumpMaintenance-2026andClassifyPumpSealCondition@PumpMaintenance-2026are twoU.Methodvalues.Pump37SealInspectionWork-2026-07-25T0900-0908andPump37SealClassificationWork-2026-07-25T0910-0916are two admitted A.15.1 Work occurrences.PumpDiagnosticAssignmentis a declaredU.SystemRoleAssignmentspecies. Under A.2.1 it defines the holder and assigned-kind participant meanings and usesPumpDiagnosticSystemRoleKindDomainas the local assigned-kind domain. OccurrencePump37DiagnosticAssignment-2026-07-25hasPumpDiagnosticService-A : U.Systemas holder,PumpDiagnosticSystemRoleas the assigned-kind value admitted by that domain, and an extent covering both Work occurrences. That System performs each Work under the assignment and withinPump37MaintenanceCell-A.The fixture states no Work-to-
Pump_37predicate, so neither Work is said to affect or concern the pump merely because its designator containsPump37. -
Selected obtaining relations.
enactsMethod(Pump37SealInspectionWork-2026-07-25T0900-0908, InspectPumpSeal@PumpMaintenance-2026)andenactsMethod(Pump37SealClassificationWork-2026-07-25T0910-0916, ClassifyPumpSealCondition@PumpMaintenance-2026)obtain under A.15.1. -
Applied constraint claims.
DiagnosticReviewWindowConstraintstates that an eligibleenactsMethodoccurrence must have one of the two independently admitted Work individuals as its Work participant and an extent within 09:00-09:20 on 2026-07-25.NoCompositionFromEnactmentOrderConstraintstates that their timestamps and order establish no serial, fallback, or whole-method relation. -
Selection-use frame.
DiagnosticMethodEnactmentFramestates the question: which methods did these two Work occurrences enact during the review window? The admissible action is to list the twoenactsMethodoccurrences in that review.
Those four discriminators identify DiagnosticMethodEnactmentStructure-2026-07-25-0900-0920, locally designated MethodRelationStructure for this use. Reidentify it only from its four constituents, two obtaining relations, two applied constraint claims, and use frame. If the project relies on a persisted selection, separately identify the System that made it, the selection Method and dated Work, the participation relation or A.6.1 binding used by that Work, and the C.2.1 result episteme. Add a C.11 choice claim only if one is asserted. If responsibility for that choice is also claimed, cite its direct domain predicate, actual participants, applicability, and occurrence identity or return the exact missing governor.
Missing-governor stop. Suppose a note additionally calls ClassifyPumpSealCondition@PumpMaintenance-2026 a fallback for InspectPumpSeal@PumpMaintenance-2026, but supplies no direct fallback predicate, compatible participant meanings, or occurrence-identity rule. Keep the two methods and the note, omit the fallback relation, and return missing-governor: fallback relation for <ClassifyPumpSealCondition@PumpMaintenance-2026, InspectPumpSeal@PumpMaintenance-2026>. If the question is specifically about fallback organization, do not select a positive structure until that relation and all four A.22 discriminators are available.
Method-holon composition is not A.14 component mereology. Source labels such as SerialStepOf or ParallelFactorOf remain cues until B.1.5 or another subject pattern supplies an admitted relation with participants and an obtaining rule. A method-description node is not a submethod unless the described object is independently identified as a U.Method.
Work composition is occurrence-side. Work may interleave, split, retry, or fail differently from the method description. A temporal Work part can enact the same whole method, and an episode can change Work continuity without changing method identity. Call a candidate a submethod only when it has its own reusable action, preconditions, intended result or preserved condition, boundary, and whole-method relation.
Quick distinction. A step label, graph node, detector component, event-log segment, telemetry interval, work-plan item, or document section is not a submethod by position. If it states a reusable way with method-level conditions and a relation to the whole method, test it under A.3.1 and B.1.5. If it states what happened, when it happened, what a component did, or what a record shows, use the direct Work, mechanism, evidence, or description pattern instead.
Mathematical or graphical notation may describe the selected structure under C.29 or occur in a U.MethodDescription. A registry row lists or describes candidates; state any relation among them separately under its defining pattern.
Archetypal Grounding
Across the slices below, recognize a U.Method by a stable project answer to this question:
Non-transformative method replay. DuplicateDefectReportComparison applies to two defect reports for the same product and release when both contain the required symptom and version data. An evaluator enacting it compares those fields and records same incident, different incidents, or insufficient information; missing version data is a stop. These facts identify the reusable comparison method.
Actual-transformation branch. The filled Etch_Al2O3 replay in 5.1 closes the reusable method without actual-change facts. If a later assertion says that Wafer-22 changed during Work W-143, identify the Work under A.15.1 and the actual transformation of Wafer-22 under A.3.4 separately; connect them only through a declared predicate or return missing-governor[work-to-change].
Manufacturing, optimization, proof, graph or query overread, and clinical triage differ in material, representation, and assurance needs, but they share the same method-identification question. The archetypal failure is also shared: a nearby description, plan, run, mechanism, formalism, or evidence relation takes the method name and silently changes what the project can rely on.
Manufacturing recipe
Situation. A fab process engineer must decide whether two current SOP editions describe the same alumina-etch method before either description is cited in a work plan. The engineer needs a reusable method identification.
Reusable way and applicability. Etch_Al2O3 applies to alumina-coated silicon wafers whose substrate class and coating range satisfy RecipeWindow-Al2O3-3, using a qualified PE-4 plasma-etcher family and the gas-mixture range declared by that window. Its generic participants are the wafer surface, qualified etcher, admitted gas mixture, and target-depth parameter. A future enactment holds the admitted pressure and temperature envelopes, adjusts exposure until the declared target-depth stop, and preserves the substrate and maximum-temperature conditions.
Preconditions and stop. The method is applicable only when the wafer material and coating range are known, the selected PE-4 calibration is current for the planned use, the admitted gas mixture is available, and the safety interlocks required by RecipeWindow-Al2O3-3 are part of the intended setup. If the wafer is outside that range, the calibration basis is missing, or the target-depth and preservation limits are absent, keep alumina etch as a method cue and stop; do not widen this method by name.
Visible identification result. Under effective FabProcessScheme-2026, where Al2O3, target depth, and substrate preservation have the local senses used above, the engineer can write:
This result lets the engineer compare the two SOP claim sets against one method identity and lets a later work plan cite that method and the selected description edition. The SOP, PLC program, calibration recipe, and supplier note remain U.MethodDescription candidates when A.3.2 identifies what each episteme describes (EntityOfConcern) and the substantive claims it carries. For later work authorization or claims that Work W-143 occurred or Wafer-22 changed or passed metrology, use the relevant A.15.2, A.15.1, A.3.4, measurement, evidence, assurance, or gate pattern.
Optimization model
Situation and reusable way. JS_Schedule_v4 applies when the jobs, eligible machines, durations, precedence constraints, feasibility rules, and optimization objective are all stated for the scheduling problem. A planner or solver system enacting it constructs candidate assignments, rejects infeasible candidates, compares the remainder by the declared objective, and records the selected schedule or no feasible schedule. Missing precedence data, an unstated objective, or incompatible machine eligibility is a stop rather than permission to guess a method variant.
This identification lets a planner compare two solver packages as descriptions of the same scheduling method. The MILP formulation and solver configuration are U.MethodDescription or formal-substrate candidates according to the claim. The selected production schedule is a U.WorkPlan; the dated solver run is Work; and its decision record is a separate result episteme.
Proof or derivation
Gauss_Elimination applies to a matrix and right-hand side over a declared algebraic domain in which the required row operations and pivots are valid. A mathematician or proof system enacting it applies equivalence-preserving row operations until solved or echelon form is reached. A missing admissible pivot, unsupported division, or unspecified domain is a stop. The visible result here is a method identification that a later derivation may enact.
A textbook explanation, proof-assistant script, and formal rule set are method descriptions. A concrete proof-assistant run is Work, and the algebraic structure may be a formal substrate. Using the resulting proof for a project decision additionally needs an evidence or assurance relation.
Graph or query overread
A graph path, SQL query, checklist predicate, or dashboard table may itself be the current direct object or may represent a relation, state, evidence structure, provenance structure, or publication face. It supports a method identification only when the project can separately state the reusable action, admissible inputs, branch criterion, intended result, and stop. A query text that returns rows is still a description or executable representation until that semantic way is stated.
Ordinary wording such as a graph “routes” or a query “calls” is usable when the operation and its participants are recoverable. Apply C.2.P.DR when a representation's form or layout is treated as sufficient to establish method order, dated Work, gate passage, or authority.
Clinical triage protocol
SepsisTriage_v3 applies to adult emergency-department presentations inside its declared population and assessment window. A clinician enacting it evaluates the stated signs and measurements, assigns an urgency class, and selects the next clinical response. Insufficient evidence, a patient outside the admitted population, or a presentation requiring another protocol is a stop. The visible result here is the reusable triage method and its boundary.
The protocol PDF, order-set screen, and decision-support rule are method descriptions or publication faces. A clinician's dated assessment is Work. The physiological model or score formula may be a formal substrate or mathematical lens. Admission policy, treatment release, and evidence that triage reduced harm remain neighboring claims under their own patterns.
Bias-Annotation
This pattern mainly blocks seven recurring biases:
- description-as-method bias: a publication, program, diagram, or protocol is treated as the method instead of a method description;
- practice-as-method bias: a source says "practice" and the repair silently chooses
U.Methodwithout checking whether the current claim is Work, system-role assignment, discipline, cultural-evolution, evidence, source label, or Method relation structure; - run-as-method bias: a trace, log, run, or result record is treated as the reusable way of doing;
- software-notation bias: code, algorithm, workflow, or programming-paradigm language becomes the default ontology for every method;
- mechanism-overread bias: law-governed mechanism or formal-substrate material is treated as if it already selected the project method;
- holder-as-method bias: a team, system, supplier, or capability holder becomes the method name;
- semio-bias: the discussion shifts to wording, a document, publication, or evidence face before the reusable action and its boundary have been stated.
Use one concrete test in every case: can the reader state the reusable action, its participants, applicability, intended result, and stop? If yes, identify the U.Method; apply A.3.2 separately to each candidate U.MethodDescription episteme; handle any plan under A.15.2; and state only those enactment, evidence, or other relations that actually obtain. If not, keep the source phrase unresolved or use the subject pattern shown in §4.
Conformance Checklist
CC-A3.1-1 (Method identity). U.Method is one reusable way of doing under a stated concern, participant meanings, applicability, preconditions, intended result or preserved condition, and bounds. If the sentence also makes a claim about an actual participant, A.3.4 transformation, description, plan, dated Work occurrence, evidence relation, system-role assignment, capability, mechanism declaration, formal declaration, publication face, or pattern relation, write that claim under its direct pattern and state only the relation to the Method that actually obtains.
CC-A3.1-2 (Semantic locality). State the applicability, participant meanings, conditions, intended result, and bounds that distinguish the method. Add an effective reference scheme and local senses only when different meanings would change the identification. Add a claim scope, context slice, selected structure, or model-use relation only when its predicate obtains and changing that object would change the identification or the stated later decision.
CC-A3.1-3 (Method-description membership and use). When work, assurance, gate, or audit reliance depends on a method description, name the exact episteme and verify that it meets A.3.2 membership for this Method. If several epistemes are treated as descriptions of the same Method, their EntityOfConcern references must resolve to the same A.3.1 identity; compare their claim sets separately for the proposed use.
CC-A3.1-4 (Assignment-free Method). A Method may state local system-role-kind admission conditions or capability-fit conditions. These are Method-side admissibility conditions, not deontic obligations by default. The Method does not bind named people, teams, organizations, or calendar allocations.
CC-A3.1-5 (Runtime-free method). A dated run is a Work individual under U.Work, not a method field. Recover each exact actual performer and its obtaining system-role assignment through A.13; A.15.1 independently grounds the Work, enacted Method, extent, containing System, and every participation or resource relation used by the claim. Add F.6 attribution through that same assignment only when the receiving use expressly represents precise assignment-bound attribution. Telemetry, logs, measurements, evaluations, production, delivery, acceptance, and result records remain separate claims.
CC-A3.1-6 (Plan-free method). Work preparation, schedule, go or no-go date, work authorization, and planned work relation belong to U.WorkPlan, gate, authority, or commitment patterns.
CC-A3.1-7 (Mechanism and formal-substrate separation). A formal substrate, mathematical lens, mechanism declaration, realizer, or control model can constrain or help explain a method only through a relation with stated participants. Use E.10.ARCH:3.1 to classify that neighboring claim. It does not identify the method until the reusable action, applicability, intended result, and boundary are stated.
CC-A3.1-8 (Programming-paradigm neutrality). Imperative, functional, logical, constraint, object-centric event, effect-handler, and hybrid forms remain descriptions or representations until the reusable way and its boundary are stated.
CC-A3.1-9 (Graph and representation guard). A graph path, path slice, query, predicate, table, dashboard, publication face, or pattern relation is not a method or work sequence by layout. Use C.2.P.DR when representation wording is overread as imperative action.
CC-A3.1-10 (Method parts, structures, and Work parts). Call a candidate a submethod only when its reusable action, preconditions, intended result or preserved condition, boundary, and relation to the whole method are stated. Otherwise keep the step, graph node, description fragment, Work part, episode, component behavior, or telemetry slice under its own pattern. A selected method-side U.Structure must have all four A.22 discriminators; layout and list membership establish none of them. Mathematical or graphical notation remains a description or C.29 representation.
CC-A3.1-11 (Practice wording recovery). For a source word such as practice, ask what the sentence lets the reader do: reuse a way, inspect a description, schedule or report Work, allocate a holder, classify a discipline or tradition, cite evidence, or merely quote a label. Choose the corresponding subject pattern only when that action is stated; otherwise retain an unresolved source cue.
CC-A3.1-12 (Parameter and variant discipline). Parameters may be method semantics or content of a U.MethodDescription. A U.WorkPlan may name planned values only against the declaration that gives those values their meaning. An actual value or participant requires an obtaining direct subject relation or A.6.1 application binding. Effects, bounds, participant meanings, applicability, and any semantic basis used by the comparison determine variant identity.
CC-A3.1-13 (Evidence and assurance boundary). A method or method description does not by itself prove that work happened, that a result is warranted for the claimed use, that a gate is passed, or that action is authorized. Those claims use the relevant evidence, assurance, gate, temporal, authority, work-plan, or work patterns.
Common Anti-Patterns and How to Avoid Them
Consequences
- Method-like language becomes reusable across physical, informational, organizational, and mathematical work without privileging software code or ordered instructions.
- Teams can compare descriptions, variants, and implementations without confusing them with dated work.
- Work planning and evidence become more reliable because a method no longer smuggles in authority, proof, schedule, or performed-work claims.
- The cost is one explicit choice: before relying on method-like wording, say whether the source means a reusable way, its description, planned or performed Work, a mechanism, a representation, or another concrete claim.
Lowering and local repair conditions
Withdraw a U.Method identification when the text cannot answer the ordinary method question: what reusable action is meant, for which participant kinds and conditions, with what intended result or preserved condition, and where it stops. Also withdraw it when the supposed method is only a document, repository, diagram, model, run log, team, supplier label, or authorization; when one value is called both method and mechanism without a governing dual-typing rule; or when a graph or table is being read as an execution order without C.2.P.DR recovery.
Keep a source word such as practice unresolved when the sentence does not reveal whether it means a reusable way, a description, planned or performed Work, an assignment, a discipline or tradition, evidence, or a quoted label. Do not force one of those meanings merely to complete the form.
Repair locally:
- If the reusable way is recoverable, rewrite its identification with the missing applicability, participant meaning, condition, result, or stop.
- If a description, plan, Work occurrence, mechanism, representation, evidence claim, or result has occupied the method position, handle that claim under its subject pattern. State a relation back to the method only if that pattern defines it and the current facts satisfy it; otherwise keep the two objects separate.
- If a relied-on episteme no longer meets A.3.2 membership, or its cited edition, claim set, acceptance relation, semantic basis, or variant condition changed, review that changed basis and the comparisons that used it; do not invalidate every use of the method.
A new method-description edition changes the method only when it changes a method basis that the comparison relied on. A changed Work fact, measurement, evaluation, production, delivery, acceptance, or evidence result repairs that neighboring claim, not the reusable method by default. Use G.5 or the direct method-family pattern only when the available family or selector no longer separates the needed methods and variants. Poor explanation is a didactic defect to repair; it is not evidence that the method itself changed.
Rationale
FPF needs U.Method because practical work often depends on a way of doing before there is one dated work occurrence, one accepted description, one final implementation, or one verified result. Treating the method as the document, code, mechanism, plan, or run makes reuse brittle: changing the publication looks like changing the method, a run error looks like method invalidation, and a mechanism claim starts authorizing work.
A method claim states the reusable way of doing, participant meanings, applicability, conditions, effects, and bounds. The mechanism episteme declares a law-governed operation family, its subject and range fields, operation algebra, laws, admissibility predicates, and Applicability. A Bridge, realization, evaluation, or evidence-use claim may relate to that episteme without entering its semantic content. The method and mechanism may be linked, but they are not two names for one untyped value.
SoTA-Echoing
Review a project's U.Method identification when a change in participant meaning, applicability, precondition, intended result, preserved condition, safety bound, effective scheme, selected structure, model-use relation, or work-facing acceptance criterion could make a reader identify a different method or allow a different case. If only a description edition, Work occurrence, transformation, representation, measurement, or evidence relation changed, review that neighboring claim unless the change also alters one of those method bases.
Use G.11 when a later decision depends on the freshness or edition of a cited method description or source. A newer paper, implementation, or run is a reason to inspect the relation that cites it, not automatic evidence of a new method. Reopen A.3.1 itself only when stronger work overturns one of the distinctions that the project actually relies on.
Relations
- Identity and meaning: builds on
A.1,A.2,A.2.1,A.2.2, andC.2.1; useF.17when a local sense matters andG.11when a comparison relies on source or edition currentness. - Description, composition, and variation: coordinates with
A.3.2for method descriptions,A.3.3for dynamics,B.1.5for order-sensitive method composition,B.2for whole reidentification, andG.5for method families and selector outcomes. - Work and change: coordinates with
A.15.2for plans,A.15.1for dated Work, andA.3.4only after an actual changed referent and Transformation are independently claimed. Local system-role kinds, assignments, and relations among exact system-role kinds remain underA.2,A.2.1, andA.2.7. - Mechanism and representation: coordinates with
A.6.0for formal declarations,A.6.1andE.20for mechanisms,C.29for mathematical-lens use,F.9for sense Bridges, andA.1.1only for an obtaining model-use relation or selectedBoundedModelUseStructurethat changes the method decision. - Source-wording exits: coordinates with
C.20,C.36, andC.36.Pfor discipline and cultural-evolution uses of practice;A.10for evidence and provenance; andC.2.P.DRfor representations overread as routes or Work sequences. - Informs:
E.18andE.18.1when flow-structure or P2W wording must keep descriptions, mathematical paths, method claims, and Work claims separate.
A.3.1:End
Candidate-Method Recovery from Work Evidence
Type: Architectural (A) Status: Stable Normativity: Normative unless marked informative
Plain name. Recover source-traceable candidate accounts of a reusable way from several performances or other direct evidence.
Primary reader. A practitioner, researcher, analyst, or method engineer who has observations or records from several performances and needs an honest reusable explanation before Method identification or specialist reconstruction.
Problem frame
Use this when. Use this pattern when you have observations or records from several performances and want to understand what reusable way they may show, but no Method has yet been established.
First useful result. Return a traceable provisional explanation of the reusable way the material may show, the main competing explanation, important gaps, and the next observation or trial that would separate them—or state honestly that the material shows only what happened.
Three recognition cases.
- Several maintenance visits have videos, logs, notes, and known performers. Most show one inspection order, while one changes order after a vibration cue. The question is whether the evidence supports a fixed-order way, a cue-responsive way, or only a local sequence.
- Event data has been prepared and a discovery tool has produced a behavioural model. The question is what the selected data and modeling choices actually support, including what embodied, discretionary, or unrecorded contributions may be missing.
- Several practitioners describe “the same practice,” but their accounts still differ in applicability, participant meanings, intended result, or stop. The question is whether one candidate reusable way, several candidates, or no reusable account can yet be distinguished.
What goes wrong if missed. One vivid occurrence is generalized into a Method. Repeated event order is treated as reusable applicability. Several rival candidate subjects are combined into one false EntityOfConcern. A mined model, executable diagram, or coherent account is called a MethodDescription before a Method has been admitted. Missing tacit or discretionary contributions disappear behind the record format.
What this buys. A project can use imperfect evidence without overclaiming. Each positive candidate has a truthful subject, source-to-claim trace, important gaps, a rival, and a distinguishing question. Weak evidence can still return a useful record-only result. Stronger reconstruction can continue in specialist ME.18 without making every ordinary use pay that burden.
Not this pattern when. Use the closest applicable pattern instead:
- If the evidence no longer leaves rival candidate ways and the remaining question is whether the proposed way qualifies as the
U.Methodbeing identified—or which identity claim needs repair—useA.3.1. - If the Method is already identified and the question is whether an episteme is its MethodDescription, use
A.3.2. - If wording still hides the object or relation being asserted, use
F.19; follow anE.10route only for a remaining FPF word, kind, or relation question. - If the question concerns one dated Work occurrence only, use
A.15.1. - If the project needs prospective practice-architecture synthesis, use
C.32.MWA. - If the domain needs a complete reconstruction programme, use specialist
ME.18.
When a DPF reuses this pattern. A DPF uses it only when several occurrences or sources create a candidate-recovery question that passes this entry. The DPF still supplies any domain-specific problem, evidence limits, vocabulary, result, and return that change practitioner action or judgment. If no such use-changing contribution remains, cite this pattern rather than copying it.
For example, an engineering study across several test runs may pass this entry, while a live maintenance incident may need only A.15.7 and a stable administrative checklist may need neither pattern. A music or dance DPF uses this recovery Method only for an actual several-performance question and keeps its own evidence, terminology, result, and return.
Problem
Evidence about Work is not the reusable way itself. Videos, logs, interviews, artifacts, and process models are selected and interpreted under Methods. They may omit perception, conversation, manual adjustment, authority, intent, failure, or local workarounds. Several observations may support more than one reusable explanation, and a coherent explanation can still be wrong.
The practical gap lies between two existing results. A.15.1 can identify what Work occurred and which Method it enacted when that claim is independently grounded. A.3.1 can identify a reusable U.Method once its meaning, scope, and limits are supportable. Neither supplies the several-occurrence recovery Method needed before Method admission. Without that intermediate result, projects either jump from record to Method or import a full specialist reconstruction programme into every case.
Forces
Solution
For every materially different reusable way that still fits the evidence, write a separate candidate account. Treat each account as one U.Episteme, keep it provisional until A.3.1 admits the candidate as a Method, and keep MethodDescription membership separate until the account concerns that admitted Method and passes A.3.2.
Identify each candidate account truthfully
Each positive candidate account is one U.Episteme. Before Method admission, distinguish the possible reusable way as one provisionally identified candidate entity: give it a working designation and enough source-supported participant meanings, applicability hypothesis, intended result or preserved condition, variation, and limits to tell it from rivals. That candidate entity is the account's EntityOfConcern.
The account's effective U.ReferenceScheme states only the designation and interpretation rules needed to read source terms such as performer, activity, cue, event, result, and stop. Add measurement or comparison rules only when the account uses them. This provisional entity identification admits neither a U.Method nor a U.MethodDescription.
When two or more candidate reusable ways remain symmetric, return one account episteme per candidate. Each account may mention the rivals while retaining its own EntityOfConcern. If a later use needs a comparison that can be retained or reused, use A.22 to select the candidate subjects and the comparison relations that already hold and together define one comparison structure, then return a separate episteme about that structure. Otherwise compare them in ordinary working prose. Several candidates do not by themselves form one subject for a combined account.
If no candidate entity or truthful effective scheme can be recovered, lower the result rather than fabricating an account.
Run the nine-step recovery Method
- State the receiving use and useful grain. Say why a reusable Method is being sought and which later action or decision would change. Do not reconstruct a fine sequence when the use needs one broad way, or a broad routine when a safety-critical branch must remain explicit.
- Name several grounded occurrences or other direct evidence. For every claimed Work occurrence, recover each precise performer's A.13 core and independently admit the Work under A.15.1. Add F.6 only when the candidate account also needs precise assignment-bound attribution. Keep sources such as videos, logs, notebooks, interviews, artifacts, measurements, and assertions as separate entities or epistemes with their actual evidence relations. One occurrence may open a hypothesis; it does not establish reusable applicability.
- Write what each source supports. Keep a readable source-to-claim account of performer Systems, relevant facts, enacted-Method claims when independently grounded, actions, cues, variations, results, and stops.
- Expose how evidence was constructed and what it misses. State which performers, objects, successful, failed, or atypical occurrences were observable and which contributions—such as embodied perception, conversation, manual adjustment, discretion, or tacit know-how—may be absent. For event data, name the preparation Method, relied-on description or configuration, source data, dated preparation Work, resulting event-log episteme, the identified event-data collection or structure that the log describes, and the interpretation scheme. If a relied-on Method, configuration, source, correlation key, event-state encoding, or observation window is unavailable, return that limit before mining.
- Distinguish each candidate subject. For every materially different possible reusable way, state the provisional identity and scheme from §4.1. If two candidates cannot be told apart without unsupported claims, retain the ambiguity or lower the result.
- Write one account per candidate. Ask the
A.3.1questions without granting Method membership: applicability, participant meanings, preconditions, intended result or preserved condition, reusable actions, supported parts or interfaces, allowed variation, and stops. Mark every unsupported position unknown rather than filling a familiar template. - Compare stability, variation, and alternatives. Ask what recurs across independently grounded occurrences, what changes with the situation, what may be a performer-specific habit or local workaround, and whether another account explains the same evidence. Frequency alone establishes neither a Method part nor its value.
- State a held-out or distinguishing question. Name one representative occurrence, trial, comparison, or additional source not used to shape the favored account, and the observation that would support, separate, repair, or lower the candidates. Make the test proportionate to the receiving use; it is not automatically an effectiveness trial.
- Return the strongest honest result. Return one or more candidate accounts ready for
A.3.1identification or specialist work, with a separate comparison only when needed; or lower to a Work-related record, local regularity, performer-specific habit, observed sequence, or unresolved cue. Prepare MethodDescription-authoring input separately. The same account can qualify asU.MethodDescriptiononly after itsEntityOfConcernis admitted as oneU.Methodand its claims passA.3.2.
Select the result branch
Keep process-mining contributions separate
Treat evidence preparation, process discovery, and candidate-Method recovery as three contributions.
- Named data-preparation Method or Methods select source events, name activities, correlate records and objects, choose event-state or start/complete encodings, and apply abstraction. Dated preparation Work uses named source data and produces an event-log episteme about the identified event-data collection or structure described by the log.
- A named discovery Method may return a behavioural-model episteme. Conformance checking may compare a log with a separate descriptive or normative model. Enhancement may add timing, organizational, performance, or prediction claims. Object-centric mining may preserve several typed objects and qualified relations.
- This recovery Method uses those well-scoped results with other evidence to return candidate reusable-way accounts, unrecorded contributions, honest lowering, and a distinguishing trial.
None of the earlier contributions automatically recovers a Method. A discovered process model remains a U.Episteme about selected evidence unless another rule establishes a different kind or use. A conformance result relates a log and model; it does not prove that the model describes the obtaining Method or that every deviation is defective. Executability and visual process form do not satisfy A.3.2.
Treat process, actual process, case, activity, event, variant, deviation, and process model as cues to recover the direct subject, not as types supplied by the words. Use E.10 and A.15.6 when the source remains ambiguous.
Stop or continue to specialist Method Engineering
Stop here when the receiving use needs only a source-traceable candidate account, an honest comparison, or a record-only result. Continue to specialist ME.18 when the domain and consequence require a reconstruction programme—for example, sampling across performers and settings, interviews, cognitive task analysis, ethnography, protocol analysis, process-mining design, artifact analysis, tacit-contribution recovery, fragment composition, domain trial design, or stronger assurance.
ME.18 may strengthen the candidate accounts and prepare separate inputs for MethodDescription authoring. Use A.3.1 for Method identification and A.3.2 for MethodDescription membership.
Archetypal Grounding
Pump-inspection recovery
Four independently grounded pump-inspection Work occurrences have video, sensor logs, technician notes, and known performer assignments. Three show the same inspection order. The fourth begins with a vibration cue and reverses two checks.
An analyst applying the recovery Method distinguishes two possible reusable ways under the plant's current inspection vocabulary: a fixed order with an undocumented exception, and a cue-responsive order. Each candidate gets its own account episteme, candidate subject, interpretation scheme, and source-to-claim support. The account notes that the video misses a tactile check named in interviews and that successful outcomes alone do not distinguish the candidates.
A fifth occurrence is held out. Whether the technician changes order when the vibration cue is present can separate the accounts. Until then, both remain candidates; neither trace nor account is a MethodDescription.
If that held-out occurrence and the remaining evidence support the cue-responsive account while the fixed-order rival no longer fits, recovery can return one candidate account ready for the A.3.1 identity test.
Process-mining replay
The same team names its event-data preparation Method: select inspection start and completion events from the source files, name activities under the plant vocabulary, correlate records by pump and maintenance visit, and collapse duplicate sensor bursts under a stated rule. It cites the selected configuration because that configuration affects the result. Dated preparation Work on the named files produces an event-log episteme about the selected event-data collection.
If the correlation key, configuration, or source window cannot be recovered, the result is that limitation—not a raw-fact log. A separately named discovery Method returns a behavioural-model episteme with observed variants. Candidate-Method recovery then adds the two candidate reusable-way accounts, the missing tactile contribution, the record-only branch, and the fifth-occurrence question.
Record-only lowering
Three timestamped records show that one operator checked A before B on three shifts, but the performer assignments, applicability, source window, and purpose of the sequence cannot be grounded. The useful result is an observed sequence in those records and a list of missing facts. It is not a candidate Method account, Method, or MethodDescription.
Bias-Annotation
- Automation bias: admitting a Method from a mined or executable model without testing the reusable way under A.3.1.
- Frequency bias: repeated order is evidence to examine, not a reusable Method part by count alone.
- Success bias: favorable outcomes without failed or atypical cases may hide the real limits of the reusable way.
- Record bias: unrecorded perceptual, embodied, conversational, and discretionary contributions remain possible gaps.
- Single-tradition bias: process mining, routine dynamics, interviews, and Method Engineering each expose different evidence limits; none alone is sufficient for complete reconstruction.
- Template-completion bias: unsupported account positions remain unknown rather than being completed from familiar practice.
Conformance Checklist
- CC-A3.1.MR-1 — Receiving use and grain. Is the later use clear enough to choose the useful reconstruction grain?
- CC-A3.1.MR-2 — Grounded evidence. Are claimed Work occurrences and other sources identified under their own patterns and relations?
- CC-A3.1.MR-3 — Source-to-claim trace. Can the reader see which source supports each account claim?
- CC-A3.1.MR-4 — Evidence construction. Are selection, naming, correlation, abstraction, configuration, window, and likely missing contributions explicit when they matter?
- CC-A3.1.MR-5 — One candidate per account. Does every candidate-account episteme have one candidate reusable-way EntityOfConcern and effective scheme?
- CC-A3.1.MR-6 — Rival retained. Is the main competing account or unresolved ambiguity visible?
- CC-A3.1.MR-7 — Held-out question. Is there a proportionate observation or trial that could distinguish, repair, or lower the candidates?
- CC-A3.1.MR-8 — Honest result branch. Does the result stop at candidate account, separate comparison, record-only result, or named blocker without granting Method or MethodDescription membership?
- CC-A3.1.MR-9 — Specialist exit. Is
ME.18used for complete reconstruction only when the receiving use needs its larger burden? - CC-A3.1.MR-10 — Plain use. Can a cold practitioner explain the candidate, evidence, rival, gap, and next test without reading a predicate inventory?
Common Anti-Patterns and How to Avoid Them
Consequences
Rationale
This pattern fills the smallest transdisciplinary gap between evidence about Work and identification of a reusable Method. A candidate account is an episteme about one provisionally distinguished possible reusable way. Method identity and MethodDescription membership remain later, separate judgments.
The one-account-per-candidate rule protects episteme subject truthfulness when evidence underdetermines the reusable way. The record-only branch protects utility when evidence is too weak. The specialist exit keeps ordinary recovery usable while preserving the larger evidence burden for domains that need it.
SoTA-Echoing
Qualification and smallest reopen. Reopen only when a source materially changes an evidence limitation, the multi-object recovery choice, or the boundary between reconstruction and an admitted Method used by a result branch. Revise the affected source row and its matching recovery step, case, or checklist item. A new mining algorithm, serialization, or domain example alone does not reopen the general boundary.
Relations
- Builds on:
C.2.1for each account episteme, its EntityOfConcern, and effective scheme;A.3.1for the questions that shape a candidate without granting Method membership; A.13 for each precise performer's local agency core;A.15.1for independent admission of grounded Work occurrences; F.6 only for a current precise assignment-bound attribution; andA.10for bounded source reliance. - Coordinates with:
A.3.2for later MethodDescription membership;A.15.6for recovery of ambiguous process or case wording;A.22for a separately selected comparison structure only when a named use needs it; andC.32.MWAfor prospective several-structure practice synthesis. - Receives bounded evidence from: process-data preparation, discovery, conformance, enhancement, object-centric mining, interviews, observations, artifacts, and measurements under their own Methods and claims.
- Hands off to:
A.3.1for Method identification or specialistME.18for complete reconstruction; neither continuation is automatic. - Keeps separate: source, record, event log, behavioural model, Work, candidate reusable way, candidate account, admitted Method, MethodDescription, and any comparison episteme.
A.3.1.MR:End
U.MethodDescription: Description Episteme for a Way of Doing
Type: Definitional pattern Status: Stable Normativity: Normative
Problem frame
When the reusable way is still only a candidate. A candidate account or mined behavioural model is not a U.MethodDescription merely because it is coherent, executable, process-shaped, or traceable to sources. First use A.3.1.MR while the reusable way is still being recovered. Apply this pattern only after the account's EntityOfConcern has been admitted as one U.Method, and only when that same episteme makes a substantive claim about the Method as a way of doing.
Use this pattern when engineers need reusable claims about how one Method is carried out and must keep those claims distinct from the representation, publication, approval, plan, or actual Work through which the Method is discussed or enacted. In FPF terms, decide whether an already identified U.Episteme is a U.MethodDescription: whether its EntityOfConcern is one admitted U.Method and its claims say something substantive about that Method as a way of doing.
Plain reading. A method description is the knowledge object whose claims say how one identified method is done. Code, text, or a diagram may represent those claims; a publication occurrence may make an edition available.
Recognizable working moments include:
- a maintenance team comparing a revised procedure with the method used to plan the next service window;
- a clinical team selecting a triage guideline while keeping guideline claims, approval, and patient-specific work separate;
- a production-planning team comparing scheduling-method claims while the MILP representation and solver runs change.
Use it when the working question is:
- which admitted
U.Methodis the episteme'sEntityOfConcern; - which claim states the method's transformation or enactment concern, applicability, precondition, effect, bound, or internal composition;
- whether anyone is proposing a use beyond membership; if so, what that use is, where it belongs, and which method claims it needs;
- which
C.29representation corresponds to the claims, which publication occurrence makes the selected edition available, which publication form expresses it, and whichU.PresentationCarrierbears that form—but only when the proposed use needs those distinctions; - whether two epistemes concern the same A.3.1-identified Method and, separately, whether their claim content is equivalent for the proposed use; the later use sections carry any needed scheme correspondence, evidence-reliance, and assurance checks.
Object being classified. A.3.2 examines one already identified claim-bearing U.Episteme candidate and judges whether that same individual belongs to the dependent kind U.MethodDescription. For positive membership, the candidate episteme's C.2.1 EntityOfConcern must resolve to one admitted U.Method, and at least one of its claims must concern that Method as a way of doing. The Method is the internal subject of the episteme's claims, not a second candidate and not the object being classified. A.3.2 adds neither another episteme identity nor a binary description relation.
Primary working reader. An engineer, researcher, publisher, teacher, planner, or auditor who must identify or rely on reusable claims about a method before planning, enactment, comparison, audit, revision, publication, or teaching.
Primary working concern. Identify the claim-bearing episteme and its Method first. When someone proposes a further use, name that use and its subject pattern, then ask which claims the use needs and whether this edition contains them. With no proposed use, stop at membership.
Primary viewpoint. The practitioner selecting, comparing, or revising method descriptions while method identity and the surrounding representation and publication relations remain explicit.
First useful move. Name the candidate U.Episteme. Check two things: its C.2.1 EntityOfConcern is one admitted U.Method, and at least one claim says how that Method is done. If both hold, the same episteme is a U.MethodDescription; if either fails, it is not. Only then, if someone proposes a concrete further use, write that use's criterion and result as a separate subject assertion under its exact predicate, with an optional subject-pattern locator. Otherwise stop at membership.
What goes wrong if missed. A visible file or diagram is classified by its form, a mere mention is mistaken for a description, or an episteme about a relation structure among several Methods is treated as if it described one composite Method. Planning, enactment, audit, and review then rely on the wrong object.
What this buys. The project can identify, compare, revise, and reuse claims about one Method while keeping representation, publication, planned use, enactment, and evidence use distinct.
Not this pattern when. Do not infer membership from words such as algorithm, program, proof, workflow, process, procedure, recipe, or model. Ask what the sentence actually asserts. If its EntityOfConcern is not an admitted U.Method, or it says nothing substantive about that Method as a way of doing, A.3.2 does not apply. Use the pattern for the actual Method, selected structure, formal declaration, work plan, dated Work, evidence use, or publication use instead.
Problem
Without a precise U.MethodDescription distinction, projects collapse several different claims:
- Description as run. A flowchart, repository, executable, lab protocol, or solver file is treated as if it were the dated work occurrence.
- Description as method semantics. A notation or file is treated as the method itself, so equivalent descriptions look like competing methods and different methods can hide behind one document name.
- Description as plan or authority. A protocol, dashboard cue, gate-looking entry, or approved procedure note is treated as a work plan, permission, gate passage, or evidence result.
- Description as declaration, mechanism, or formal substrate. A proof script, algorithm, model, or rule set is treated as if it already were a
RelationSignature, an A.6.1 operation declaration, a mechanism law set, or a mathematical substrate. - Imperative overread. A declarative representation, graph path, query plan, constraint model, or state predicate is interpreted as an ordered work-control claim.
- Subject identity and description equivalence collapse. Two epistemes that concern the same method are treated as equivalent despite incompatible claims, or a notational difference is used to fork method identity without the A.3.1 reidentification rule.
Forces
Solution
Definition
U.MethodDescription is a same-individual dependent kind of U.Episteme. Membership holds when the already identified episteme has one admitted U.Method as its exact EntityOfConcern and its claims, interpreted under the effective U.ReferenceScheme, make at least one substantive claim about that method as a way of doing. Such a claim may state the method's transformation or enactment concern, generic participant meanings, applicability, precondition, intended effect or preserved condition, bound, or internal method composition. These are claims about method semantics, not planned assignments or actual participation. Naming the method, giving bibliographic metadata, or stating approval alone does not establish membership.
The C.2.1 claim content, exact EntityOfConcern, and effective U.ReferenceScheme remain the identity discriminators of the episteme; A.3.2 adds no second identity. Whether the claims are detailed, current, or reliable enough for a particular planning, enactment, comparison, audit, revision, publication, or teaching use is a separate evaluation. A new receiving use alone neither creates a new method description nor removes membership.
If someone claims empirical grounding, state the C.2.1 EpistemeEmpiricalGroundingRelation. If a proposed use depends on a test, write the tested claim, criterion, evidence path, and result under the evaluation, evidence, or assurance pattern that defines them. Do not add these as method-description fields or let a test change membership.
An assertion or description episteme about one dated Work occurrence may cite methodDescriptionRef when its claim depends on that description edition. Recover each performing U.System and its obtaining assignment of a local agential system-role kind under A.13. Independently admit the Work under A.15.1, including its obtaining enactsMethod relation to the Method. Only when precise assignment-bound attribution is claimed, use F.6 performedUnderAssignment with that same obtaining assignment of a separately declared U.SystemRoleAssignment species.
Representation-agnostic stance
Begin with the claim-bearing episteme, then distinguish how its claims are made available:
- a
C.29representation stands in a declared correspondence to the represented claims; - an
E.24.PUBpublication form expresses the selected episteme edition for one publication use; - a
U.PresentationCarrierbears that publication form.
Only the claim-bearing episteme can meet the membership rule in 4.1; keep its representation, form, carrier, and publication occurrence separate.
The representation may use procedural text, code, a diagram, functional composition, a typed pipeline, a state machine, event rules, constraints, a solver formulation, a proof script, a statistical model, or a combination of notations. Notation choice does not decide membership. Read each assertion separately: use A.6.0 or C.29 when it asserts a formal object, A.6.1 or E.20 when it declares an operation family and laws, A.15.2 when it states intended Work, and A.10 or B.3 when another claim relies on it as evidence or assurance.
Method-description claim content
The membership threshold is positive but small: at least one claim must answer a method-side question about the way of doing. A name, author, citation, catalogue entry, or approval status does not answer such a question. This threshold distinguishes description from mention; it is not a completeness test for a receiving use.
Name the receiving use before asking whether this method-description edition is adequate for it. A receiving use is not required for U.MethodDescription membership. If no use is current, stop at the membership result and make no adequacy claim.
A.3.2 creates no universal method-description-use relation. Name the concrete receiving object and the pattern that defines or tests the current claim about it. Comparing claim sets, revising a publication, or checking teaching content does not require a fabricated Work occurrence or decision object.
Then inspect the claim concerns that matter for that named use:
Calendars, assignees, work authorization, gate passage, and dated execution witnesses are governed by planning, assignment, gate, or work-occurrence patterns. They may cite a method description.
A U.MethodDescription describes one admitted Method. It is not the RelationSignature that declares participants for one relation kind, the A.6.1 OperationAlgebra content that declares arguments and results for an operation family, the U.WorkPlan that states intended work, a dated Work occurrence, or any actual-participation relation of that occurrence.
Method-description acceptance and use boundaries
A project may accept, regulate, prefer, deprecate, or forbid a method description for one stated use, organization, or policy scope. Record that separate publication, gate, authority, or policy claim under its own pattern. It does not establish U.MethodDescription membership.
When a method description is used to prepare or enact work, keep the chain explicit:
- C.2.1 identifies one episteme through its claim content, exact
EntityOfConcern, and effectiveU.ReferenceScheme; A.3.2 judges that same episteme to beU.MethodDescription. Plainly saying that the method description describes the method is shorthand for this constitution and membership judgment, not another binary relation occurrence. U.WorkPlanmay cite that episteme when preparing dated work.- Recover each performing
U.Systemand its obtaining assignment of a local agential system-role kind under A.13. A.15.1 independently admits the dated Work and itsenactsMethodrelation to the Method. If precise assignment-bound attribution is claimed, F.6performedUnderAssignmentuses that same obtaining assignment of a separately declaredU.SystemRoleAssignmentspecies. A separate assertion citesmethodDescriptionRefonly when its claim depends on that edition. - The word result is only a cue. Ask which claim is being made: an A.6.1 application returned a value, a referent changed under A.3.4, Work produced something under A.15.PROD, or a measurement, evaluation, delivery, or acceptance occurred. If the use needs a Work-to-result relation and no exact predicate is defined for it, keep Work and result separate and state
missing-predicate[work-to-result]. A log, trace, measurement, or result episteme supports another claim only through its evidence relation.
Method, mechanism, and formal-substrate boundary
Do not classify by the source word alone. First say in plain words what someone is trying to change, produce, select, derive, control, or maintain and what the sentence asserts about it. Then use E.10.ARCH:3.1 to separate method, mechanism, formal-object, plan, Work, and result claims; write each claim under its own pattern.
For A.3.2 ask only: is this episteme about one admitted Method, and does at least one claim say how that Method is done? If the same source also asserts a mechanism, formal declaration, work plan, dated Work, evidence use, gate, result, publication, or temporal claim, state that claim separately.
Use these claim checks instead of forcing distinct claims into one generic relation:
- A method-description membership judgment identifies one admitted
U.Methodas the episteme's exactEntityOfConcernand finds at least one substantive claim about that method as a way of doing. - A method claim states the reusable way of doing, its participant meanings, applicability, conditions, intended result or preserved condition, and bounds.
- A formal-substrate claim concerns the selected formal object, structure, invariant, or mathematical declaration used for reasoning.
- A mechanism-declaration claim concerns the law-governed operation family, direct subject and range fields, operation algebra, law set, admissibility predicates, and applicability. Transport, audit, realization, evaluation, and evidence-use relations remain separately governed neighboring claims.
- A work claim concerns one dated occurrence independently admitted under A.15.1: each performing System with its A.13 core, including an obtaining assignment of a separately declared species, the enacted Method, temporal extent, and containing System. Add F.6 attribution through that same assignment only when precise assignment-bound attribution is asserted. Add participant, resource, or work-to-referent claims only through relations that actually obtain; otherwise return the corresponding missing-governor result.
Connect these claims only through an admitted relation whose predicate and participants are present. If no pattern or declaration defines the needed relation, keep the objects separate rather than inferring dual typing.
Example: a U.MethodDescription episteme for a scheduling Method can meet the membership rule while a MILP file represents some of its claims. Another episteme may describe the mathematical formulation; a selector mechanism may declare operations over candidate Methods; a dated solver run is Work; and an issued production-schedule episteme is a separate result. Use that result as evidence only through a current A.10 path and its bounded disposition. Without that path, keep the result available but do not rely on it as evidence for another claim.
Constructor and process-theory note
In the constructor-theory and process-theory interpretation used here, both informational and physical procedures are understood through possible or impossible transformations. That motivates a broad method-description kind without making software code privileged:
- an episteme about an information-transformation method may be represented through a program, proof script, or solver model;
- an episteme about a material, energetic, organizational, or mixed-transformation method may be represented through a procedure, lab protocol, or control recipe;
- an assertion or description about dated Work may cite a method description. Establish the performing System's A.13 core with its obtaining assignment, then independently admit the Work and its
enactsMethodrelation under A.15.1. Use F.6performedUnderAssignmentwith that same assignment only for a claimed precise assignment-bound attribution; - a mechanism may declare law-governed operation structure for transformations, but that mechanism claim is separate from the method-description claim.
This interpretation explains why FPF can treat many representation forms uniformly after the current claim and described method are recovered.
Declarative representation boundary
Some method descriptions use declarative representations: constraint sets, graph patterns, state predicates, SQL-like queries, policy rules, e-graphs, monoidal diagrams, or process constraints. Do not translate such representations into an imperative route unless the method claim actually states an ordered action structure.
Even a representation that runs or is internally consistent may have more than one sound interpretation. If a comparison depends on variables and their bindings, surrounding context, or an e-graph kept across compiler stages, say what counts as equal. Agreement under one such rule does not by itself show whether the Method is the same, whether the claims are equivalent, or whether one episteme edition continued into another.
Use C.2.P.DR when a graph path, evidence path, query plan, predicate, checklist, publication face, or neighboring-pattern relation is treated as an action route by its form or layout alone. Recover the direct object or relation and any separate representation use, then check whether the source actually asserts the proposed order. State a genuine ordered Method or WorkPlan as its own subject assertion with the exact defining or constraining ClaimGraph.
Composite methods and independent method structures
When claims concern relations among methods, first determine whether the related methods construct one admitted composite U.Method.
If admitted methods are actual method parts whose organization constitutes one composite method under A.3.1 and, when order-sensitive composition is current, B.1.5, the composite U.Method remains the exact EntityOfConcern. A U.MethodDescription can make substantive claims about that composite method's internal organization without changing its object of concern to an independently selected structure.
Description nodes, workflow boxes, code blocks, proof-script blocks, diagram paths, and table rows are representation constituents. They do not become method parts by position in the description. A constituent can participate in method-holon composition only after the recovered object is itself an admitted U.Method.
If a selected relation structure instead connects several methods as alternatives, substitutes, fallbacks, comparison candidates, or members of a family without constituting one composite method, the selected U.Structure is the exact EntityOfConcern under A.22 and C.2.1. The resulting episteme can describe that structure, but the present rule does not classify it as U.MethodDescription.
An algebraic, graph, categorical, process-calculus, effect-calculus, matrix, embedding, distributed, or neural representation can be used to express or analyze either case. Its correspondence to claims is governed separately through C.29. A work plan, work occurrence, method-family registry, or selector result also keeps its own governed object and subject pattern.
Archetypal Grounding
Across the slices below, recognize the claim-bearing episteme before examining how it is represented or published. Ask in this order:
- Which admitted
U.Methodis its exactEntityOfConcern? - Which claim says something substantive about that method as a way of doing?
- Is anyone proposing a use beyond membership? If so, name the use, its subject pattern, and the claims it needs; if not, stop at membership.
- When expression or availability matters, which
C.29representation corresponds to the claims, which publication occurrence makes the selected edition available, which publication form expresses it, and whichU.PresentationCarrierbears that form?
Industrial procedure
A procedure episteme about EtchAl2O3@FabA qualifies when its claims state how the etching Method is done: gas-feed participant meanings, temperature bounds, chamber preconditions, intended etch profile, failure conditions, operator system-role kind, calibration capability threshold, or admitted parameter ranges.
A PDF publication form may express one edition of those claims, and a PLC ladder representation may correspond to some of them. The scheduled maintenance-window preparation is a U.WorkPlan; tool run W-143 is Work. A metrology result supports another claim only through the evidence relation for that claim.
Named-use replay — preparing WP-Etch-MW-47. The maintenance planner needs four claims before drafting this A.15.2 U.WorkPlan: the chamber is empty, inert, and leak-check complete before gas feed; the method's temperature range is 58–62 °C; calibration is no more than 24 hours old; and pressure above the stated bound stops the run. EtchAl2O3-Description-e7 passes A.3.2 membership because it concerns EtchAl2O3@FabA and says how that Method is done. It also states all four needed claims. To verify that this is the current edition, the planner checks its ClaimGraph against publication occurrence Pub-Etch-e7, publication form EtchAl2O3-SOP-e7, and carrier FabA-MethodRepository-2026, plus the source trace from EtchDescriptionReleaseWork-e7, performed under EtchDescriptionMaintainerAssignment-4 with method trace ClaimGraphReleaseCheck-v2. A.10 path EP-Etch-e7-Plan47 links those sources to claim C-Etch-e7-has-Plan47-claims. Its bounded use is citing e7 while drafting WP-Etch-MW-47; unsupported uses are gate passage, authorization, safe execution, and a claim that Work occurred. Its window reopens when e7, RecipeWindow-Al2O3-3, the calibration rule, or a source named in the path changes. RelianceDisposition=pass therefore supports citing e7 only for this drafting use.
EtchAl2O3-Description-brief-e7 still passes membership because it concerns the same Method and states the gas-feed and temperature procedure. It omits the 24-hour calibration condition and pressure stop. A.10 path EP-Etch-brief-e7-Plan47 points to that brief edition and cannot evidence the two missing claims, so RelianceDisposition=blocked-current-use applies to drafting WP-Etch-MW-47. Reopen after selecting an edition that states both claims; until then the planner stops or selects another edition. Membership is unchanged. If the result must persist, C.2.1 is the pattern for its result episteme and ClaimGraph, A.10 is the pattern for the evidence path and disposition, and A.15.2 is the pattern for the plan.
Optimization model
A U.MethodDescription episteme for the scheduling Method qualifies when its exact EntityOfConcern is JSScheduleV4@Plant2026 and its claims state how a production schedule is produced or evaluated. A MILP representation and an explicitly recovered solver-configuration representation can stand in declared correspondence to those claims.
A separate formal-substrate episteme can make claims about variables, constraints, objective, admissible solution set, or invariants. A publication form expressing that episteme may be borne by the same presentation carrier. A timestamped solver run is work. A selector mechanism, if declared, is governed by A.6.1 and E.20. Solver search order does not by itself state the project work sequence.
Proof script
An episteme about a reusable derivation or checking method qualifies when it identifies that U.Method exactly and makes a substantive claim about how the derivation or check is done. A proof-assistant script may represent those claims.
A concrete proof-checking session is work. Claims about a formal substrate, a theorem, or evidence for the theorem remain separately governed even when publication forms expressing those epistemes are borne by the same carrier. A publication occurrence makes a selected edition available to an audience for a bounded use.
Clinical guideline
A guideline episteme qualifies when its exact EntityOfConcern is AcuteAppendicitisTriage@HospitalContext and its claims state the triage Method through patient-information and resource participant meanings, exclusions, decision criteria, relevant local system-role kinds and capabilities, intended effects, or failure response. A publication form expresses one selected edition, and a publication occurrence can make that edition available; approval status remains a separate claim.
Patient-specific dated enactment is a Work individual admitted under U.Work. If a causal claim relies on a triage disposition, diagnostic finding, or measurement result, name that premise and apply C.28. Merely using the guideline during Work establishes neither a causal effect nor a causal-use result.
Workflow diagram
An episteme whose claims state one reusable method may qualify as U.MethodDescription; a BPMN or object-centric process model may represent those claims. A diagram can also represent a work plan, event-log model, or independently selected structure, so its notation does not settle the exact EntityOfConcern.
If readers treat the diagram as a route that tokens or workers must follow, compare that reading with the source claim. Keep an ordered sequence only when the method claim actually states one. When order comes only from layout, use C.2.P.DR and stop at the represented graph, constraints, objects, or events.
Bias-Annotation
This pattern mainly blocks six recurring biases:
- carrier-as-description bias: a PDF file, repository, screen, or presentation carrier is treated as the method description. Identify the episteme whose ClaimGraph is being read, then record its C.29 representation and publication relations separately;
- description-as-method bias: the representation is treated as the way of doing itself;
- description-as-work bias: executable or operational-looking representation is treated as dated work;
- approval-as-proof bias: accepted, approved, or regulated descriptions are treated as evidence, gate passage, or safe execution;
- notation-prestige bias: code, formal notation, or solver files are treated as more authoritative than procedures, diagrams, or guidelines. Compare the actual method claims; representation form supplies no priority;
- imperative-metaphor bias: graph, query, predicate, or process-model representation is treated as an ordered work-control claim.
First identify the claim-bearing episteme, the claim it makes, and the Method it concerns. When the use needs them, keep its C.29 representation, publication occurrence, publication form, and presentation carrier separate. State each additional plan, Work, evidence, gate, authority, mechanism, formal, or mathematical claim under its exact predicate or constraint with an optional subject-pattern locator.
Conformance Checklist
CC-A3.2-1 (Episteme membership). A.3.2 judges one already identified U.Episteme candidate. That same individual is a U.MethodDescription only when its C.2.1 EntityOfConcern is one admitted U.Method and at least one claim says how that Method is done. Representation form, publication form, carrier, approval, and use adequacy do not decide membership; no binary description relation is minted.
CC-A3.2-2 (Positive description threshold). The episteme must make at least one substantive claim about the method as a way of doing, such as its transformation or enactment concern, generic participant meanings, applicability, precondition, intended effect or preserved condition, bound, or internal composition. A name, citation, author, catalogue entry, or approval status alone is mention, not method-description membership.
CC-A3.2-3 (No automatic trigger repair). Wording such as algorithm, program, proof, solver, workflow, process, procedure, recipe, or model is only a cue. Classify the episteme as U.MethodDescription only after its claim and admitted Method pass CC-A3.2-1 and CC-A3.2-2.
CC-A3.2-4 (Description not work). Executable-looking material is not a Work occurrence. For a program run, proof-checking session, solver run, lab run, or clinical application, first recover every performing System's A.13 core, including its obtaining assignment of a separately declared species. Admit Work only after A.15.1 independently identifies the world-side occurrence, enacted Method, temporal extent, and containing System. Apply F.6 through that same assignment afterward only when precise assignment-bound attribution is claimed; a missing or failed F.6 attribution leaves independently admitted Work intact. Any participant, resource-use, or work-to-referent claim needs its own admitted relation; if none exists, return the corresponding missing-governor result.
CC-A3.2-5 (Description not plan or authority). A method description is not a work plan, gate decision, permission, approval, external-rule authorization, or evidence relation. Those claims may cite the description but require their own subject patterns.
CC-A3.2-6 (Description not mechanism or declaration). A method description is neither a RelationSignature nor A.6.1 OperationAlgebra content and does not close a mechanism claim. If reusable direct-relation participant declaration is current, use A.6.0 and A.6.5. If operation algebra, law set, admissibility predicates, or applicability is current, use A.6.1; transport, audit, realization, evaluation, and evidence-use relations remain with their direct patterns.
CC-A3.2-7 (Description not formal substrate). A method description does not close a formal-substrate or mathematical-lens claim. If variables, equations, invariants, structure, substrate, or mathematical payoff are current, use A.6.0, C.29, or the direct mathematical pattern.
CC-A3.2-8 (No people or calendars inside the description claim). A method description may state local system-role kinds and capability thresholds that bound admissible enactment. A claim that a particular System belongs to one of those kinds is a separate System-classification judgment. Named people or Systems, dates, schedules, launch values, assignment species and obtaining assignment occurrences, F.6 attributions, and Work witnesses belong to their planning, classification, assignment, or Work patterns.
CC-A3.2-9 (Parameters and use time). A method description may state parameter meanings and ranges. A U.WorkPlan names planned values against the declaration that gives them meaning. An actual participant or operation value requires an obtaining subject relation or A.6.1 application binding; otherwise keep it planned and return missing-governor[actual-use].
CC-A3.2-10 (Same subject versus equivalent descriptions). Two descriptions concern the same U.Method only when their EntityOfConcern references resolve to the same A.3.1 method identity. A scheme difference may require an F.9 Bridge to interpret a comparison, but the Bridge does not establish Method identity. Shared subject also does not make the epistemes equivalent: state which claims are preserved, absent, incompatible, or inaccurate for the proposed use. Do not use executable agreement, renaming of bound variables, graph equivalence, or persistence across stages by itself to decide whether the Method is the same or different or the claims are equivalent.
CC-A3.2-11 (Edition and refinement). A later file or episteme edition does not by itself refine the Method. Use C.2.1 for the edition relation and state which description claims a comparison preserves or strengthens. Then use A.3.1 to decide whether one Method continues or two Methods are being compared, and apply its refinement test only to the world-side Method claim. A one-use comparison may stop as claim content under A.6.RCD; it creates no Method relation occurrence.
CC-A3.2-12 (Nondeterminism). When a description permits search, optimization, sampling, nondeterministic choice, or learned behavior, state the admissible result range and the criterion for evaluating actual Work or results. Name the pattern or declaration that defines that criterion.
CC-A3.2-13 (Cross-context and semantic-locality boundary). F.9 answers only whether a Bridge obtains between two SchemeSenseCell values. For proposed reuse, state a separate C.2.1 claim with the use, direction, correspondence rule, loss tolerance, and affirmative or negative polarity. Positive polarity alone is not reliance. An ordinary below-threshold use with no assurance claim needs RelianceDisposition=pass on its A.10 path. When an assurance claim is made or the B.3 threshold is met, enter B.3: positive assurance requires a current positive claim and sufficient record, while no claim or an insufficient record stops or narrows the assurance use. A negative or absent use claim, non-passing A.10 disposition, or non-positive B.3 outcome stops or narrows reuse even while the Bridge obtains. Changes of reference scheme, unit, role taxonomy, claim scope, or model use stay under their own patterns.
CC-A3.2-14 (Declarative representation). Use C.2.P.DR when a declarative representation's form or layout is being treated as sufficient to prescribe work. Recover the direct object or relation and any representation use. Assert the proposed route, dispatch, call, or work-control sequence only when its exact predicate is defined and current facts satisfy it; otherwise retain the direct object or representation without that unsupported action claim.
CC-A3.2-15 (Causal-use boundary). A method description may describe intervention assignment, target-trial emulation, realized-counterfactual sampling, simulation, or causal-evidence collection. It does not by itself establish causal use. If causal effect, intervention success, counterfactual comparison, causal fairness, or policy effect is claimed, use C.28.
Common Anti-Patterns and How to Avoid Them
Consequences
Quick use cards
- Claims first. The claim-bearing episteme can be
U.MethodDescription; its exactU.Method, C.29 representation, publication occurrence, publication form, andU.PresentationCarrierremain distinct. - Executable is still not a run. Runs are Work individuals admitted under
U.Workonly when A.15.1 grounds their occurrences. - Representation is not enough. Read what the code, proof, solver file, procedure, diagram, or workflow actually asserts and name its subject. Only the claim-bearing episteme can pass A.3.2 membership; C.29 keeps the representation correspondence.
- Mechanism needs its declaration. Use
A.6.1when operation algebra, laws, admissibility, or applicability is current; keep transport, audit, realization, evaluation, and evidence-use relations under their direct patterns. - Math needs its own claim. Use
A.6.0andC.29when formal substrate or mathematical-lens use is current. - No ordered-action overread. Use
C.2.P.DRwhen declarative representations are overread as ordered action structures.
Rationale
Projects need reusable claims about ways of doing before any dated work occurs. Treating a file as the method description by appearance hides two decisions that later work needs: which episteme is being relied on, and which admitted method its claims concern. The positive claim threshold makes this distinction usable without demanding a complete procedure card.
The pattern is representation-agnostic because a method can be described through procedural text, code, diagrams, mathematical notation, protocols, or combinations of them. The episteme can be revised and evaluated while its C.29 representations, publication occurrences, publication forms, and presentation carriers change independently. This separation lets a project compare descriptions and judge fitness for a receiving use without turning notation, approval, publication, or enactment into kind membership.
SoTA-Echoing
Qualification and smallest reopen. Reopen only when a source or an FPF dependency materially changes the membership test, the boundary between representation and semantics, or a named receiving-use decision. Revise the affected row and its matching subsection, case, checklist item, or public cue. A new representation paper or tool release with no such effect does not reopen the whole pattern.
Relations
- Builds on:
C.2.1for the identity, grounding, and edition relations of the same claim-bearing episteme;A.3.1for the exactU.Method; andE.24.UKfor admission of the dependent U-kind. - Coordinates with:
A.3.1andB.1.5for actual Method parts, Method identity, and composite-Method organization;A.22for an independently selected structure among several Methods;A.1.1only when an independently selectedBoundedModelUseStructurechanges the proposed use;F.9only for cross-contextSchemeSenseCellcorrespondence;C.2.1for the separate claim that one obtaining Bridge suits one bounded use;A.10for ordinary evidence reliance on that claim andB.3only for the assurance or material-threshold branch;C.29for representation correspondence;E.24.PUBfor publication occurrence and form;A.15.2forU.WorkPlan;A.15.1forU.Work;A.2for local system-role kinds and System-classification judgments;A.2.1for assignment species and obtaining assignment occurrences; F.6 for Work–assignment attribution;A.2.2for capability thresholds; andC.28for causal-use claims. - Separates from:
A.6.0formal-substrate declarations;C.29mathematical-lens use;A.6.1 U.Mechanism;E.20mechanism-meaning introduction and revision. - Uses for precision restoration:
F.19for the connected reading of wording that leaves the claim, object, or relation unclear;E.10,E.10.ARCH,F.18, orC.2.P.DRfor a remaining word, kind, durable naming, or declarative-representation question.
A.3.2:End
U.Dynamics: State-Space and Transition-Law Episteme
Type: Definitional pattern Status: Stable Normativity: Normative
Problem frame
Use this pattern when a project needs one reusable claim about how the state of an exact EntityOfConcern can change: a state space, a transition law, an observation relation, and the conditions under which prediction, simulation, calibration, conformance, drift, or gating claims may be relied on.
Use it when the working question is:
- which EntityOfConcern has changing state, distinguishing an obtaining assignment occurrence from a separately identified A.2.5 assignment-state relation when that distinction is current;
- which characteristics and local meanings define the state space;
- which transition law states how those coordinates evolve;
- which observations or work-derived traces can be compared with the law;
- over which operating region, claim scope, qualification window, parameter regime, or scale band the claim applies; and
- whether a prediction can be used for comparison, gating, assurance, planning, or control.
A passive System can be the changing entity. When an agency, dated Work, or F.6 attribution claim is current, establish its basis independently.
Primary governed object. A.3.3 examines one already identified claim-bearing U.Episteme candidate and judges whether that same individual belongs to the dependent kind U.Dynamics. Positive membership requires its exact C.2.1 EntityOfConcern to be the thing whose state is modelled and its ClaimGraph, interpreted under its effective U.ReferenceScheme, to declare both a state space and a state-transition law for that subject. The same episteme retains its C.2.1 identity.
E.24.UK settlement. U.Dynamics remains a dependent durable U-kind under U.Episteme. It is the reusable state-space and transition-law episteme. Components such as stateSpace, transitionLaw, observationRelation, and calibrationOrParameterSource remain ClaimGraph content or references inside the dynamics episteme unless another governing pattern independently identifies one of them.
First useful move. In one ordinary sentence, name the exact changing subject, the state coordinates and their meanings, the rule that relates earlier and later state, where that rule applies, and the applicable stop conditions. If that is enough for the current comparison, stop. Add observation, calibration, evidence, temporal, mathematical-lens, assurance, or gate machinery only when the proposed receiving use needs it. Before making a prediction, conformance, or gate-use claim, name the observation relation and exact applicability window; if either is unavailable, stop that stronger use.
What goes wrong if missed. Procedure text becomes "the dynamics", telemetry becomes a law, one observed run becomes a prediction, a dashboard becomes a state space, a description or selected graph is mistaken for the dynamics episteme, or a simulation becomes permission to act.
What this buys in practice. Practitioners can compare predictions with traces, decide whether stale predictions may still be used, separate Methods and MethodDescriptions from laws of change, and decide where characteristic, scope, temporal, mathematical-lens, evidence, assurance, or gate patterns must take over.
Not this pattern when. If the source only states a semantic way of doing, use A.3.1. If one episteme substantively describes that admitted Method, use A.3.2. If the question is an independently selected organization of exact constituents and obtaining relations, use A.22. If the source states one actual bounded change established by the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification, use A.3.4. A possible, predicted, simulated, or probable transition remains claim content. If it states planned work or dated work, use A.15.2 or A.15.1. If it states a mechanism algebra, use A.6.1 and E.20. If it states only freshness, rhythm, inertia, delay, window, or currentness as a positive temporal aspect, use C.27.TA; if it states adequacy or supported use of an authored temporal claim, use C.27. If it states only evidence or assurance, use A.10 or B.3.
Problem
Without a first-class U.Dynamics, state-change claims collapse into nearby but different claims:
- Recipe becomes law. Teams put procedure text, a control diagram, a workflow diagram, or a method description where a state-transition law should be.
- Trace becomes law. Dated work logs, telemetry, and incident sequences are treated as if past events defined what must happen.
- Dashboard becomes state space. Metric lists appear without characteristics, units, scales, topology, geometry, invariants, or operating region.
- Prediction becomes authority. A model output is used for a gate, release, safety, or work decision without a use-specific account of applicability, horizon, error or uncertainty, currentness, observation, and assurance.
- Domain vocabulary blocks transfer. Physics, control, finance, reliability, operations, knowledge dynamics, and architecture all talk about change differently; FPF needs one kernel pattern that preserves their differences without inventing separate ontologies.
Forces
Solution
Definition
U.Dynamics is a same-individual dependent kind of U.Episteme. Membership holds when one already identified episteme has the changing subject as its exact C.2.1 EntityOfConcern and its ClaimGraph, interpreted under the effective U.ReferenceScheme, substantively declares both a state space and a state-transition law for that subject. The law may include exogenous inputs, constraints, disturbances, and an observation relation.
The C.2.1 ClaimGraph, exact EntityOfConcern, and effective U.ReferenceScheme remain the episteme's identity discriminators. A.3.3 adds no context field or second dynamics identity. A U.ClaimScope, operating region, applicability window, qualification interval, parameter regime, or scale band enters only through the exact claim that uses it and its subject pattern; changing one can change claim content without becoming an ambient container.
U.Dynamics can be deterministic or stochastic, continuous, discrete, or hybrid. It can make state-change claims about physical systems, software services, organizations, epistemes, claim portfolios, resource states, architecture characteristics, or another exact EntityOfConcern. If several subjects are jointly modelled, the exact C.2.1 EntityOfConcern must itself be an independently identified collection, system, or other admitted subject.
A semantic way of doing belongs to U.Method; an episteme describing one admitted Method belongs to U.MethodDescription; a dated occurrence belongs to U.Work; a planned occurrence belongs to U.WorkPlan; an actual bounded change belongs to U.Transformation; a mechanism law belongs to U.Mechanism; a selected organization belongs to A.22 U.Structure; and evidence, publication, result, reliance, assurance, gate, and authorization claims remain with their subject patterns.
If empirical grounding is claimed, state the exact C.2.1 EpistemeEmpiricalGroundingRelation. A calibration source, observation record, dated calibration Work, evaluation result, A.10 evidence-provenance path, or B.3 assurance claim remains separately identified and does not become an intrinsic grounding field of U.Dynamics.
Dynamics statement
Use this compact aid only when the ordinary sentence is insufficient for the current decision:
These rows are an optional aid for the minimum claim content and separately governed references needed by the current use. C.2.1 identifies the candidate episteme.
Working distinction table
State-space and transition-law fields
The following optional view groups the claim content of one C.2.1 episteme:
stateSpace is claim content of this U.Dynamics episteme. It uses characteristics with local meanings, units, scales, and comparability rules, and may cite [A.19](/generated/patterns/A.19) or [C.16](/generated/patterns/C.16) when characteristic or measurement construction is being claimed. It is not the same object as a receiving-evaluation CharacteristicSpace used to score an object for improvement. The dynamics state space may claim topology, geometry, aggregation policy, or coordinate transformations when trajectories or comparisons need them; an independently selected organization among exact constituents and obtaining relations remains A.22 U.Structure.
transitionLaw is paradigm-agnostic. It can be an equation, relation, kernel, finite-state transition, queueing model, Bayesian update, Petri-net firing relation, simulation rule, learned predictor, or hybrid model, provided the state space, semantic basis, and applicability boundary are declared.
transitionLaw, observationRelation, constraintsOrInvariants, and calibrationOrParameterSourceIfReliedOn are ClaimGraph content or exact references inside the U.Dynamics episteme unless another governing pattern independently identifies one as an episteme, source, relation, or structure.
observationRelation separates state from what can be measured, sampled, logged, estimated, or inferred. Identity observation is allowed only when the claim says the state coordinate is directly observed. Any exact measurement result, observation record, dated Work, provenance path, empirical-grounding relation, or assurance claim remains under its subject pattern.
Evidence, prediction, conformance, drift, and calibration
Let D be a U.Dynamics about exact EntityOfConcern E. Let W denote only exact dated U.Work occurrences when Work is current, and let O denote separately identified observation, telemetry, source, or measurement records.
These expressions name claim-side calculations or questions. When an observation, conformance, drift, measurement, evaluation, gate, or assurance result is claimed, the applicable evaluation or measurement declaration states the criterion and result semantics, and the actual application and result are identified separately; C.2.1 identifies any persisted result episteme, and use A.10 or B.3 only for the separately claimed reliance or assurance use.
Calibration Work and its domain result may support a later dynamics episteme whose changed ClaimGraph receives its own C.2.1 identity; an EpistemeEditionRelation obtains only when C.2.1's exact continuation predicate is separately established.
Prediction use in comparison or gating
A prediction used for comparison, release, gate, assurance, or work preparation states the exact dynamics edition, predicted Coordinates, operating region, horizon, time step, parameter regime, source-currentness condition, and relevant error or uncertainty. The direct consumer's policy then states which observation, validation, sensitivity, robustness, stability, or normalization-composition conditions that use requires.
A fresh observation may replace or check the prediction when the policy calls for it. A non-expansive bound, another sensitivity bound, or commutation with a normalization step is required only when the named use relies on that property. If the required conditions are absent or fail, the prediction cannot carry that use; state currentness through C.27.TA, use C.27 for authored temporal-claim adequacy, and use A.20, A.21, G.4, or the direct authority pattern for the actual decision.
A.3.4, C.27.TA, C.27, and C.29 boundaries
A.3.4 governs one actual bounded change identified by the exact changed referent, maximal continuous temporal extent or exact formal ordering boundary, boundary conditions, actual characteristic-state and obtaining direct-relation facts, and continuity or reidentification. A dynamics episteme can model a possible change, predict a probable transition, simulate a trajectory, constrain a candidate, or assert that change is expected; none becomes an actual U.Transformation until that subject-side occurrence basis obtains.
C.27.TA names positive temporal aspects: freshness, delay, rhythm, currentness, inertia, cadence, trajectory, recovery timing, stabilization timing, and validity window. C.27 judges adequacy or supported use of authored temporal claims that use those aspects. A Dyn2TemporalClaimAdequacyCard or temporal classification is not itself a law of change.
Stay in A.3.3 when transitionLaw or observationRelation uses accepted local dynamics, Markov kernels, ODEs, simulations, queueing theory, control theory, or domain theory under one explicit semantic basis and applicability boundary.
Use C.29 when the law depends on contested transfer, cross-domain analogy, learned or speculative mathematical lens, scale change, abstraction, quotienting, or reusable explanation across contexts. The C.29 output states preserved structure, lost structure, operating-region or scale window, rival lens when current, lens-use boundary value, and stop condition. A.3.3 remains the governing pattern for state space, transition law, observation, constraints, and calibration semantics.
Method, mechanism, and governing-pattern constellation boundary
A source label such as process, algorithm, dynamics, workflow, model, controller, or simulator may point to linked slot positions under E.10.ARCH. Recover the relevant slots first, then split the linked values:
U.Methodfor the semantic way of doing;U.MethodDescriptionfor the claim-bearing episteme that substantively describes one admitted Method, while C.29 and publication patterns keep its representation, form, carrier, and availability separate;U.Dynamicsfor the state-space and transition-law episteme;U.Mechanismfor an admissible operation or law-governed application over a subject kind;U.WorkPlanandU.Workfor planned and dated occurrences;TransformationFlowStructurefor selected flow structure when the source is describing a flow-shaped arrangement of transformations;- evidence, gate, authority, and assurance values when those claims are current.
For a composite-Method claim, B.1.5 must independently recover exact part Methods, obtaining methodPartOf relations, whole-forming claims and constraints, whole semantics, boundary and reidentification.
Do not infer dual typing from a shared source or label. One episteme can meet A.3.2 only by describing one admitted Method, and one episteme can meet A.3.3 only by carrying the state-space and transition-law claims above; neither membership establishes the other. No current FPF governor admits one individual as both the A.3.1 semantic way of doing and the A.3.3 state-change episteme; reopen that question only if a later direct admission rule states both memberships without letting either classification supply the other's facts.
Archetypal Grounding
Reactor control
A reactor team models temperature and concentration under a nonlinear ODE with disturbances. One claim-bearing reactor-model episteme is U.Dynamics. Its ClaimGraph declares the nonlinear ODE as transitionLaw, the exact temperature-and-concentration state space as stateSpace, the observation relation, disturbances, and the operating region and applicability window, or cites exact references that supply those declarations. The control policy is U.Method; a claim-bearing episteme represented by the controller code may be U.MethodDescription only when it passes A.3.2 for that Method, while the code representation, dated controller runs, and mechanism claims stay with their governing patterns. Thermocouple readings become evidence only through A.10 or the direct evidence pattern.
Side-by-side split:
Reliability and operations
A service platform models backlog, arrival rate, and incident recovery with a queueing or birth-death model. The model can predict whether an SLO is feasible, but the service promise remains U.PromiseContent, and release or gate use needs the gate pattern.
Evolutionary architecture
An architecture group tracks latency, coupling, operational cost, and change lead time across releases. An episteme about that architecture can be U.Dynamics when its ClaimGraph declares a state space over those characteristics and a discrete-time transition map as the transition law. Architecture moves, selected structures, and views stay with architecture patterns; work occurrences and measurements stay with work and evidence patterns.
Knowledge dynamics
A claim portfolio uses belief, evidence weight, source currentness, and contestability as state coordinates. An episteme declaring a Bayesian or likelihood update as the transition law over that claim-state space is U.Dynamics. The studies, reviews, and source records are evidence values.
Natural physical evolution
A U.Dynamics episteme can model the Moon's motion around Earth using an orbital state space and transition law.
Bias-Annotation
Typical biases:
- recipe-as-law bias: procedure text or controller code is treated as the law of change;
- trace-as-law bias: logs or one observed run are treated as reusable dynamics;
- dashboard-as-state-space bias: visible metrics substitute for declared characteristics, units, scales, and comparability relations;
- prediction-as-authority bias: model output is treated as permission, gate passage, or safety proof;
- mathematical-prestige bias: equations, learned predictors, and simulations are accepted without applicability window, observation relation, and transfer boundary;
- semio-bias: the pattern drifts into arguments about descriptions of dynamics while losing the modelled subject, state space, and transition law.
Conformance Checklist
CC-A3.3-1 (Membership and identity). A.3.3 judges one already identified U.Episteme. That same individual is U.Dynamics only when its exact C.2.1 EntityOfConcern is the changing subject and its ClaimGraph, under its effective U.ReferenceScheme, declares both a state space and a transition law. A.3.3 adds no second identity.
CC-A3.3-2 (Semantic locality without a container). Local meanings and characteristic names are interpreted under the effective U.ReferenceScheme; units, operating region, time base, approximation regime, claim scope when needed, qualification window and source-currentness condition remain explicit claim content or separately governed values. Its C.2.1 identity is determined by ClaimGraph, EntityOfConcern, and effective U.ReferenceScheme.
CC-A3.3-3 (EntityOfConcern). The changing EntityOfConcern is named. It may, for example, be a physical holon, service, organization, episteme, claim portfolio, architecture, resource bundle, or other EntityOfConcern with modeled state.
CC-A3.3-4 (State space). The state space enumerates characteristics with units, scales, comparability rules, and any needed topology, geometry, aggregation policy, or invariantization rule.
CC-A3.3-5 (Transition law). The transition law states a relation, map, kernel, equation, rule, learned predictor, or simulation rule suitable for the declared time base and stochasticity.
CC-A3.3-6 (Observation relation). Evidence use states how exact Work-side facts when present and separately identified work records, telemetry, measurements, observation records, or source records become observed coordinates. Direct observation is declared rather than assumed.
CC-A3.3-7 (Constraints and applicability). Constraints, invariants, operating region, approximation regime, parameter range, horizon, and scale window are stated before prediction or gate use.
CC-A3.3-8 (No imperative overread). U.Dynamics does not prescribe agent steps, responsibilities, or ordered work occurrences. A reusable planning or control way that uses dynamics is U.Method; only a separately identified claim-bearing episteme that passes A.3.2 is its U.MethodDescription.
CC-A3.3-9 (No actuals on dynamics). Resource actuals, timestamps, Work occurrences, work logs, and telemetry remain claims about their exact Work, record, evidence use, measurement, or source use under the applicable subject patterns. Calibration Work and its domain result may support a later dynamics episteme with its own C.2.1 identity; a continuing edition relation obtains only when C.2.1's separate predicate does.
CC-A3.3-10 (Prediction use). Predicted Coordinates used for comparison or gating state the exact model edition, domain, horizon, currentness, error or uncertainty, and every observation, validation, sensitivity, stability, or normalization-composition condition required by that consumer's policy. No universal non-expansiveness or commutation test substitutes for the direct decision rule.
CC-A3.3-11 (Temporal boundary). Positive temporal aspects stay with C.27.TA; adequacy or supported use of authored temporal claims stays with C.27; reusable transition laws stay with A.3.3.
CC-A3.3-12 (C.29 boundary). Contested, cross-domain, learned, speculative, scale-changing, or transferable mathematical-lens use is assigned to C.29; A.3.3 keeps the dynamics semantics.
CC-A3.3-13 (Source-label repair). Process, workflow, algorithm, model, controller, simulator, and dynamics wording must not be repaired to U.Dynamics until the current slot is recovered: method, method description, work plan, dated work, selected transformation-flow structure, transition-law claim graph, evidence relation, or another governed value.
CC-A3.3-14 (Actual-transformation boundary). Possible, predicted, simulated, or probable change remains claim content. An actual U.Transformation requires the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification.
Common Anti-Patterns and How to Avoid Them
Consequences
Quick use cards
- Dynamics predicts. It is a state-space and transition-law episteme.
- Observations support comparison. Compare predictions with separately identified measurements, logs, and actuals through the declared observation relation.
- Method guides. A method may use dynamics.
- State space first. Declare state-space characteristics to make the dynamics claim reviewable.
- Observation matters. A law without observation relation cannot be compared with traces.
- Prediction is not authority. Gate and release claims need their governing patterns.
Rationale
FPF needs U.Dynamics for practical questions about how a state changes when the world evolves, a model is simulated, evidence arrives, a resource pool fluctuates, or an architecture changes. Those questions need a law of change.
The pattern is deliberately broad because state-change reasoning appears in physics, control, software operations, reliability, strategy, architecture, and knowledge work. The shared kernel is the distinction between state-space, transition law, observation relation, applicability window, and related governed claim families such as method, work, evidence, assurance, and gate use. An actual transformation remains a different world-side occurrence: its exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification are governed by A.3.4.
SoTA-Echoing
Lower current use of this pattern when current work on process theory, predictive control, hybrid systems, stochastic dynamics, digital twins, causal dynamics, learned world models, graph representations, equivalence representations, or FPF's own characteristic-space, temporal, mathematical-lens, transformation, work, evidence, and gate patterns changes the governing distinction.
Relations
- Builds on:
C.2.1for the same episteme's identity and any exact empirical-grounding or edition relation;A.19andC.16for characteristics, units and measurement meanings when current;A.2.6for an exactU.ClaimScope; and direct source or publication machinery only when those claims are current. - Coordinates with:
A.3.1 U.Method;A.3.2 U.MethodDescription;B.1.5for composite Method construction;A.22for an independently selected Structure;A.1.1only when an independently selected bounded-model-use structure or obtaining model-use relation changes the receiving use;A.3.4 U.Transformation;A.15.2 U.WorkPlan;A.15.1 U.Work;A.6.1 U.Mechanism;E.20;C.27.TA;C.27;C.29;A.10;B.3;A.20;A.21; and architecture patterns when dynamics describes architecture-characteristic change. - Separates from: services and promise content; PBS and SBS structural breakdowns; causal-use claims; gate authority; assurance arguments; publication-use claims.
- Uses for precision restoration:
F.19for a connected wording repair. If source labels still hide whether the claim is law, method, method description, mechanism, work, evidence, authority, or dynamics, use the applicableE.10,E.10.ARCH, orC.2.P.DRpattern; useF.18for a durable reusable name.
A.3.3:End
U.Transformation: Bounded Change Under Conditions
Type: Definitional pattern Status: Stable Normativity: Normative except where a section is explicitly informative
Use This When
Use this pattern when a project must decide whether an actual change occurred and identify that one change. Ask: what continuing subject changed, where the change begins and ends, which facts differ before, during, and after it, and what rule makes this one occurrence rather than unrelated observations.
Use it when the working question is:
- what continuing subject changed: an entity, selected structure, presentation carrier, constituent organization, characteristic-bearing referent, or formal object;
- when a specification's claim content changes, which two C.2.1 epistemes exist, whether their
EpistemeEditionRelationobtains, whether a continuing carrier or constituent organization changed, and whether revisionU.Workfirst constituted the later episteme underA.15.PROD; - which actual characteristic-state and direct-relation facts differ across the boundary;
- what temporal extent, formal ordering, or continuity rule identifies this occurrence;
- which additional claim, if any, is actually being made about method, planned work, performed work, mechanism, flow structure, representation, evidence, publication, or a later use, and which pattern answers that claim.
Primary EntityOfConcern. One actual U.Transformation: the bounded occurrence identified through the five checks in 4.1. Identify the objects needed for separate planning, enactment, representation, evidence, or later-use claims under their own patterns.
Primary working reader. A practitioner or modeler who must identify one actual change for a current engineering, scientific, formal, documentary, or architectural use before relating it to method, work, flow, evidence, or production. The informative parked-composition branch additionally addresses an FPF author or reviewer only when that use asks whether several changes compose one change or whether that whole could satisfy A.1.
First useful move. Name the continuing subject and where the change begins and ends. Write the subject facts that hold before, during, and after that boundary, then state the boundary conditions and the continuity or reidentification rule that make this one occurrence. If the material supplies only a desired state, method, plan, model, trace, or assertion, stop: it has not yet grounded an actual U.Transformation.
Open-world guard. Not finding a method, work occurrence, evidence item, publication, delivery, acceptance, or later-use relation does not prove that it is absent. It prevents only the particular claim that needs it. Finding one of those objects likewise does not prove that an actual transformation occurred.
What goes wrong if missed. Method names become change proof, work traces become laws, process diagrams become execution, dynamics models become permission, temporal trends become intervention claims, mathematical constructions become project-world work, and publications or result records are treated as the change itself.
What this buys. The practitioner gets one usable actual-change result without first deciding whether finer changes are its parts. If no composition or holon claim is needed, continue with the ordinary neighboring-object guidance at 4.3. If such a claim is needed, keep the identified changes and return the parked composition blocker; this pattern does not guess the future architecture. Apply A.1 only after an accepted architecture supplies the proposed whole and its construction facts. Method, work, flow, representation, evidence, publication, production, and later-use claims stay separate.
Not this pattern when.
- If the issue is only a semantic way of doing, use
A.3.1. - If the issue is a description of that way, use
A.3.2. - If the issue is a state-space and transition-law episteme, use
A.3.3. - If the issue is a law-governed operation algebra with admissibility predicates, use
A.6.1andE.20. - If the issue is planned or dated work, use
A.15.2orA.15.1. - If the issue is the selected compound transformation-flow structure, its locus, path, path slice, crossing, or flow valuation, use
E.18. - If the issue is a graph, algebra, category, tuple, morphism, quotient, fold, refinement, factorization, or wiring expression used to describe that structure mathematically, use
E.18.2andC.29. - If the issue is a positive temporal aspect of an object or claim, use
C.27.TA. - If the issue is adequacy or admissible use of a temporal claim, use
C.27. - If the issue is holon recognition without a current actual-change identity or constructive transformation-parthood claim, use
A.1.
Problem Frame
FPF often needs to talk about change in physical systems, engineered artifacts, organizations, presentation carriers, constituent organizations, architectures, programs, regulatory situations, and research objects. A revised specification needs an early split: changed claim content identifies two C.2.1 epistemes, not one continuing changed episteme. Test the EpistemeEditionRelation between them. Open A.3.4 only for a continuing carrier, constituent organization, or other subject with its own identity rule; if revision U.Work first creates the later episteme, use A.15.PROD for that first existence. When the source says process, editing, or construction, recover the changed object from the case.
Relevant neighboring patterns:
-
A.3for transformer constitution: acting system bearingTransformerSystemRole, method description, method, and actual work; -
A.3.1forU.Method; -
A.3.2forU.MethodDescription; -
A.3.3forU.Dynamics; -
A.6.0andA.6.5for signatures and slot discipline; -
A.6.1andE.20for mechanisms; -
A.15.2andA.15.1for work plans and dated work; -
E.18for transformation-flow structures; -
E.18.2for mathematical descriptions of transformation-flow structures; -
E.18.1for problem-to-work carry-through; -
C.27.TAfor positive temporal aspects; -
C.27for temporal-claim adequacy; -
C.29for mathematical-lens use; -
evidence, gate, assurance, source, result, decision, and publication patterns for their own claims.
What is missing is a positive first route: identify the actual change, then open only the separate method, work, flow, representation, evidence, publication, or later-use claim the practitioner is making.
Problem
Without U.Transformation, projects repeatedly make category errors:
- Method as transformation. A way of doing is treated as if the change already happened or must happen.
- Mechanism as transformation. A law-governed operation algebra is mistaken for the actual or intended change, although it only states how a transformation may proceed.
- Work as transformation law. A dated work occurrence or trace is treated as if it defined the reusable transformation.
- Dynamics as permission. A state-space or transition-law episteme is used as if it authorized action, gate passage, or result acceptance.
- Temporal claim as transformation. A claim about rate, rhythm, recovery, delay, effort, inertia, freshness, or validity window is used as if it specified the whole change and its conditions.
- Formal construction as project-world work. A morphism, proof construction, or formal transformation inside a mathematical substrate is treated as a physical or organizational change without a realization or work relation.
- Publication as transformation. A report, dashboard, diagram, source span, or published specification is treated as if it were the changed object or the change event.
These errors are expensive because the wrong neighboring pattern then receives the claim. The project may seek evidence for a method when it needs a work trace, compare dynamics models when it needs a transformation boundary, or invoke temporal-claim adequacy when the real problem is the missing transformation relation.
Forces
Solution
Identify the actual bounded change
U.Transformation is the FPF ontic for one actual bounded change. Use the five checks below and keep only the facts needed to distinguish this occurrence:
- Changed subject. Name the continuing entity, selected structure, presentation carrier, constituent organization, characteristic-bearing referent, or formal object and apply its identity rule. If an episteme's claim content differs across the boundary, identify two C.2.1 epistemes and test their
EpistemeEditionRelation; do not call either one the continuing changed subject. Use A.3.4 only for another continuing subject, or useA.15.PRODwhen revisionU.Workfirst constitutes the later episteme. - Extent and boundary. State the temporal extent of the change, including only gaps admitted by its continuity rule, or state the ordering boundary in a declared formal substrate.
- Boundary conditions. State the conditions that delimit this change from adjacent persistence, work, or change occurrences.
- Actual change facts. Write the characteristic-state facts and relations that actually hold before, during, and after the boundary.
- Continuity or reidentification. If the subject varies internally, the change pauses, or several intervals are proposed, state the rule that says the subject and this occurrence continue across that variation.
Here, one means one occurrence at the resolution, subject, extent, and boundary needed for this use. It does not mean elementary, atomic, indivisible, or partless. Later refinement may identify finer changes, and future accepted work may establish constructive parts; sampling or subdividing time establishes neither result.
Treat a possible, desired, planned, predicted, modeled, asserted, or published change as claim content until the occurrence facts above hold. A formal transformation can be actual within an admitted formal substrate, but its formula or proof term remains a C.29 representation of that independently identified formal change.
Mint vs reuse. A.3.4 reuses the already admitted root U-kind and public name U.Transformation from E.24.UK. It introduces no additional U-kind, relation kind, public composition name, RelationSignature, or local well-formedness identifier. The component-change and whole-configuration-change wording below names only question roles for independently identified occurrences; it asserts no composition.
First-use transformation basis
Use these questions as a recognition aid, not as fields of a transformation record:
Worked first use. For a reactor cooling loop, identify the cooling loop as the continuing changed subject, the thermal-power step and stabilization interval as the boundary, the measured temperature-profile facts before and after it, and the operating conditions that delimit the episode. These facts ground CoolingLoopTransformation-7 : U.Transformation. The revised operating method, control-law episteme, measurements, safety evaluation, and release decision remain separate objects. This short fixture identifies no dated adjustment U.Work occurrence.
Choose only the next claim that the use actually needs:
- Work. First identify a dated
U.Workoccurrence underA.15.1. If both work and transformation participants are identified, apply the three outcomes in4.2.4. The short reactor fixture has not identified that work occurrence, so it makes no work-to-change claim and does not yet report a missing governor. - Safety evaluation. Use case-local
evaluatesTransformation@PlantSafety-v4(SafetyEvaluation-7, CoolingLoopTransformation-7, CoolingLoopSafetyCriterion-v4)only when all three participants are identified and the predicate's obtaining conditions hold. Identify a decision separately when one is claimed. - Publication. Use a C.2.1 assertion whose EntityOfConcern is
CoolingLoopTransformation-7and identify its E.24.PUB publication occurrence.
If none of these uses is being claimed, keep the identified transformation and add no neighboring relation.
Choose the next branch now. If the current result is one identified transformation and the use needs no positive claim that several changes compose one change or that the change is a holon, continue directly at 4.3. Sections 4.2.1-4.2.3 are not prerequisites for that ordinary route. Open them only when the use needs one of those two positive claims; the current advanced branch returns the parked blocker and selects no future architecture.
Keep proposed component and whole-configuration changes separate
Use component change and whole-configuration change only as ordinary question roles for actual U.Transformation occurrences already identified through A.3.4:4.1. They are not additional U-kinds, record fields, or evidence that one change is part of another.
Identify every proposed component change and the proposed whole-configuration change independently. A sampled point, arbitrary subinterval, method step, work part, flow node, graph edge, trace segment, formula term, before-and-after image, shared changed subject, or temporal inclusion establishes neither composition nor absence of finer parts.
The neighboring general patterns do not silently answer the composition question. A.22 can identify a selected structure whose relation organization changes; C.27.TA can identify temporal aspects; A.14 and C.13 define structural mereology and a Γ_m construction trace. None of those results by itself says that several actual changes compose one actual change. A materialized Γ_m.sum trace is a C.2.1 episteme about identified entity-part relations, assembly, and direct identity or reidentification conditions.
One independently identified change of a selected configuration can therefore remain a valid configuration transformation. If the use needs no positive composition or transformation-holon claim, continue with that transformation and the ordinary neighboring-object guidance in 4.3-4.8. If it does need such a claim, retain the identified changes and stop with missing transformation-composition governor; a proposed local compound claim also stops with missing derivation substrate. Neither stop says that composition is false or that any change is partless.
Keep the composition architecture open (informative)
Transformation composition remains an open research question, not a relation architecture declared by this Stable pattern. Future work must decide what identifies and reidentifies a proposed whole change and its constituents; whether and when method parts, work parts, changed-substrate changes, temporal segments, and causal contributions correspond; which contribution, compatibility, boundary, interface, and whole-level-characteristic laws matter; and what substrate, if any, makes a derived claim valid.
That work must also compare rather than preselect the representation of the answer: one generic relation, several subject-specific relations, bounded local compound claims, or continued non-admission. A.3.4 chooses none of them. It mints no composition relation kind, designator, signature, occurrence-identity law, or local well-formedness identifier.
Apply A.1 only after composition is independently established
Membership in U.Transformation supplies no holonhood. A.1 remains the authority for the constructive criterion. This edition of A.3.4 supplies neither a positive transformation-composition result nor the candidate, constituents, constructive part relations, and assembly needed by A.1. Therefore an independently identified configuration transformation remains a valid U.Transformation, while positive U.Holon classification on the basis of transformation composition stops. The stop is not evidence that no such whole or parts exist.
If future accepted work supplies one whole transformation and its construction facts, apply A.1 without changing its test or assuming which relation form that work chose. A.1 still requires the candidate, constituents, constructive part relations and assembly, reidentification rule, composition-grounded whole-level characteristic, and possible participation in a larger constructive assembly. Recover those facts from the patterns that define them at that time.
A.1 also keeps world-side satisfaction or failure separate from an A.6.1 true | false | unknown recognition evaluation, an optional C.2.1 assertion, evidence and assurance, G.11 currentness, receiving-work disposition, and B.2 whole reidentification. Follow A.1 for that separation rather than repeating its full table here.
Stress the current boundary before classifying:
- a pressure increase may be identified as one
U.Transformationat the resolution needed by the use; sampling or subdivision establishes neither constructive parts nor absence of such parts; - a switch transition may be treated as effectively instantaneous at the selected temporal resolution and identified as one
U.Transformation; that resolution claim establishes neither indivisibility nor parts; - subintervals of continuous biological growth may each be independently identified as transformations, but this pattern does not decide whether they compose one change;
- a formal transformation can be actual under a selected formal substrate, while its formula, morphism, or proof term remains a C.29 representation and supplies no holonhood;
- mounting, wiring, connection, and whole-configuration changes may each be identified independently; the current edition does not make them constituents of one transformation, so positive A.1 classification on that basis does not begin.
Keep work and production claims outside transformation identity
Do not infer a work-to-change connection from shared timing, a common affected subject, or the word successful. Once the U.Work and U.Transformation participants are both identified, choose exactly one outcome: (1) apply an existing subject predicate whose declared participants and obtaining condition match the case; (2) state an A.6.RCD disposition-2 local compound claim over named base facts and an admitted substrate; or (3) return missing-governor for that exact pair.
Production is a separate question. For a production claim, test production-work participation, first existence of an entity, and production completion separately. Apply A.15.PROD to the exact work, work part, subject-identity facts, completion criterion, and direct effect facts. A.3.4 contributes only the independently identified transformations.
Filled positive branch — result: C.2.1 assertion BuildWorkPopulatedStore-12 states the local connection between ReleaseBinary12_BuildWork_2026-07-21T0900_0912 : U.Work and ArtifactStorePopulationTransformation_12 : U.Transformation. The BuildOps predicate BuildWorkPopulatedStore@BuildOps-v12(work, transformation) holds only when the storeWrite application performed as part of that work changes the same ArtifactStorePartition_12 across the same boundary. BuildApplication_12 supplies the performed application and its builtBinary -> ReleaseBinary_12 binding; the partition's before/after artifact-presence facts ground the transformation. This is an A.6.RCD disposition-2 local compound claim, not a universal FPF work-to-change kind or occurrence.
Pump 14 — current result and earlier no-governor stage: A.3.4 identifies T-P14-PRESSURE-RISE : U.Transformation as the bounded change of continuing HydraulicLoop_P14; the loop's discharge-pressure characteristic is belowBand at the opening boundary and inBand at the closing boundary. The current case record contains relation-declaration episteme P14-REL-2026, owned by Pump14OperationsRelations, which declares AdjustmentWorkCausesPressureRise for exact participants W-P14-ADJUST-1010-1020 : U.Work and T-P14-PRESSURE-RISE; a separately stated case fact satisfies its actual-causation predicate. Therefore write: W-P14-ADJUST-1010-1020 caused T-P14-PRESSURE-RISE. In the explicitly earlier case record, P14-REL-2026 is absent; at that epistemic stage, keep the same Work and transformation, return missing-governor: work-to-change claim for <W-P14-ADJUST-1010-1020, T-P14-PRESSURE-RISE>, and route the missing declaration to Pump14OperationsRelations instead of asserting causation.
Keep six layers separate
For one identified transformation, keep these objects distinct:
A verbal predicate does not turn every obtaining relation occurrence into a transformation. Assignment, availability, installation, and temporal order can obtain without change. Conversely, one actual transformation may require several relation facts without being identical to any one of them.
Do not use a generic transformationRelation field. If an existing relation already states the needed fact, use it. Otherwise apply A.6.RCD: a local compound claim is available only when its exact base facts and admitted substrate are present; if either is missing, return missing-governor or missing-substrate. Introduce a reusable predicate-definition episteme only when repeated uses need the same rule. A new durable relation kind still needs its own obtaining and occurrence-identity law; a task, morphism, operation family, or verbal predicate cannot be inserted into one union-valued field.
Add neighboring objects only for the claim being made
For each neighboring claim, identify the object it needs and state that object's relation to the transformation, changed subject, work, or later use.
A declared post-state is part of a transformation description. An actual post-boundary state or changed entity is a fact about the subject. To call that entity or relation a result, name the later use, its participants, and the relation being asserted; acceptance, delivery, publication, and downstream effect remain separate. U.Transformation therefore has no generic ResultRef or OutputConditionOrPortRefs slot.
When the use needs an episteme about the transformation, identify it through C.2.1: exact claim content, the transformation or another subject as EntityOfConcern, and the effective reference scheme. Add scope, viewpoint, empirical grounding, edition, publication, or representation only when the use separately requires that relation.
Neighboring Distinction Table
Description And Publication Boundary
A method description, dynamics model, transformation diagram, transformation-flow structure description, dashboard, result record, source span, publication, or proof may describe a transformation or provide evidence for a use.
If the task is about the description, use C.2.1, A.3.2, A.3.3, E.17, E.18, or the applicable publication or source pattern. If the task is about the transformation, keep the description as a neighboring episteme or publication value.
Formal Transformation And Project-World Realization
A morphism, constructive proof, or formal state transition can correspond to an actual transformation of a formal object within the selected formal substrate. The formula, morphism, or proof term is still its C.29 representation.
For a physical, clinical, organizational, architectural, documentary, or epistemic change, a formal expression may specify, predict, constrain, or compare the change. First identify the changed subject, boundary, and before/during/after facts. If a later claim says that dated U.Work caused, realized, or participated in that transformation, apply the three outcomes in 4.2.4; return missing-governor when the named pair has neither an existing predicate nor a valid local compound basis.
Multi-reading source phrase
Use this example when one phrase seems to name method, mechanism, formal construction, work, evidence, and transformation at once:
"The workflow algorithm transforms the emergency-stop specification, and the proof shows the new plant boundary is safe."
Keep these objects separate:
- the workflow or algorithm may designate a
U.MethodorU.MethodDescription; - the proof is a claim-bearing episteme using a declared formal substrate;
- when claim content changes, the earlier specification episteme and the later specification episteme are distinct C.2.1 identities;
EpistemeEditionRelationrelates them only when its historical-continuation predicate obtains; - dated editing or review is a
U.Workoccurrence admitted underA.15.1; - edition succession alone establishes no transformation of one continuing episteme. Open A.3.4 only for a separately continuing subject—such as a selected
U.PresentationCarrierunderE.24.PUBor a claim-bearing constituent organization—after naming its boundary, before/during/after facts, and continuity rule; otherwise stop without a transformation claim; - if revision
U.Workfirst constitutes the later episteme, open a separateA.15.PRODfirst-existence question: name the exactproductIdentitySpecificationepisteme, the named applicability predicate or filled local claim that applies it to the candidate basis, subject context, and boundary, theidentityClosingWork, and the work-to-change and change-to-identity predicates or local compound claims. If that specification continues an earlier specification, state the separate C.2.1EpistemeEditionRelationonly when its historical-continuation predicate obtains; without that relation, treat it as a non-continuing replacement and evaluate its applicability independently. Returnmissing-governorfor either named work/change pair whose basis is absent; - a plant change, safety evaluation, assurance claim, gate decision, and publication are separate objects and relations.
If only the proposed wording and proof are available, do not assert a project-world plant transformation. Different claim content gives two epistemes; test their EpistemeEditionRelation. Assert an A.3.4 specification-side transformation only for a separately continuing carrier or constituent organization with its boundary, before/during/after facts, and continuity rule. If the question instead concerns the later episteme's first existence, use A.15.PROD and stop when either direct connection lacks a basis. The proof can support an assertion only through its evidence or derivation use.
Archetypal Grounding
Physical system change
A nuclear-plant team says that a revised operating method stabilized a temperature profile after a thermal-power change. Result: CoolingLoopTransformation-7 is identified from the continuing cooling loop, stabilization interval, operating conditions, and before/during/after temperature facts. The method is U.Method; the control-law model is an episteme; measurements and the safety decision use their own patterns. This short case names no dated adjustment U.Work occurrence or work-to-change predicate, so it makes no such connection. If that claim is later needed, name both participants and apply 4.2.4.
Biological editing
A CRISPR project says that an editing protocol changed a DNA target while keeping off-target risk under a bound. Result: identify the biological transformation from the continuing DNA referent, edit interval, boundary conditions, and sequence facts. Keep the protocol description, biochemical mechanism, lab U.Work, sequence measurement, risk evaluation, acceptance verdict, and publication separate. This sketch names neither a lab-work/transformation pair nor a matching predicate, so it asserts no connection between them; apply 4.2.4 only if that later claim is needed. For phrases such as edited sequence, lab output, or accepted result, name the exact participant and relation needed by the receiving claim.
Spontaneous non-agentive case — result: SeedlingFirstLeafUnfolding-B17 : U.Transformation is an actual first-leaf unfolding without an actor, method, or work claim. The continuing subject is the already existing Seedling-B17. Its boundary runs from unfolding onset t0 to the first stable full-expansion state t1; leaf-configuration and exposed-surface facts before, during, and after distinguish the episode under the stated growth conditions. The same-seedling rule permits ordinary cellular turnover and growth but excludes division, grafting, death, or replacement.
At this resolution the case asserts neither finer transformation parts nor partlessness. If a later use asks for an actor, apply A.3; if it asks for work, apply A.15.1 and then 4.2.4. Otherwise keep the case non-agentive and do not open A.15.PROD.
Specification repair
A safety specification is revised so that an emergency-stop boundary no longer permits two incompatible readings. First result: EmergencyStopSpec-E1 and EmergencyStopSpec-E2 are different C.2.1 epistemes because their claim content differs. EpistemeEditionRelation(EmergencyStopSpec-E1, EmergencyStopSpec-E2) may relate them when its historical-continuation predicate holds; neither is one continuing changed episteme.
A.3.4 may instead identify a change of EmergencyStopSpec-Carrier-17 : U.PresentationCarrier if E.24.PUB identifies the same carrier across the editing interval and the before/during/after borne-expression facts plus carrier-continuity rule are present. If the carrier identity, facts, or rule are missing, no carrier transformation follows. If editing U.Work first constituted EmergencyStopSpec-E2, name that work and the transformation by which the later identity closed. Apply 4.2.4 to the work-to-change pair, then apply A.15.PROD to the change-to-identity pair. Each connection needs a matching predicate or valid local compound basis; return missing-governor for either pair that lacks one. The repair method, ambiguity-removal assertion, review result, and publication of the later episteme remain separate.
Formal construction
A proof constructs a formal object and shows that a morphism preserves an invariant. Result: within the declared formal substrate, the formal object and ordered boundary can ground one formal transformation. The proof term and morphism expression are representations; publishing the proof is another relation. If a later claim says that dated work realized the transformation, apply 4.2.4 and return missing-governor when the named pair has neither an existing predicate nor a valid local compound basis.
Architecture change
An architecture team performs dated architecture U.Work. During the same interval, a selected structure undergoes a separately identified transformation: an interlevel conflict decreases while a key architecture characteristic stays within bounds. Result: the work and transformation are both present, but this sketch does not connect them. If that connection is needed, name both participants and apply 4.2.4; use a matching predicate or valid local compound claim, otherwise return missing-governor for the pair. Characteristic evaluation, decision, and publication remain separate.
Functional transformer in a flow
When a sentence says that a system transforms input to output or implements an algorithm, split at least four questions: which system and role assignment are claimed; which subject actually changed; which participant, port, or operation bindings hold at the boundary; and where the transformation sits in the selected E.18 flow. Add a method or method description only if the sentence also makes that claim.
Examples:
- A pump can be the acting system while the actual transformation is the bounded pressure change of an identified fluid volume. Inlet and outlet pressure facts are characteristic-state and port facts; the pump curve is a model episteme.
- A warehouse can perform receiving
U.Workwhile pallet-location and inventory-state changes occur. If a later use needs a work-to-change claim, name the pair and apply4.2.4. Orders and pallets keep their work, transfer, resource, or affected-subject relations. - A neural-network block can participate in an activation transformation. Tensor-shape declarations, the attention method, dated inference work, benchmark evaluation, and architecture allocation stay separate and use their own patterns.
Assembly changes before PumpSkid identity
Before asking whether PumpSkid 7 exists as one entity, identify the already existing base frame BF-7, pump unit PU-7, motor MU-7, junction enclosure JE-7, pipe spool PS-7, cable set CS-7, and their still-open mechanical, electrical, and fluid interfaces. AssemblyConfiguration-7 is the A.22 selected structure made from those referents and their actual attachment, terminal, and flange-connection organization during assembly. It is not another name for a future PumpSkid 7 entity.
The mounting transformation changes the frame-to-pump and frame-to-motor attachment facts. The wiring transformation changes cable-to-terminal connections. The fluid-connection transformation changes spool-to-flange and seal facts. Identify each independently through its subject, extent, boundary conditions, before/during/after facts, and continuity rule. The change of AssemblyConfiguration-7 can also be identified if those attachment, terminal, flange, and seal relations have declared participants and obtaining rules and the selected structure has its own boundary and continuity rule. Call that occurrence the configuration transformation. The other three changes do not become its components merely because they occur in the same assembly episode.
No current FPF relation in this case says that the mounting, wiring, fluid-connection, and configuration changes compose one transformation. Keep all four changes and stop before a part or whole-transformation claim. The result from 4.2.1 is missing transformation-composition governor; a proposed local compound claim also lacks an admitted derivation substrate.
Positive A.1 classification on that basis stops as well, because no accepted composition result supplies an exact whole candidate and all six constructive components required by A.1. The point at which a separate PumpSkid 7 identity rule first becomes true remains an entity-identity inception question; production completion, commissioning work, evidence, acceptance, and any B.2 whole-reidentification claim also remain separate.
Bias-Annotation
Lenses tested: Onto, Arch, Prag, Epist, Gov.
This pattern keeps the actual change separate from a composition question, holon classification, facts about the changed subject, method, work, flow structure, representation, assertion, evidence, evaluation, publication, production, and later use. It resists software narrowing, method-as-effect, model-as-authority, trace-as-law, formal-as-project-work, relation-verb-as-change, sampled-slice composition, blanket transformation holonhood, work-caused-change-as-production, and result-word-as-kind errors.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
- FPF gains one place to identify actual bounded transformations.
- Current-resolution identification remains cheap: one bounded change can be identified without settling its finer composition. This says neither that finer parts exist nor that they do not.
- An independently grounded change of a selected configuration remains usable without asserting whether nearby changes compose it or are its parts.
- A use that needs positive transformation composition receives the one parked result from 4.2.1: missing governor, and also missing substrate when it proposes a local derived or compound claim. No relation kind, signature, occurrence law, or definition identifier is minted here.
- If a future accepted architecture supplies an exact whole transformation and its construction facts, A.1 then applies its own six-component test; this edition supplies no positive transformation-holon classification.
- Each subject pattern keeps its own change,
U.Work, and production facts. A work/transformation connection uses the existing-predicate or local-compound branch in4.2.4; otherwise the named pair remainsmissing-governor. - E.18 can arrange or locate transformation occurrences in a selected flow structure.
- Ordinary result wording remains usable after the reader names the later use, its participants, and the relation being asserted; no universal transformation-result or production relation is introduced.
- Readers whose use stops with one actual transformation skip 4.2.1-4.2.3. Only a composition- or transformation-holon-dependent use opens that advanced branch, whose current result is the parked blocker.
Rationale
U.Transformation gives FPF one object for an actual bounded change. Identify it from the continuing subject, boundary, before/during/after facts, boundary conditions, and continuity or reidentification rule. Keep task, method, plan, work, operation family, predicate, representation, assertion, evidence, evaluation, publication, and later-use claims visible as separate objects rather than fields of the transformation.
An independently identified configuration transformation is not made into a whole with transformation parts merely because separately identified changes occur in the same episode or concern referents selected into that configuration. A.3.4 deliberately stops before choosing the missing architecture. It does not prescribe constituent identity, contribution, compatibility, substrate, reidentification, or whether the eventual answer is a generic relation, subject-specific relations, bounded local compound claims, or continued non-admission. The truthful current result is the independently identified changes plus the parked blocker, not a provisional kind or future definition law.
A.1 remains an independent second test. If future accepted work supplies one exact whole transformation and all six A.1 construction facts, A.1 can judge that same entity. Until then, a whole or composite label, a trace, and the parked blocker supply no holonhood.
This separation also keeps production and result claims honest. U.Work can cause or participate in change only through one of the three 4.2.4 outcomes, and even a positive work-to-change claim does not make every such change production. A post-boundary entity may be the same continuing entity rather than a newly constituted one. Production-work participation, first existence, production completion, delivery, acceptance, and downstream effect each need their own participants, relation, and criterion.
SoTA-Echoing
A.3.4 uses four current source branches for four different questions.
For cases 5.1-5.7 the action is stable: identify the changed subject, boundary, actual facts, and continuity rule first; keep task, dynamics, work, participation, representation, assertion, and publication separate; return the 4.2.1 blocker for a composition claim and the 4.2.4 blocker for a work-to-change claim with no basis. Reopen these source-use decisions only if the constructor-theory branch changes the task-versus-occurrence boundary, a stronger foundational event account changes the separation among identity, participation, causation, and representation, or applied constructional ontology supplies evidence for reopening the deliberately unselected composition architecture. A new notation, process diagram, or modeling tool alone is not enough.
Relations
- Builds on:
A.1for the independent holon criterion,A.6.RCDformissing-governorormissing-substrate,C.2.1for blocker and assertion epistemes, andA.7for category separation. - Coordinates with:
A.3when the use makes an acting-system claim;A.6.RCDif future work selects a bounded compound-claim route;A.6.RELif a future accepted relation architecture needs occurrence identity;E.24andE.24.UKif that work proposes a public relation kind;F.18if durable naming then becomes necessary;A.11for parsimony;A.14andC.13for structural mereology without transformation-composition overread;A.22for a selected changed structure;A.3.1,A.3.2,A.3.3,A.6.1,A.15.1,A.15.2, andA.15.PRODfor method, dynamics, operation, work, and production questions;E.18,E.18.1,C.32.P2S,C.27.TA,C.27,C.29,A.10,B.3,G.11, andB.2; and the work-to-change, evidence, evaluation, gate, decision, source-use, production, delivery, acceptance, transfer, assurance, and publication patterns for those claims.
A.3.4:End
Transformation Ontic Precision Restoration
Type: A.3.4 precision-restoration child pattern Status: Stable Normativity: Normative unless a section is explicitly informative
Plain-name. Transformation wording repair.
Intent. Restore precision when wording about a situation of change hides whether the current FPF object is one bounded U.Transformation, its exact changed referent, a system claimed to act through an exact performed-work attribution or another direct actor-side relation, a distinct influence source kept under its exact kind and current relation, a method, method description, mechanism, work plan, dated work, functioning relation, transformation-flow structure, mathematical description, dynamics episteme, temporal aspect, evidence relation, publication relation, gate, decision, result, or source label.
Use this when. Use A.3.4.P when source or FPF-governed wording such as "pipeline", "dataflow", "flow", "network", "circuit", "path", "slice", "workflow", "process", "operation", "transformation", or "change" seems to name the thing under concern, but the text has not yet recovered what kind of FPF value is actually current.
First useful restoration output. Recover the encountered wording, working concern, exact recovered EntityOfConcern, actual-transformation basis or non-transformation disposition, any acting-system claim with its exact governor or unresolved disposition, every influence source's exact kind and current relation, exact neighboring claims, retained use, remaining reader use, and stop or return condition. Use F.19:4's full plausible-reader test for any optional BlockedOverread?. Then rewrite only the wording that depends on the recovered objects. The ordinary result is that wording and the needed stop or subject-pattern return; use a TransformationWordingRepair note only when the receiving use needs recoverable detail.
What goes wrong if missed. The text silently creates a local ontology from a convenient source label: "process" becomes method in one paragraph, dated work in another, and transformation-flow structure in a third; "path" becomes evidence sufficiency, assurance, gate passage, deontic permission, work authorization, or release authorization; "function" becomes behavior, bearer, mathematical function, and software routine at once.
What this buys. The reader gets one small restoration use that keeps bounded transformations, compound transformation-flow structures, formal descriptions, methods, mechanisms, work, evidence, publications, and functional structures in their governing places before any wording is changed.
Not this pattern when.
- If one bounded transformation is already identified and only its ordinary use continues, apply
A.3.4directly. - If the current claim is already a selected transformation-flow structure, use
E.18. - If the current claim is a graph, morphism, category, algebra, path, circuit expression, network expression, or other mathematical description, use
E.18.2andC.29. - If the current claim is only a semantic way of doing, method description, mechanism, work plan, dated work, evidence relation, publication relation, gate, decision, assurance, result, or temporal claim, use the subject pattern.
- If the word is quoted source wording with no FPF-governed use, keep it quote-only.
Problem frame
People talk about change with familiar labels—for example, a manufacturing process, refrigeration cycle, or team workflow. To use such wording in FPF, recover the object and claim it names.
The recurring defect is a second ontology by convenience. The same text may treat "process" as method, work occurrence, transformation-flow structure, mechanism, result evidence, and publication diagram. A graph path may become an action route. A network label may become a durable head beside TransformationFlowStructure. A function word may collapse functioning, mathematical function, software routine, module allocation, a system merely named as actor, and a differently typed influence source whose direct relation has not been recovered.
This pattern restores the current U.Transformation ontic first, then assigns linked values to their subject patterns.
Problem
Without this repair:
- Source label becomes kind. "Pipeline", "workflow", "network", "circuit", or "process" is treated as the recovered FPF kind.
- Selected structure becomes one actual transformation. A flow, path, network, or circuit expression is treated as one actual
U.Transformationor as proof of transformation composition without the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis. Identifying one occurrence at the resolution needed by the current use establishes neither finer transformation parts nor partlessness. - Method, mechanism, and work collapse. A method description, law-governed mechanism, work plan, dated work, or source diagram is selected by vocabulary rather than by current claim.
- Functional wording overreaches. A system, module, port, interface, signature, or function label is treated as the transformation or as proof of functioning.
- Mathematical expression becomes world-side ontology. A graph, morphism, algebra, category, path, network, or circuit expression is treated as the project-world change.
- Description or evidence becomes transformation. A publication, dashboard, source span, proof, or evidence path is treated as the changed object or the change itself.
Forces
Solution
Restore the change situation in this order.
- Name the working concern. State what the text is trying to do: identify a change, describe a flow, choose a method, claim evidence, compare architectures, describe functioning, or use a publication.
- Test for one actual
U.Transformation. Recover the exact changed referent; exact temporal extent or exact ordering boundary in a declared formal substrate; boundary conditions; actual characteristic-state and obtaining direct-relation facts before, during, and after that boundary; and the continuity or reidentification rule that makes this one occurrence at the resolution required by the current use. Possible, intended, planned, modelled, predicted, or merely asserted change remains claim content and identifies no actual transformation until this subject-side basis obtains. - Separate an acting-System claim from influence. For performed Work, recover each precise performer's A.13 core and independently admit the Work under A.15.1; add F.6 afterward only when precise assignment-bound attribution is current. Then recover separately the realization, causal, production, or other Work-to-change relation required by the current use. For a non-Work functional or physical actor-side claim, recover the System and the participant, operation-application, functioning, causal, or other direct actor-side relation supplied by its subject pattern; otherwise leave the actor claim unresolved. Each manufacturing organization, certification organization, design organization, toolchain, communication System, selected structure, Method, Method family, or other possible influence source first keeps its kind—a Method or Method family is not a holon by label—and receives only the architecture, Work, communication, constraint, or candidate-synthesis relation current for the claim.
- Test neighboring claims. Decide whether the wording points to a method, method description, mechanism, work plan, dated work, functioning relation, transformation-flow structure, mathematical description, dynamics episteme, temporal aspect, evidence, source, publication, gate, decision, assurance, result, refresh, reopen relation, or another direct subject claim.
- Use the exact governing relation for each neighboring value. A neighboring object keeps its own kind and governor; state its current relation to the transformation, changed referent, work, architecture candidate, or receiving use instead of placing it inside a transformation record.
- Rewrite only after kind and relation recovery. Keep ordinary wording when it is not FPF-governed, write quote-only source wording when no current use is admitted, or rewrite into the recovered FPF kind and exact relation named by value. Use F.19 for the resulting precise-plain-language rewrite.
- Leave one reader use. The repaired text must say what the reader may do now: use
A.3.4, useE.18, useC.29, use a method, work, mechanism, architecture, or evidence pattern, keep a quote-only cue, or block the stronger claim.
TransformationWordingRepair note
Use this note only when wording is doing FPF-governed work and a receiving use needs its repair to remain inspectable. An ordinary wording repair requires no separate note.
ActualTransformationDisposition is one of: actual bounded transformation recovered, not a transformation, not recovered, not current for this claim, quote-only source wording, or blocking missing value.
TransformationWordingRepair is a temporary wording-use restoration aid. Its retained output is the wording to keep or rewrite, the stop or return condition, and the next subject-pattern application. BlockedOverread?, also named GroundedBlockedOverread?, is one optional explanatory value under F.19:4's plausible-reader test. ActingSystemDisposition and ArchitectureInfluenceDisposition are temporary note fields, not FPF kinds or universal relations. An actual transformation occurrence is grounded only through its subject-side occurrence basis.
For a performed-Work actor claim, recover each precise performer's A.13 core and independently admit the Work under A.15.1; add F.6 afterward only when precise assignment-bound attribution is current. Separately establish the realization, causal, production, or other Work-to-change relation required by the use. For a non-Work actor-side claim, use a participant, operation-application, functioning, causal, or other direct relation supplied by its subject pattern. If no such relation is recoverable, keep the actor claim unresolved. Every influence source retains its kind and only its current architecture, Work, communication, constraint, or candidate-synthesis relation; leave any unrecovered influence claim unresolved.
If an episteme asserts possible, intended, planned, modelled, predicted, or actual change, identify that episteme separately through C.2.1 when the assertion is current. Empirical grounding remains optional and, when current, uses its own exact relation; neither the assertion nor its grounding relation substitutes for the actual transformation basis. Use the governing subject pattern's requirements when creating a project record, gate decision, work plan, or work occurrence.
Subject pattern selection
Common source-label settlements
Functional change-situation settlement
When change-situation wording includes function, functional, functioning, transforms, or implements, use this pattern only to recover the exact current claims:
- Is one actual bounded
U.Transformationestablished by changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification? - Is a selected
TransformationFlowStructurecurrent without being treated as the acting system or the change occurrence? - Is performed Work being attributed to a System? Recover each precise performer's A.13 core and independently admit the Work under A.15.1. Add F.6 only when precise assignment-bound attribution is current, then state separately the realization, causal, production, or other Work-to-change relation required by the claim. An assignment occurrence, Work record, common timestamp, or generic transformation-participant fact does not prove performance.
- Is a non-work functional or physical actor-side claim current? Recover the exact system and the participant, operation-application, functioning, causal, or other direct actor-side relation supplied by its governor. If no actor-side governor is recoverable, leave the actor claim unresolved.
- Is a distinct influence source current? First recover its exact kind. A manufacturing, certification, or design organization may be a System under its direct admission pattern; a toolchain or communication System needs its own admitted kind; a selected structure remains a structure; and a Method or Method family is not a holon by label. State only the exact architecture, Work, communication, constraint, or candidate-synthesis relation current for that value. Influence alone establishes no local system-role kind, separate System-classification judgment, assignment occurrence, Work, acting fact, or transformation participation.
- Are exact participant, port, operation-application, relation-signature, or functioning relations current at the boundary? Keep them under their direct governors; a transformation input or output requires its own direct relation.
Do not introduce a TransformerHolon kind, a generic transformer role, or a universal architecture-influence relation to bridge these claims. After recovery, apply A.6.F when the question is which function-like kind or relation is being claimed. A.3.4.P selects the direct governor for each recovered claim.
Description, publication, and evidence boundary
A diagram or report, for example, may describe a transformation, state a claim about it, provide evidence for that claim, or help compare transformations. When an actual transformation is claimed, recover its subject-side occurrence basis separately. If the description, assertion, or publication is current, use the episteme, publication, source, or declarative-representation pattern; C.2.1 empirical grounding remains an optional separate relation when the use requires it. If the actual transformation is current, keep every description, assertion, publication, and evidence use as an exact neighboring claim.
Archetypal Grounding
Refrigerator functional diagram
Source wording says: "The refrigeration circuit moves heat through the cycle."
Repair: recover whether the current claim is a refrigerator subsystem transformation, a TransformationFlowStructure over compressor, condenser, expansion, and evaporator transformations, a thermodynamic mechanism, a functional architecture view, or a schematic publication. The circuit label may stay as ordinary domain wording, but FPF use names the selected structure, mechanism, or publication relation.
Neural-network block
Source wording says: "The attention block transforms activations in the model pipeline."
Repair: the block may be an architecture locus or module allocation. Test any actor claim through the relevant branch below. If dated inference Work is claimed, recover each precise performer's A.13 core and independently admit the Work under A.15.1; add F.6 only when precise assignment-bound attribution is current, and state the separate Work-to-activation relation required by the use. If a non-Work block action is claimed, recover the exact operation-application, functioning, causal, or other direct actor-side relation; otherwise leave action unresolved. A design organization, Method or Method family, toolchain, or communication System that shaped the block first keeps its exact kind and then only its exact architecture, Work, communication, constraint, or candidate-synthesis relation. Activation and tensor-shape claims use exact participant, port, operation-application, or signature relations; attention may be a MethodDescription or mathematical lens; the pipeline may be a transformation-flow structure. Benchmarks or ablations are evidence or evaluation relations only when their subject patterns are current.
CRISPR editing workflow
Source wording says: "The guide-selection workflow changes the target gene."
Repair: the target-gene edit is only a candidate U.Transformation until the exact biological referent, edit boundary, boundary conditions, actual sequence and direct-relation facts, and reidentification rule establish one occurrence. Guide selection may be method, method description, work plan, evidence-facing table, or performed lab work according to the current claim.
Evidence path near a plant change
Source wording says: "The evidence path lets the valve-change flow proceed."
Repair: an evidence path may be a legitimate A.10 provenance relation for a named claim. The valve change still needs its exact changed referent, boundary, boundary conditions, actual subject facts, and continuity or reidentification basis; work plan, dated work, gate, assurance, result, and receiving use remain exact neighboring relations when current. The path establishes no work authorization, release authorization, gate passage, performed work, or actual transformation by shape or name.
Filled minimal repair note
Bias-Annotation
Lenses tested: Onto, Arch, Prag, Epist, Gov.
This pattern intentionally biases toward kind recovery before wording repair. It resists:
- source-label ontology: familiar labels such as pipeline, process, network, circuit, or workflow become FPF kinds;
- graph or path overread: graph path, evidence path, and carrier path become action route, evidence sufficiency, assurance, deontic permission, work authorization, release authorization, or work sequence;
- function collapse: functioning, functional element, module allocation, mathematical function, software routine, and everyday purpose collapse into one "function";
- semio displacement: descriptions and publications of transformations replace the transformation under concern;
- neighboring-object fusion: wording is used to infer a Method, mechanism, Work occurrence, System, influence source, or evidence record and then to treat it as the transformation, its actor, or a transformation participant before its direct kind and relation are recovered. Actor recovery follows A.3.4.P:4.4.
Conformance Checklist
Common Anti-Patterns and How to Avoid Them
Consequences
- FPF gains one reusable restoration pattern for language about change situations. Subject patterns can reuse its cue-to-object recovery.
A.3.4becomes easier to use because source labels are tested against the exact subject-side transformation basis and then routed to exact neighboring relations.E.18,E.18.2, andC.29retain their respective responsibilities for selected compound structure, mathematical expression, and mathematical-lens use.- Architecture, method, work, mechanism, function, evidence, publication, and temporal patterns can point to the transformation ontic.
- The ordinary result is the repaired wording and the needed stop or subject-pattern return; use a
TransformationWordingRepairnote only when the receiving use needs recoverable detail. - Reopen this pattern at the smallest affected row when
A.3.4,E.18,E.18.2,C.29, method, mechanism, work, function, temporal, evidence, publication, or architecture patterns change the governing kind boundary, or when FPF wording repair repeatedly finds a change-situation label that the current settlements cannot recover by value.
Rationale
The current transformation ontology gives FPF one compact way to speak about bounded actual change. That compactness only helps if wording repair returns common source labels to the exact changed referent, temporal or formal boundary, boundary conditions, actual subject facts, and continuity or reidentification basis. Otherwise source labels reappear as local mini-ontologies: a process ontology here, a graph ontology there, a function ontology elsewhere.
The repair starts from the U.Transformation ontic and asks whether the current use is an actual occurrence established on that basis, a performed-Work actor claim with each precise performer's A.13 core and independent A.15.1 Work admission plus any later required F.6 attribution and separate Work-to-change relation, a non-Work actor claim under another exact actor-side predicate and defining ClaimGraph, a differently typed influence source under its exact relation, a compound structure, a mathematical description, or another neighboring object connected by an exact current relation. E.10 recognizes the wording-use problem; E.10.ARCH:2.2 distributes direct-rule-content, ontic-level-restoration, and facet-level-restoration loci; the rule content located here supplies the ontic-level transformation restoration.
SoTA-Echoing
SoTA use is conservative: this pattern relies on the current FPF settlements already carried by A.3.4, C.2.P.DR, and the governing neighboring patterns; it contributes the reusable restoration use for transformation-situation wording.
Relations
- Builds on:
A.3.4,E.10,E.10.ARCH,E.24,A.6.5,E.8, andF.19. - Coordinates with:
E.18for a selected structure that positions, relates, or locates transformation loci and adjacent governed values without establishing transformation composition, parthood, or partlessness; and withE.18.2,C.29,A.3.1,A.3.2,A.3.3,A.6.0,A.6.1,E.20,A.15.2,A.15.1,A.6.F,A.6.M,C.30.ASV,C.27.TA,C.27,A.10,C.2.P.DR,C.2.1,E.17, and direct gate, decision, assurance, result, source, publication, and release patterns when those claims are current. - Coordinates with:
E.10.MOVEwhen source wording about a move, next action, pattern-use recommendation, work-entry readiness, language-state transition, architecture candidate use, or call-planning next action is not actually transformation wording. - Selected by:
E.10recognition row for change-situation wording when FPF wording repair needs transformation-ontic precision restoration. - Specializes:
A.3.4for wording-use precision restoration around situations of change.
A.3.4.P:End
Temporal Duality & Open‑Ended Evolution Principle
“A holon is born in design‑time, lives in run‑time, and is reborn when the world talks back.”
Problem frame
A holon’s blueprint and its lived reality are never identical for long. Pumps wear out, theories meet anomalous data, workflows face unanticipated load. FPF therefore requires a temporal framework that:
- Physically grounds every modification (via the Transformer Principle, A 3).
- Supports unbounded improvement cycles (P‑10 Open‑Ended Evolution).
- Works identically for physical, epistemic, operational (method, work) and future holon flavours.
Problem
Forces
Solution - Temporal Duality Model
FPF assigns every holon state to one—and only one—of two temporal scopes:
Temporal invariants
Open‑Ended Evolution Principle
A holon may repeat the cycle ad infinitum:
Observation itself is a transformation:
the observing side is a U.RoleAssignment whose holderRef names the acting U.System
and whose roleRef=TransformerRole@ObservationContext. That holder executes a
measurement method whose output is an epistemic holon containing observations.
Thus the traditional “External Observer Pattern” collapses into the universal external
Transformer pattern.
Archetypal Grounding
(Diagrammatic lineage table omitted for brevity but included in annex.)
Conformance Checklist
Consequences
Rationale (extended)
-
Why separate scopes? Real-world systems expose the as-intended versus as-is gap. By formalising that gap, FPF prevents silent assumption of perfect fidelity and allows quantified error (
U.Error) to drive evolution. -
Why treat observation as transformation? Physics tells us measurement changes state (energy, information, even quantum collapse). Making the observer just another
Transformermeans: no special metaphysics, full energy/provenance accounting, seamless tie‑in with Constructor Theory (see A 3 Rationale §2). -
Why insist on open‑endedness? Perfect finality is unattainable outside mathematics mandates that holons must be improvable in principle; this pattern encodes that mandate structurally: version n+1 is always possible.
-
Why no overlap (Tᴰ ∩ Tᴿ)? The instant a holon is mutable (design) it ceases to be the “same” operational asset relied upon for guarantees. Overlap would break trust calculations and violate A.7 Strict Distinction.
This pattern therefore realises three core principles in concert:
- Temporal Duality – explicit tagging of states.
- Open‑Ended Evolution – guaranteed pathway for refinement.
- Ontological Parsimony – one mechanism (Transformer) for all state changes, avoiding specialised “observer” or “installer” types.
“Blueprints dream; instances speak. Evolution is the conversation between them.”
A.4:End
Open‑Ended Kernel & Extension Layering
Status. Transitional stub (informative). This section defines no dedicated “module” subsystem. Enforceable boundary discipline lives in A.6.0 U.Signature and A.6.1 U.Mechanism, with guard‑rails in E.5.3 (Unidirectional Dependency) and E.10 (LEX‑BUNDLE stratification).
Problem frame
FPF’s ambition is to act as an “operating system for thought.” That ambition can only be realised if the framework:
- (i) remains stable and self‑consistent over multi‑decade timespans;
- (ii) invites, rather than resists, the continual influx of new disciplinary knowledge; and
- (iii) allows multiple, even competing, explanatory lenses to coexist without forcing a “winner‑takes‑all” unification.
Historically, grand “total” ontologies—Aristotle’s Categories, Carnap’s Logical Construction of the World, Bunge’s TOE—failed precisely because each tried to embed every domain’s primitives directly into a single monolith. Once the monolith cracked under domain pressure, the whole edifice became unmaintainable.
Problem
If FPF were to let domain‑specific primitives creep into its Kernel, two pathologies would follow:
A minimal, extensible design is therefore mandatory.
Forces
Solution
FPF’s modularity is declarative, not “callable”: pattern texts publish law‑governed declarations (vocabulary + laws + applicability) that can be reused and specialised. They are not subroutines, services, or protocol endpoints in the software‑architecture sense; treat “module” as a metaphor at most.
To keep the Kernel open‑ended without a bespoke plug‑in patterns standard, FPF relies on the boundary stack that already exists elsewhere in Part A/E/F:
- Kernel minimality (C‑5). Domain knowledge (physics, biology, economics, …) stays outside the Kernel by default; it enters as extension vocabularies and laws.
- Boundary packaging via
U.Signature(A.6.0). Reusable bundles are published as signatures with an explicitSignatureManifest(imports,provides). - Dependency vs specialisation are separate relations.
importsforms a dependency DAG constrained by E.5.3; refinement/extension (⊑,⊑⁺) is expressed separately (e.g., A.6.1U.MechMorph) and should not be conflated withimports. - Registry references stay references. Bridges, policy‑ids, and edition‑ids (Part F) are registry identifiers: they are cited/pinned where needed, not treated as exported symbols in
provides.
This section is intentionally lightweight: it provides architectural intent and neighboring-pattern pointers only. Any new enforceable modularity constraints belong in the A.6.* boundary patterns (or in E.* guard‑rails), not here.
A.5:End
Last Updated: 2026-09-03 — upstream FPF commit b999972c (github.com/ailev/FPF)